$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200879.roa File: AS200879.roa (raw, json) Hash identifier: /lUtim/VL5cr52p88VO7CdND3w38mioF33H4UrIpH9o= Subject key identifier: 86:15:60:1F:ED:45:E8:64:3A:2C:A9:CD:8C:42:2E:3D:2F:B1:7C:19 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 5A0A71B181FF520B93972C8343E6B4809607176A Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200879.roa Signing time: Fri 04 Jul 2025 06:53:01 +0000 ROA not before: Fri 04 Jul 2025 06:48:01 +0000 ROA not after: Fri 03 Jul 2026 06:53:01 +0000 asID: 200879 IP address blocks: 2a0a:6040:f200::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0a:71:b1:81:ff:52:0b:93:97:2c:83:43:e6:b4:80:96:07:17:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:01 2025 GMT Not After : Jul 3 06:53:01 2026 GMT Subject: CN=8615601FED45E8643A2CA9CD8C422E3D2FB17C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:5a:af:bf:58:bd:ae:88:e2:be:b6:d8:88: f6:ac:cb:a4:1b:c2:aa:70:7b:bd:3b:07:c9:e8:7a: b3:7f:ab:f0:33:72:0e:66:c9:8d:85:ec:53:29:e1: 44:97:33:a4:ca:1e:9e:db:18:fc:ab:35:09:13:2f: 55:4d:42:a6:10:9f:73:f0:fa:32:45:a4:2d:eb:1c: 0b:20:3d:c7:61:f9:6c:01:77:d2:2b:08:8b:92:ca: 2c:5c:c0:03:7f:b1:72:f6:06:cb:08:66:32:d5:a7: 53:f8:6c:c3:cb:5e:84:5b:15:9a:ff:e2:60:80:c6: 4c:53:d1:42:0c:28:e5:e2:68:f1:ab:53:5a:1b:5e: b7:ec:33:a5:1b:ce:8c:1d:1f:6b:76:04:17:c2:bf: be:76:ed:05:ba:81:b6:38:9f:03:76:15:e6:15:49: ea:9b:59:50:d6:84:72:1a:3c:5e:b5:97:c6:ce:f1: f3:e3:db:23:df:ec:bb:fa:92:be:18:15:d7:7d:45: 2d:48:9f:56:e4:98:de:34:e6:d9:6a:cb:88:1a:7f: 80:f0:19:5e:9d:85:7e:55:27:d1:91:9b:5d:26:7d: 07:a2:09:35:1a:f5:61:0a:c1:dc:9a:f4:9d:1b:07: 14:a1:8c:0d:15:3b:d8:c3:0e:8f:28:28:4a:12:4d: b8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:15:60:1F:ED:45:E8:64:3A:2C:A9:CD:8C:42:2E:3D:2F:B1:7C:19 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200879.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:f200::/40 Signature Algorithm: sha256WithRSAEncryption 1b:8b:8d:01:29:b1:bd:2e:67:f1:3e:d8:02:c4:b8:86:60:17: 75:f2:10:cf:9d:dd:b6:08:a2:a1:18:dc:b3:a5:dc:9d:bf:56: 71:25:84:0b:a7:87:fa:b7:28:5e:a4:45:64:10:17:3d:00:68: f8:64:22:8d:c5:6d:be:0c:ac:b6:19:39:7a:b3:55:16:96:da: 22:64:6b:97:c2:2c:61:cc:65:70:f5:38:84:87:1b:1b:8b:01: f0:e3:0f:dd:b0:5e:5a:e0:83:94:6e:1f:1c:f2:f4:00:f2:6c: ab:30:07:77:05:f7:2e:97:ca:dd:b6:c4:78:65:90:60:a6:14: 8a:9c:c4:f1:0f:d9:1a:23:78:7f:c3:81:f0:6d:f8:5a:6a:8e: d3:5d:05:7f:d8:7f:e1:7a:ba:7b:8e:26:6c:f0:ae:a5:35:94: a3:bc:fd:b0:f3:48:34:f7:a9:1c:ea:6d:c8:48:72:d7:85:8b: 89:da:c3:68:e8:34:2b:58:75:80:c2:da:0b:2f:42:4a:43:c6: 50:ea:8e:18:dc:04:ea:bf:ed:e2:cf:37:ad:68:2b:67:41:04: e9:1a:b7:81:92:ab:2c:e6:81:5d:c5:5a:ad:c1:04:95:e2:a8: 03:78:57:75:55:a3:7c:a0:b0:34:23:8b:5b:b6:3b:5d:36:bf: 97:15:ab:61 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWgpxsYH/UguTlyyDQ+a0gJYHF2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDFaFw0yNjA3MDMwNjUzMDFaMDMxMTAvBgNV BAMTKDg2MTU2MDFGRUQ0NUU4NjQzQTJDQTlDRDhDNDIyRTNEMkZCMTdDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprlqvv1i9rojivrbYiPasy6Qb wqpwe707B8noerN/q/Azcg5myY2F7FMp4USXM6TKHp7bGPyrNQkTL1VNQqYQn3Pw +jJFpC3rHAsgPcdh+WwBd9IrCIuSyixcwAN/sXL2BssIZjLVp1P4bMPLXoRbFZr/ 4mCAxkxT0UIMKOXiaPGrU1obXrfsM6UbzowdH2t2BBfCv7527QW6gbY4nwN2FeYV SeqbWVDWhHIaPF61l8bO8fPj2yPf7Lv6kr4YFdd9RS1In1bkmN405tlqy4gaf4Dw GV6dhX5VJ9GRm10mfQeiCTUa9WEKwdya9J0bBxShjA0VO9jDDo8oKEoSTbj7AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUhhVgH+1F6GQ6LKnNjEIuPS+xfBkwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwODc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQPIwDQYJKoZIhvcNAQELBQADggEBABuL jQEpsb0uZ/E+2ALEuIZgF3XyEM+d3bYIoqEY3LOl3J2/VnElhAunh/q3KF6kRWQQ Fz0AaPhkIo3Fbb4MrLYZOXqzVRaW2iJka5fCLGHMZXD1OISHGxuLAfDjD92wXlrg g5RuHxzy9ADybKswB3cF9y6Xyt22xHhlkGCmFIqcxPEP2RojeH/DgfBt+FpqjtNd BX/Yf+F6unuOJmzwrqU1lKO8/bDzSDT3qRzqbchIcteFi4naw2joNCtYdYDC2gsv QkpDxlDqjhjcBOq/7eLPN61oK2dBBOkat4GSqyzmgV3FWq3BBJXiqAN4V3VVo3yg sDQji1u2O102v5cVq2E= -----END CERTIFICATE-----Generated at Sat Jul 5 03:49:02 2025 by rpki-client