$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa File: AS5065.roa (raw, json) Hash identifier: BwGU0rUqvNxf4dvXspjp0M+G2ScAeI1kK3U/yDyTL88= Subject key identifier: 25:C3:80:8B:5D:44:A7:F6:E1:80:A9:9D:0C:21:A5:1D:89:13:EC:02 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 4CEA6518955C603DE5492C6D207B1FCE2C61FF20 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa Signing time: Tue 29 Apr 2025 05:26:06 +0000 ROA not before: Tue 29 Apr 2025 05:21:06 +0000 ROA not after: Tue 28 Apr 2026 05:26:06 +0000 asID: 5065 IP address blocks: 157.254.14.0/24 maxlen: 24 157.254.18.0/23 maxlen: 24 157.254.130.0/24 maxlen: 24 157.254.131.0/24 maxlen: 24 157.254.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 00:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ea:65:18:95:5c:60:3d:e5:49:2c:6d:20:7b:1f:ce:2c:61:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 29 05:21:06 2025 GMT Not After : Apr 28 05:26:06 2026 GMT Subject: CN=25C3808B5D44A7F6E180A99D0C21A51D8913EC02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:f3:96:4e:7e:5b:c5:91:95:85:08:f6:cf: 38:07:bc:57:30:05:58:e7:7c:b4:1c:b6:cf:84:a3: d2:4c:27:21:fd:3c:ba:f8:0b:ae:a0:c2:0c:21:33: 8a:ee:54:fd:d6:db:a9:b0:fd:12:7d:04:cc:d6:f7: 6b:91:19:79:f6:cf:bd:0d:eb:da:9c:e0:15:88:aa: 2f:1f:6c:4e:17:57:08:75:25:c3:52:80:24:e9:55: ad:10:cc:be:e8:c7:72:8e:5c:af:da:1d:50:e1:8f: 2a:9e:b7:97:8d:95:67:6d:9e:7a:6d:bf:1a:09:ac: cb:a8:c2:96:94:37:ea:f3:55:0c:57:ad:96:af:5c: 43:35:0d:3a:1c:10:44:b5:6b:29:04:af:dc:17:b3: 74:4c:b7:3c:7e:0c:f4:fe:72:db:a4:e1:d5:d5:c3: d7:de:2d:7e:1f:ca:57:7b:5c:c0:47:80:b2:1d:8b: 8c:5a:fe:34:d5:e3:58:4e:f5:73:94:6e:3c:e4:41: d6:6f:b7:e6:d0:b4:8a:52:8d:dc:72:2a:c0:90:a3: ef:44:21:1c:7e:54:cf:97:67:6f:8c:13:89:8f:25: e4:30:a6:94:e4:e8:25:e2:ba:58:9e:c7:4a:73:a2: 0b:ba:06:95:0f:83:2e:af:7e:67:f3:d8:df:c7:d8: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C3:80:8B:5D:44:A7:F6:E1:80:A9:9D:0C:21:A5:1D:89:13:EC:02 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.14.0/24 157.254.18.0/23 157.254.130.0/23 157.254.225.0/24 Signature Algorithm: sha256WithRSAEncryption 58:dc:25:6f:e5:36:a6:51:36:ad:e6:fb:a3:b0:72:da:4a:3c: 03:26:29:02:4f:ed:28:8e:b3:15:14:16:2b:52:30:22:97:fa: c1:cf:c6:d6:5f:3e:6e:55:44:ef:10:5b:cc:f5:8a:98:90:5a: 7f:95:79:85:01:3a:6c:20:6e:56:a2:db:87:14:0c:7e:86:51: 28:58:26:81:a0:ed:05:37:5e:ad:f5:de:6a:e8:19:d6:36:2f: 82:ec:74:23:41:39:f1:bb:b5:8c:87:c9:a4:9b:53:89:98:f2: db:fa:c5:e0:1d:d9:1c:f3:4b:20:a3:1a:45:71:e9:75:b5:71: f8:4e:92:b2:40:5c:14:3f:8c:6a:65:ba:50:39:76:f2:c1:45: 36:5a:8d:6a:a7:7b:2d:47:27:cf:a8:51:36:29:ee:fa:cb:61: 1e:b4:60:38:0f:02:51:17:54:63:8a:86:fc:59:94:44:59:17: 83:d2:3d:33:44:f3:8d:c8:d6:31:24:33:ff:b7:59:40:86:dd: 1d:15:fc:a8:9c:68:ab:1a:90:83:f2:50:97:61:a7:a8:86:71: 32:44:dc:dd:13:a1:0e:c7:12:f6:fa:9e:fd:31:a0:2f:1d:ed: 48:21:84:45:6b:b2:43:84:41:42:dc:9e:7d:a5:1c:f5:3b:8d: cd:38:3d:72 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUTOplGJVcYD3lSSxtIHsfzixh/yAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNDI5MDUyMTA2WhcNMjYwNDI4MDUyNjA2 WjAzMTEwLwYDVQQDEygyNUMzODA4QjVENDRBN0Y2RTE4MEE5OUQwQzIxQTUxRDg5 MTNFQzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P3zlk5+W8WR lYUI9s84B7xXMAVY53y0HLbPhKPSTCch/Ty6+AuuoMIMITOK7lT91tupsP0SfQTM 1vdrkRl59s+9DevanOAViKovH2xOF1cIdSXDUoAk6VWtEMy+6Mdyjlyv2h1Q4Y8q nreXjZVnbZ56bb8aCazLqMKWlDfq81UMV62Wr1xDNQ06HBBEtWspBK/cF7N0TLc8 fgz0/nLbpOHV1cPX3i1+H8pXe1zAR4CyHYuMWv401eNYTvVzlG485EHWb7fm0LSK Uo3ccirAkKPvRCEcflTPl2dvjBOJjyXkMKaU5Ogl4rpYnsdKc6ILugaVD4Mur35n 89jfx9i2FQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFCXDgItdRKf24YCpnQwhpR2J E+wCMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzUwNjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYI KwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACd/g4DBAGd/hIDBAGd/oIDBACd/uEw DQYJKoZIhvcNAQELBQADggEBAFjcJW/lNqZRNq3m+6OwctpKPAMmKQJP7SiOsxUU FitSMCKX+sHPxtZfPm5VRO8QW8z1ipiQWn+VeYUBOmwgblai24cUDH6GUShYJoGg 7QU3Xq313mroGdY2L4LsdCNBOfG7tYyHyaSbU4mY8tv6xeAd2RzzSyCjGkVx6XW1 cfhOkrJAXBQ/jGplulA5dvLBRTZajWqney1HJ8+oUTYp7vrLYR60YDgPAlEXVGOK hvxZlERZF4PSPTNE843I1jEkM/+3WUCG3R0V/KicaKsakIPyUJdhp6iGcTJE3N0T oQ7HEvb6nv0xoC8d7UghhEVrskOEQULcnn2lHPU7jc04PXI= -----END CERTIFICATE-----Generated at Mon May 5 16:43:31 2025 by rpki-client