$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200907.roa File: AS200907.roa (raw, json) Hash identifier: qlrgEIAHIrY7QAd7xJe9NINtTvjXX3V0C3SFqhOZi/k= Subject key identifier: 50:43:3E:77:34:65:46:27:9E:23:48:6B:7E:A2:CC:25:54:91:7F:06 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 5A3FAD71540DECEE25FAC5300170B7BB8492AF11 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200907.roa Signing time: Fri 05 Jun 2026 07:12:45 +0000 ROA not before: Fri 05 Jun 2026 07:07:45 +0000 ROA not after: Fri 04 Jun 2027 07:12:45 +0000 asID: 200907 IP address blocks: 2a0a:6040:e100::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3f:ad:71:54:0d:ec:ee:25:fa:c5:30:01:70:b7:bb:84:92:af:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:45 2026 GMT Not After : Jun 4 07:12:45 2027 GMT Subject: CN=50433E77346546279E23486B7EA2CC2554917F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:28:f2:62:f1:09:08:95:f7:0a:82:d2:7b:12: b4:ef:81:38:a8:90:ab:eb:55:4d:61:21:32:16:f5: 2b:a4:35:5e:65:6f:9f:8a:60:5c:7c:a8:05:41:56: 8f:b1:55:79:c1:09:9a:de:7b:76:41:f8:fd:80:88: 99:00:a7:c1:9d:dd:c4:d9:90:f8:f5:10:b7:0d:c3: a6:0c:4b:c9:3c:e3:27:f1:e5:04:8e:d6:f5:27:fd: 87:ac:aa:f2:2b:65:0d:d2:e4:96:a6:fe:01:d2:5f: 48:e0:4b:dd:e0:b2:ad:c7:0d:e4:78:49:dc:fb:4c: da:04:fe:37:44:c6:41:36:50:03:fd:34:32:3a:ce: 2d:fa:6b:66:62:28:9a:25:fe:96:8c:0a:36:3b:1a: 26:c3:d8:8a:49:34:6b:8a:55:ae:de:d3:42:54:6d: 47:4c:89:53:b5:2a:e1:21:6b:22:ee:e0:b4:dd:4d: 7c:ef:3a:47:1c:72:22:d2:6e:df:de:68:a2:bb:14: 9c:00:b0:e2:77:3d:da:03:82:14:f2:ef:ed:e0:c3: 5b:e7:ab:82:6c:7b:41:49:c3:7a:67:16:ff:5d:7f: cf:12:9e:7d:50:ad:9c:25:2f:92:dd:7c:eb:a2:1b: 51:88:9f:ba:ee:15:16:8a:d9:5f:fb:2c:fe:78:41: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:43:3E:77:34:65:46:27:9E:23:48:6B:7E:A2:CC:25:54:91:7F:06 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200907.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:e100::/40 Signature Algorithm: sha256WithRSAEncryption 74:0a:aa:d0:27:f0:80:44:ad:35:54:82:42:01:d4:53:c9:71: 58:bc:7b:28:17:be:89:59:0b:68:2e:8c:e3:f7:ec:38:e3:2f: 05:8b:8d:c3:f7:9a:01:d0:57:48:9b:71:5c:01:eb:58:d3:80: 6d:f8:cf:3f:e2:b9:c2:28:9d:52:b0:9d:59:07:55:15:bd:29: 76:c9:72:8a:5f:33:5f:a7:13:e4:80:76:fb:89:17:fb:76:8d: 3b:92:b8:d9:dd:e8:c5:b0:21:10:21:2e:85:92:11:9e:45:75: ba:4e:9b:01:d4:f5:c8:a0:25:31:b1:8d:4e:8a:62:d4:23:17: 0e:f1:10:7e:b9:5d:b3:7e:d3:ec:4e:ec:03:03:0c:c0:aa:92: 35:80:6f:4c:b7:04:7a:19:d1:4c:57:a2:c9:61:97:d5:e7:00: 61:fe:bc:14:0a:52:c9:c2:03:7e:b8:ee:d9:ea:0b:03:bc:1f: c0:8d:91:05:76:02:1c:a0:14:85:0a:2d:f0:4b:68:ca:95:3e: f1:eb:88:e8:7c:80:dc:dd:ce:c6:a6:02:b9:4f:b2:c9:ba:a6: c7:a0:37:08:ad:f4:1d:b4:84:d6:ff:2d:30:f4:b2:12:96:11: 73:8e:26:3f:bb:7c:f4:14:65:6b:d0:03:b7:f7:65:07:94:34: 85:14:1b:3b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWj+tcVQN7O4l+sUwAXC3u4SSrxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDVaFw0yNzA2MDQwNzEyNDVaMDMxMTAvBgNV BAMTKDUwNDMzRTc3MzQ2NTQ2Mjc5RTIzNDg2QjdFQTJDQzI1NTQ5MTdGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KPJi8QkIlfcKgtJ7ErTvgTio kKvrVU1hITIW9SukNV5lb5+KYFx8qAVBVo+xVXnBCZree3ZB+P2AiJkAp8Gd3cTZ kPj1ELcNw6YMS8k84yfx5QSO1vUn/YesqvIrZQ3S5Jam/gHSX0jgS93gsq3HDeR4 Sdz7TNoE/jdExkE2UAP9NDI6zi36a2ZiKJol/paMCjY7GibD2IpJNGuKVa7e00JU bUdMiVO1KuEhayLu4LTdTXzvOkccciLSbt/eaKK7FJwAsOJ3PdoDghTy7+3gw1vn q4Jse0FJw3pnFv9df88Snn1QrZwlL5LdfOuiG1GIn7ruFRaK2V/7LP54QUVHAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUUEM+dzRlRieeI0hrfqLMJVSRfwYwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwOTA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQOEwDQYJKoZIhvcNAQELBQADggEBAHQK qtAn8IBErTVUgkIB1FPJcVi8eygXvolZC2gujOP37DjjLwWLjcP3mgHQV0ibcVwB 61jTgG34zz/iucIonVKwnVkHVRW9KXbJcopfM1+nE+SAdvuJF/t2jTuSuNnd6MWw IRAhLoWSEZ5FdbpOmwHU9cigJTGxjU6KYtQjFw7xEH65XbN+0+xO7AMDDMCqkjWA b0y3BHoZ0UxXoslhl9XnAGH+vBQKUsnCA3647tnqCwO8H8CNkQV2AhygFIUKLfBL aMqVPvHriOh8gNzdzsamArlPssm6psegNwit9B20hNb/LTD0shKWEXOOJj+7fPQU ZWvQA7f3ZQeUNIUUGzs= -----END CERTIFICATE-----Generated at Sat Jun 13 10:22:56 2026 by rpki-client