$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa File: AS5065.roa (raw, json) Hash identifier: pcB2vZKUYde3F8et9ZUBiLRUOEEWYLsAai5vW0XsHys= Subject key identifier: B2:5D:A6:C5:84:43:CE:6F:54:F1:02:F2:F7:66:73:8B:F5:D1:99:18 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 3977DFD9BC82DD85F901A5FBE9C6C09C8935455E Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa Signing time: Tue 29 Jul 2025 14:25:08 +0000 ROA not before: Tue 29 Jul 2025 14:20:08 +0000 ROA not after: Tue 28 Jul 2026 14:25:08 +0000 asID: 5065 IP address blocks: 104.234.18.0/24 maxlen: 24 104.234.121.0/24 maxlen: 24 104.234.164.0/24 maxlen: 24 104.234.185.0/24 maxlen: 24 104.234.218.0/24 maxlen: 24 104.234.221.0/24 maxlen: 24 104.234.248.0/24 maxlen: 24 104.234.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 07:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:77:df:d9:bc:82:dd:85:f9:01:a5:fb:e9:c6:c0:9c:89:35:45:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jul 29 14:20:08 2025 GMT Not After : Jul 28 14:25:08 2026 GMT Subject: CN=B25DA6C58443CE6F54F102F2F766738BF5D19918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:bb:c4:ee:45:91:6f:f6:63:e0:25:0d:02: 86:a5:4c:2b:4b:38:41:24:58:8b:e9:7b:f2:d8:85: 80:46:22:72:24:59:fb:32:53:09:c9:b0:a0:96:d4: 31:36:dd:67:5c:90:9d:24:b5:fc:bd:68:e4:53:99: 90:1e:11:6c:68:ce:9c:21:e5:2d:3b:a5:f1:e8:ed: 9b:dc:57:fe:7b:0c:86:fd:4b:32:44:2e:09:e4:f8: 29:24:22:94:fd:95:3f:ff:08:81:36:8a:36:52:05: 86:83:dd:a2:41:d8:fb:51:a8:35:13:1e:2d:cd:fb: 1b:7e:e7:c5:a1:e9:45:e2:b0:d9:34:e7:3f:15:50: 32:a4:ba:c2:a4:5c:7e:d5:a1:db:ce:27:30:fd:5c: 9f:37:08:a7:5e:38:6a:b4:2f:82:a3:1c:45:95:57: 25:ec:1b:20:c9:81:f8:87:63:f5:a9:06:a2:7d:fa: 4d:02:b0:82:8b:d3:75:b8:94:e0:6f:20:34:79:47: 4c:04:53:b5:5b:5e:24:4c:71:ab:cf:b8:f0:79:ee: 65:3b:97:5d:f6:67:d2:e5:02:b7:b7:de:22:c8:4c: 12:70:b5:32:67:11:f8:fd:09:b4:65:d0:60:50:e7: 8d:40:a9:f9:ff:e5:a7:5b:23:e1:e4:26:8e:62:29: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5D:A6:C5:84:43:CE:6F:54:F1:02:F2:F7:66:73:8B:F5:D1:99:18 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.18.0/24 104.234.121.0/24 104.234.164.0/24 104.234.185.0/24 104.234.218.0/24 104.234.221.0/24 104.234.248.0/23 Signature Algorithm: sha256WithRSAEncryption 47:f8:c0:39:5d:92:b0:f8:74:b1:cc:df:6c:31:c9:1b:ce:ca: 80:41:3b:40:93:bd:1a:8b:29:48:3d:1d:8a:1f:9d:44:59:63: 50:2b:58:07:37:ac:06:6f:4d:c8:ea:55:59:9c:e1:c6:bf:3e: 5b:3b:50:39:33:dd:cc:9a:27:ec:cc:89:2a:a2:1a:ae:d4:86: 46:b5:3e:11:50:a3:43:db:35:c8:94:e2:a3:f9:d4:ee:30:18: b6:63:e2:67:03:1e:70:10:76:2c:3f:36:99:d9:7d:62:a8:88: 67:54:77:3d:d9:a4:1f:a3:1a:ba:25:a3:4a:e5:84:8d:6d:13: b7:43:84:6a:11:25:92:54:a1:23:fd:c2:f0:65:ae:ad:96:8b: 76:d2:b5:03:7f:55:4d:dc:a4:e4:a4:57:72:8e:a5:7e:36:9a: 6e:cc:c4:09:13:5a:c6:9a:1d:4e:8c:98:78:be:e1:5e:ad:b7: a8:6b:62:84:d7:37:53:31:40:06:72:5f:52:d4:63:18:f3:ae: f8:e1:f9:91:d0:b3:65:b9:fe:1d:bc:24:7a:5d:96:7f:b6:31: 05:1c:2b:69:b1:68:9f:d8:60:e2:80:8f:4a:3e:89:7f:93:4c: a7:b1:28:16:98:ba:21:7f:ea:e9:6d:b9:f1:a4:93:ff:ba:84: e6:e3:b4:be -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgIUOXff2byC3YX5AaX76cbAnIk1RV4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNzI5MTQyMDA4WhcNMjYwNzI4MTQyNTA4 WjAzMTEwLwYDVQQDEyhCMjVEQTZDNTg0NDNDRTZGNTRGMTAyRjJGNzY2NzM4QkY1 RDE5OTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3+7xO5FkW/2 Y+AlDQKGpUwrSzhBJFiL6Xvy2IWARiJyJFn7MlMJybCgltQxNt1nXJCdJLX8vWjk U5mQHhFsaM6cIeUtO6Xx6O2b3Ff+ewyG/UsyRC4J5PgpJCKU/ZU//wiBNoo2UgWG g92iQdj7Uag1Ex4tzfsbfufFoelF4rDZNOc/FVAypLrCpFx+1aHbzicw/VyfNwin XjhqtC+CoxxFlVcl7BsgyYH4h2P1qQaiffpNArCCi9N1uJTgbyA0eUdMBFO1W14k THGrz7jwee5lO5dd9mfS5QK3t94iyEwScLUyZxH4/Qm0ZdBgUOeNQKn5/+WnWyPh 5CaOYilJzwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFLJdpsWEQ85vVPEC8vdmc4v1 0ZkYMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzUwNjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQwYI KwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBABo6hIDBABo6nkDBABo6qQDBABo6rkD BABo6toDBABo6t0DBAFo6vgwDQYJKoZIhvcNAQELBQADggEBAEf4wDldkrD4dLHM 32wxyRvOyoBBO0CTvRqLKUg9HYofnURZY1ArWAc3rAZvTcjqVVmc4ca/Pls7UDkz 3cyaJ+zMiSqiGq7Uhka1PhFQo0PbNciU4qP51O4wGLZj4mcDHnAQdiw/NpnZfWKo iGdUdz3ZpB+jGrolo0rlhI1tE7dDhGoRJZJUoSP9wvBlrq2Wi3bStQN/VU3cpOSk V3KOpX42mm7MxAkTWsaaHU6MmHi+4V6tt6hrYoTXN1MxQAZyX1LUYxjzrvjh+ZHQ s2W5/h28JHpdln+2MQUcK2mxaJ/YYOKAj0o+iX+TTKexKBaYuiF/6ultufGkk/+6 hObjtL4= -----END CERTIFICATE-----Generated at Mon Aug 4 07:43:45 2025 by rpki-client