$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa File: AS5065.roa (raw, json) Hash identifier: UKZvoeg9n1Mi3Yp7OP9Ue3nbaqRWiVAzLNXEdosXPho= Subject key identifier: 71:D2:53:43:2E:B6:71:C9:4C:35:45:4E:37:3E:D1:80:58:80:0F:C9 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 2CDC3459AFEAE7BC5FA3A09B093F940CB072EE83 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa Signing time: Tue 29 Jul 2025 08:17:13 +0000 ROA not before: Tue 29 Jul 2025 08:12:13 +0000 ROA not after: Tue 28 Jul 2026 08:17:13 +0000 asID: 5065 IP address blocks: 23.94.142.0/24 maxlen: 24 107.172.19.0/24 maxlen: 24 162.213.2.0/24 maxlen: 24 190.92.160.0/22 maxlen: 24 208.76.42.0/24 maxlen: 24 209.200.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 06:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:dc:34:59:af:ea:e7:bc:5f:a3:a0:9b:09:3f:94:0c:b0:72:ee:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jul 29 08:12:13 2025 GMT Not After : Jul 28 08:17:13 2026 GMT Subject: CN=71D253432EB671C94C35454E373ED18058800FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:09:d6:73:53:cb:27:15:81:64:03:5b:4f:ba: 89:08:bd:94:58:0f:28:d8:ed:fa:d7:33:3f:a3:75: 82:5b:0b:32:5a:a9:8d:14:a5:96:4e:3c:20:2d:8c: f0:4e:39:0d:d5:2e:89:cc:1e:d6:21:6f:3b:86:9a: ef:05:73:e6:5b:cf:d7:dc:82:8f:99:3d:1b:b5:dd: 7a:c4:79:4e:9e:22:69:7f:d3:01:28:ff:d7:b7:73: 92:5b:cb:b7:bb:0e:85:d4:66:81:94:a5:cc:5c:4c: 60:56:7c:72:dd:c7:4f:c2:91:e0:a7:84:5c:6b:8e: 04:06:fa:ab:69:6c:37:f1:dd:c5:dd:a9:a9:8c:b1: 65:24:9d:9c:1f:a8:4b:fc:7a:a5:17:1d:d8:eb:23: f8:02:9b:33:0d:9b:c3:98:6d:f9:38:91:d4:b3:64: d1:83:da:d9:1c:6e:e1:01:91:d2:ba:98:67:e7:aa: e8:34:0f:15:33:33:7a:80:a9:bc:5a:29:bc:91:81: 35:1a:37:da:9a:4e:2a:cf:91:f1:d8:d1:36:9e:cb: ce:7f:f8:45:e3:5f:a7:bd:f4:b9:47:80:e8:b2:65: fd:8d:8c:8f:3f:6f:c4:35:95:bf:b6:a7:6f:50:e5: b2:5a:be:08:01:39:f2:6d:d5:ae:f9:4a:6b:64:de: 20:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D2:53:43:2E:B6:71:C9:4C:35:45:4E:37:3E:D1:80:58:80:0F:C9 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.142.0/24 107.172.19.0/24 162.213.2.0/24 190.92.160.0/22 208.76.42.0/24 209.200.250.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:c5:0c:93:eb:5e:1d:66:bb:50:00:d2:80:11:ab:1a:7d:f6: 20:80:01:43:8f:e9:17:9c:6b:76:ec:58:bb:96:be:29:9f:08: 48:a9:5c:72:a4:35:a4:6d:6a:67:99:61:53:c8:1d:5f:a5:bd: 93:cc:ae:91:65:f4:08:4f:c3:24:60:28:91:f1:bc:d5:db:7f: 1d:a9:54:35:33:72:06:c6:cf:4a:16:ea:25:7e:32:d4:0c:cc: a2:49:10:80:aa:45:03:82:d0:87:16:49:92:e1:b6:fe:8c:26: 01:0f:cb:68:08:55:01:3a:9f:e3:b5:30:c8:b3:9a:ba:d5:84: 49:8b:e9:4e:b9:54:50:7b:c5:b6:f6:4d:24:ff:84:17:35:85: 53:92:f3:1e:34:c5:8d:a0:6d:02:1e:97:85:c6:d2:26:76:7e: 3f:2b:85:38:b1:55:18:05:f6:71:de:aa:74:39:32:24:9e:97: 1e:d0:a1:0d:20:52:72:55:f0:82:fa:ec:58:38:37:7d:20:4f: a7:5a:1b:21:f4:55:33:82:fd:0d:2a:97:5f:1c:44:12:86:76: 4b:38:59:f8:7a:dd:01:40:86:ed:fa:ef:31:49:24:f9:55:4d: 0c:a6:48:a9:f7:cd:48:d7:19:46:1a:70:9a:a8:7d:0e:af:3d: 88:ae:94:b8 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIULNw0Wa/q57xfo6CbCT+UDLBy7oMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzI5MDgxMjEzWhcNMjYwNzI4MDgxNzEz WjAzMTEwLwYDVQQDEyg3MUQyNTM0MzJFQjY3MUM5NEMzNTQ1NEUzNzNFRDE4MDU4 ODAwRkM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugnWc1PLJxWB ZANbT7qJCL2UWA8o2O361zM/o3WCWwsyWqmNFKWWTjwgLYzwTjkN1S6JzB7WIW87 hprvBXPmW8/X3IKPmT0btd16xHlOniJpf9MBKP/Xt3OSW8u3uw6F1GaBlKXMXExg Vnxy3cdPwpHgp4Rca44EBvqraWw38d3F3ampjLFlJJ2cH6hL/HqlFx3Y6yP4Apsz DZvDmG35OJHUs2TRg9rZHG7hAZHSuphn56roNA8VMzN6gKm8Wim8kYE1Gjfamk4q z5Hx2NE2nsvOf/hF41+nvfS5R4DosmX9jYyPP2/ENZW/tqdvUOWyWr4IATnybdWu +UprZN4g5wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHHSU0MutnHJTDVFTjc+0YBY gA/JMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzUwNjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYI KwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAAXXo4DBABrrBMDBACi1QIDBAK+XKAD BADQTCoDBADRyPowDQYJKoZIhvcNAQELBQADggEBAH7FDJPrXh1mu1AA0oARqxp9 9iCAAUOP6Reca3bsWLuWvimfCEipXHKkNaRtameZYVPIHV+lvZPMrpFl9AhPwyRg KJHxvNXbfx2pVDUzcgbGz0oW6iV+MtQMzKJJEICqRQOC0IcWSZLhtv6MJgEPy2gI VQE6n+O1MMizmrrVhEmL6U65VFB7xbb2TST/hBc1hVOS8x40xY2gbQIel4XG0iZ2 fj8rhTixVRgF9nHeqnQ5MiSelx7QoQ0gUnJV8IL67Fg4N30gT6daGyH0VTOC/Q0q l18cRBKGdks4Wfh63QFAhu367zFJJPlVTQymSKn3zUjXGUYacJqofQ6vPYiulLg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:14:36 2025 by rpki-client