$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200885.roa File: AS200885.roa (raw, json) Hash identifier: d+eYg5tUEaJstaA4zQZpE1UqzttSnPlxhl1dQlTOev4= Subject key identifier: BA:6F:5C:28:2E:2E:8B:FD:F2:F3:D7:03:30:B5:D6:B4:92:1B:FF:E6 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 11FFEA0AA22F71F28ADE97C8922E871AA468C496 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200885.roa Signing time: Fri 05 Jun 2026 07:12:48 +0000 ROA not before: Fri 05 Jun 2026 07:07:48 +0000 ROA not after: Fri 04 Jun 2027 07:12:48 +0000 asID: 200885 IP address blocks: 2a0a:6040:ea00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ff:ea:0a:a2:2f:71:f2:8a:de:97:c8:92:2e:87:1a:a4:68:c4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:48 2026 GMT Not After : Jun 4 07:12:48 2027 GMT Subject: CN=BA6F5C282E2E8BFDF2F3D70330B5D6B4921BFFE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cc:50:d6:58:38:26:95:2d:63:5c:11:04:86: 5d:aa:8e:eb:9e:e7:4d:fb:82:3e:d1:72:8d:4f:c6: 85:6d:f1:7f:82:fb:bb:f5:e8:34:00:79:d0:e4:31: 20:fe:6f:35:1d:c9:23:84:a0:a2:de:be:35:c8:22: 79:60:da:82:f7:92:09:a5:bb:82:9b:0f:2f:33:ac: 6a:7a:dc:fc:fc:99:12:17:33:a2:79:96:52:52:60: 82:81:25:c4:e4:bb:77:36:cc:13:0c:d2:a3:26:fc: 25:f2:7d:0c:88:98:5d:c5:bb:da:7e:42:50:e0:d7: ae:57:37:96:13:34:5e:88:a5:8d:73:60:73:ae:44: ee:15:5e:87:df:76:f8:0a:0b:89:bc:35:14:cf:55: 4a:71:aa:d9:77:2c:d4:8e:b9:8d:71:86:02:57:6b: a4:9b:f7:5c:0b:63:48:74:d3:97:69:2e:21:2d:97: 86:e7:ac:a6:1e:fb:72:3c:bb:56:5d:ae:96:ad:2e: 6c:81:4d:aa:00:ce:d1:8f:e2:21:44:ae:37:5d:48: f7:a2:f4:12:7d:37:fd:06:eb:07:7d:5e:ec:13:7a: 2b:28:6c:3c:79:a3:90:48:a4:37:22:30:e1:b7:1f: c9:37:a0:e8:c2:c7:da:37:74:f8:3a:03:cc:6f:5d: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6F:5C:28:2E:2E:8B:FD:F2:F3:D7:03:30:B5:D6:B4:92:1B:FF:E6 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200885.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ea00::/40 Signature Algorithm: sha256WithRSAEncryption a5:af:00:1f:67:e6:a5:e2:ab:8a:56:5d:75:f6:25:58:97:f8: 20:47:3d:e1:7e:c0:3e:42:3c:c8:c9:1e:6f:d1:c7:dd:e8:f2: 81:ae:86:48:be:05:b5:bb:2e:43:dd:51:6d:1f:96:e2:bc:aa: 59:19:b8:20:82:31:45:7e:7a:9e:f7:f5:a8:33:3d:9c:44:e1: af:70:07:a4:09:5d:5e:6d:cb:97:0b:7a:ea:ee:3f:45:8a:72: 9b:eb:ef:07:1d:09:db:20:fe:74:c2:be:21:5a:a3:89:85:22: f8:6b:c0:ba:f1:32:d9:6f:32:24:0c:71:fb:c0:dd:60:21:f4: f6:8b:fa:d9:93:78:ef:c7:b8:06:4c:eb:02:8b:0b:0c:78:6d: 78:e6:72:8e:ff:4c:33:67:78:fb:39:f5:e0:25:cb:56:96:ff: 96:3d:e8:56:ed:47:18:b8:0f:c6:41:b1:f7:02:c8:1a:ef:27: 11:13:2e:bc:df:e5:07:8b:e6:b9:b1:95:a4:79:8e:16:36:dc: ac:74:7a:bd:e2:58:0f:4a:6e:ff:22:e2:c8:77:0a:86:7c:d6: 2f:6c:c7:6a:2c:97:a7:34:ca:fb:58:ff:93:51:75:0d:f9:b5: f9:27:84:0b:49:31:30:39:e6:da:2a:3b:3f:71:0f:f2:57:37: 3e:7e:80:01 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUEf/qCqIvcfKK3pfIki6HGqRoxJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDhaFw0yNzA2MDQwNzEyNDhaMDMxMTAvBgNV BAMTKEJBNkY1QzI4MkUyRThCRkRGMkYzRDcwMzMwQjVENkI0OTIxQkZGRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlzFDWWDgmlS1jXBEEhl2qjuue 5037gj7Rco1PxoVt8X+C+7v16DQAedDkMSD+bzUdySOEoKLevjXIInlg2oL3kgml u4KbDy8zrGp63Pz8mRIXM6J5llJSYIKBJcTku3c2zBMM0qMm/CXyfQyImF3Fu9p+ QlDg165XN5YTNF6IpY1zYHOuRO4VXoffdvgKC4m8NRTPVUpxqtl3LNSOuY1xhgJX a6Sb91wLY0h005dpLiEtl4bnrKYe+3I8u1ZdrpatLmyBTaoAztGP4iFErjddSPei 9BJ9N/0G6wd9XuwTeisobDx5o5BIpDciMOG3H8k3oOjCx9o3dPg6A8xvXczfAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUum9cKC4ui/3y89cDMLXWtJIb/+YwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwODg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQOowDQYJKoZIhvcNAQELBQADggEBAKWv AB9n5qXiq4pWXXX2JViX+CBHPeF+wD5CPMjJHm/Rx93o8oGuhki+BbW7LkPdUW0f luK8qlkZuCCCMUV+ep739agzPZxE4a9wB6QJXV5ty5cLeuruP0WKcpvr7wcdCdsg /nTCviFao4mFIvhrwLrxMtlvMiQMcfvA3WAh9PaL+tmTeO/HuAZM6wKLCwx4bXjm co7/TDNnePs59eAly1aW/5Y96FbtRxi4D8ZBsfcCyBrvJxETLrzf5QeL5rmxlaR5 jhY23Kx0er3iWA9Kbv8i4sh3CoZ81i9sx2osl6c0yvtY/5NRdQ35tfknhAtJMTA5 5toqOz9xD/JXNz5+gAE= -----END CERTIFICATE-----Generated at Sat Jun 13 09:10:57 2026 by rpki-client