$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa File: AS5065.roa (raw, json) Hash identifier: Z2YWUT1iMsyj3akyT6pX4oZ1o2G6AgmG1YOSzCi4KAU= Subject key identifier: F8:4C:8E:10:FF:71:06:77:D3:FF:C5:58:6C:59:79:8E:76:86:4D:C4 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 6EC48956C964E227C863B004596827D6FD0C34B7 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa Signing time: Wed 09 Oct 2024 09:16:54 +0000 ROA not before: Wed 09 Oct 2024 09:11:54 +0000 ROA not after: Wed 08 Oct 2025 09:16:54 +0000 asID: 5065 IP address blocks: 157.254.14.0/24 maxlen: 24 157.254.18.0/23 maxlen: 24 157.254.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 10:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c4:89:56:c9:64:e2:27:c8:63:b0:04:59:68:27:d6:fd:0c:34:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Oct 9 09:11:54 2024 GMT Not After : Oct 8 09:16:54 2025 GMT Subject: CN=F84C8E10FF710677D3FFC5586C59798E76864DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:53:bb:cf:1e:e0:c9:e0:7d:63:86:40:bc: cf:79:b2:86:e9:78:6a:14:cb:56:c9:69:5b:99:ae: 1b:a5:88:d2:8f:6d:a2:69:03:5c:4a:91:29:5e:37: ed:fe:e8:bc:e6:86:f3:56:a6:cc:55:c3:98:c2:e4: de:3e:00:47:27:b4:d3:0b:3d:00:e6:db:fa:16:95: e7:30:79:76:b9:e7:8c:45:9e:3a:7f:5d:79:16:2c: c7:ed:48:7c:4c:95:bd:47:9c:f4:63:87:fb:f5:ba: 32:dd:53:95:1b:ba:ae:0f:92:06:a1:3e:20:62:bf: 71:65:56:32:ce:3b:d1:62:fa:09:7d:93:1b:a2:01: 2c:e3:c3:11:25:7d:25:ba:9b:9e:34:df:82:22:58: 0f:09:d1:a2:8b:42:d0:47:bc:21:9d:55:cf:d4:b6: 9d:bc:b6:25:84:4c:6f:87:37:49:7a:f4:60:82:16: a6:2b:d7:8c:9c:6e:16:d7:4d:cf:dd:80:54:62:c5: 21:eb:ad:0f:1f:fb:5d:ee:24:6c:78:b6:ea:3b:95: 0f:52:c2:82:43:ec:e9:b1:3f:e1:7c:df:85:1e:09: b8:f3:75:12:a8:8a:0f:e6:06:5f:d6:59:c3:05:2c: dc:0b:e3:17:48:a7:d9:96:92:61:a2:3e:62:12:55: 77:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4C:8E:10:FF:71:06:77:D3:FF:C5:58:6C:59:79:8E:76:86:4D:C4 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5065.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.14.0/24 157.254.18.0/23 157.254.225.0/24 Signature Algorithm: sha256WithRSAEncryption 88:f0:4b:ea:f5:df:9d:d7:4b:75:30:a3:7a:25:73:b9:a0:68: be:8d:ff:95:d3:cb:cc:dd:11:67:eb:1b:f2:34:7e:4b:d5:9c: 8b:ad:38:45:77:47:4c:cf:88:7d:71:fd:bc:09:6f:54:31:cc: 49:7c:e2:c2:93:6a:d7:bc:ff:89:b7:dc:c1:7e:14:72:c9:21: ed:7c:1a:52:9d:ba:ee:92:61:ea:30:18:34:c4:3f:89:0d:3c: 01:6e:fb:56:7b:5a:33:36:e0:5f:44:aa:b5:09:44:13:88:8a: 77:2a:6e:c1:ac:bf:bc:dd:99:bf:59:73:00:d3:ff:f1:2a:6b: c1:db:de:52:3c:16:d8:28:b2:27:8d:6c:80:a2:99:c5:ec:f7: ad:0c:8f:80:29:12:d3:81:d9:40:3d:c6:e3:ca:c4:58:6b:ee: 84:73:71:5e:90:e9:e1:24:d4:4a:4a:e6:32:71:a6:ba:36:08: 62:ff:65:9c:1f:e8:03:10:68:79:54:db:e9:ea:ad:ad:df:d0: dc:70:09:6c:19:f8:98:fa:2d:53:bd:5e:ae:c6:aa:5c:ee:bd: a6:f1:aa:17:04:43:16:03:54:54:37:cd:de:b5:bc:b6:86:2b: 00:0b:0d:40:17:21:f5:84:46:89:3b:22:6b:9d:87:94:70:6b: d0:9c:66:91 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUbsSJVslk4ifIY7AEWWgn1v0MNLcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQxMDA5MDkxMTU0WhcNMjUxMDA4MDkxNjU0 WjAzMTEwLwYDVQQDEyhGODRDOEUxMEZGNzEwNjc3RDNGRkM1NTg2QzU5Nzk4RTc2 ODY0REM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouBTu88e4Mng fWOGQLzPebKG6XhqFMtWyWlbma4bpYjSj22iaQNcSpEpXjft/ui85obzVqbMVcOY wuTePgBHJ7TTCz0A5tv6FpXnMHl2ueeMRZ46f115FizH7Uh8TJW9R5z0Y4f79boy 3VOVG7quD5IGoT4gYr9xZVYyzjvRYvoJfZMbogEs48MRJX0lupueNN+CIlgPCdGi i0LQR7whnVXP1LadvLYlhExvhzdJevRgghamK9eMnG4W103P3YBUYsUh660PH/td 7iRseLbqO5UPUsKCQ+zpsT/hfN+FHgm483USqIoP5gZf1lnDBSzcC+MXSKfZlpJh oj5iElV3hQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFPhMjhD/cQZ30//FWGxZeY52 hk3EMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzUwNjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACd/g4DBAGd/hIDBACd/uEwDQYJKoZI hvcNAQELBQADggEBAIjwS+r1353XS3Uwo3olc7mgaL6N/5XTy8zdEWfrG/I0fkvV nIutOEV3R0zPiH1x/bwJb1QxzEl84sKTate8/4m33MF+FHLJIe18GlKduu6SYeow GDTEP4kNPAFu+1Z7WjM24F9EqrUJRBOIincqbsGsv7zdmb9ZcwDT//Eqa8Hb3lI8 FtgosieNbICimcXs960Mj4ApEtOB2UA9xuPKxFhr7oRzcV6Q6eEk1EpK5jJxpro2 CGL/ZZwf6AMQaHlU2+nqra3f0NxwCWwZ+Jj6LVO9Xq7GqlzuvabxqhcEQxYDVFQ3 zd61vLaGKwALDUAXIfWERok7Imudh5Rwa9CcZpE= -----END CERTIFICATE-----Generated at Thu Nov 21 11:09:15 2024 by rpki-client on console-ams.rpki-client.org