$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: z6Cqwy0WguMw4TVaAoXb4+p85zMXGPZSXdiiJGJori4= Subject key identifier: 76:70:D8:E0:1D:43:BE:82:70:9A:85:F0:07:A8:CB:88:BC:BC:01:47 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 2D61F3610AA7C7F97B81B162CBC0626CE21B177E Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa Signing time: Sat 18 Oct 2025 00:01:25 +0000 ROA not before: Fri 17 Oct 2025 23:56:25 +0000 ROA not after: Sat 17 Oct 2026 00:01:25 +0000 asID: 5650 IP address blocks: 40.27.36.0/22 maxlen: 24 40.27.56.0/21 maxlen: 24 40.27.96.0/22 maxlen: 22 40.27.100.0/22 maxlen: 22 40.27.184.0/22 maxlen: 24 40.27.200.0/21 maxlen: 21 40.223.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 13:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:61:f3:61:0a:a7:c7:f9:7b:81:b1:62:cb:c0:62:6c:e2:1b:17:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Oct 17 23:56:25 2025 GMT Not After : Oct 17 00:01:25 2026 GMT Subject: CN=7670D8E01D43BE82709A85F007A8CB88BCBC0147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:e0:1a:1b:ef:8c:02:db:c2:e7:a9:7a:3e: 0e:56:e3:73:de:7f:64:da:ec:6b:86:3b:10:c8:65: 9c:6f:7c:7c:49:3d:60:1e:ec:5d:ab:7e:ea:27:d7: dd:94:cc:f5:2d:53:66:53:0c:48:e9:2c:e9:d2:ad: b0:1f:c0:3b:82:c9:df:fc:13:47:68:0b:37:f8:a9: 5c:c1:44:6e:50:a0:a4:ce:6a:6f:f3:52:d8:07:d6: 26:a4:97:61:b9:44:47:dc:b3:5e:64:bd:d3:eb:71: 7d:ed:74:79:d2:1d:5e:93:f0:c5:e3:2b:5a:a5:cd: 6b:ee:cb:88:d7:76:4a:08:8e:49:30:69:24:db:2d: 0f:7f:3a:9b:a9:08:b9:41:18:ec:26:57:2b:51:a3: 88:75:d1:a3:10:79:6b:2c:23:88:85:df:57:82:e0: d4:76:99:49:b2:61:75:69:cf:0c:07:34:9e:06:ed: 67:c7:2d:3f:76:22:92:91:5e:ca:84:b6:c1:82:42: 83:12:cb:4c:00:f2:58:91:1d:2d:dc:b4:ac:39:f7: f1:d5:84:d5:70:e8:b0:74:0f:4e:5f:c3:4d:a3:fb: 17:6e:9f:b3:37:f5:63:f1:7a:3d:66:ec:ce:f2:4d: 30:64:e6:0f:63:aa:82:69:91:c1:c6:2c:d6:d4:8c: 3d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:70:D8:E0:1D:43:BE:82:70:9A:85:F0:07:A8:CB:88:BC:BC:01:47 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.36.0/22 40.27.56.0/21 40.27.96.0/21 40.27.184.0/22 40.27.200.0/21 40.223.224.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:2b:ad:3d:a6:6e:c3:78:55:ae:aa:41:b2:86:e6:a6:07:bd: ad:e1:10:96:f2:09:75:a1:5f:4f:02:9c:80:ea:d7:76:20:7e: 87:4b:e2:ef:94:b0:7e:d4:cf:11:a4:dd:cb:7c:00:20:76:38: 69:c5:cf:9b:0f:e9:46:00:4c:09:db:83:9e:6c:99:35:ec:6b: a6:65:24:4b:fb:92:8a:b4:28:67:c9:59:29:ad:35:22:7f:df: a6:c4:1d:cc:4c:c7:b2:76:34:2e:22:79:ed:ed:f9:aa:4f:31: 61:a8:b6:89:07:7d:69:aa:f2:6c:4d:03:20:f0:6e:b1:79:8b: 2d:25:05:d9:e6:d6:28:51:61:20:ad:c2:63:36:79:13:e7:e4: 06:09:94:09:13:87:38:16:4f:ef:ea:37:b0:48:0a:6c:45:13: 90:b0:24:b4:5d:95:5d:81:fa:3a:d5:60:fa:45:43:1b:5d:5d: 57:e8:72:c0:74:fd:2d:42:dc:12:26:99:23:9b:3f:49:ee:dc: ab:f2:f6:ce:f9:e0:b7:c1:59:0e:6c:f1:3a:b2:72:3f:02:39: 16:78:3f:3e:d9:c8:d2:9b:23:01:d5:02:20:fd:5e:25:8c:38: 67:c8:5d:8c:a1:c1:8d:bd:d9:6f:bc:74:e5:1e:46:e9:aa:86: 65:98:d7:c9 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIULWHzYQqnx/l7gbFiy8BibOIbF34wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMDE3MjM1NjI1WhcNMjYxMDE3MDAwMTI1 WjAzMTEwLwYDVQQDEyg3NjcwRDhFMDFENDNCRTgyNzA5QTg1RjAwN0E4Q0I4OEJD QkMwMTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsjgGhvvjALb wuepej4OVuNz3n9k2uxrhjsQyGWcb3x8ST1gHuxdq37qJ9fdlMz1LVNmUwxI6Szp 0q2wH8A7gsnf/BNHaAs3+KlcwURuUKCkzmpv81LYB9YmpJdhuURH3LNeZL3T63F9 7XR50h1ek/DF4ytapc1r7suI13ZKCI5JMGkk2y0PfzqbqQi5QRjsJlcrUaOIddGj EHlrLCOIhd9XguDUdplJsmF1ac8MBzSeBu1nxy0/diKSkV7KhLbBgkKDEstMAPJY kR0t3LSsOffx1YTVcOiwdA9OX8NNo/sXbp+zN/Vj8Xo9ZuzO8k0wZOYPY6qCaZHB xizW1Iw9XwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHZw2OAdQ76CcJqF8Aeoy4i8 vAFHMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYI KwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAIoGyQDBAMoGzgDBAMoG2ADBAIoG7gD BAMoG8gDBAQo3+AwDQYJKoZIhvcNAQELBQADggEBAEwrrT2mbsN4Va6qQbKG5qYH va3hEJbyCXWhX08CnIDq13YgfodL4u+UsH7UzxGk3ct8ACB2OGnFz5sP6UYATAnb g55smTXsa6ZlJEv7koq0KGfJWSmtNSJ/36bEHcxMx7J2NC4iee3t+apPMWGotokH fWmq8mxNAyDwbrF5iy0lBdnm1ihRYSCtwmM2eRPn5AYJlAkThzgWT+/qN7BICmxF E5CwJLRdlV2B+jrVYPpFQxtdXVfocsB0/S1C3BImmSObP0nu3Kvy9s754LfBWQ5s 8Tqycj8CORZ4Pz7ZyNKbIwHVAiD9XiWMOGfIXYyhwY292W+8dOUeRumqhmWY18k= -----END CERTIFICATE-----Generated at Sun Oct 19 20:13:24 2025 by rpki-client