$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200949.roa File: AS200949.roa (raw, json) Hash identifier: Q5tQDf9waoZs6TPPxa6ygFa6vHJ8D10Z1sYUEi+jj2o= Subject key identifier: 11:8E:EA:67:F2:1B:D3:34:D8:A9:73:FC:31:FB:79:FD:56:E8:59:E1 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 40A8887C12F890C065C9FF9875269FDA01C7FF9D Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200949.roa Signing time: Fri 05 Jun 2026 07:12:35 +0000 ROA not before: Fri 05 Jun 2026 07:07:35 +0000 ROA not after: Fri 04 Jun 2027 07:12:35 +0000 asID: 200949 IP address blocks: 2a0a:6040:d800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a8:88:7c:12:f8:90:c0:65:c9:ff:98:75:26:9f:da:01:c7:ff:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:35 2026 GMT Not After : Jun 4 07:12:35 2027 GMT Subject: CN=118EEA67F21BD334D8A973FC31FB79FD56E859E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:4e:cb:21:4e:68:88:95:91:3d:7d:93:30: 2e:6a:62:6f:bf:50:df:e7:bd:14:ea:99:8e:89:e0: 8b:32:56:1a:13:98:5c:76:f3:56:cb:cf:15:68:b9: 70:28:ed:ac:01:8b:b6:fa:10:8a:f2:e1:7c:d9:73: ef:cd:60:ac:6d:88:77:9d:3d:61:96:c2:6e:8e:e5: f3:47:b7:66:ac:4a:31:98:7a:89:4a:a1:ef:44:50: 2c:08:17:b0:9b:b4:42:16:1b:e5:e5:00:0d:b3:47: 89:10:58:83:af:0a:e8:a8:89:d4:5d:79:ea:7d:f0: ce:9c:0a:55:a2:8f:56:2d:c2:a8:56:a3:d1:2d:86: b9:b0:c0:29:47:9a:5e:23:bf:48:9d:ee:a0:a2:2d: 54:0f:a5:93:7e:5c:b7:3a:0f:02:96:41:09:d6:be: cd:ed:b5:28:d3:3e:0b:46:bb:40:fc:e3:26:33:01: 9e:c9:5b:5c:fe:78:a5:39:1c:5c:55:99:ed:87:fe: 18:92:59:70:3f:96:fd:e6:95:fb:03:be:c0:5c:8c: 9e:a1:3d:70:86:6c:c9:53:a8:29:77:1b:af:cd:79: c4:c5:0f:dc:59:cb:ee:70:4f:28:7d:ca:5a:4e:c4: 35:04:98:87:b5:76:bc:ea:02:95:2f:68:53:6d:09: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8E:EA:67:F2:1B:D3:34:D8:A9:73:FC:31:FB:79:FD:56:E8:59:E1 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200949.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:d800::/40 Signature Algorithm: sha256WithRSAEncryption d8:99:b5:68:ab:48:7a:5b:7a:65:05:41:62:37:d8:3c:d9:2e: 20:aa:31:79:bb:57:fa:35:91:18:53:05:6f:ec:e8:c3:49:ec: 8a:36:2c:fe:76:78:9c:64:de:6b:60:88:37:9e:b3:ac:91:63: 26:f0:e2:58:97:fc:4a:1b:50:1d:f0:92:7d:df:b4:fe:41:54: bd:d3:d4:9e:13:9d:ac:ba:ae:42:e0:cf:3b:1f:57:a1:45:e4: 9c:02:ec:5e:34:1f:54:71:4b:47:82:11:37:82:3d:b1:2c:7b: 93:1f:03:99:47:ef:b6:4b:03:b0:13:e8:ef:74:c1:74:dc:ad: 03:b2:bf:a7:13:6b:ee:da:60:5d:14:75:d0:e9:b7:80:e5:93: 96:a1:6a:88:be:33:d1:1f:7e:0f:a7:0d:40:5e:c8:26:32:d9: 45:09:b3:b8:06:a8:97:91:59:22:a0:ac:a4:41:b6:2d:f3:28: 38:c8:94:04:4e:5c:03:8a:e8:f1:0a:0d:ba:fd:98:e1:84:bf: a9:18:eb:58:8f:7b:75:13:77:2e:bf:20:f2:b0:24:0e:5c:96: de:c8:99:45:64:fd:f1:c8:ba:b3:50:89:9f:96:cc:a9:4b:f8: 2e:38:3b:c3:dc:0f:53:e2:67:7f:18:95:d4:da:86:bf:e3:3b: 2d:bf:a7:57 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQKiIfBL4kMBlyf+YdSaf2gHH/50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3MzVaFw0yNzA2MDQwNzEyMzVaMDMxMTAvBgNV BAMTKDExOEVFQTY3RjIxQkQzMzREOEE5NzNGQzMxRkI3OUZENTZFODU5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTk7LIU5oiJWRPX2TMC5qYm+/ UN/nvRTqmY6J4IsyVhoTmFx281bLzxVouXAo7awBi7b6EIry4XzZc+/NYKxtiHed PWGWwm6O5fNHt2asSjGYeolKoe9EUCwIF7CbtEIWG+XlAA2zR4kQWIOvCuioidRd eep98M6cClWij1YtwqhWo9EthrmwwClHml4jv0id7qCiLVQPpZN+XLc6DwKWQQnW vs3ttSjTPgtGu0D84yYzAZ7JW1z+eKU5HFxVme2H/hiSWXA/lv3mlfsDvsBcjJ6h PXCGbMlTqCl3G6/NecTFD9xZy+5wTyh9ylpOxDUEmIe1drzqApUvaFNtCZx9AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUEY7qZ/Ib0zTYqXP8Mft5/VboWeEwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwOTQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNgwDQYJKoZIhvcNAQELBQADggEBANiZ tWirSHpbemUFQWI32DzZLiCqMXm7V/o1kRhTBW/s6MNJ7Io2LP52eJxk3mtgiDee s6yRYybw4liX/EobUB3wkn3ftP5BVL3T1J4Tnay6rkLgzzsfV6FF5JwC7F40H1Rx S0eCETeCPbEse5MfA5lH77ZLA7AT6O90wXTcrQOyv6cTa+7aYF0UddDpt4Dlk5ah aoi+M9Effg+nDUBeyCYy2UUJs7gGqJeRWSKgrKRBti3zKDjIlAROXAOK6PEKDbr9 mOGEv6kY61iPe3UTdy6/IPKwJA5clt7ImUVk/fHIurNQiZ+WzKlL+C44O8PcD1Pi Z38YldTahr/jOy2/p1c= -----END CERTIFICATE-----Generated at Sat Jun 13 09:11:20 2026 by rpki-client