$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200782.roa File: AS200782.roa (raw, json) Hash identifier: FcBztAQ6IqyzKeobeGA911KaWGeYnaTeiPXGzGeT7m4= Subject key identifier: C7:BD:1F:1C:74:4E:41:99:F2:CD:02:2E:9F:A9:70:B6:8E:9E:18:70 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 3F6B8769A46FA0673D8F5064612213425EB7F139 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200782.roa Signing time: Fri 04 Jul 2025 06:53:01 +0000 ROA not before: Fri 04 Jul 2025 06:48:01 +0000 ROA not after: Fri 03 Jul 2026 06:53:01 +0000 asID: 200782 IP address blocks: 2a0a:6040:ce00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6b:87:69:a4:6f:a0:67:3d:8f:50:64:61:22:13:42:5e:b7:f1:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:01 2025 GMT Not After : Jul 3 06:53:01 2026 GMT Subject: CN=C7BD1F1C744E4199F2CD022E9FA970B68E9E1870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:20:6c:5e:51:ba:bf:08:51:0d:df:d9:d2: e4:45:ae:3f:49:1b:49:8b:dc:29:6c:f5:fb:8c:e8: 15:37:b7:55:8b:9b:54:dc:d5:b7:90:71:ff:a9:c1: 2a:70:f2:cf:07:52:66:bb:78:bf:11:e0:93:a2:cb: 0f:24:11:4b:97:f9:38:81:20:d5:7a:87:f2:a4:4f: 16:b1:23:ae:4a:34:99:70:83:77:59:99:f3:fc:1a: 8e:d4:41:df:b6:e0:c7:3c:32:bb:61:ef:4f:4a:bb: 9d:9d:6c:4c:b4:96:5f:b0:a8:e2:3e:56:01:24:9f: 37:ba:05:40:6a:fa:dd:9b:49:73:b3:f8:ab:87:ea: a3:cc:f6:1c:40:5f:10:16:00:2f:9c:1a:a1:cc:f6: 98:1e:8b:0e:a4:a0:51:c7:0b:92:28:6f:a9:27:82: 49:68:1b:73:52:d0:67:de:d6:27:6c:c0:61:98:0b: 5c:4a:51:b1:ff:85:8a:ff:c4:85:92:ee:67:5e:1a: e1:6b:83:9b:58:87:ac:6b:70:ec:da:48:a1:53:90: 00:90:09:22:0f:eb:fb:58:fb:04:e0:1b:b7:c7:b0: e9:77:ac:a1:e9:4d:58:e6:1d:28:b4:bb:77:ed:c0: e3:cc:f6:b4:e8:e6:1a:0c:e6:f3:94:ef:63:87:a9: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BD:1F:1C:74:4E:41:99:F2:CD:02:2E:9F:A9:70:B6:8E:9E:18:70 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200782.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:ce00::/40 Signature Algorithm: sha256WithRSAEncryption e2:05:a1:64:44:2e:2e:1c:be:8c:cd:46:e0:be:fd:0b:d4:22: a9:6f:71:d9:2c:3a:ba:ce:2a:16:13:fc:5d:f7:13:13:11:88: b9:7f:07:60:8a:c1:5c:58:e2:af:8d:80:38:96:e8:b8:79:84: ca:56:e6:ff:c3:ce:a4:36:04:a6:3a:01:d9:9d:f3:d8:1f:1b: 58:27:ee:3c:d4:c5:23:a6:ca:bb:16:26:47:8c:0f:9d:fa:bc: 0d:a2:e1:65:9a:be:ae:25:16:c4:76:d0:17:54:e0:81:1f:c6: 3e:c7:84:ef:55:a9:0e:94:1b:4d:60:12:0e:a9:b9:ab:20:1a: 14:6b:5d:48:82:0e:e2:b7:71:93:36:bb:96:a9:c4:b9:e1:e5: 64:e8:09:98:3e:d2:ca:69:28:32:9c:dd:50:10:ab:78:a2:a2: 8d:b5:44:49:ca:c5:98:35:47:0f:20:a2:a2:8f:16:1c:ca:a7: f1:a2:ab:ef:80:69:b5:dc:2e:13:bb:df:ba:f1:86:70:f8:be: 60:b1:06:a1:12:26:b4:bf:25:82:62:46:18:82:ec:79:dd:db: bf:3f:b1:7f:c6:9e:58:48:8f:4e:d5:f0:3c:01:7d:82:d7:9c: 69:db:d0:35:ad:dd:c0:14:f5:f4:94:3d:49:19:3a:d1:72:d3: 7f:fa:1f:a6 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUP2uHaaRvoGc9j1BkYSITQl638TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDFaFw0yNjA3MDMwNjUzMDFaMDMxMTAvBgNV BAMTKEM3QkQxRjFDNzQ0RTQxOTlGMkNEMDIyRTlGQTk3MEI2OEU5RTE4NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/SBsXlG6vwhRDd/Z0uRFrj9J G0mL3Cls9fuM6BU3t1WLm1Tc1beQcf+pwSpw8s8HUma7eL8R4JOiyw8kEUuX+TiB INV6h/KkTxaxI65KNJlwg3dZmfP8Go7UQd+24Mc8Mrth709Ku52dbEy0ll+wqOI+ VgEknze6BUBq+t2bSXOz+KuH6qPM9hxAXxAWAC+cGqHM9pgeiw6koFHHC5Iob6kn gkloG3NS0Gfe1idswGGYC1xKUbH/hYr/xIWS7mdeGuFrg5tYh6xrcOzaSKFTkACQ CSIP6/tY+wTgG7fHsOl3rKHpTVjmHSi0u3ftwOPM9rTo5hoM5vOU72OHqWX7AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUx70fHHROQZnyzQIun6lwto6eGHAwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwNzgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQM4wDQYJKoZIhvcNAQELBQADggEBAOIF oWRELi4cvozNRuC+/QvUIqlvcdksOrrOKhYT/F33ExMRiLl/B2CKwVxY4q+NgDiW 6Lh5hMpW5v/DzqQ2BKY6Admd89gfG1gn7jzUxSOmyrsWJkeMD536vA2i4WWavq4l FsR20BdU4IEfxj7HhO9VqQ6UG01gEg6puasgGhRrXUiCDuK3cZM2u5apxLnh5WTo CZg+0sppKDKc3VAQq3iioo21REnKxZg1Rw8goqKPFhzKp/Giq++AabXcLhO737rx hnD4vmCxBqESJrS/JYJiRhiC7Hnd278/sX/GnlhIj07V8DwBfYLXnGnb0DWt3cAU 9fSUPUkZOtFy03/6H6Y= -----END CERTIFICATE-----Generated at Sat Jul 5 04:07:47 2025 by rpki-client