$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200895.roa File: AS200895.roa (raw, json) Hash identifier: rWnnt1KbHYfu9nI81eB+G4yY/stzFoa3MqZvIblu6eg= Subject key identifier: CC:F3:0E:A3:B3:A9:63:45:F2:B9:17:26:F6:88:3F:A5:6B:15:AD:A8 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 064B78070E5E953D9A88D1B66C28500EA2DD9870 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200895.roa Signing time: Fri 05 Jun 2026 07:12:15 +0000 ROA not before: Fri 05 Jun 2026 07:07:15 +0000 ROA not after: Fri 04 Jun 2027 07:12:15 +0000 asID: 200895 IP address blocks: 2a0a:6040:d700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:4b:78:07:0e:5e:95:3d:9a:88:d1:b6:6c:28:50:0e:a2:dd:98:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:15 2026 GMT Not After : Jun 4 07:12:15 2027 GMT Subject: CN=CCF30EA3B3A96345F2B91726F6883FA56B15ADA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e7:f3:e7:e1:d6:a3:b6:bd:7b:66:4d:86:3f: 30:85:f5:dd:31:46:07:b9:95:7f:96:dc:8b:47:00: 6c:f2:f9:04:ea:96:5e:d3:9d:a4:40:a2:f8:69:ee: b0:df:c4:a5:23:42:52:ce:27:7f:a5:75:68:35:4e: 0c:28:79:31:4b:19:d5:fc:cd:c7:14:5e:fb:ac:6f: c3:a9:45:bc:c4:be:2a:2e:3b:dd:a6:28:dc:fc:6a: e4:85:e1:19:01:05:ca:b0:ce:ca:c0:57:4c:28:b5: cc:4f:87:ca:b1:b9:03:8d:6a:09:a6:18:b0:a7:91: d0:76:1a:3c:cd:14:27:0a:c8:ad:74:50:69:fb:c4: 7e:c4:88:89:26:d3:d4:0e:77:df:a3:bc:40:b6:f4: 6b:9c:aa:3e:63:d1:55:7a:18:7b:97:c2:8d:42:e5: 15:44:5e:bc:db:48:7c:81:c0:f3:e0:6c:18:1c:6b: be:18:a7:c8:11:80:e6:00:d7:23:e4:f1:a6:c9:f6: 41:8a:c6:ad:4f:60:79:ee:c7:d3:70:00:79:6d:96: 2d:da:20:04:c7:5d:11:bd:49:94:62:ec:30:f5:6a: 69:3b:d2:b7:8e:39:58:42:e7:d6:3b:7a:f1:13:b4: c0:a1:f7:f1:ad:5c:f5:61:f6:4b:76:ae:f3:13:76: ed:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F3:0E:A3:B3:A9:63:45:F2:B9:17:26:F6:88:3F:A5:6B:15:AD:A8 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:d700::/40 Signature Algorithm: sha256WithRSAEncryption ab:43:10:73:a4:56:90:7f:c9:11:e8:d6:53:0d:fc:5e:95:ef: ac:5e:26:46:05:42:1e:11:87:b7:8e:4c:60:66:f0:ff:78:1b: e2:76:ab:73:3d:f6:2b:62:7b:9d:0b:db:f6:dd:66:c4:54:2e: d1:06:b9:58:50:56:05:ce:76:b6:41:e0:a3:eb:bb:a2:dc:d8: f5:2f:55:5c:ef:12:65:55:35:d0:71:fd:6c:9d:48:0f:38:b5: 17:64:67:43:96:e6:93:35:92:2e:e7:d4:61:f0:33:66:35:9d: 8a:c0:89:4c:22:9f:0a:01:a7:20:6d:82:0f:6f:06:fc:24:5b: 48:46:00:78:43:4e:70:ff:33:3b:57:80:0d:dd:7c:7a:d9:5a: ee:be:7b:e4:c3:b0:28:6e:25:a2:2a:5a:4b:f2:83:86:c4:9f: f8:ea:8d:03:1e:c7:8e:74:ff:81:a9:16:f4:c1:7f:87:fc:44: a4:e6:14:73:d1:6d:39:34:a4:4d:1d:f7:16:e8:8c:3e:f0:38: 2b:9e:cc:48:90:fb:68:5c:b5:13:da:43:a6:91:54:44:32:f2: b8:bd:e8:ec:b7:2b:21:5a:56:db:64:ef:c7:55:46:0c:27:6f: 71:b3:65:ed:b4:00:15:74:e4:5e:57:90:f8:62:22:08:dc:15: c1:86:ed:b7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUBkt4Bw5elT2aiNG2bChQDqLdmHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MTVaFw0yNzA2MDQwNzEyMTVaMDMxMTAvBgNV BAMTKENDRjMwRUEzQjNBOTYzNDVGMkI5MTcyNkY2ODgzRkE1NkIxNUFEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD65/Pn4dajtr17Zk2GPzCF9d0x Rge5lX+W3ItHAGzy+QTqll7TnaRAovhp7rDfxKUjQlLOJ3+ldWg1TgwoeTFLGdX8 zccUXvusb8OpRbzEviouO92mKNz8auSF4RkBBcqwzsrAV0wotcxPh8qxuQONagmm GLCnkdB2GjzNFCcKyK10UGn7xH7EiIkm09QOd9+jvEC29Gucqj5j0VV6GHuXwo1C 5RVEXrzbSHyBwPPgbBgca74Yp8gRgOYA1yPk8abJ9kGKxq1PYHnux9NwAHltli3a IATHXRG9SZRi7DD1amk70reOOVhC59Y7evETtMCh9/GtXPVh9kt2rvMTdu15AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUzPMOo7OpY0XyuRcm9og/pWsVragwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwODk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNcwDQYJKoZIhvcNAQELBQADggEBAKtD EHOkVpB/yRHo1lMN/F6V76xeJkYFQh4Rh7eOTGBm8P94G+J2q3M99itie50L2/bd ZsRULtEGuVhQVgXOdrZB4KPru6Lc2PUvVVzvEmVVNdBx/WydSA84tRdkZ0OW5pM1 ki7n1GHwM2Y1nYrAiUwinwoBpyBtgg9vBvwkW0hGAHhDTnD/MztXgA3dfHrZWu6+ e+TDsChuJaIqWkvyg4bEn/jqjQMex450/4GpFvTBf4f8RKTmFHPRbTk0pE0d9xbo jD7wOCuezEiQ+2hctRPaQ6aRVEQy8ri96Oy3KyFaVttk78dVRgwnb3GzZe20ABV0 5F5XkPhiIgjcFcGG7bc= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:25 2026 by rpki-client