$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200256.roa File: AS200256.roa (raw, json) Hash identifier: FonxdH9LND6qqNyDrqiLeg09U0y+xB8Rp1MiOOVFEWI= Subject key identifier: D8:98:EE:1C:AD:C1:EB:EB:CB:6E:66:CF:A3:FC:B1:36:A9:ED:5F:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 2335EB1F56C14F50D4C4302A762E3338F972AB71 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200256.roa Signing time: Fri 04 Jul 2025 06:53:17 +0000 ROA not before: Fri 04 Jul 2025 06:48:17 +0000 ROA not after: Fri 03 Jul 2026 06:53:17 +0000 asID: 200256 IP address blocks: 2a0a:6040:2d00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:35:eb:1f:56:c1:4f:50:d4:c4:30:2a:76:2e:33:38:f9:72:ab:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:17 2025 GMT Not After : Jul 3 06:53:17 2026 GMT Subject: CN=D898EE1CADC1EBEBCB6E66CFA3FCB136A9ED5F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:ce:0e:82:bc:f2:19:2c:fa:92:81:78:fb: 46:4f:8d:27:20:c4:32:b5:00:24:ad:72:7c:65:0f: db:04:d0:89:48:50:e1:d5:20:31:67:22:3b:bf:05: fa:7b:65:d9:0e:b8:bd:ac:86:16:90:ff:7b:a9:8b: 28:5a:a6:f0:f2:6a:a0:22:49:91:21:e2:50:8d:54: 48:02:fa:79:31:cf:45:83:a3:38:28:f9:9c:6d:5a: e9:87:e7:c6:8f:36:15:47:68:bb:7c:9c:40:7a:58: 19:c7:0d:5c:c6:14:f2:f0:9d:f3:3f:74:07:6d:12: 48:84:c0:17:f8:16:16:b7:29:7d:df:38:69:9e:40: 6b:c2:58:35:74:9c:1f:3c:66:fb:46:a1:4f:df:8e: 5a:b9:62:d6:38:76:1a:a1:8e:88:e2:a2:b1:20:52: 23:e3:75:4a:47:05:13:f1:8b:12:34:e2:1f:84:d6: ad:46:48:97:e0:17:0c:ef:d3:94:7f:92:4d:b0:38: 64:ea:23:2a:c3:ab:73:f3:ab:c6:05:81:4e:0c:f3: f1:0a:67:c3:c3:48:ff:f2:17:dc:b1:98:e1:d5:d0: 31:97:1f:7f:20:0d:56:f0:6b:48:25:09:a7:97:6a: 85:8d:15:52:de:53:ae:24:37:7d:76:d3:89:80:c1: a0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:98:EE:1C:AD:C1:EB:EB:CB:6E:66:CF:A3:FC:B1:36:A9:ED:5F:3B X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200256.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2d00::/40 Signature Algorithm: sha256WithRSAEncryption b6:78:2d:f5:e9:89:af:6b:26:88:6a:70:0a:67:36:99:46:cc: b5:8f:51:9a:a8:01:ab:65:a3:8a:6f:7c:13:1c:43:e3:e4:f8: b0:38:4b:e8:30:aa:05:16:6c:15:df:84:9c:3c:02:2b:8e:2a: 30:56:20:e0:46:ed:10:00:28:92:05:9d:d3:a9:9b:0c:b3:59: ae:02:15:88:52:9d:67:fc:58:cf:83:f8:a8:ac:4e:28:cb:1b: a2:d3:12:0d:f4:b3:a7:a1:b4:b2:bc:1b:d0:2a:b2:3e:d9:cf: 50:31:06:cc:77:1f:8c:a5:6e:0b:25:56:d2:65:77:32:77:f0: 03:21:4e:b8:fe:3b:c4:c8:e9:27:40:1b:a3:e5:25:6f:a3:80: 1c:9a:d4:a4:00:5a:d4:cc:c9:cf:54:14:a3:46:6f:35:5d:eb: 7c:97:3c:61:74:42:85:8f:a4:6e:ab:70:d1:eb:5d:54:11:48: d8:53:9a:52:c2:fe:63:3e:1f:f4:0b:4c:d6:8b:0c:18:14:8a: 6e:6f:f1:d2:1f:80:b2:43:78:f0:f0:bd:e9:e7:a2:7e:78:f0: 9b:d2:94:38:fa:b1:14:4a:5a:a0:d8:11:06:ca:cb:ce:19:2c: f9:b1:13:ae:0f:76:6a:02:21:a6:73:08:c5:f8:bb:f1:f0:a4: c3:5b:2f:0a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUIzXrH1bBT1DUxDAqdi4zOPlyq3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MTdaFw0yNjA3MDMwNjUzMTdaMDMxMTAvBgNV BAMTKEQ4OThFRTFDQURDMUVCRUJDQjZFNjZDRkEzRkNCMTM2QTlFRDVGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB184OgrzyGSz6koF4+0ZPjScg xDK1ACStcnxlD9sE0IlIUOHVIDFnIju/Bfp7ZdkOuL2shhaQ/3upiyhapvDyaqAi SZEh4lCNVEgC+nkxz0WDozgo+ZxtWumH58aPNhVHaLt8nEB6WBnHDVzGFPLwnfM/ dAdtEkiEwBf4Fha3KX3fOGmeQGvCWDV0nB88ZvtGoU/fjlq5YtY4dhqhjojiorEg UiPjdUpHBRPxixI04h+E1q1GSJfgFwzv05R/kk2wOGTqIyrDq3Pzq8YFgU4M8/EK Z8PDSP/yF9yxmOHV0DGXH38gDVbwa0glCaeXaoWNFVLeU64kN31204mAwaCLAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU2JjuHK3B6+vLbmbPo/yxNqntXzswHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwMjU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQC0wDQYJKoZIhvcNAQELBQADggEBALZ4 LfXpia9rJohqcApnNplGzLWPUZqoAatlo4pvfBMcQ+Pk+LA4S+gwqgUWbBXfhJw8 AiuOKjBWIOBG7RAAKJIFndOpmwyzWa4CFYhSnWf8WM+D+KisTijLG6LTEg30s6eh tLK8G9Aqsj7Zz1AxBsx3H4ylbgslVtJldzJ38AMhTrj+O8TI6SdAG6PlJW+jgBya 1KQAWtTMyc9UFKNGbzVd63yXPGF0QoWPpG6rcNHrXVQRSNhTmlLC/mM+H/QLTNaL DBgUim5v8dIfgLJDePDwvennon548JvSlDj6sRRKWqDYEQbKy84ZLPmxE64PdmoC IaZzCMX4u/HwpMNbLwo= -----END CERTIFICATE-----Generated at Sat Jul 5 06:07:39 2025 by rpki-client