$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200074.roa File: AS200074.roa (raw, json) Hash identifier: +pGuEQk1i5yWTAL9D32EWbPo/NyoSRSwhrk23hEDd1Q= Subject key identifier: 7E:EE:AC:2C:49:78:BC:C0:4A:12:42:7D:8A:A9:B1:A1:30:E9:08:79 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 13A7E3C5BB4C8A5BB6592168960E7A2F365736BF Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200074.roa Signing time: Fri 04 Jul 2025 06:53:08 +0000 ROA not before: Fri 04 Jul 2025 06:48:08 +0000 ROA not after: Fri 03 Jul 2026 06:53:08 +0000 asID: 200074 IP address blocks: 2a0a:6040:1700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a7:e3:c5:bb:4c:8a:5b:b6:59:21:68:96:0e:7a:2f:36:57:36:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:08 2025 GMT Not After : Jul 3 06:53:08 2026 GMT Subject: CN=7EEEAC2C4978BCC04A12427D8AA9B1A130E90879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b2:de:eb:54:0c:db:fe:d5:59:b2:da:c0:08: e3:90:66:87:a3:46:c2:14:a2:e7:ab:75:a2:7d:e8: 2d:93:b1:db:70:fe:40:ca:b6:0a:18:0d:11:f5:47: 74:6d:cd:80:c7:54:32:ea:5a:a3:93:12:4f:40:28: ff:bd:1b:ad:4f:97:50:a8:b0:23:d9:7d:d7:7e:42: d5:ef:9e:3c:9a:1a:64:35:9a:49:e1:93:95:b6:ce: 34:17:e9:87:5a:e8:c3:3c:bc:07:f4:a2:2f:aa:b3: df:fe:7f:66:3a:08:0b:cd:84:30:e3:92:8d:d3:cb: a7:6c:0a:8c:46:2d:48:4e:e3:0d:82:9f:76:fa:34: b2:03:2b:96:8b:4d:6b:56:a5:0b:e4:ba:6a:da:07: ac:65:1a:2b:9e:a9:01:63:ab:d3:22:1b:bb:27:b7: 1d:cc:00:d1:e8:4b:2c:22:cf:0c:56:b8:76:ef:ef: 9a:88:d0:ae:98:54:22:81:87:5f:ba:46:76:ce:2b: 99:e0:54:4d:fa:f8:85:f1:36:78:7b:cd:11:c4:4e: bd:43:fd:e6:73:c8:6f:61:bb:b9:b4:05:47:ba:1a: 5b:b4:c7:e2:38:af:3e:34:b7:4b:a2:5d:6b:e1:d3: 06:ef:7f:eb:67:3d:8e:19:77:b4:2f:55:6a:3b:16: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EE:AC:2C:49:78:BC:C0:4A:12:42:7D:8A:A9:B1:A1:30:E9:08:79 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200074.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:1700::/40 Signature Algorithm: sha256WithRSAEncryption 9d:c5:8e:d4:67:7b:c6:b5:fc:d0:f9:9d:a5:29:31:6f:17:63: c0:46:6a:be:9d:e1:df:5c:93:24:dd:09:f8:e7:2b:26:1e:8b: 17:5b:c6:85:20:d3:c3:b7:98:f6:86:7c:92:ff:69:bc:fe:89: 69:35:4c:69:f0:34:e1:d0:9d:b3:4f:b4:19:e1:8f:2f:bc:eb: 16:bb:fd:96:a8:e5:5e:2b:be:c9:39:1b:2b:c0:0b:ae:6f:09: 33:35:7e:c3:52:18:4a:7c:a7:26:76:4e:93:78:aa:24:ad:47: 02:b4:aa:41:18:1f:8d:3a:6e:86:a2:2b:55:cb:b5:9c:4f:40: 61:26:0b:34:26:a5:11:89:b3:0f:6f:96:3b:d1:32:58:6f:1b: 07:2e:d8:e5:64:22:57:f9:01:6f:ed:37:e7:42:d8:de:b7:09: cd:12:da:1b:4e:03:7d:cd:ff:e8:b2:f6:c7:50:cf:64:01:17: c9:33:97:c4:94:a0:e4:1d:6f:97:31:02:90:e1:ae:62:61:ba: 88:16:13:0d:32:aa:31:41:43:45:2d:cf:1a:d6:91:97:1d:14: 5e:47:46:fd:92:97:b1:14:50:8e:b5:d7:57:9e:8b:12:eb:be: 8d:3b:86:78:90:68:fd:80:10:07:4b:54:9b:bf:6e:d9:7d:2e: ac:37:2a:98 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUE6fjxbtMilu2WSFolg56LzZXNr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDhaFw0yNjA3MDMwNjUzMDhaMDMxMTAvBgNV BAMTKDdFRUVBQzJDNDk3OEJDQzA0QTEyNDI3RDhBQTlCMUExMzBFOTA4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6st7rVAzb/tVZstrACOOQZoej RsIUouerdaJ96C2Tsdtw/kDKtgoYDRH1R3RtzYDHVDLqWqOTEk9AKP+9G61Pl1Co sCPZfdd+QtXvnjyaGmQ1mknhk5W2zjQX6Yda6MM8vAf0oi+qs9/+f2Y6CAvNhDDj ko3Ty6dsCoxGLUhO4w2Cn3b6NLIDK5aLTWtWpQvkumraB6xlGiueqQFjq9MiG7sn tx3MANHoSywizwxWuHbv75qI0K6YVCKBh1+6RnbOK5ngVE36+IXxNnh7zRHETr1D /eZzyG9hu7m0BUe6Glu0x+I4rz40t0uiXWvh0wbvf+tnPY4Zd7QvVWo7FhT5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUfu6sLEl4vMBKEkJ9iqmxoTDpCHkwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMDc0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQBcwDQYJKoZIhvcNAQELBQADggEBAJ3F jtRne8a1/ND5naUpMW8XY8BGar6d4d9ckyTdCfjnKyYeixdbxoUg08O3mPaGfJL/ abz+iWk1TGnwNOHQnbNPtBnhjy+86xa7/Zao5V4rvsk5GyvAC65vCTM1fsNSGEp8 pyZ2TpN4qiStRwK0qkEYH406boaiK1XLtZxPQGEmCzQmpRGJsw9vljvRMlhvGwcu 2OVkIlf5AW/tN+dC2N63Cc0S2htOA33N/+iy9sdQz2QBF8kzl8SUoOQdb5cxApDh rmJhuogWEw0yqjFBQ0UtzxrWkZcdFF5HRv2Sl7EUUI6111eeixLrvo07hniQaP2A EAdLVJu/btl9Lqw3Kpg= -----END CERTIFICATE-----Generated at Sat Jul 5 03:44:16 2025 by rpki-client