$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200850.roa File: AS200850.roa (raw, json) Hash identifier: 3EGMUzg4LatzAMVv1E7q6mo6i63uKRHv/Pn6kmNt7Ow= Subject key identifier: E1:9B:9A:91:7A:65:6F:01:B7:B1:24:DE:BF:F1:6F:B0:C6:BD:04:06 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 215BBC04D9885F1DECCC4C7F7621CC4EBCDA6D12 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200850.roa Signing time: Fri 04 Jul 2025 06:53:25 +0000 ROA not before: Fri 04 Jul 2025 06:48:25 +0000 ROA not after: Fri 03 Jul 2026 06:53:25 +0000 asID: 200850 IP address blocks: 2a0a:6040:800::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5b:bc:04:d9:88:5f:1d:ec:cc:4c:7f:76:21:cc:4e:bc:da:6d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:25 2025 GMT Not After : Jul 3 06:53:25 2026 GMT Subject: CN=E19B9A917A656F01B7B124DEBFF16FB0C6BD0406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ef:7b:3a:4c:cf:da:01:5f:77:8d:88:da:1b: 3f:5f:e5:ea:24:91:b0:70:09:a5:6e:6e:cb:fc:93: ef:ee:2c:c3:7e:62:b0:88:7c:0f:22:c8:e1:7e:74: 27:74:a6:25:d6:ad:91:83:dc:4a:c3:48:33:7f:94: 80:ff:fb:af:12:69:48:63:e0:bd:a5:5a:67:f2:44: b0:e1:da:7e:3a:1c:ee:ce:74:2c:a3:5b:90:47:7d: f0:09:1f:7f:ff:85:cf:38:46:cc:e9:52:5f:75:59: ab:45:cf:37:37:bd:6d:1c:a2:a4:49:b0:dc:e0:7c: ad:44:75:86:c1:11:96:5a:ca:08:a3:8a:0c:03:b0: 5b:eb:4a:92:f9:83:1d:8e:fd:38:36:cb:71:58:cd: ed:b5:11:0e:46:5d:c8:c0:ed:88:ec:a0:b4:55:5a: 44:a0:d2:48:be:74:44:30:02:5f:49:18:5d:bf:c3: da:c3:63:cc:a1:30:e0:cd:fd:40:17:6a:5a:f5:44: db:1e:82:02:7d:94:53:ef:d0:79:ff:94:4b:84:48: b1:cd:18:3e:61:5e:24:04:67:bb:88:f4:c7:d2:cd: 7a:7e:74:d0:ad:ec:39:bf:ee:b8:0d:44:4f:b8:a3: a2:15:fb:20:82:1a:b2:3c:6c:41:19:51:19:20:19: cb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9B:9A:91:7A:65:6F:01:B7:B1:24:DE:BF:F1:6F:B0:C6:BD:04:06 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200850.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:800::/40 Signature Algorithm: sha256WithRSAEncryption 22:28:40:22:6b:a4:53:9c:ff:40:35:9b:8d:16:3d:1c:c2:f5: c8:c3:8b:3b:ce:4f:26:82:ca:6c:a5:47:0a:ef:f3:eb:81:9b: 25:d6:da:28:0d:87:27:e8:18:7a:eb:d3:1f:b0:c3:c0:bf:fc: 89:0d:eb:53:39:4d:dc:d7:d5:a0:34:68:f0:8d:f0:cf:0e:5a: f3:42:69:97:87:38:5a:ac:d5:77:38:5a:fe:2a:2c:50:43:1a: d4:18:c1:2d:5c:49:fe:49:31:da:5e:da:cc:27:d0:b0:e1:36: b1:ba:9d:a5:81:c4:61:1a:73:07:4b:6c:45:b8:19:ee:67:6c: dd:12:b3:d0:26:93:e0:d8:8d:ea:8f:ca:98:ff:d7:e7:e8:86: 20:08:da:29:27:44:e4:da:96:84:91:cf:12:9e:76:90:30:09: 25:1d:cb:97:a3:0c:9f:90:db:68:0c:6b:d7:b9:d8:10:38:2f: c2:51:6a:05:e9:d4:02:70:3c:7a:9c:80:90:90:5e:06:08:c4: 3c:42:32:f6:a3:27:bb:d2:2b:67:14:13:cd:5c:e7:64:72:35: bf:c7:7f:55:13:f0:1d:85:02:a4:1d:f5:2b:9e:f1:04:31:ad: 30:84:c5:c3:12:e0:1d:69:4e:41:65:32:cc:9c:46:24:48:d7: 93:5f:c8:7e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUIVu8BNmIXx3szEx/diHMTrzabRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjVaFw0yNjA3MDMwNjUzMjVaMDMxMTAvBgNV BAMTKEUxOUI5QTkxN0E2NTZGMDFCN0IxMjRERUJGRjE2RkIwQzZCRDA0MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY73s6TM/aAV93jYjaGz9f5eok kbBwCaVubsv8k+/uLMN+YrCIfA8iyOF+dCd0piXWrZGD3ErDSDN/lID/+68SaUhj 4L2lWmfyRLDh2n46HO7OdCyjW5BHffAJH3//hc84RszpUl91WatFzzc3vW0coqRJ sNzgfK1EdYbBEZZaygijigwDsFvrSpL5gx2O/Tg2y3FYze21EQ5GXcjA7YjsoLRV WkSg0ki+dEQwAl9JGF2/w9rDY8yhMODN/UAXalr1RNseggJ9lFPv0Hn/lEuESLHN GD5hXiQEZ7uI9MfSzXp+dNCt7Dm/7rgNRE+4o6IV+yCCGrI8bEEZURkgGcv5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU4ZuakXplbwG3sSTev/FvsMa9BAYwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwODUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQAgwDQYJKoZIhvcNAQELBQADggEBACIo QCJrpFOc/0A1m40WPRzC9cjDizvOTyaCymylRwrv8+uBmyXW2igNhyfoGHrr0x+w w8C//IkN61M5TdzX1aA0aPCN8M8OWvNCaZeHOFqs1Xc4Wv4qLFBDGtQYwS1cSf5J Mdpe2swn0LDhNrG6naWBxGEacwdLbEW4Ge5nbN0Ss9Amk+DYjeqPypj/1+fohiAI 2iknROTaloSRzxKedpAwCSUdy5ejDJ+Q22gMa9e52BA4L8JRagXp1AJwPHqcgJCQ XgYIxDxCMvajJ7vSK2cUE81c52RyNb/Hf1UT8B2FAqQd9Sue8QQxrTCExcMS4B1p TkFlMsycRiRI15NfyH4= -----END CERTIFICATE-----Generated at Sat Jul 5 03:58:47 2025 by rpki-client