$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200936.roa File: AS200936.roa (raw, json) Hash identifier: OPOqdXRURv0/vSF85TmRpu2BGuOHKshLNEUykBUGYMk= Subject key identifier: 4D:57:93:5E:4A:7E:42:03:D8:C4:5D:AB:89:7F:E3:53:F8:43:3B:82 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 201015A25131D9B1C23AA06BA0C729D08D5A317A Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200936.roa Signing time: Fri 05 Jun 2026 07:12:47 +0000 ROA not before: Fri 05 Jun 2026 07:07:47 +0000 ROA not after: Fri 04 Jun 2027 07:12:47 +0000 asID: 200936 IP address blocks: 2a0a:6040:d600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:10:15:a2:51:31:d9:b1:c2:3a:a0:6b:a0:c7:29:d0:8d:5a:31:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:47 2026 GMT Not After : Jun 4 07:12:47 2027 GMT Subject: CN=4D57935E4A7E4203D8C45DAB897FE353F8433B82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a1:af:7c:76:be:16:65:cf:66:3f:4a:20:bd: e5:5b:b5:38:8e:65:3a:96:e8:b1:7b:6a:86:6f:cb: 07:f3:83:72:29:8d:b8:63:be:bc:2d:d1:fb:78:c8: ac:1b:d6:32:11:e0:ab:9f:80:4c:0d:4e:f5:84:cc: 6e:ef:2e:42:5d:89:92:2a:3f:a8:88:cc:dc:30:fe: 71:96:8c:d4:4b:ad:e0:99:33:83:7b:1b:8d:e8:b0: d5:47:b7:8f:27:6f:26:01:ba:23:eb:e3:a2:00:d2: 8c:3b:33:22:62:99:b0:f2:db:06:6d:30:8a:4f:d4: 37:d7:1e:dc:d5:09:4e:ae:f1:45:d4:44:9d:39:38: fe:ba:19:f3:c5:bf:2b:9d:a1:ad:2c:4c:a4:14:aa: 30:f9:a0:4c:5d:cd:79:5c:36:57:0d:46:34:82:d5: 91:3e:50:96:47:9e:08:6a:e5:f7:3c:03:9d:38:48: 9f:d6:05:ad:31:77:5f:75:f1:13:27:a1:03:ef:17: 54:68:3b:1c:d7:5c:24:2b:b4:cb:ad:c8:a7:95:36: 68:0e:a3:10:04:97:07:7a:1b:5b:64:75:13:89:4a: 93:d7:7d:64:54:50:4a:53:6b:73:0a:70:da:37:45: 7a:3e:cd:dc:2e:81:f2:b4:80:24:f8:ca:63:cf:c9: 8e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:57:93:5E:4A:7E:42:03:D8:C4:5D:AB:89:7F:E3:53:F8:43:3B:82 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:d600::/40 Signature Algorithm: sha256WithRSAEncryption 99:4a:f7:8b:be:b3:eb:24:b5:99:a1:48:a4:3d:8c:3e:ef:5b: 8d:c7:28:6e:7c:9b:d4:70:e4:b8:86:c5:ee:a0:a2:5e:74:f1: 8b:9f:46:c4:0d:20:b4:7b:0d:76:22:75:d8:60:e9:9d:6d:9a: b6:7c:6f:ec:7d:07:13:66:c1:3a:cc:08:d1:dc:a0:41:5b:d6: ee:a6:6e:44:fb:c4:70:e2:8e:e0:96:c0:5e:84:71:ed:5b:8f: 9f:09:a6:f7:f0:32:72:ad:e0:46:4f:48:13:af:83:b3:54:11: 23:9c:f5:bc:b6:24:63:dc:31:b2:48:3e:19:d2:32:be:ff:21: a6:94:3e:76:1b:d3:8d:6d:5c:66:55:85:91:c2:cf:47:b9:38: 10:3a:c9:86:f6:b8:1a:42:05:76:a4:56:6d:00:f3:5f:9e:ab: eb:a2:a3:da:f1:48:67:37:47:cb:1b:1a:c6:05:4d:13:1f:02: 26:0f:eb:5a:f1:bb:3b:34:43:a5:d5:ae:e6:32:48:37:ed:59: b7:e1:82:df:72:b1:9e:d6:f4:ec:d3:35:25:6c:4e:41:c7:68: dd:f0:a6:8e:9e:76:00:af:70:27:bc:d3:4f:83:98:a4:73:7d: c6:36:20:5f:02:0c:49:b2:29:d3:17:34:0d:45:6f:22:1a:26: d9:87:a7:db -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUIBAVolEx2bHCOqBroMcp0I1aMXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDdaFw0yNzA2MDQwNzEyNDdaMDMxMTAvBgNV BAMTKDRENTc5MzVFNEE3RTQyMDNEOEM0NURBQjg5N0ZFMzUzRjg0MzNCODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1oa98dr4WZc9mP0ogveVbtTiO ZTqW6LF7aoZvywfzg3Ipjbhjvrwt0ft4yKwb1jIR4KufgEwNTvWEzG7vLkJdiZIq P6iIzNww/nGWjNRLreCZM4N7G43osNVHt48nbyYBuiPr46IA0ow7MyJimbDy2wZt MIpP1DfXHtzVCU6u8UXURJ05OP66GfPFvyudoa0sTKQUqjD5oExdzXlcNlcNRjSC 1ZE+UJZHnghq5fc8A504SJ/WBa0xd1918RMnoQPvF1RoOxzXXCQrtMutyKeVNmgO oxAElwd6G1tkdROJSpPXfWRUUEpTa3MKcNo3RXo+zdwugfK0gCT4ymPPyY7hAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUTVeTXkp+QgPYxF2riX/jU/hDO4IwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNYwDQYJKoZIhvcNAQELBQADggEBAJlK 94u+s+sktZmhSKQ9jD7vW43HKG58m9Rw5LiGxe6gol508YufRsQNILR7DXYiddhg 6Z1tmrZ8b+x9BxNmwTrMCNHcoEFb1u6mbkT7xHDijuCWwF6Ece1bj58JpvfwMnKt 4EZPSBOvg7NUESOc9by2JGPcMbJIPhnSMr7/IaaUPnYb041tXGZVhZHCz0e5OBA6 yYb2uBpCBXakVm0A81+eq+uio9rxSGc3R8sbGsYFTRMfAiYP61rxuzs0Q6XVruYy SDftWbfhgt9ysZ7W9OzTNSVsTkHHaN3wpo6edgCvcCe800+DmKRzfcY2IF8CDEmy KdMXNA1FbyIaJtmHp9s= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:21 2026 by rpki-client