$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa File: AS5065.roa (raw, json) Hash identifier: SQMxIFufe+nTM40CU6OC5WcENBNDDr+BB/b2IrSiFjw= Subject key identifier: 9D:F1:CC:EE:6B:FB:24:D7:D3:0B:21:BC:69:93:EF:47:7F:50:30:F4 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 3A78094A306665445E4AD03AA4475BD94BFE3D03 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa Signing time: Mon 09 Jun 2025 13:08:08 +0000 ROA not before: Mon 09 Jun 2025 13:03:08 +0000 ROA not after: Mon 08 Jun 2026 13:08:08 +0000 asID: 5065 IP address blocks: 23.94.142.0/24 maxlen: 24 162.213.2.0/24 maxlen: 24 190.92.160.0/22 maxlen: 24 208.76.42.0/24 maxlen: 24 209.200.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 07:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:78:09:4a:30:66:65:44:5e:4a:d0:3a:a4:47:5b:d9:4b:fe:3d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jun 9 13:03:08 2025 GMT Not After : Jun 8 13:08:08 2026 GMT Subject: CN=9DF1CCEE6BFB24D7D30B21BC6993EF477F5030F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:71:a8:ea:02:ad:fb:fc:82:8e:00:84:40:52: cd:1a:3a:96:76:74:8a:28:de:9b:69:d9:31:ed:c1: 7c:9e:26:ef:d3:c9:e7:88:fa:04:66:f6:62:95:27: 11:25:d9:44:6d:1d:23:4a:26:09:f1:d4:51:04:24: f8:30:35:8b:4b:73:8b:c9:fa:8f:01:66:43:fc:48: ed:08:24:b9:5f:e9:e5:e6:4f:9d:88:44:9a:bf:b5: 1c:e0:da:b4:75:db:36:aa:4c:a0:51:20:8b:3b:5b: fb:df:c7:69:36:51:c4:52:db:de:45:7b:86:82:c7: 65:1d:26:7d:93:e5:fa:71:f1:12:b5:d2:c2:7d:8d: 79:05:03:60:98:15:02:9b:56:1b:df:6f:7b:32:a8: 06:af:71:9f:8c:fc:84:3a:07:3a:78:bf:35:9e:ff: b4:9f:d5:06:33:92:60:1a:88:79:44:8f:d4:80:d1: 32:80:2b:47:23:7c:f8:01:67:36:0d:5d:ba:1c:aa: d2:af:aa:ac:85:33:aa:93:8c:0b:ca:94:8e:ae:e3: e3:5e:c6:2e:12:81:f6:b2:cf:cd:2e:4d:c7:f5:0a: 8f:71:ef:a6:7d:e0:c7:07:cf:63:f8:e6:b7:2e:5a: 92:23:a7:92:33:d1:67:41:8f:07:a3:70:fe:70:fd: 80:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F1:CC:EE:6B:FB:24:D7:D3:0B:21:BC:69:93:EF:47:7F:50:30:F4 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.142.0/24 162.213.2.0/24 190.92.160.0/22 208.76.42.0/24 209.200.250.0/24 Signature Algorithm: sha256WithRSAEncryption c3:1f:83:ba:4e:f8:98:d0:67:65:24:a7:5a:c2:81:94:23:18: f5:0a:79:79:3c:e2:98:6f:8d:f6:34:2b:60:35:e9:cb:2b:5a: eb:7f:2b:86:22:1d:6b:97:09:be:23:7f:0f:14:a0:76:0b:31: 10:16:5a:50:1b:e2:bd:99:68:11:c4:75:02:af:01:dd:d0:55: bd:3e:21:2d:6d:3b:84:8b:f1:f4:38:c2:93:d3:3d:67:a4:e5: 05:85:21:02:4e:a9:d2:63:82:cc:64:d5:60:c1:5b:d7:18:0a: c5:12:07:07:5c:c0:84:9e:0e:89:4e:21:e0:c6:8e:55:cd:d6: 98:a8:da:80:a8:99:19:f9:d3:b9:31:e6:5a:60:f2:42:8a:8b: 6b:46:d0:18:ee:c3:b1:95:a6:51:78:62:93:12:e1:f2:8b:69: 07:60:86:13:5f:3b:67:97:5d:6d:ee:2c:7f:bd:48:94:06:ad: 5d:0c:e3:ca:db:1d:39:d0:fd:2a:ec:a3:32:bf:32:c9:49:fc: f2:1b:ec:d4:29:1f:88:f2:62:b5:d0:35:1c:fc:90:55:be:bd: 1b:19:fc:eb:d8:bc:64:d7:e8:9f:44:da:64:06:4c:38:8d:28: 3a:f4:7f:d1:f9:47:9d:1b:f4:53:bd:75:6c:4a:b0:fc:5d:98: 61:0c:c6:37 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUOngJSjBmZUReStA6pEdb2Uv+PQMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNjA5MTMwMzA4WhcNMjYwNjA4MTMwODA4 WjAzMTEwLwYDVQQDEyg5REYxQ0NFRTZCRkIyNEQ3RDMwQjIxQkM2OTkzRUY0NzdG NTAzMEY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HGo6gKt+/yC jgCEQFLNGjqWdnSKKN6badkx7cF8nibv08nniPoEZvZilScRJdlEbR0jSiYJ8dRR BCT4MDWLS3OLyfqPAWZD/EjtCCS5X+nl5k+diESav7Uc4Nq0dds2qkygUSCLO1v7 38dpNlHEUtveRXuGgsdlHSZ9k+X6cfEStdLCfY15BQNgmBUCm1Yb3297MqgGr3Gf jPyEOgc6eL81nv+0n9UGM5JgGoh5RI/UgNEygCtHI3z4AWc2DV26HKrSr6qshTOq k4wLypSOruPjXsYuEoH2ss/NLk3H9QqPce+mfeDHB89j+Oa3LlqSI6eSM9FnQY8H o3D+cP2AewIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ3xzO5r+yTX0wshvGmT70d/ UDD0MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzUwNjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYI KwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAAXXo4DBACi1QIDBAK+XKADBADQTCoD BADRyPowDQYJKoZIhvcNAQELBQADggEBAMMfg7pO+JjQZ2Ukp1rCgZQjGPUKeXk8 4phvjfY0K2A16csrWut/K4YiHWuXCb4jfw8UoHYLMRAWWlAb4r2ZaBHEdQKvAd3Q Vb0+IS1tO4SL8fQ4wpPTPWek5QWFIQJOqdJjgsxk1WDBW9cYCsUSBwdcwISeDolO IeDGjlXN1pio2oComRn507kx5lpg8kKKi2tG0Bjuw7GVplF4YpMS4fKLaQdghhNf O2eXXW3uLH+9SJQGrV0M48rbHTnQ/SrsozK/MslJ/PIb7NQpH4jyYrXQNRz8kFW+ vRsZ/OvYvGTX6J9E2mQGTDiNKDr0f9H5R50b9FO9dWxKsPxdmGEMxjc= -----END CERTIFICATE-----Generated at Mon Jun 16 00:30:10 2025 by rpki-client