$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa File: AS5065.roa (raw, json) Hash identifier: 7QAQNlIJGDbv8miZxdLBqsjE7IS5R+HZfZtmotWhaos= Subject key identifier: 8D:06:65:A4:33:37:06:47:43:5D:5F:32:29:5A:2E:F1:5C:56:17:31 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7C0A661A1EFA3DE21AD6508749F8602D14D0D4C8 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa Signing time: Thu 30 Oct 2025 16:45:56 +0000 ROA not before: Thu 30 Oct 2025 16:40:56 +0000 ROA not after: Thu 29 Oct 2026 16:45:56 +0000 asID: 5065 IP address blocks: 104.234.121.0/24 maxlen: 24 104.234.164.0/24 maxlen: 24 104.234.185.0/24 maxlen: 24 104.234.218.0/24 maxlen: 24 104.234.221.0/24 maxlen: 24 104.234.248.0/24 maxlen: 24 104.234.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:0a:66:1a:1e:fa:3d:e2:1a:d6:50:87:49:f8:60:2d:14:d0:d4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 30 16:40:56 2025 GMT Not After : Oct 29 16:45:56 2026 GMT Subject: CN=8D0665A433370647435D5F32295A2EF15C561731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:06:67:9d:ba:63:47:78:b5:b3:72:03:64:a4: 1f:48:59:b7:c7:96:8e:ac:41:76:a7:25:0c:c0:3b: e6:ed:cf:a6:9b:d0:d7:6c:0d:ad:84:95:18:ae:0f: 4e:53:a4:84:ed:76:e1:be:29:48:c5:db:6e:7a:09: c8:38:3d:11:a4:4f:02:92:83:d4:81:af:aa:cd:4e: 83:00:36:f6:5a:57:40:fa:b4:30:26:ec:99:fb:93: 8b:29:f9:6b:5e:9d:08:f3:6f:f0:85:bf:2a:47:a5: b4:56:d7:12:87:69:9e:51:29:27:f7:03:99:8c:44: ef:2d:6a:8a:dc:f1:b8:8c:07:4a:56:53:01:b6:c8: 50:83:ae:c7:d6:2c:2d:4c:0c:69:35:98:0e:ab:92: 90:0f:20:0b:91:58:6c:d0:ed:b0:0d:19:1a:f2:2a: e6:8b:3f:7d:c9:ea:48:31:98:1b:4c:7b:13:fa:ad: 69:ef:59:97:87:f3:9a:68:42:92:fa:d6:b6:c9:cd: f4:cf:f3:e9:d0:96:3f:80:9d:95:00:82:d7:95:89: 4e:95:2d:9b:d2:b9:a8:fb:14:64:23:85:73:d5:be: cc:0a:da:7c:c3:a6:87:03:a6:ed:d2:e4:36:ab:c6: 41:e9:a4:64:49:06:fc:6b:9b:a2:16:0c:f6:67:cf: cb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:06:65:A4:33:37:06:47:43:5D:5F:32:29:5A:2E:F1:5C:56:17:31 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.121.0/24 104.234.164.0/24 104.234.185.0/24 104.234.218.0/24 104.234.221.0/24 104.234.248.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:bd:e8:15:a1:af:47:68:f0:c7:d7:1d:df:3d:35:35:d1:98: a9:40:ff:b8:25:5f:7f:65:dc:64:c0:61:55:52:0f:78:30:f3: b3:80:75:92:e9:3d:c7:6a:d1:24:12:cd:89:23:8b:24:d3:c1: 93:00:e5:5c:5d:bf:5c:38:50:57:8f:38:05:4d:a6:73:3c:d1: 96:04:47:fb:ca:1d:d8:a3:54:39:73:04:e7:45:1b:70:f4:5c: 3e:46:4a:8e:05:b3:65:dc:af:c8:39:42:b5:e9:25:ae:72:e8: 4f:d5:de:5d:ea:67:08:a0:39:eb:7b:f0:78:af:5e:46:3c:37: a3:f8:d0:8e:59:00:2f:ab:64:68:f9:83:7a:34:85:8b:c6:2c: 27:a7:b6:c5:31:20:ac:25:65:81:76:cc:74:2a:81:7b:7e:4f: 73:57:23:b1:88:99:04:b6:bd:ee:ed:23:d3:51:36:37:59:2f: f0:4d:a5:80:65:90:01:41:08:34:31:07:11:7d:39:4b:68:2d: f8:f4:16:09:85:ff:c1:a3:e8:40:55:e5:20:32:12:e4:cb:0c: 5b:6e:13:fc:e5:41:01:41:a4:75:df:7f:32:92:56:7d:53:87: c8:56:82:7a:0b:c2:31:f7:aa:cf:0b:f8:13:2d:d6:60:ae:e8: 8d:54:c3:d4 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUfApmGh76PeIa1lCHSfhgLRTQ1MgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDMwMTY0MDU2WhcNMjYxMDI5MTY0NTU2 WjAzMTEwLwYDVQQDEyg4RDA2NjVBNDMzMzcwNjQ3NDM1RDVGMzIyOTVBMkVGMTVD NTYxNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wZnnbpjR3i1 s3IDZKQfSFm3x5aOrEF2pyUMwDvm7c+mm9DXbA2thJUYrg9OU6SE7XbhvilIxdtu egnIOD0RpE8CkoPUga+qzU6DADb2WldA+rQwJuyZ+5OLKflrXp0I82/whb8qR6W0 VtcSh2meUSkn9wOZjETvLWqK3PG4jAdKVlMBtshQg67H1iwtTAxpNZgOq5KQDyAL kVhs0O2wDRka8irmiz99yepIMZgbTHsT+q1p71mXh/OaaEKS+ta2yc30z/Pp0JY/ gJ2VAILXlYlOlS2b0rmo+xRkI4Vz1b7MCtp8w6aHA6bt0uQ2q8ZB6aRkSQb8a5ui Fgz2Z8/LsQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFI0GZaQzNwZHQ11fMilaLvFc VhcxMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzUwNjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYI KwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBABo6nkDBABo6qQDBABo6rkDBABo6toD BABo6t0DBAFo6vgwDQYJKoZIhvcNAQELBQADggEBAJq96BWhr0do8MfXHd89NTXR mKlA/7glX39l3GTAYVVSD3gw87OAdZLpPcdq0SQSzYkjiyTTwZMA5Vxdv1w4UFeP OAVNpnM80ZYER/vKHdijVDlzBOdFG3D0XD5GSo4Fs2Xcr8g5QrXpJa5y6E/V3l3q ZwigOet78HivXkY8N6P40I5ZAC+rZGj5g3o0hYvGLCentsUxIKwlZYF2zHQqgXt+ T3NXI7GImQS2ve7tI9NRNjdZL/BNpYBlkAFBCDQxBxF9OUtoLfj0FgmF/8Gj6EBV 5SAyEuTLDFtuE/zlQQFBpHXffzKSVn1Th8hWgnoLwjH3qs8L+BMt1mCu6I1Uw9Q= -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:40 2025 by rpki-client