$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200882.roa File: AS200882.roa (raw, json) Hash identifier: xAgHBkBf6K1+KLCKpI2qdBVbA6a1xL5wO8G6q3JRbzg= Subject key identifier: 19:73:EF:87:1B:A5:BE:7D:E1:2B:2A:EF:AF:23:F1:10:E0:CA:F7:00 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 499775D19D4BB539AF46579AFF4CE0774DE87426 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200882.roa Signing time: Fri 05 Jun 2026 07:12:41 +0000 ROA not before: Fri 05 Jun 2026 07:07:41 +0000 ROA not after: Fri 04 Jun 2027 07:12:41 +0000 asID: 200882 IP address blocks: 2a0a:6040:e600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:97:75:d1:9d:4b:b5:39:af:46:57:9a:ff:4c:e0:77:4d:e8:74:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:41 2026 GMT Not After : Jun 4 07:12:41 2027 GMT Subject: CN=1973EF871BA5BE7DE12B2AEFAF23F110E0CAF700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:b4:81:99:26:90:ae:63:ff:f1:6b:19:68: 61:e2:f9:4d:95:15:f4:a4:62:0e:d8:78:51:87:6e: 8e:ce:d5:74:39:3f:a2:09:ad:2d:c6:46:cc:19:b0: 7f:b3:dd:3a:7a:62:3b:5f:4d:41:7f:94:0a:2a:72: 46:3b:c6:c6:bc:f5:63:21:3c:f5:bd:62:00:44:a0: 24:e8:20:d8:5d:c6:6f:a0:88:84:b5:31:0d:c6:db: f8:c6:34:bf:94:06:eb:5c:53:9e:15:77:b8:f2:07: b5:2d:0c:6c:20:32:f4:50:10:49:60:bc:d5:4c:59: db:a5:de:16:85:3d:17:b6:c1:f9:f5:f1:b6:6d:dc: 91:8d:8e:bd:b2:6b:00:ce:1b:f1:16:74:70:ed:49: d3:0e:8c:ac:ac:4a:e0:d3:a4:72:de:54:cc:85:5c: 80:b7:b4:02:f0:66:a7:9f:84:a1:d3:fa:be:6a:d8: 67:bc:c9:21:20:24:ce:77:5a:3b:29:57:ce:ab:13: ad:10:28:dc:23:00:da:a5:41:42:91:a3:b5:b7:9d: 81:29:d1:f9:9c:bd:7b:88:9e:ff:a2:1e:9f:30:7d: 53:b5:3d:a1:ee:48:84:c1:9a:09:6d:4d:0d:9e:45: 7d:3c:24:71:81:ac:6b:4a:c2:99:e8:9d:71:9d:8f: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:73:EF:87:1B:A5:BE:7D:E1:2B:2A:EF:AF:23:F1:10:E0:CA:F7:00 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200882.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:e600::/40 Signature Algorithm: sha256WithRSAEncryption 73:ca:dd:b5:29:75:03:a8:eb:21:c2:0c:74:f7:a2:47:32:ce: 80:f8:65:c3:64:3b:19:69:87:1b:e6:de:e7:9b:f2:06:34:2f: 3e:6a:93:b6:7d:24:b5:7d:99:39:be:3f:e0:38:7d:07:b7:89: 6c:0a:97:b2:52:44:08:c3:41:1c:f4:c9:f7:70:f6:09:66:9c: eb:83:9e:c9:b6:78:90:6b:33:fd:c2:56:20:ca:65:8a:ac:64: 8b:80:6e:f7:af:a4:d6:da:a7:19:66:23:57:70:56:bd:9b:7f: 70:c3:a6:52:23:ef:72:b3:a8:a5:f7:8e:e8:be:eb:fc:11:ee: 32:80:dc:a4:64:d5:6b:69:4a:bf:65:0b:02:b1:f0:0a:1d:7e: 79:f7:46:8c:a6:93:e9:8c:9c:8d:5f:e7:f4:6f:c9:cf:76:e6: 51:13:55:89:c6:7e:46:36:77:be:50:ab:d0:90:05:5e:1b:4f: 02:00:94:f3:0d:db:52:3b:e2:34:81:22:af:68:73:86:64:33: 73:3a:da:06:b7:77:4a:71:d6:fd:68:48:82:d0:b6:aa:33:57: 92:eb:56:8a:80:98:72:36:0c:fd:b3:47:26:3b:7b:41:bb:10: d5:aa:79:6c:3c:a7:2d:46:c3:50:fd:a2:57:df:86:58:d4:7a: 58:fb:e7:5b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSZd10Z1LtTmvRlea/0zgd03odCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDFaFw0yNzA2MDQwNzEyNDFaMDMxMTAvBgNV BAMTKDE5NzNFRjg3MUJBNUJFN0RFMTJCMkFFRkFGMjNGMTEwRTBDQUY3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjx7SBmSaQrmP/8WsZaGHi+U2V FfSkYg7YeFGHbo7O1XQ5P6IJrS3GRswZsH+z3Tp6YjtfTUF/lAoqckY7xsa89WMh PPW9YgBEoCToINhdxm+giIS1MQ3G2/jGNL+UButcU54Vd7jyB7UtDGwgMvRQEElg vNVMWdul3haFPRe2wfn18bZt3JGNjr2yawDOG/EWdHDtSdMOjKysSuDTpHLeVMyF XIC3tALwZqefhKHT+r5q2Ge8ySEgJM53WjspV86rE60QKNwjANqlQUKRo7W3nYEp 0fmcvXuInv+iHp8wfVO1PaHuSITBmgltTQ2eRX08JHGBrGtKwpnonXGdj/SdAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUGXPvhxulvn3hKyrvryPxEODK9wAwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwODgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQOYwDQYJKoZIhvcNAQELBQADggEBAHPK 3bUpdQOo6yHCDHT3okcyzoD4ZcNkOxlphxvm3ueb8gY0Lz5qk7Z9JLV9mTm+P+A4 fQe3iWwKl7JSRAjDQRz0yfdw9glmnOuDnsm2eJBrM/3CViDKZYqsZIuAbvevpNba pxlmI1dwVr2bf3DDplIj73KzqKX3jui+6/wR7jKA3KRk1WtpSr9lCwKx8Aodfnn3 Roymk+mMnI1f5/Rvyc925lETVYnGfkY2d75Qq9CQBV4bTwIAlPMN21I74jSBIq9o c4ZkM3M62ga3d0px1v1oSILQtqozV5LrVoqAmHI2DP2zRyY7e0G7ENWqeWw8py1G w1D9olffhljUelj751s= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:10 2026 by rpki-client