$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200992.roa File: AS200992.roa (raw, json) Hash identifier: TCP6sW3GhzqmcD2fK6yHadNABQ2IfxqmXk0uhOFiDpY= Subject key identifier: C3:2B:54:F4:70:94:F8:9B:B7:2B:FE:B5:F2:50:BB:E7:DD:F7:33:A7 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 0130340808A46A9DEE7DDAD5834D307543562F2F Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200992.roa Signing time: Fri 05 Jun 2026 07:12:42 +0000 ROA not before: Fri 05 Jun 2026 07:07:42 +0000 ROA not after: Fri 04 Jun 2027 07:12:42 +0000 asID: 200992 IP address blocks: 2a0a:6040:f600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:30:34:08:08:a4:6a:9d:ee:7d:da:d5:83:4d:30:75:43:56:2f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jun 5 07:07:42 2026 GMT Not After : Jun 4 07:12:42 2027 GMT Subject: CN=C32B54F47094F89BB72BFEB5F250BBE7DDF733A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:a5:7f:64:e7:1d:88:39:a8:41:da:1a:8e: 05:35:cd:8c:23:71:94:aa:42:0c:77:65:75:c8:50: c3:7b:68:ac:4d:d0:c3:62:67:40:2a:2c:b3:e5:a2: 02:63:4b:e1:cd:97:69:ce:c5:13:6c:ba:b3:8e:fc: 45:b6:d8:ca:79:87:13:ad:ce:aa:a5:16:e6:ea:4c: aa:c2:cd:69:a7:2c:01:dd:eb:23:bf:b6:0d:a4:84: 74:50:43:c2:c5:14:b6:35:22:72:c9:55:2d:58:5a: a5:ff:d2:c6:46:67:3c:1a:bb:b4:2e:c3:b1:c6:24: 93:2d:57:8a:c7:21:ca:8c:44:6b:6b:6a:4f:29:2d: 0b:c8:dc:0e:67:19:49:c7:8a:78:78:51:f6:33:0a: 6f:8d:d4:97:2e:b3:68:71:f3:2c:1b:6c:19:50:57: 16:8c:8a:09:28:4e:34:68:f4:a0:51:26:b6:11:bf: 83:e8:b6:dc:11:05:82:c7:5e:a8:22:22:f7:3c:75: ce:65:d2:e8:02:60:7a:34:e2:5e:7b:3f:37:32:fd: 46:f6:d1:fa:f1:b0:e6:59:29:b2:80:7e:21:e9:bc: 33:81:df:d4:de:9c:cb:e6:2b:29:56:28:64:9b:15: a3:3e:40:74:4f:3d:3b:0c:c0:16:26:57:51:a9:75: 17:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2B:54:F4:70:94:F8:9B:B7:2B:FE:B5:F2:50:BB:E7:DD:F7:33:A7 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200992.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:f600::/40 Signature Algorithm: sha256WithRSAEncryption c1:5e:6e:d3:92:9a:67:44:fc:80:08:cb:8e:f8:3b:ff:18:27: af:44:2c:2d:53:cb:f9:15:81:03:8e:18:ee:3e:af:05:22:63: 0f:78:40:31:2c:56:c4:d2:5c:3a:ce:ff:7c:4e:ba:02:04:1d: 4e:6d:d8:3e:8f:b9:a7:87:fb:d4:d9:be:ac:d6:ea:ca:b0:c8: 78:23:4e:ba:6e:ad:cb:83:90:02:e2:ef:6c:4e:17:2e:43:12: 46:75:b9:49:34:a6:82:62:01:b0:0e:3f:0b:22:32:26:bb:00: 45:d5:b2:ba:40:9a:09:fd:40:c8:e8:47:fa:8d:42:52:4b:c6: e8:b4:6b:b0:14:f7:1e:38:f0:ec:8c:e2:b8:ac:9b:60:60:1d: 27:74:5b:6e:73:79:31:b3:0d:48:51:26:10:26:a9:41:ed:0c: 33:2f:bf:63:97:cc:14:4f:9b:3e:2c:45:75:4d:62:08:84:c3: 50:2a:62:02:82:78:bd:08:11:bd:54:75:4f:24:25:c0:83:1a: 5a:01:79:5f:d5:d1:b7:12:eb:ee:ce:60:8a:97:f8:d5:c8:76: f1:e5:d6:71:ea:29:c4:ff:f6:4c:84:89:a5:92:ea:e0:e4:23: f7:0a:3c:e8:63:d9:ab:48:d1:bf:a2:95:96:fc:57:ff:20:8f: 50:37:36:1b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUATA0CAikap3ufdrVg00wdUNWLy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNjA2MDUwNzA3NDJaFw0yNzA2MDQwNzEyNDJaMDMxMTAvBgNV BAMTKEMzMkI1NEY0NzA5NEY4OUJCNzJCRkVCNUYyNTBCQkU3RERGNzMzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1paV/ZOcdiDmoQdoajgU1zYwj cZSqQgx3ZXXIUMN7aKxN0MNiZ0AqLLPlogJjS+HNl2nOxRNsurOO/EW22Mp5hxOt zqqlFubqTKrCzWmnLAHd6yO/tg2khHRQQ8LFFLY1InLJVS1YWqX/0sZGZzwau7Qu w7HGJJMtV4rHIcqMRGtrak8pLQvI3A5nGUnHinh4UfYzCm+N1Jcus2hx8ywbbBlQ VxaMigkoTjRo9KBRJrYRv4PottwRBYLHXqgiIvc8dc5l0ugCYHo04l57Pzcy/Ub2 0frxsOZZKbKAfiHpvDOB39TenMvmKylWKGSbFaM+QHRPPTsMwBYmV1GpdRfJAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUwytU9HCU+Ju3K/618lC75933M6cwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwOTkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQPYwDQYJKoZIhvcNAQELBQADggEBAMFe btOSmmdE/IAIy474O/8YJ69ELC1Ty/kVgQOOGO4+rwUiYw94QDEsVsTSXDrO/3xO ugIEHU5t2D6PuaeH+9TZvqzW6sqwyHgjTrpurcuDkALi72xOFy5DEkZ1uUk0poJi AbAOPwsiMia7AEXVsrpAmgn9QMjoR/qNQlJLxui0a7AU9x448OyM4rism2BgHSd0 W25zeTGzDUhRJhAmqUHtDDMvv2OXzBRPmz4sRXVNYgiEw1AqYgKCeL0IEb1UdU8k JcCDGloBeV/V0bcS6+7OYIqX+NXIdvHl1nHqKcT/9kyEiaWS6uDkI/cKPOhj2atI 0b+ilZb8V/8gj1A3Nhs= -----END CERTIFICATE-----Generated at Sat Jun 13 10:22:55 2026 by rpki-client