$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200809.roa File: AS200809.roa (raw, json) Hash identifier: INKjRvdDP5MHBiRo8bh2SzZcaa2g4+K7NU+rJ8ApNrg= Subject key identifier: FA:3E:6B:75:7D:D3:48:C8:4A:CA:EF:16:2D:63:AF:E8:58:FD:3E:68 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 76D68A063BACEBEB0BF3233F299A0EE6B80FFD20 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200809.roa Signing time: Fri 04 Jul 2025 06:53:07 +0000 ROA not before: Fri 04 Jul 2025 06:48:07 +0000 ROA not after: Fri 03 Jul 2026 06:53:07 +0000 asID: 200809 IP address blocks: 2a0a:6040:2200::/40 maxlen: 48 2a0a:6040:2300::/40 maxlen: 48 2a0a:6040:6600::/40 maxlen: 48 2a0a:6040:8800::/40 maxlen: 48 2a0a:6040:a400::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d6:8a:06:3b:ac:eb:eb:0b:f3:23:3f:29:9a:0e:e6:b8:0f:fd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:07 2025 GMT Not After : Jul 3 06:53:07 2026 GMT Subject: CN=FA3E6B757DD348C84ACAEF162D63AFE858FD3E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:0f:e0:2a:a9:e2:4b:64:cc:8a:52:cd:33: eb:5b:f9:ee:66:1b:5e:2a:ff:ea:da:d2:1c:98:1f: e9:29:af:1f:d6:97:26:86:83:f2:e7:b1:6c:f8:d1: 64:59:2f:fc:d0:a8:5c:24:a2:0b:0f:de:f6:7f:24: 2e:c2:93:22:ef:56:ce:67:b4:11:ea:83:11:4f:de: 2b:05:37:93:dd:cf:d5:70:99:bb:1b:bd:da:66:dc: 5e:44:9b:09:1d:09:ed:27:08:4b:20:b5:5e:97:f2: 3e:5a:74:ea:68:54:65:35:66:11:b5:9a:f0:f9:8c: e9:9f:19:c0:b6:22:e9:3c:08:d0:bb:f4:e8:71:df: 72:c8:97:b5:03:58:ce:d0:a7:79:08:19:11:c6:b9: 3c:6a:b5:fa:37:a3:79:2d:d1:1e:bf:26:d8:aa:2a: af:92:ba:3d:b2:de:91:56:b9:a0:9e:dc:b3:8a:d6: 71:bc:59:82:64:4d:70:d8:fb:bf:04:6c:a8:26:ca: dc:be:da:76:44:09:4d:78:af:eb:ee:56:e3:93:00: 3d:5f:8f:db:6a:f1:f9:eb:01:ec:6b:97:8a:f8:af: 4a:3f:a8:bb:77:91:75:d1:73:21:33:e0:64:8b:bd: 64:4d:4e:93:3b:c1:b6:28:49:69:d4:e9:30:e6:3f: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3E:6B:75:7D:D3:48:C8:4A:CA:EF:16:2D:63:AF:E8:58:FD:3E:68 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200809.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:2200::/39 2a0a:6040:6600::/40 2a0a:6040:8800::/40 2a0a:6040:a400::/40 Signature Algorithm: sha256WithRSAEncryption ba:b2:f2:39:e5:e0:fb:06:f9:ea:6d:8c:f5:e0:56:f1:a2:e5: 8a:2f:fa:a3:38:ce:6a:0a:35:82:21:31:be:eb:31:11:5c:31: 62:27:0c:9a:b9:e3:11:d8:aa:f9:7e:51:f5:c8:93:21:06:ec: d1:c8:8c:c8:f8:be:10:b9:e7:45:0b:c2:b6:c7:18:e9:c5:77: d1:c5:9d:5c:1a:4a:23:4f:c9:ef:b5:f7:27:b4:fc:81:ee:80: 1b:97:a4:50:1f:86:50:cc:df:b8:c9:62:41:e5:bf:b0:cb:fc: 11:b1:cb:3d:a0:b0:a6:68:f5:ec:1d:1b:4a:0e:c1:f2:b8:0a: 34:84:75:fe:3a:74:e9:ba:fd:07:a8:50:7a:c9:fb:32:36:de: 6c:b3:1c:13:10:37:c7:fb:5d:98:0b:af:6c:8a:0e:f7:6b:30: fa:01:2c:f8:ea:26:e1:4c:8c:13:85:d3:74:f4:d5:d9:4b:df: db:09:4f:7e:96:8a:a6:2e:37:be:73:d2:e3:25:b9:3d:0c:0c: 61:90:b3:9c:21:ff:27:3e:8d:18:55:0c:7a:c1:d1:63:ad:f0: 10:d5:35:68:6e:5f:8c:a3:83:69:c6:b8:57:4d:a2:03:b3:75: 11:48:27:13:96:44:8b:b0:1f:17:5c:ed:08:05:90:84:ec:6f: ba:a9:a9:7c -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUdtaKBjus6+sL8yM/KZoO5rgP/SAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDdaFw0yNjA3MDMwNjUzMDdaMDMxMTAvBgNV BAMTKEZBM0U2Qjc1N0REMzQ4Qzg0QUNBRUYxNjJENjNBRkU4NThGRDNFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUg/gKqniS2TMilLNM+tb+e5m G14q/+ra0hyYH+kprx/WlyaGg/LnsWz40WRZL/zQqFwkogsP3vZ/JC7CkyLvVs5n tBHqgxFP3isFN5Pdz9Vwmbsbvdpm3F5EmwkdCe0nCEsgtV6X8j5adOpoVGU1ZhG1 mvD5jOmfGcC2Iuk8CNC79Ohx33LIl7UDWM7Qp3kIGRHGuTxqtfo3o3kt0R6/Jtiq Kq+Suj2y3pFWuaCe3LOK1nG8WYJkTXDY+78EbKgmyty+2nZECU14r+vuVuOTAD1f j9tq8fnrAexrl4r4r0o/qLt3kXXRcyEz4GSLvWRNTpM7wbYoSWnU6TDmP20jAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQU+j5rdX3TSMhKyu8WLWOv6Fj9PmgwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwODA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF BwEHAQH/BCowKDAmBAIAAjAgAwYBKgpgQCIDBgAqCmBAZgMGACoKYECIAwYAKgpg QKQwDQYJKoZIhvcNAQELBQADggEBALqy8jnl4PsG+eptjPXgVvGi5Yov+qM4zmoK NYIhMb7rMRFcMWInDJq54xHYqvl+UfXIkyEG7NHIjMj4vhC550ULwrbHGOnFd9HF nVwaSiNPye+19ye0/IHugBuXpFAfhlDM37jJYkHlv7DL/BGxyz2gsKZo9ewdG0oO wfK4CjSEdf46dOm6/QeoUHrJ+zI23myzHBMQN8f7XZgLr2yKDvdrMPoBLPjqJuFM jBOF03T01dlL39sJT36WiqYuN75z0uMluT0MDGGQs5wh/yc+jRhVDHrB0WOt8BDV NWhuX4yjg2nGuFdNogOzdRFIJxOWRIuwHxdc7QgFkITsb7qpqXw= -----END CERTIFICATE-----Generated at Sat Jul 5 03:43:14 2025 by rpki-client