$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200230.roa File: AS200230.roa (raw, json) Hash identifier: Xknk2k+UW/YmKKtR4h54+mNcVnkjEvQa/sOLvjuYdvU= Subject key identifier: 14:9A:CF:0C:FE:BC:60:90:EB:FC:7D:B7:67:82:9F:0B:45:BA:D2:C9 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 427B64DDE3BD229B91DFAC9649BFA86DDCD499F4 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200230.roa Signing time: Fri 04 Jul 2025 06:52:56 +0000 ROA not before: Fri 04 Jul 2025 06:47:56 +0000 ROA not after: Fri 03 Jul 2026 06:52:56 +0000 asID: 200230 IP address blocks: 2a0a:6040:3b00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7b:64:dd:e3:bd:22:9b:91:df:ac:96:49:bf:a8:6d:dc:d4:99:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:47:56 2025 GMT Not After : Jul 3 06:52:56 2026 GMT Subject: CN=149ACF0CFEBC6090EBFC7DB767829F0B45BAD2C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:70:fc:8a:50:3e:3a:d2:67:23:76:12:30: 36:b8:f0:09:95:87:94:19:f2:64:9c:7e:e3:43:f0: c0:42:73:9d:55:cc:45:10:c7:f1:9b:33:fd:c6:d0: a0:53:d9:07:53:25:ff:9f:9d:c2:85:c1:f6:29:e1: 86:d2:9f:af:8e:7a:a1:a4:d8:8d:b8:56:98:c0:93: 5c:ad:e0:c2:8b:d5:cf:8f:fd:e0:d3:97:d7:3c:74: 82:cf:9f:3b:2e:15:35:9f:ed:ca:98:59:31:b3:f6: 03:62:9b:5b:e9:b8:4d:27:86:57:35:6f:1e:2c:0c: 39:1f:d6:ca:02:92:82:69:90:35:81:1e:9b:63:5b: 5e:18:48:8a:90:16:63:42:77:07:1f:a3:eb:12:86: 34:c7:90:c0:83:6e:5a:80:32:6f:a7:48:01:fc:69: f7:76:cc:85:89:5c:94:c7:64:5b:58:1d:b2:f5:58: 87:1e:0a:04:aa:5e:6e:c4:68:b1:7d:34:45:60:15: f4:36:42:58:90:68:66:46:92:32:ba:a7:01:e4:47: f7:be:d1:17:07:b2:25:5a:a8:9b:3a:08:3e:cc:60: 95:99:35:b3:bb:0f:de:3b:9e:e5:bb:56:c8:02:8e: 53:90:0a:fb:61:de:0a:7f:f8:fa:7d:b9:87:6d:74: 8c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9A:CF:0C:FE:BC:60:90:EB:FC:7D:B7:67:82:9F:0B:45:BA:D2:C9 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3b00::/40 Signature Algorithm: sha256WithRSAEncryption e9:6d:6a:8e:2a:b7:fe:b2:b8:f0:3a:92:68:c9:ae:23:4a:40: 5e:49:3d:db:b2:b9:4e:01:fe:c1:9f:26:7e:5a:22:e3:b4:2f: eb:1d:19:c3:cf:5c:48:a9:a7:4c:a7:34:30:5e:2d:26:10:9c: 47:69:3d:af:68:dd:af:5a:a4:ae:2a:2e:57:29:92:50:9c:79: 1a:43:da:20:11:3c:33:dd:74:f6:ff:58:ab:4a:f9:7d:dd:ad: dc:59:ef:b4:fe:e9:b1:aa:2b:13:d6:64:b5:75:e2:37:b7:dc: 43:d0:1f:86:57:a9:98:43:12:ec:c8:5e:cb:9c:19:9c:77:37: 28:69:65:78:51:e6:f0:71:e4:d9:d1:a2:51:40:d5:a0:3b:6f: ce:ae:cc:88:bc:e6:b4:9f:1d:85:db:4b:72:63:1a:3e:54:b2: 8b:a6:19:d1:67:98:a5:7d:25:32:f7:a5:7f:0a:35:77:1e:be: a4:f7:4a:08:7b:c0:11:51:b1:42:7c:8d:1f:3b:fe:bf:4b:ac: 2b:4f:bd:19:6d:d3:e4:9f:ce:e0:45:1f:9d:49:6c:00:18:e0: 59:51:52:26:b0:5c:b6:b9:0f:ee:17:e7:7e:9b:59:13:e8:1d: 73:15:bc:9a:1b:d4:63:c9:08:76:d8:95:e9:dd:e8:15:86:ab: 0e:89:c6:14 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQntk3eO9IpuR36yWSb+obdzUmfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ3NTZaFw0yNjA3MDMwNjUyNTZaMDMxMTAvBgNV BAMTKDE0OUFDRjBDRkVCQzYwOTBFQkZDN0RCNzY3ODI5RjBCNDVCQUQyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0e3D8ilA+OtJnI3YSMDa48AmV h5QZ8mScfuND8MBCc51VzEUQx/GbM/3G0KBT2QdTJf+fncKFwfYp4YbSn6+OeqGk 2I24VpjAk1yt4MKL1c+P/eDTl9c8dILPnzsuFTWf7cqYWTGz9gNim1vpuE0nhlc1 bx4sDDkf1soCkoJpkDWBHptjW14YSIqQFmNCdwcfo+sShjTHkMCDblqAMm+nSAH8 afd2zIWJXJTHZFtYHbL1WIceCgSqXm7EaLF9NEVgFfQ2QliQaGZGkjK6pwHkR/e+ 0RcHsiVaqJs6CD7MYJWZNbO7D947nuW7VsgCjlOQCvth3gp/+Pp9uYdtdIxLAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUFJrPDP68YJDr/H23Z4KfC0W60skwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDswDQYJKoZIhvcNAQELBQADggEBAOlt ao4qt/6yuPA6kmjJriNKQF5JPduyuU4B/sGfJn5aIuO0L+sdGcPPXEipp0ynNDBe LSYQnEdpPa9o3a9apK4qLlcpklCceRpD2iARPDPddPb/WKtK+X3drdxZ77T+6bGq KxPWZLV14je33EPQH4ZXqZhDEuzIXsucGZx3NyhpZXhR5vBx5NnRolFA1aA7b86u zIi85rSfHYXbS3JjGj5UsoumGdFnmKV9JTL3pX8KNXcevqT3Sgh7wBFRsUJ8jR87 /r9LrCtPvRlt0+SfzuBFH51JbAAY4FlRUiawXLa5D+4X536bWRPoHXMVvJob1GPJ CHbYlend6BWGqw6JxhQ= -----END CERTIFICATE-----Generated at Sat Jul 5 03:43:14 2025 by rpki-client