$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200141.roa File: AS200141.roa (raw, json) Hash identifier: RqUtpP1dG/PGyYA2E9QKEsemibMqs3krcUEvl9fAzZA= Subject key identifier: 0A:DF:A0:00:AC:67:0F:67:BF:B9:1E:82:CC:17:9F:67:33:9D:F3:C9 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 47EB4FED199E6C99F86C53CB78BFEB89D585AB17 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200141.roa Signing time: Fri 04 Jul 2025 06:53:03 +0000 ROA not before: Fri 04 Jul 2025 06:48:03 +0000 ROA not after: Fri 03 Jul 2026 06:53:03 +0000 asID: 200141 IP address blocks: 2a0a:6040:4a00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:eb:4f:ed:19:9e:6c:99:f8:6c:53:cb:78:bf:eb:89:d5:85:ab:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:03 2025 GMT Not After : Jul 3 06:53:03 2026 GMT Subject: CN=0ADFA000AC670F67BFB91E82CC179F67339DF3C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:dc:58:bf:6f:1e:92:c7:00:e7:6e:b0:6f: 06:d4:9f:2d:fb:bd:e4:f5:19:d2:3e:91:10:6e:07: e8:8c:46:10:78:a1:0e:2a:4b:3a:3f:f0:d3:4c:d5: 01:6a:21:73:85:0e:6d:6c:86:4e:13:9d:f9:f8:45: f6:24:f0:f1:94:40:8b:dd:1e:ef:34:b0:d1:02:42: f2:41:7b:6a:a5:53:dc:3a:c5:09:d4:65:ac:04:92: 41:47:0d:71:76:62:c6:7a:e1:f6:9c:06:58:88:73: b6:cd:28:05:78:4c:1e:68:95:fb:f2:bf:10:dc:24: c7:61:4b:57:cf:6f:fd:07:b2:f3:4a:ff:23:b7:94: e4:c8:75:dc:d6:2a:9f:b3:4a:10:f2:cc:bc:2d:27: cf:c1:e5:25:87:44:d1:f6:24:cc:a4:da:52:88:28: b6:3b:18:b6:08:44:59:71:0d:1f:2d:d1:58:3c:9d: 07:e3:bb:f4:13:03:54:27:e8:4a:65:10:06:8e:1a: e3:86:0a:81:5b:ce:f0:22:97:5d:2a:91:5f:1d:98: aa:09:56:98:c0:c9:c8:c5:35:ff:92:f5:f4:4c:55: 79:58:60:f7:14:fc:58:de:8f:cb:24:80:96:a7:6c: ab:40:32:e6:f0:c8:a5:45:8b:ce:51:e7:4b:11:b4: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DF:A0:00:AC:67:0F:67:BF:B9:1E:82:CC:17:9F:67:33:9D:F3:C9 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200141.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:4a00::/40 Signature Algorithm: sha256WithRSAEncryption 27:bf:e2:87:52:b9:51:91:20:30:49:16:69:65:b2:99:87:ed: 25:99:f9:47:57:07:85:b7:1b:08:95:43:74:eb:32:f0:aa:50: c0:61:30:e8:6c:5a:fd:d6:d1:8b:4a:1d:bd:01:b7:e9:93:75: 6b:a2:a0:a9:d6:7d:2e:ce:67:3f:36:35:01:86:f1:45:fe:02: ea:cf:4b:81:d2:cf:97:0a:1e:9d:c7:a3:5d:86:11:56:2b:b3: 91:c9:56:ad:f2:52:a7:c8:98:62:4c:22:c6:e2:a0:50:0e:e8: 86:d1:ba:51:69:b8:a7:23:c7:f0:e6:aa:e3:cb:fa:fd:55:b4: 72:2e:1e:e6:05:c0:e8:ad:c1:c9:1a:7e:e1:e8:f3:94:7a:4d: bb:d3:6c:b7:ba:1f:4f:fa:82:54:49:a5:b8:ce:1f:c7:32:e5: 2e:6b:f3:32:b1:1e:fd:17:15:f3:1a:5d:4e:91:8f:25:84:dd: e9:77:ef:40:e4:3e:8c:8b:d2:fc:70:43:2c:f6:25:c1:dd:c5: 0c:c9:d0:ea:10:13:f1:76:73:35:a3:0b:52:70:05:75:1f:cd: ab:ca:5e:52:f7:54:28:16:bc:79:a0:d2:8c:9d:23:8e:7e:a1: 95:81:0f:1f:49:4e:2e:02:e0:0c:68:a9:ab:19:35:3e:ba:9b: 11:ed:d2:22 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUR+tP7RmebJn4bFPLeL/ridWFqxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDNaFw0yNjA3MDMwNjUzMDNaMDMxMTAvBgNV BAMTKDBBREZBMDAwQUM2NzBGNjdCRkI5MUU4MkNDMTc5RjY3MzM5REYzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavtxYv28ekscA526wbwbUny37 veT1GdI+kRBuB+iMRhB4oQ4qSzo/8NNM1QFqIXOFDm1shk4Tnfn4RfYk8PGUQIvd Hu80sNECQvJBe2qlU9w6xQnUZawEkkFHDXF2YsZ64facBliIc7bNKAV4TB5olfvy vxDcJMdhS1fPb/0HsvNK/yO3lOTIddzWKp+zShDyzLwtJ8/B5SWHRNH2JMyk2lKI KLY7GLYIRFlxDR8t0Vg8nQfju/QTA1Qn6EplEAaOGuOGCoFbzvAil10qkV8dmKoJ VpjAycjFNf+S9fRMVXlYYPcU/Fjej8skgJanbKtAMubwyKVFi85R50sRtNX1AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUCt+gAKxnD2e/uR6CzBefZzOd88kwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMTQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQEowDQYJKoZIhvcNAQELBQADggEBACe/ 4odSuVGRIDBJFmllspmH7SWZ+UdXB4W3GwiVQ3TrMvCqUMBhMOhsWv3W0YtKHb0B t+mTdWuioKnWfS7OZz82NQGG8UX+AurPS4HSz5cKHp3Ho12GEVYrs5HJVq3yUqfI mGJMIsbioFAO6IbRulFpuKcjx/DmquPL+v1VtHIuHuYFwOitwckafuHo85R6TbvT bLe6H0/6glRJpbjOH8cy5S5r8zKxHv0XFfMaXU6RjyWE3el370DkPoyL0vxwQyz2 JcHdxQzJ0OoQE/F2czWjC1JwBXUfzavKXlL3VCgWvHmg0oydI45+oZWBDx9JTi4C 4AxoqasZNT66mxHt0iI= -----END CERTIFICATE-----Generated at Sat Jul 5 04:02:21 2025 by rpki-client