$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200447.roa File: AS200447.roa (raw, json) Hash identifier: ONRU0tmMaNh5uYpsQncopmkSg9tristux1f6XFvFlw8= Subject key identifier: 1C:DF:7A:31:AA:AA:75:87:46:79:E0:4C:F0:D7:CC:B0:66:2E:6B:9E Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 6D1E0316CC8F39AF04A8D669A103316BF487B3EF Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200447.roa Signing time: Fri 04 Jul 2025 06:53:25 +0000 ROA not before: Fri 04 Jul 2025 06:48:25 +0000 ROA not after: Fri 03 Jul 2026 06:53:25 +0000 asID: 200447 IP address blocks: 2a06:9f81:2100::/40 maxlen: 48 2a0a:6040:b900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:1e:03:16:cc:8f:39:af:04:a8:d6:69:a1:03:31:6b:f4:87:b3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:25 2025 GMT Not After : Jul 3 06:53:25 2026 GMT Subject: CN=1CDF7A31AAAA75874679E04CF0D7CCB0662E6B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:f9:57:ba:d8:ed:60:5c:27:82:66:b2:d9: 60:31:78:98:5f:ff:66:49:8d:ee:66:d9:da:b1:8e: 14:6e:32:e6:d8:03:dd:a1:fa:41:f0:19:c3:12:34: 7c:d9:86:8a:ca:7a:10:32:81:3b:f1:c4:25:dd:10: 69:78:b7:37:9b:8b:cc:99:c4:50:5e:56:a6:e2:13: 11:7b:59:98:b2:56:cb:53:a8:bf:0a:c1:fc:ab:9c: 1b:8e:a7:02:a4:f2:3b:4f:fc:c8:b3:f4:12:cb:80: e7:9a:7b:2d:61:10:fd:07:ee:b7:ba:7e:bc:05:d5: 7a:2f:40:65:22:1f:e3:f6:bf:e5:d1:ac:85:e5:6f: b7:5d:1a:e9:bc:af:29:9c:49:15:b6:80:ab:6c:eb: 74:02:30:ab:62:f4:2e:26:78:08:3a:06:11:da:04: 64:22:30:c5:5f:22:83:6a:ae:ce:b8:cb:09:44:52: 3a:35:fc:4b:f9:f1:73:a2:9f:12:10:ab:46:eb:42: 14:78:e6:94:4a:85:f4:4c:0a:5a:8b:7f:ad:39:7f: 72:87:51:03:28:12:02:ef:34:60:18:cd:1c:7d:0f: 38:30:f3:af:3d:62:9a:89:2a:13:8c:ff:74:67:78: 48:c5:b7:7a:31:22:c9:46:bd:f2:5f:f1:ea:8e:0e: 91:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DF:7A:31:AA:AA:75:87:46:79:E0:4C:F0:D7:CC:B0:66:2E:6B:9E X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200447.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f81:2100::/40 2a0a:6040:b900::/40 Signature Algorithm: sha256WithRSAEncryption 06:fb:e7:b1:65:0f:5c:84:34:a8:70:38:95:b7:ce:93:47:73: 53:4d:a8:22:b2:50:f9:a8:1c:c6:5f:96:28:f0:8c:df:56:ac: 5f:d8:47:80:dc:eb:08:7f:e5:62:bb:b1:a0:4c:23:db:7c:ec: f3:81:ac:c5:e4:55:a8:13:cf:17:02:e1:5d:d0:8e:49:dc:57: a2:1a:a8:68:2e:35:90:21:f5:87:fd:cc:3e:b0:c8:09:b7:83: cc:4b:b2:64:4f:9b:8c:fd:44:12:43:fd:8b:bf:21:b8:1c:e5: c8:de:2d:54:98:21:0f:54:2a:95:03:96:4e:ed:76:53:18:27: ad:fc:6d:bd:b5:7e:84:69:19:19:1c:7f:be:d3:71:6e:7d:3d: a4:fd:c2:96:ed:61:aa:d9:1c:3b:d1:c6:63:c0:8a:59:c4:ae: 12:09:36:42:09:ac:9e:5e:e3:a8:6c:a9:d0:bf:d3:2b:4b:3a: ea:ed:24:2c:f5:1c:01:16:2e:09:85:59:00:12:b1:b5:ad:61: 75:f8:6e:c5:e1:5b:5e:af:8b:b3:75:b9:53:59:1d:87:da:40: 58:ce:4e:de:37:aa:10:c3:5b:89:a6:6e:d4:f2:40:5d:d5:b1: 44:87:a2:de:8a:80:94:74:48:40:22:b4:f8:dc:d3:b8:8f:08: f9:15:f5:0d -----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIUbR4DFsyPOa8EqNZpoQMxa/SHs+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjVaFw0yNjA3MDMwNjUzMjVaMDMxMTAvBgNV BAMTKDFDREY3QTMxQUFBQTc1ODc0Njc5RTA0Q0YwRDdDQ0IwNjYyRTZCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/X/lXutjtYFwngmay2WAxeJhf /2ZJje5m2dqxjhRuMubYA92h+kHwGcMSNHzZhorKehAygTvxxCXdEGl4tzebi8yZ xFBeVqbiExF7WZiyVstTqL8KwfyrnBuOpwKk8jtP/Miz9BLLgOeaey1hEP0H7re6 frwF1XovQGUiH+P2v+XRrIXlb7ddGum8rymcSRW2gKts63QCMKti9C4meAg6BhHa BGQiMMVfIoNqrs64ywlEUjo1/Ev58XOinxIQq0brQhR45pRKhfRMClqLf605f3KH UQMoEgLvNGAYzRx9Dzgw8689YpqJKhOM/3RneEjFt3oxIslGvfJf8eqODpHPAgMB AAGjggH8MIIB+DAdBgNVHQ4EFgQUHN96MaqqdYdGeeBM8NfMsGYua54wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwNDQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwYAKgafgSEDBgAqCmBAuTANBgkqhkiG9w0BAQsF AAOCAQEABvvnsWUPXIQ0qHA4lbfOk0dzU02oIrJQ+agcxl+WKPCM31asX9hHgNzr CH/lYruxoEwj23zs84GsxeRVqBPPFwLhXdCOSdxXohqoaC41kCH1h/3MPrDICbeD zEuyZE+bjP1EEkP9i78huBzlyN4tVJghD1QqlQOWTu12UxgnrfxtvbV+hGkZGRx/ vtNxbn09pP3Clu1hqtkcO9HGY8CKWcSuEgk2Qgmsnl7jqGyp0L/TK0s66u0kLPUc ARYuCYVZABKxta1hdfhuxeFbXq+Ls3W5U1kdh9pAWM5O3jeqEMNbiaZu1PJAXdWx RIei3oqAlHRIQCK0+NzTuI8I+RX1DQ== -----END CERTIFICATE-----Generated at Sat Jul 5 04:03:26 2025 by rpki-client