$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: yR6b8az0DvXGVhnYr5BGRJQCuqevFdkYMfNqv7I9Jy0= Subject key identifier: 52:02:FC:BB:76:B6:87:02:EA:FC:8F:B8:D3:2E:4E:C5:1E:54:52:77 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 42A3B5BE15F45DE2BECBB933AAD326EA356FF0DA Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa Signing time: Sat 28 Jun 2025 10:45:05 +0000 ROA not before: Sat 28 Jun 2025 10:40:05 +0000 ROA not after: Sat 27 Jun 2026 10:45:05 +0000 asID: 5650 IP address blocks: 40.27.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 07:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a3:b5:be:15:f4:5d:e2:be:cb:b9:33:aa:d3:26:ea:35:6f:f0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jun 28 10:40:05 2025 GMT Not After : Jun 27 10:45:05 2026 GMT Subject: CN=5202FCBB76B68702EAFC8FB8D32E4EC51E545277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:16:15:26:a0:08:6d:ad:3a:08:8c:d2:e2: 52:a9:72:2f:dd:d4:2f:5d:22:1a:89:df:e0:8b:0d: 24:8e:f1:d7:f5:d6:35:38:a5:06:65:5d:bf:40:44: 19:04:41:83:ff:32:99:9c:1d:2f:54:15:55:4a:7f: 57:76:c2:c6:3d:78:d0:3c:e1:26:aa:80:dd:e8:70: 32:ef:89:d5:42:a9:0f:68:08:ae:e6:eb:b3:46:48: a2:59:1b:24:b2:4a:bc:d9:0a:5b:d9:93:f3:57:b3: 8e:01:79:64:c1:a3:93:ec:6e:50:f3:81:0d:1e:69: 56:a0:d2:d5:96:7d:80:87:1e:f7:ef:77:0e:5b:dd: 3c:63:93:50:d2:60:4d:de:3a:14:d6:f1:49:30:a0: 62:d0:38:6d:72:6d:d0:f1:86:34:a8:93:ef:c4:c4: ca:af:78:a3:ae:df:e5:bd:e6:81:10:bc:07:1d:da: 05:60:72:a4:7e:db:b3:dc:ff:61:ca:e8:79:e1:ac: 29:65:26:3e:c9:de:bb:f3:08:a9:d1:28:4b:f9:5b: 62:f3:10:a3:79:17:80:bd:91:6d:b6:2b:e6:1e:de: cd:8a:ad:50:b6:6d:e3:80:7b:7c:f8:33:86:90:de: 60:56:b4:0a:c9:18:77:23:95:8e:f0:de:c2:a7:36: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:02:FC:BB:76:B6:87:02:EA:FC:8F:B8:D3:2E:4E:C5:1E:54:52:77 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.140.0/22 Signature Algorithm: sha256WithRSAEncryption 75:34:a5:2d:d8:6b:46:05:fc:d5:6f:cf:b6:3c:98:4a:7d:8d: 22:fb:2a:b2:8c:d2:f4:ef:10:6f:d9:e2:91:70:d0:a6:91:e9: 79:6e:5b:1e:86:26:9c:2c:7a:33:4b:82:7d:04:9a:15:b4:ea: 3a:be:91:f6:7e:8a:fa:86:5f:e5:4c:ba:c3:19:6f:c9:9e:43: 19:32:d8:25:f0:e6:10:78:5c:2c:a9:1d:17:12:f1:41:fc:ce: f0:f1:ad:10:bb:86:90:1c:49:e2:7d:ee:88:7a:5f:bd:4a:14: b6:24:f1:49:99:bc:bd:6d:96:05:5b:0c:2e:3e:0d:fa:db:98: 3d:3d:18:f5:c6:08:84:db:ba:dd:62:cd:e5:4c:44:25:87:aa: 24:b6:86:57:9f:65:02:ec:09:18:ab:9a:5a:07:10:f3:69:7a: 26:c1:0c:8a:3b:d6:1a:9c:24:6d:90:1b:ce:a6:b0:30:d1:6e: 83:4b:46:14:fe:98:85:5e:78:45:a0:4d:eb:17:20:00:95:cc: 8b:ee:b8:f5:39:44:74:0f:8e:29:c8:19:09:6a:48:bb:75:e5: 5b:37:6d:01:19:a8:9d:41:4e:bc:87:c2:1a:4e:3c:22:d5:f2: a1:44:a7:fd:32:98:5c:5b:d3:20:d9:49:7a:ec:1f:fe:30:24: 05:e3:f6:c3 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUQqO1vhX0XeK+y7kzqtMm6jVv8NowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjI4MTA0MDA1WhcNMjYwNjI3MTA0NTA1 WjAzMTEwLwYDVQQDEyg1MjAyRkNCQjc2QjY4NzAyRUFGQzhGQjhEMzJFNEVDNTFF NTQ1Mjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYwWFSagCG2t OgiM0uJSqXIv3dQvXSIaid/giw0kjvHX9dY1OKUGZV2/QEQZBEGD/zKZnB0vVBVV Sn9XdsLGPXjQPOEmqoDd6HAy74nVQqkPaAiu5uuzRkiiWRskskq82Qpb2ZPzV7OO AXlkwaOT7G5Q84ENHmlWoNLVln2Ahx7373cOW908Y5NQ0mBN3joU1vFJMKBi0Dht cm3Q8YY0qJPvxMTKr3ijrt/lveaBELwHHdoFYHKkftuz3P9hyuh54awpZSY+yd67 8wip0ShL+Vti8xCjeReAvZFttivmHt7Niq1Qtm3jgHt8+DOGkN5gVrQKyRh3I5WO 8N7CpzYQAQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFFIC/Lt2tocC6vyPuNMuTsUe VFJ3MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIoG4wwDQYJKoZIhvcNAQELBQADggEB AHU0pS3Ya0YF/NVvz7Y8mEp9jSL7KrKM0vTvEG/Z4pFw0KaR6XluWx6GJpwsejNL gn0EmhW06jq+kfZ+ivqGX+VMusMZb8meQxky2CXw5hB4XCypHRcS8UH8zvDxrRC7 hpAcSeJ97oh6X71KFLYk8UmZvL1tlgVbDC4+DfrbmD09GPXGCITbut1izeVMRCWH qiS2hlefZQLsCRirmloHEPNpeibBDIo71hqcJG2QG86msDDRboNLRhT+mIVeeEWg TesXIACVzIvuuPU5RHQPjinIGQlqSLt15Vs3bQEZqJ1BTryHwhpOPCLV8qFEp/0y mFxb0yDZSXrsH/4wJAXj9sM= -----END CERTIFICATE-----Generated at Sun Jun 29 14:08:14 2025 by rpki-client