$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200234.roa File: AS200234.roa (raw, json) Hash identifier: 7BdA9OgUMW7G35yg0eGBe9/cBUS/bbvf8VeNnBgRwr8= Subject key identifier: D6:BF:96:73:DD:D0:78:C3:E2:B1:38:EB:C1:15:51:E0:D0:17:36:BB Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 46BE1FC7D4895219C34E4A1143452D5AE12014C2 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200234.roa Signing time: Fri 04 Jul 2025 06:53:10 +0000 ROA not before: Fri 04 Jul 2025 06:48:10 +0000 ROA not after: Fri 03 Jul 2026 06:53:10 +0000 asID: 200234 IP address blocks: 2a0a:6040:3600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:be:1f:c7:d4:89:52:19:c3:4e:4a:11:43:45:2d:5a:e1:20:14:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:10 2025 GMT Not After : Jul 3 06:53:10 2026 GMT Subject: CN=D6BF9673DDD078C3E2B138EBC11551E0D01736BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:d8:a8:09:40:af:3c:92:23:09:21:f8:56: 39:b3:8f:41:fa:f4:1c:89:54:9f:96:66:62:47:17: 35:43:8a:60:e2:f6:d8:f0:3b:56:d4:1c:95:8b:f5: bb:91:fb:7d:d0:4f:00:fe:49:48:0e:ec:a3:64:19: e5:01:0e:74:06:40:3d:41:80:34:9e:8a:b4:78:05: 4b:93:4d:93:1c:ce:b2:34:71:1a:0c:6d:67:90:31: a4:81:38:a3:34:c7:41:b3:d0:a3:08:77:0b:f4:dc: 94:e2:73:52:e1:5c:48:81:f2:59:fa:25:ef:aa:9e: 16:47:ac:90:95:f6:6e:0e:cd:13:62:fd:ee:e1:ac: e4:a8:15:2e:10:5a:8e:06:5b:f5:a4:b2:fd:91:3c: 7f:d0:7d:fd:81:1a:1d:7e:83:ec:8f:86:b6:c9:a9: e8:5b:ae:98:ad:1b:68:28:70:c3:6a:c7:b0:62:08: 1c:65:9e:44:5e:57:3f:c6:9e:c1:e1:ff:4d:23:e9: 1e:29:e2:96:83:15:d6:c3:39:32:34:d0:44:2b:66: c5:68:76:e3:59:4f:a6:38:87:d1:de:a2:40:21:9d: 82:13:88:04:43:0f:d3:16:d9:50:15:e3:5e:70:42: c8:f9:99:ff:4c:c8:36:6c:f8:21:36:79:8b:e1:ce: 5f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BF:96:73:DD:D0:78:C3:E2:B1:38:EB:C1:15:51:E0:D0:17:36:BB X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3600::/40 Signature Algorithm: sha256WithRSAEncryption ea:eb:06:15:05:de:b7:8d:a8:07:e5:ed:bf:b2:e6:c5:26:13: 7c:54:32:5b:29:5b:45:bc:1e:52:03:52:19:b0:1b:fb:62:22: a0:43:12:a7:e3:42:9c:4e:bd:0d:ca:b8:5a:13:47:e1:d0:70: 76:0a:f8:92:8c:8e:2b:15:f0:e3:45:0f:6a:e2:e9:09:4e:55: c3:1c:3b:17:54:36:5e:5e:18:89:3b:83:20:39:39:9e:ec:f6: c9:4d:98:ef:9b:47:e3:64:f5:12:70:62:ef:54:c9:74:de:91: 29:36:e5:50:d4:1b:ef:62:a5:d0:0e:28:ef:18:28:15:d5:6a: 63:37:c3:c2:06:1c:7f:e0:59:bf:9c:07:55:2a:61:e6:06:71: eb:27:7f:04:ba:4a:c2:70:7d:ec:99:b1:47:87:a1:65:3f:b6: ee:0a:cb:d1:1f:eb:f5:2e:ad:61:ee:ba:c5:1f:ba:88:1f:6c: 0a:40:76:2f:18:a2:3a:96:27:52:7b:00:e2:84:c5:98:d6:2f: 0b:5f:b7:2f:a5:40:4c:eb:c5:07:34:3a:ab:4c:03:0e:65:84: b9:6f:8d:68:27:9f:aa:83:c5:3c:5d:48:d3:5e:b0:3a:a6:9e: 89:ed:a6:82:c6:c3:14:14:ad:c9:a9:e8:95:b3:22:d4:e3:b4: 8c:29:ad:8f -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIURr4fx9SJUhnDTkoRQ0UtWuEgFMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTBaFw0yNjA3MDMwNjUzMTBaMDMxMTAvBgNV BAMTKEQ2QkY5NjczREREMDc4QzNFMkIxMzhFQkMxMTU1MUUwRDAxNzM2QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBudioCUCvPJIjCSH4Vjmzj0H6 9ByJVJ+WZmJHFzVDimDi9tjwO1bUHJWL9buR+33QTwD+SUgO7KNkGeUBDnQGQD1B gDSeirR4BUuTTZMczrI0cRoMbWeQMaSBOKM0x0Gz0KMIdwv03JTic1LhXEiB8ln6 Je+qnhZHrJCV9m4OzRNi/e7hrOSoFS4QWo4GW/Wksv2RPH/Qff2BGh1+g+yPhrbJ qehbrpitG2gocMNqx7BiCBxlnkReVz/GnsHh/00j6R4p4paDFdbDOTI00EQrZsVo duNZT6Y4h9HeokAhnYITiARDD9MW2VAV415wQsj5mf9MyDZs+CE2eYvhzl/bAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU1r+Wc93QeMPisTjrwRVR4NAXNrswHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDYwDQYJKoZIhvcNAQELBQADggEBAOrr BhUF3reNqAfl7b+y5sUmE3xUMlspW0W8HlIDUhmwG/tiIqBDEqfjQpxOvQ3KuFoT R+HQcHYK+JKMjisV8ONFD2ri6QlOVcMcOxdUNl5eGIk7gyA5OZ7s9slNmO+bR+Nk 9RJwYu9UyXTekSk25VDUG+9ipdAOKO8YKBXVamM3w8IGHH/gWb+cB1UqYeYGcesn fwS6SsJwfeyZsUeHoWU/tu4Ky9Ef6/UurWHuusUfuogfbApAdi8YojqWJ1J7AOKE xZjWLwtfty+lQEzrxQc0OqtMAw5lhLlvjWgnn6qDxTxdSNNesDqmnontpoLGwxQU rcmp6JWzItTjtIwprY8= -----END CERTIFICATE-----Generated at Sat Jul 5 03:47:28 2025 by rpki-client