$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200992.roa File: AS200992.roa (raw, json) Hash identifier: uCB2FVW+VokaHBjBJQKnvCxIX3z8wyO+RTEHQupC17Q= Subject key identifier: 4C:30:D6:CA:0F:2D:A7:6E:36:2B:DE:84:64:E3:FA:51:40:46:7B:89 Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 6579936E633A863C39FD10D1391630F3767A7E97 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200992.roa Signing time: Fri 04 Jul 2025 06:53:23 +0000 ROA not before: Fri 04 Jul 2025 06:48:23 +0000 ROA not after: Fri 03 Jul 2026 06:53:23 +0000 asID: 200992 IP address blocks: 2a0a:6040:f600::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 01:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:79:93:6e:63:3a:86:3c:39:fd:10:d1:39:16:30:f3:76:7a:7e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Jul 4 06:48:23 2025 GMT Not After : Jul 3 06:53:23 2026 GMT Subject: CN=4C30D6CA0F2DA76E362BDE8464E3FA5140467B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:96:29:2d:dd:4e:e5:67:8a:b4:27:c0:68:10: 8e:8b:01:4f:85:16:3b:dd:e7:fd:ca:e5:ce:65:6a: be:1a:b1:fd:34:27:9c:99:11:d2:40:58:54:cc:21: 5c:7c:ea:f3:f7:18:fc:f0:ef:89:4d:f8:ed:3c:b2: 6f:6e:f2:ba:68:66:8e:74:72:9a:6c:e8:49:c7:ec: 12:03:97:f1:7d:ba:a5:d6:b4:1a:4d:31:a1:4e:6b: b9:96:ef:6a:54:96:5e:61:1d:50:4a:66:69:a3:4e: 25:5f:05:c2:0c:d0:e4:dd:b4:bf:23:e5:3f:7b:a3: e5:e3:f8:f8:12:35:62:ae:ef:6d:8e:4b:2e:6e:30: a8:d4:25:6c:a5:3d:94:e3:f6:3c:c9:19:a6:aa:e5: 76:c9:32:28:01:c9:31:ee:4d:42:ab:61:c5:56:e8: e0:ad:80:62:f1:83:48:59:02:bf:fb:be:1f:67:88: 05:f8:d8:f1:bc:ac:1d:7c:ae:e5:50:18:c2:f5:e1: 0e:13:64:72:3a:bb:ef:18:35:e8:77:9f:b4:da:ba: e8:de:8b:53:4f:59:44:3d:95:27:3f:1e:cb:fa:67: f2:41:8e:61:aa:bb:7f:40:f8:b5:40:48:6b:16:7e: 6f:34:bf:8a:b2:3d:ab:a5:64:0a:64:d4:09:c1:4b: 34:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:30:D6:CA:0F:2D:A7:6E:36:2B:DE:84:64:E3:FA:51:40:46:7B:89 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/AS200992.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:f600::/40 Signature Algorithm: sha256WithRSAEncryption bd:51:67:39:4f:33:fd:b6:a0:02:7b:f5:87:86:8a:a2:a8:80: 00:af:02:be:df:db:96:ca:c2:d7:ac:fe:d9:40:3f:88:cd:70: 8c:6d:55:ef:a5:f8:37:4b:ce:7e:74:17:71:84:53:e5:b6:bd: 86:cc:6c:21:70:f5:fe:79:3d:f1:21:76:f8:98:f0:30:09:f1: 02:0a:2d:68:0f:62:4f:76:5e:2d:ec:c9:42:74:44:1e:02:46: 66:ff:b3:4d:0b:9f:5f:b1:a0:71:40:de:fe:7e:a1:9b:36:2e: 09:49:56:57:b9:ab:9d:33:13:15:28:2e:12:5e:b9:e9:92:6c: b0:10:21:91:e1:93:bf:94:92:e8:54:4f:fe:d5:a8:96:69:40: 42:60:09:d8:15:95:10:4c:44:45:a4:26:e2:a2:57:e4:ba:3d: 53:29:88:52:de:99:88:59:88:ce:b7:de:3b:6a:c6:be:b3:77: 04:b0:ac:7b:88:2f:ef:38:c2:56:09:81:cc:84:5d:ed:1d:dc: 1d:28:67:57:68:de:85:ea:1d:31:4f:82:0d:06:a4:9d:ef:86: c2:b3:97:0f:c0:d4:c9:2c:94:5f:23:a0:f1:a5:b4:da:0f:ff: 8f:e6:d8:e8:94:fe:76:a6:ee:17:91:d8:09:aa:3b:18:84:a6: bd:40:0e:b7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUZXmTbmM6hjw5/RDRORYw83Z6fpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTA3MDQwNjQ4MjNaFw0yNjA3MDMwNjUzMjNaMDMxMTAvBgNV BAMTKDRDMzBENkNBMEYyREE3NkUzNjJCREU4NDY0RTNGQTUxNDA0NjdCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlikt3U7lZ4q0J8BoEI6LAU+F Fjvd5/3K5c5lar4asf00J5yZEdJAWFTMIVx86vP3GPzw74lN+O08sm9u8rpoZo50 cpps6EnH7BIDl/F9uqXWtBpNMaFOa7mW72pUll5hHVBKZmmjTiVfBcIM0OTdtL8j 5T97o+Xj+PgSNWKu722OSy5uMKjUJWylPZTj9jzJGaaq5XbJMigByTHuTUKrYcVW 6OCtgGLxg0hZAr/7vh9niAX42PG8rB18ruVQGML14Q4TZHI6u+8YNeh3n7Tauuje i1NPWUQ9lSc/Hsv6Z/JBjmGqu39A+LVASGsWfm80v4qyPaulZApk1AnBSzTDAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUTDDWyg8tp242K96EZOP6UUBGe4kwHwYDVR0j BBgwFoAUj8PPtd8+j3IcCLi1/n9h1nsL4TswDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzQvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzcvOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3 RjYxRDY3QjBCRTEzQi5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80 L0FTMjAwOTkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQPYwDQYJKoZIhvcNAQELBQADggEBAL1R ZzlPM/22oAJ79YeGiqKogACvAr7f25bKwtes/tlAP4jNcIxtVe+l+DdLzn50F3GE U+W2vYbMbCFw9f55PfEhdviY8DAJ8QIKLWgPYk92Xi3syUJ0RB4CRmb/s00Ln1+x oHFA3v5+oZs2LglJVle5q50zExUoLhJeuemSbLAQIZHhk7+UkuhUT/7VqJZpQEJg CdgVlRBMREWkJuKiV+S6PVMpiFLemYhZiM633jtqxr6zdwSwrHuIL+84wlYJgcyE Xe0d3B0oZ1do3oXqHTFPgg0GpJ3vhsKzlw/A1MkslF8joPGltNoP/4/m2OiU/nam 7heR2AmqOxiEpr1ADrc= -----END CERTIFICATE-----Generated at Sat Jul 5 04:04:18 2025 by rpki-client