$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200246.roa File: AS200246.roa (raw, json) Hash identifier: nEIyDkVFmF9jfnSjrV25YV73JVJHbhmjgCSEF8rK3os= Subject key identifier: 0F:AF:F3:E8:34:6B:4E:CE:61:71:40:E6:55:36:FD:EC:70:6A:4A:BD Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 79644C4F9D0463369068776F47665CAD92E19C79 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200246.roa Signing time: Fri 04 Jul 2025 06:53:07 +0000 ROA not before: Fri 04 Jul 2025 06:48:07 +0000 ROA not after: Fri 03 Jul 2026 06:53:07 +0000 asID: 200246 IP address blocks: 2a0a:6040:2e00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:64:4c:4f:9d:04:63:36:90:68:77:6f:47:66:5c:ad:92:e1:9c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:07 2025 GMT Not After : Jul 3 06:53:07 2026 GMT Subject: CN=0FAFF3E8346B4ECE617140E65536FDEC706A4ABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:23:9b:9b:21:75:57:a2:da:25:d2:3a:07:ea: f7:e4:19:ea:ff:4a:70:f4:0a:3f:ef:dd:47:2e:5d: 82:43:60:a2:ec:05:12:b8:64:ed:10:1f:0d:e8:f0: af:1b:34:3b:84:f3:6d:9e:39:7f:58:c5:04:c4:e1: 4d:33:4c:ec:9d:37:cd:36:2f:27:70:ee:de:08:3c: f0:1c:0b:46:df:45:ce:f9:4d:a0:e3:18:58:72:b8: e7:4a:d3:11:7b:28:62:68:a9:2b:54:55:62:7e:1d: ea:15:61:ea:5c:30:b9:a8:b8:90:70:44:e6:1e:dc: 6c:7b:cb:ca:84:6b:1f:d6:96:3d:88:5a:6e:9f:83: 5b:47:54:96:8b:22:fb:e3:9d:2c:14:03:53:bf:7b: 55:b8:78:96:f0:8c:44:4b:c8:5d:b4:33:8c:ff:6b: 97:e0:8d:44:38:e0:3a:b9:5d:1a:76:83:4c:de:62: 70:d4:04:20:b4:13:cf:83:03:c1:5b:2d:2c:26:9a: 70:93:0c:f0:ef:b2:af:de:49:f0:25:12:55:42:ae: 30:1f:68:d8:95:39:65:db:2b:79:c0:18:cf:70:9a: bc:94:68:31:a9:c5:71:80:57:30:2d:2d:6e:38:ec: b2:58:98:4a:77:bd:7a:b6:eb:d6:96:01:00:fc:e7: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AF:F3:E8:34:6B:4E:CE:61:71:40:E6:55:36:FD:EC:70:6A:4A:BD X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200246.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2e00::/40 Signature Algorithm: sha256WithRSAEncryption 37:fe:9f:5c:e0:b4:9b:44:79:5b:9c:70:9b:f8:35:0d:6f:13: a8:0c:be:4a:12:4b:7e:c4:c1:cd:aa:7e:d0:35:d5:67:b5:ab: 81:d0:cf:60:5d:08:62:f7:63:a5:92:ec:40:69:d6:bc:1c:d9: 81:c6:c4:80:cf:c2:78:00:3a:11:5c:d1:b0:dc:e9:a3:c0:0c: 34:45:5f:59:2d:70:24:09:0a:56:94:b7:9b:f6:3e:8d:2e:34: 7e:7e:8e:9f:63:1e:68:72:f4:8b:71:3e:f8:b4:ac:00:dc:a1: 95:46:bd:98:00:41:a2:0c:2b:80:84:c9:57:55:55:99:65:c1: bf:2d:1e:0b:05:03:80:2f:9b:39:ca:ec:14:9e:be:f3:d7:ad: 2f:1f:56:81:46:59:8e:4d:f0:d6:2e:98:e3:ec:2e:20:a4:eb: 34:ef:4b:70:2b:00:15:c7:08:b1:5f:c5:bb:38:2f:3a:a9:79: a9:97:7a:5f:39:a0:cf:45:90:62:61:81:c8:66:79:6d:07:f9: eb:02:25:59:fb:2d:a6:6d:ed:5d:3f:09:8c:93:05:7d:4c:c1: 5a:5a:16:87:af:bc:b0:a3:b1:86:16:80:78:99:39:4e:24:a6: 01:95:4a:fc:25:83:cf:d0:25:1e:59:a6:17:d2:82:2e:7e:2f: a0:8c:01:84 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUeWRMT50EYzaQaHdvR2ZcrZLhnHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDdaFw0yNjA3MDMwNjUzMDdaMDMxMTAvBgNV BAMTKDBGQUZGM0U4MzQ2QjRFQ0U2MTcxNDBFNjU1MzZGREVDNzA2QTRBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgI5ubIXVXotol0joH6vfkGer/ SnD0Cj/v3UcuXYJDYKLsBRK4ZO0QHw3o8K8bNDuE822eOX9YxQTE4U0zTOydN802 Lydw7t4IPPAcC0bfRc75TaDjGFhyuOdK0xF7KGJoqStUVWJ+HeoVYepcMLmouJBw ROYe3Gx7y8qEax/Wlj2IWm6fg1tHVJaLIvvjnSwUA1O/e1W4eJbwjERLyF20M4z/ a5fgjUQ44Dq5XRp2g0zeYnDUBCC0E8+DA8FbLSwmmnCTDPDvsq/eSfAlElVCrjAf aNiVOWXbK3nAGM9wmryUaDGpxXGAVzAtLW447LJYmEp3vXq269aWAQD8510xAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUD6/z6DRrTs5hcUDmVTb97HBqSr0wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMjQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQC4wDQYJKoZIhvcNAQELBQADggEBADf+ n1zgtJtEeVuccJv4NQ1vE6gMvkoSS37Ewc2qftA11We1q4HQz2BdCGL3Y6WS7EBp 1rwc2YHGxIDPwngAOhFc0bDc6aPADDRFX1ktcCQJClaUt5v2Po0uNH5+jp9jHmhy 9ItxPvi0rADcoZVGvZgAQaIMK4CEyVdVVZllwb8tHgsFA4AvmznK7BSevvPXrS8f VoFGWY5N8NYumOPsLiCk6zTvS3ArABXHCLFfxbs4LzqpeamXel85oM9FkGJhgchm eW0H+esCJVn7LaZt7V0/CYyTBX1MwVpaFoevvLCjsYYWgHiZOU4kpgGVSvwlg8/Q JR5ZphfSgi5+L6CMAYQ= -----END CERTIFICATE-----Generated at Sat Jul 5 03:41:31 2025 by rpki-client