$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200545.roa File: AS200545.roa (raw, json) Hash identifier: sbghfSOftSvDlIZ8+d1PqnJ0DVQk1ZqJlKgHoL3nghE= Subject key identifier: 9C:68:7E:9C:3B:3F:AE:9B:71:78:D5:87:A8:D5:01:C3:18:66:D6:5E Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 355100175A282A11C3D3996619B765D8BF6641B1 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200545.roa Signing time: Fri 04 Jul 2025 06:53:06 +0000 ROA not before: Fri 04 Jul 2025 06:48:06 +0000 ROA not after: Fri 03 Jul 2026 06:53:06 +0000 asID: 200545 IP address blocks: 2a0a:6040:e900::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:51:00:17:5a:28:2a:11:c3:d3:99:66:19:b7:65:d8:bf:66:41:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:06 2025 GMT Not After : Jul 3 06:53:06 2026 GMT Subject: CN=9C687E9C3B3FAE9B7178D587A8D501C31866D65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:6f:a2:2a:df:fd:79:b9:f8:ee:e0:64:4d: f1:5d:03:e4:53:25:8c:ce:a9:ca:a7:41:66:19:c7: 52:51:15:1e:4f:9b:8d:f2:a4:38:6d:a5:83:95:f7: c4:60:54:66:eb:76:df:f3:77:f2:10:97:56:f4:c8: a4:57:ac:ca:db:3b:02:97:c6:43:a3:2a:74:54:ee: 2b:75:69:cf:6f:9d:ec:32:eb:8a:46:0d:41:50:5a: 7d:da:6c:2c:93:85:21:0a:9d:0f:55:02:1f:cc:6e: 4e:2b:4b:38:3d:23:aa:d2:8f:92:8b:92:ec:67:d7: 45:50:5a:6d:12:de:96:70:3d:53:e1:fd:49:b2:fd: d7:11:f5:cd:13:95:4b:65:5b:73:63:38:6d:e5:70: d4:08:60:d2:86:c3:e8:86:5f:9f:66:f1:27:c1:aa: 5c:4d:54:99:39:51:e3:bc:2c:63:9a:e6:a9:67:76: d3:80:48:5b:89:13:65:06:10:9f:50:c8:49:c8:a8: 86:58:e6:01:73:57:68:92:36:1d:bb:b9:f8:3e:e3: 26:1e:10:0f:f5:27:f3:c8:2d:1a:fe:78:a8:06:05: 89:b5:64:7c:54:96:0d:ad:ee:88:5b:c2:08:99:3d: 97:0e:08:d8:41:58:f8:41:31:6f:29:1e:1e:64:4e: 2f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:68:7E:9C:3B:3F:AE:9B:71:78:D5:87:A8:D5:01:C3:18:66:D6:5E X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200545.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:e900::/40 Signature Algorithm: sha256WithRSAEncryption 54:d5:7f:c5:74:da:7d:ec:b1:97:b8:81:49:26:c5:cd:8e:1d: 6a:5d:61:10:7e:9f:cc:7a:37:f3:f1:c3:93:1f:9d:b9:ca:44: 89:df:5e:f3:60:d7:74:90:7d:4a:19:cc:b8:85:a6:13:42:93: b8:2b:27:40:7a:cb:bb:93:fe:56:e5:e5:c2:bf:e9:e7:93:93: 16:91:4e:d7:12:96:2c:e2:2f:b2:23:24:77:b4:9a:ec:d2:cb: 41:11:94:47:3a:49:1c:ed:93:98:cf:5e:b8:f1:b6:eb:9a:73: 76:fc:60:b2:bc:d5:7f:70:f9:b3:35:01:ba:b9:98:e7:dd:d7: a5:c0:0c:ca:34:ca:26:37:8c:58:14:19:81:85:d3:37:a1:94: ad:e3:6d:60:ee:28:e2:0f:a9:7c:4a:22:de:64:f1:c6:b2:a9: 07:0a:36:dd:0a:7e:65:a8:13:65:4f:76:4d:f7:8d:bf:c7:fc: 39:af:5c:c6:eb:86:88:b1:80:fd:88:2c:f9:3d:81:a7:39:27: 5e:0b:1b:1c:79:ad:df:7e:7e:df:7c:8c:2f:fe:4e:8f:78:b8: 28:ba:28:a4:3a:d3:88:ac:99:72:a0:9c:d2:e5:ae:10:8d:29: 3d:9a:1d:10:3d:20:59:08:85:5a:b2:25:16:28:1e:74:e6:ce: c9:f7:ff:e2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUNVEAF1ooKhHD05lmGbdl2L9mQbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDZaFw0yNjA3MDMwNjUzMDZaMDMxMTAvBgNV BAMTKDlDNjg3RTlDM0IzRkFFOUI3MTc4RDU4N0E4RDUwMUMzMTg2NkQ2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGG+iKt/9ebn47uBkTfFdA+RT JYzOqcqnQWYZx1JRFR5Pm43ypDhtpYOV98RgVGbrdt/zd/IQl1b0yKRXrMrbOwKX xkOjKnRU7it1ac9vnewy64pGDUFQWn3abCyThSEKnQ9VAh/Mbk4rSzg9I6rSj5KL kuxn10VQWm0S3pZwPVPh/Umy/dcR9c0TlUtlW3NjOG3lcNQIYNKGw+iGX59m8SfB qlxNVJk5UeO8LGOa5qlndtOASFuJE2UGEJ9QyEnIqIZY5gFzV2iSNh27ufg+4yYe EA/1J/PILRr+eKgGBYm1ZHxUlg2t7ohbwgiZPZcOCNhBWPhBMW8pHh5kTi+/AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUnGh+nDs/rptxeNWHqNUBwxhm1l4wHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwNTQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQOkwDQYJKoZIhvcNAQELBQADggEBAFTV f8V02n3ssZe4gUkmxc2OHWpdYRB+n8x6N/Pxw5MfnbnKRInfXvNg13SQfUoZzLiF phNCk7grJ0B6y7uT/lbl5cK/6eeTkxaRTtcSliziL7IjJHe0muzSy0ERlEc6SRzt k5jPXrjxtuuac3b8YLK81X9w+bM1Abq5mOfd16XADMo0yiY3jFgUGYGF0zehlK3j bWDuKOIPqXxKIt5k8cayqQcKNt0KfmWoE2VPdk33jb/H/DmvXMbrhoixgP2ILPk9 gac5J14LGxx5rd9+ft98jC/+To94uCi6KKQ604ismXKgnNLlrhCNKT2aHRA9IFkI hVqyJRYoHnTmzsn3/+I= -----END CERTIFICATE-----Generated at Sat Jul 5 03:53:41 2025 by rpki-client