
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200592.roa
File: AS200592.roa (raw, json)
Hash identifier: g5jmZFeq8KkJDy6bl9WKfupgzdAd5TQxx1N0Xzb5wlc=
Subject key identifier: 90:AD:CA:00:6A:F3:AB:4D:DF:1A:39:7B:58:A2:17:0A:6E:80:93:9C
Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Certificate serial: 18DDAAC9F98CFC47AB5BC66CB1EFDD647A96F44B
Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200592.roa
Signing time: Fri 05 Jun 2026 07:12:23 +0000
ROA not before: Fri 05 Jun 2026 07:07:23 +0000
ROA not after: Fri 04 Jun 2027 07:12:23 +0000
asID: 200592
IP address blocks: 2a0a:6040:d300::/40 maxlen: 48
Validation: OK
Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:dd:aa:c9:f9:8c:fc:47:ab:5b:c6:6c:b1:ef:dd:64:7a:96:f4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B
Validity
Not Before: Jun 5 07:07:23 2026 GMT
Not After : Jun 4 07:12:23 2027 GMT
Subject: CN=90ADCA006AF3AB4DDF1A397B58A2170A6E80939C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:d5:9c:82:0a:48:1d:5d:e0:6f:16:b8:63:
d4:0f:14:ed:6d:62:e4:21:43:f6:bf:5d:4c:47:5c:
bd:1c:7a:16:41:b3:6b:5b:c7:59:fc:3b:7b:ba:64:
23:94:d2:27:8a:89:d1:9b:71:ae:36:a3:29:8f:33:
00:91:26:da:0c:a5:20:41:07:80:ec:6c:8d:b2:cf:
3d:60:a1:e9:16:a4:db:92:e8:6f:b4:6d:3c:5e:61:
7c:96:02:06:df:fa:ee:90:48:38:a2:76:38:60:9e:
fb:17:ea:9f:42:e9:98:81:b2:1d:82:7d:91:bd:e5:
3b:4f:4a:fb:fd:9e:2f:81:d9:e3:10:38:2f:16:83:
b3:a4:33:e9:15:5b:55:05:bf:55:84:4b:aa:3d:4c:
c8:ac:5b:63:34:f8:c5:ee:81:c9:fa:bb:03:6b:2c:
33:d9:b4:89:a4:d6:76:4b:20:5f:c8:08:ed:c9:6c:
96:f3:14:5b:35:8c:06:e0:38:e0:96:ee:2a:7b:d6:
d0:39:45:13:f5:61:96:78:6b:e9:2c:43:e4:a6:c6:
18:e1:b4:5f:09:e3:88:39:07:67:9e:53:ab:04:20:
f9:9e:96:a9:4e:48:5a:ce:fb:21:0e:4b:d8:e5:45:
ab:d5:c5:ec:94:58:09:9f:ec:6e:f3:f5:02:f5:0b:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AD:CA:00:6A:F3:AB:4D:DF:1A:39:7B:58:A2:17:0A:6E:80:93:9C
X509v3 Authority Key Identifier:
keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
Subject Information Access:
Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6040:d300::/40
Signature Algorithm: sha256WithRSAEncryption
d4:ef:cd:4b:41:31:aa:a0:61:b5:e4:a2:f9:bb:53:59:00:36:
0d:54:8c:60:ff:bc:05:99:47:51:58:c2:cf:d3:d1:00:a3:b8:
c6:62:9f:7a:9b:33:a4:12:7c:6b:93:a3:f0:a1:1c:44:28:9f:
29:99:03:d0:60:68:28:f0:30:99:ab:84:50:c5:4d:f0:8a:81:
22:84:f0:0d:95:e1:54:5d:d2:6e:6d:d7:8b:1b:3f:b0:bc:f2:
7d:0d:b7:da:c5:91:1c:f4:47:2f:b8:56:34:c2:1f:ce:5f:20:
d6:21:c3:fa:9d:53:01:b7:99:fd:b7:cc:f3:e0:70:7a:19:7a:
26:d6:36:f6:d4:25:72:f1:9a:4c:c0:9a:f1:ea:45:1d:33:ae:
dc:80:96:f1:0b:4d:9a:9b:e9:3e:92:c5:9a:14:89:14:a9:d7:
7e:89:7b:2e:43:dc:20:e8:ee:84:b8:0e:eb:9c:2b:5e:31:41:
3c:4d:47:92:ae:1d:5a:c6:9e:d7:03:12:3f:cd:6e:a4:23:01:
89:14:35:2f:66:65:ae:73:ad:21:4a:5a:8e:f1:66:de:23:9d:
f3:7d:f3:69:c5:2e:87:0b:94:0d:ce:01:2d:e9:15:e3:fe:ad:
3f:3b:a5:8f:0f:03:0c:80:f6:7f:b3:bf:3a:2c:10:3b:13:70:
ba:c2:b1:0a
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUGN2qyfmM/EerW8Zsse/dZHqW9EswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQjAeFw0yNjA2MDUwNzA3MjNaFw0yNzA2MDQwNzEyMjNaMDMxMTAvBgNV
BAMTKDkwQURDQTAwNkFGM0FCNERERjFBMzk3QjU4QTIxNzBBNkU4MDkzOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCdWcggpIHV3gbxa4Y9QPFO1t
YuQhQ/a/XUxHXL0cehZBs2tbx1n8O3u6ZCOU0ieKidGbca42oymPMwCRJtoMpSBB
B4DsbI2yzz1goekWpNuS6G+0bTxeYXyWAgbf+u6QSDiidjhgnvsX6p9C6ZiBsh2C
fZG95TtPSvv9ni+B2eMQOC8Wg7OkM+kVW1UFv1WES6o9TMisW2M0+MXugcn6uwNr
LDPZtImk1nZLIF/ICO3JbJbzFFs1jAbgOOCW7ip71tA5RRP1YZZ4a+ksQ+Smxhjh
tF8J44g5B2eeU6sEIPmelqlOSFrO+yEOS9jlRavVxeyUWAmf7G7z9QL1C8sRAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUkK3KAGrzq03fGjl7WKIXCm6Ak5wwHwYDVR0j
BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3
QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3
RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80
L0FTMjAwNTkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNMwDQYJKoZIhvcNAQELBQADggEBANTv
zUtBMaqgYbXkovm7U1kANg1UjGD/vAWZR1FYws/T0QCjuMZin3qbM6QSfGuTo/Ch
HEQonymZA9BgaCjwMJmrhFDFTfCKgSKE8A2V4VRd0m5t14sbP7C88n0Nt9rFkRz0
Ry+4VjTCH85fINYhw/qdUwG3mf23zPPgcHoZeibWNvbUJXLxmkzAmvHqRR0zrtyA
lvELTZqb6T6SxZoUiRSp136Jey5D3CDo7oS4DuucK14xQTxNR5KuHVrGntcDEj/N
bqQjAYkUNS9mZa5zrSFKWo7xZt4jnfN982nFLocLlA3OAS3pFeP+rT87pY8PAwyA
9n+zvzosEDsTcLrCsQo=
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:24 2026 by rpki-client