$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200237.roa File: AS200237.roa (raw, json) Hash identifier: Fa0xsOyLqKPEY6D1KqLOCWXNsgs9TZKjibUJ3luIbO8= Subject key identifier: DB:06:3E:8B:19:0F:71:D9:BB:B5:99:A5:63:A4:57:41:A3:88:73:C4 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 70047AEEA5E7D0F0FB7F1E80716691B932628543 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200237.roa Signing time: Fri 04 Jul 2025 06:53:28 +0000 ROA not before: Fri 04 Jul 2025 06:48:28 +0000 ROA not after: Fri 03 Jul 2026 06:53:28 +0000 asID: 200237 IP address blocks: 2a0a:6040:3800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:04:7a:ee:a5:e7:d0:f0:fb:7f:1e:80:71:66:91:b9:32:62:85:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:28 2025 GMT Not After : Jul 3 06:53:28 2026 GMT Subject: CN=DB063E8B190F71D9BBB599A563A45741A38873C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:60:43:54:4c:85:3d:80:c0:a0:2f:b9:59:a4: 53:b5:85:e0:74:87:2e:3c:3a:ac:5e:f0:80:d1:51: a4:51:0e:26:b0:c4:73:c0:b3:25:3d:1c:3f:fb:0c: c5:95:ed:da:5e:83:ef:ee:83:76:e5:64:f9:fb:d2: 60:48:ed:29:2b:b1:33:94:30:ad:d9:f6:d6:b2:1f: c0:97:15:8a:6f:96:bc:15:85:9d:7a:df:5c:b6:7d: ba:62:62:e3:20:95:6a:f4:19:47:2c:19:dd:2e:40: 67:35:d6:84:cd:8c:85:b7:4f:3a:d1:fc:c7:d5:89: ea:4b:15:01:c1:05:88:41:5f:4d:2d:f6:36:f8:18: 33:e6:18:8f:e7:46:11:fd:1f:c2:af:fc:3d:20:fe: ac:67:f2:ee:30:b0:af:96:0a:f1:28:75:de:99:33: a7:df:2d:35:c2:f8:d5:46:c7:f0:76:6f:e8:4b:ba: f1:95:27:0a:bb:80:e0:4a:e6:4f:b1:89:f4:77:a3: d0:72:9c:e4:03:95:c9:59:a0:73:d5:5a:c8:fe:46: 18:c7:b2:6b:87:55:d4:af:5f:33:ab:78:76:99:7b: d9:e1:82:3c:01:da:62:bb:c9:7f:6f:8a:78:0d:a2: ac:f4:19:be:06:6e:dd:16:01:3c:3e:ae:d7:50:af: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:06:3E:8B:19:0F:71:D9:BB:B5:99:A5:63:A4:57:41:A3:88:73:C4 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3800::/40 Signature Algorithm: sha256WithRSAEncryption ae:d9:7c:0d:67:d0:31:43:ae:85:01:31:3e:2e:83:20:fc:8b: 9f:26:25:eb:3c:c5:c9:4f:8c:3b:6f:63:00:cf:82:07:5c:fb: 5f:3c:12:ee:45:e8:08:e2:51:13:3c:c1:94:62:f9:90:96:be: da:1b:2d:ee:ed:12:ab:f0:0e:73:0f:7e:2a:56:af:2e:da:79: 78:fe:a9:fc:b5:01:f8:8b:fc:66:37:ff:14:53:8b:c1:61:f6: 96:ed:ed:28:f4:91:4f:55:e5:1b:9d:cb:99:8c:ba:cf:73:0a: 71:3d:0b:e3:95:bb:6b:36:f5:9b:55:cc:de:66:29:49:7b:0b: c5:7b:db:e0:64:f9:cb:c0:96:d5:72:f1:da:e5:9b:4c:cb:4b: a8:b7:5e:94:49:3f:20:bc:8c:cf:3d:b3:dd:6c:ca:40:4d:ec: e9:b1:16:04:59:50:5e:39:03:ee:25:0f:f4:83:2b:7e:56:ea: 79:47:ab:d1:aa:7a:f6:39:80:5e:3b:79:5a:38:54:e1:8d:02: 3d:fd:f1:8b:b9:47:18:bb:98:f7:be:df:a7:59:34:95:38:d0: 8a:83:96:2b:3e:ff:2a:9b:91:81:db:4d:3c:73:e9:5e:09:8c: cf:d8:38:4e:1b:96:68:a4:b9:51:82:55:a0:8e:49:df:6a:e7: fd:09:5c:7a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUcAR67qXn0PD7fx6AcWaRuTJihUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjhaFw0yNjA3MDMwNjUzMjhaMDMxMTAvBgNV BAMTKERCMDYzRThCMTkwRjcxRDlCQkI1OTlBNTYzQTQ1NzQxQTM4ODczQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZYENUTIU9gMCgL7lZpFO1heB0 hy48Oqxe8IDRUaRRDiawxHPAsyU9HD/7DMWV7dpeg+/ug3blZPn70mBI7SkrsTOU MK3Z9tayH8CXFYpvlrwVhZ1631y2fbpiYuMglWr0GUcsGd0uQGc11oTNjIW3TzrR /MfViepLFQHBBYhBX00t9jb4GDPmGI/nRhH9H8Kv/D0g/qxn8u4wsK+WCvEodd6Z M6ffLTXC+NVGx/B2b+hLuvGVJwq7gOBK5k+xifR3o9BynOQDlclZoHPVWsj+RhjH smuHVdSvXzOreHaZe9nhgjwB2mK7yX9vingNoqz0Gb4Gbt0WATw+rtdQr501AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU2wY+ixkPcdm7tZmlY6RXQaOIc8QwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDgwDQYJKoZIhvcNAQELBQADggEBAK7Z fA1n0DFDroUBMT4ugyD8i58mJes8xclPjDtvYwDPggdc+188Eu5F6AjiURM8wZRi +ZCWvtobLe7tEqvwDnMPfipWry7aeXj+qfy1AfiL/GY3/xRTi8Fh9pbt7Sj0kU9V 5Rudy5mMus9zCnE9C+OVu2s29ZtVzN5mKUl7C8V72+Bk+cvAltVy8drlm0zLS6i3 XpRJPyC8jM89s91sykBN7OmxFgRZUF45A+4lD/SDK35W6nlHq9GqevY5gF47eVo4 VOGNAj398Yu5Rxi7mPe+36dZNJU40IqDlis+/yqbkYHbTTxz6V4JjM/YOE4blmik uVGCVaCOSd9q5/0JXHo= -----END CERTIFICATE-----Generated at Sat Jul 5 03:49:38 2025 by rpki-client