$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200895.roa File: AS200895.roa (raw, json) Hash identifier: e0M5LqgN8QRq3nuwfa0GRo2zsiuT7X5b2WdgGVux0vk= Subject key identifier: BC:EB:6B:AE:F8:5D:36:6B:E5:D2:30:2C:5D:86:D6:27:57:BC:2D:FA Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 3E001AEDA229B1CA0BE4150D46B18F6AB12A220D Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200895.roa Signing time: Fri 04 Jul 2025 06:53:06 +0000 ROA not before: Fri 04 Jul 2025 06:48:06 +0000 ROA not after: Fri 03 Jul 2026 06:53:06 +0000 asID: 200895 IP address blocks: 2a0a:6040:d700::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:00:1a:ed:a2:29:b1:ca:0b:e4:15:0d:46:b1:8f:6a:b1:2a:22:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:06 2025 GMT Not After : Jul 3 06:53:06 2026 GMT Subject: CN=BCEB6BAEF85D366BE5D2302C5D86D62757BC2DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:48:ce:cb:ba:29:3b:8f:ee:d1:60:ed:a2:5d: f0:93:5f:ac:6d:77:8e:f6:d0:fe:cc:af:f5:49:5a: 22:fc:f5:3e:b7:c5:fc:76:3b:cd:09:d4:8c:16:2e: db:56:ed:f8:2e:05:fd:78:55:65:50:b3:c5:a5:01: 21:35:a1:e4:34:37:eb:15:40:3e:de:06:d5:68:d1: b1:fb:06:d3:b0:96:49:a1:16:89:9c:9e:7c:ac:a6: f4:b7:53:61:a1:a2:f7:97:66:67:b8:3b:42:6b:2a: 20:e5:d9:0e:29:ae:8a:cf:41:76:07:e5:8b:a4:10: 7f:15:ba:8e:f6:f7:b2:87:9d:94:76:76:30:83:74: f8:ce:16:fc:a9:11:32:d6:1f:48:85:a2:33:ee:38: 11:53:10:40:e6:82:5c:84:3b:f6:05:9e:52:95:f3: 8a:49:42:71:49:94:a2:f1:0d:0f:e2:18:b7:ea:e4: 8a:51:18:15:c0:f3:76:09:72:8d:1f:a1:2d:b0:ce: 06:44:93:c3:fe:db:0e:5b:9b:e8:b2:9f:65:4b:11: 2d:ab:54:54:6e:f7:6f:45:f6:22:97:9c:b6:9d:d8: c6:1b:f1:e1:56:b9:c2:3a:56:4f:d2:ca:be:57:7f: 90:79:d2:45:49:43:7f:7f:1f:80:d7:14:bf:08:1e: b4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EB:6B:AE:F8:5D:36:6B:E5:D2:30:2C:5D:86:D6:27:57:BC:2D:FA X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200895.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:d700::/40 Signature Algorithm: sha256WithRSAEncryption 91:2f:52:6c:8b:14:fa:35:95:cf:47:b3:a9:26:62:a8:fc:9e: bf:ec:f2:28:da:cb:66:a7:5c:f4:a9:5d:fb:b7:db:9a:b1:98: 5d:6c:c9:42:71:13:a3:b5:bc:86:78:84:3d:a2:ee:a6:85:3a: 12:e6:0b:b2:ec:b3:01:ed:65:bf:b1:ee:dc:e0:33:d5:80:0d: 3d:5d:8f:67:11:15:20:ac:f7:c1:62:66:c7:34:ea:0f:20:b2: e8:74:a2:4a:76:83:66:73:f2:14:9b:66:2f:3c:d3:98:46:12: e3:2a:e1:b6:85:b1:f0:d3:4f:d3:b8:2a:84:02:cf:f0:4a:28: 59:71:20:d0:cf:f7:ac:a1:3f:d1:aa:ce:ed:c6:de:50:07:17: c1:fb:d9:a7:7c:bb:32:fc:8c:33:61:02:c8:a0:c1:62:d9:cf: 2b:4a:05:c1:8b:13:f9:83:f7:bb:59:1e:62:e2:40:1e:52:21: 78:4f:09:04:6b:8a:5d:5b:d3:33:a7:8e:33:86:c6:aa:b4:6b: 06:04:5c:f8:cd:07:5c:57:49:7d:f4:bc:2f:13:91:f2:f3:ab: cb:77:29:2a:d2:cd:41:99:c5:b0:86:99:1e:44:aa:3d:d6:30: b1:dc:1d:5a:6a:bf:72:63:4a:9c:c5:4d:3c:d2:82:80:4b:1d: 51:cd:56:fe -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPgAa7aIpscoL5BUNRrGParEqIg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MDZaFw0yNjA3MDMwNjUzMDZaMDMxMTAvBgNV BAMTKEJDRUI2QkFFRjg1RDM2NkJFNUQyMzAyQzVEODZENjI3NTdCQzJERkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsSM7Luik7j+7RYO2iXfCTX6xt d4720P7Mr/VJWiL89T63xfx2O80J1IwWLttW7fguBf14VWVQs8WlASE1oeQ0N+sV QD7eBtVo0bH7BtOwlkmhFomcnnyspvS3U2GhoveXZme4O0JrKiDl2Q4prorPQXYH 5YukEH8Vuo7297KHnZR2djCDdPjOFvypETLWH0iFojPuOBFTEEDmglyEO/YFnlKV 84pJQnFJlKLxDQ/iGLfq5IpRGBXA83YJco0foS2wzgZEk8P+2w5bm+iyn2VLES2r VFRu929F9iKXnLad2MYb8eFWucI6Vk/Syr5Xf5B50kVJQ39/H4DXFL8IHrR7AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUvOtrrvhdNmvl0jAsXYbWJ1e8LfowHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwODk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQNcwDQYJKoZIhvcNAQELBQADggEBAJEv UmyLFPo1lc9Hs6kmYqj8nr/s8ijay2anXPSpXfu325qxmF1syUJxE6O1vIZ4hD2i 7qaFOhLmC7LsswHtZb+x7tzgM9WADT1dj2cRFSCs98FiZsc06g8gsuh0okp2g2Zz 8hSbZi8805hGEuMq4baFsfDTT9O4KoQCz/BKKFlxINDP96yhP9Gqzu3G3lAHF8H7 2ad8uzL8jDNhAsigwWLZzytKBcGLE/mD97tZHmLiQB5SIXhPCQRril1b0zOnjjOG xqq0awYEXPjNB1xXSX30vC8TkfLzq8t3KSrSzUGZxbCGmR5Eqj3WMLHcHVpqv3Jj SpzFTTzSgoBLHVHNVv4= -----END CERTIFICATE-----Generated at Sat Jul 5 03:54:49 2025 by rpki-client