$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: O+Yilw7MU76kP2FNWR0Vtmin7dcfnMwuwxGjeiWdHJE= Subject key identifier: CA:BD:15:35:BF:D1:43:0A:CD:97:26:84:5B:F3:85:33:B0:A2:3B:01 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 01EB256DF556256BDB72595E8FFDE62B3A07550C Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5650.roa Signing time: Thu 08 May 2025 13:32:11 +0000 ROA not before: Thu 08 May 2025 13:27:11 +0000 ROA not after: Thu 07 May 2026 13:32:11 +0000 asID: 5650 IP address blocks: 96.44.150.0/24 maxlen: 24 104.223.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 19:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:eb:25:6d:f5:56:25:6b:db:72:59:5e:8f:fd:e6:2b:3a:07:55:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 8 13:27:11 2025 GMT Not After : May 7 13:32:11 2026 GMT Subject: CN=CABD1535BFD1430ACD9726845BF38533B0A23B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:eb:d7:31:7a:19:76:bf:af:99:5f:89:80:c5: 93:8f:1e:51:fd:80:b7:28:e1:eb:76:ed:ef:49:80: 1e:4d:0b:e1:33:77:48:df:bf:59:ce:f9:11:a3:a2: 94:5f:a9:96:38:9a:b3:f4:11:b0:81:9b:3e:13:b4: 6d:da:f6:f5:99:be:33:5b:2e:63:28:06:36:e5:9f: 9f:9b:7b:18:2a:ca:4d:b5:21:ad:c5:26:89:32:9e: c6:be:5d:42:eb:9e:b3:4c:6a:e3:d8:51:de:a6:36: 15:62:ea:55:e6:4a:90:d3:19:33:6b:cc:54:3d:20: db:9d:21:3a:86:c3:35:70:e8:d5:d3:31:b9:1a:d4: 35:3f:29:27:91:76:e9:36:55:65:67:16:fb:a9:a9: a7:e2:a9:3b:9c:27:4f:6d:98:44:48:61:2f:ba:ac: 7b:44:77:da:6e:01:eb:18:28:f4:99:29:0c:6a:c9: 80:8a:dd:ec:c5:67:0a:ed:0b:ff:8f:24:c6:4a:98: 24:62:10:26:7a:07:be:7b:09:20:8c:22:99:8d:6d: 0a:48:b8:dd:c6:c1:78:ab:e7:54:d2:b4:56:1a:de: 8f:d5:d8:4e:d3:f2:b4:50:b1:1a:bb:5b:b6:d5:c0: da:18:a2:dc:3e:1c:fd:79:c2:af:b7:64:b5:59:79: 76:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BD:15:35:BF:D1:43:0A:CD:97:26:84:5B:F3:85:33:B0:A2:3B:01 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.44.150.0/24 104.223.114.0/24 Signature Algorithm: sha256WithRSAEncryption ba:e8:89:9e:6b:1d:91:7b:bf:67:cd:21:58:92:6c:1b:6e:87: cb:b7:f2:15:fd:19:31:21:42:54:02:14:e6:d9:53:12:fb:67: c1:b2:69:37:66:59:38:8f:0e:06:ca:d6:00:40:93:cb:3a:ea: 16:88:51:0c:7e:63:6a:84:a9:b2:d4:41:86:d1:74:9e:14:0b: 2c:31:e0:f4:81:ad:c2:73:ae:7d:3d:a9:9b:a2:b8:1e:76:dd: ab:54:a5:0d:df:55:ae:af:94:a0:3f:4d:04:e4:76:0f:9e:6a: e6:79:1e:0a:58:90:21:c1:b5:85:3e:40:ca:b8:a1:b6:73:8f: f9:db:3a:62:85:ca:db:a8:5b:f7:61:85:67:ec:2b:02:0b:85: 93:86:dd:a5:65:47:8b:59:0f:80:25:71:0b:e1:3e:e0:06:b4: 33:ca:38:4c:08:7c:ec:ab:ef:9a:3e:4a:e7:6f:6c:2d:af:87: da:9b:a3:fc:55:7b:d7:82:92:61:1e:00:f6:75:f0:7d:e2:ca: 43:99:87:22:3c:2b:f6:54:0b:53:c5:04:73:63:c9:5b:c1:ce: 15:51:47:ed:07:29:03:54:b2:43:5c:97:f8:75:ce:03:07:88: 40:58:35:f7:35:c4:3b:fd:95:1a:a3:36:69:d1:fd:e5:d2:d2: 51:6f:ea:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIUAeslbfVWJWvbcllej/3mKzoHVQwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTA4MTMyNzExWhcNMjYwNTA3MTMzMjEx WjAzMTEwLwYDVQQDEyhDQUJEMTUzNUJGRDE0MzBBQ0Q5NzI2ODQ1QkYzODUzM0Iw QTIzQjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uvXMXoZdr+v mV+JgMWTjx5R/YC3KOHrdu3vSYAeTQvhM3dI379ZzvkRo6KUX6mWOJqz9BGwgZs+ E7Rt2vb1mb4zWy5jKAY25Z+fm3sYKspNtSGtxSaJMp7Gvl1C656zTGrj2FHepjYV YupV5kqQ0xkza8xUPSDbnSE6hsM1cOjV0zG5GtQ1PyknkXbpNlVlZxb7qamn4qk7 nCdPbZhESGEvuqx7RHfabgHrGCj0mSkMasmAit3sxWcK7Qv/jyTGSpgkYhAmege+ ewkgjCKZjW0KSLjdxsF4q+dU0rRWGt6P1dhO0/K0ULEau1u21cDaGKLcPhz9ecKv t2S1WXl2jwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFMq9FTW/0UMKzZcmhFvzhTOw ojsBMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYI KwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABgLJYDBABo33IwDQYJKoZIhvcNAQEL BQADggEBALroiZ5rHZF7v2fNIViSbBtuh8u38hX9GTEhQlQCFObZUxL7Z8GyaTdm WTiPDgbK1gBAk8s66haIUQx+Y2qEqbLUQYbRdJ4UCywx4PSBrcJzrn09qZuiuB52 3atUpQ3fVa6vlKA/TQTkdg+eauZ5HgpYkCHBtYU+QMq4obZzj/nbOmKFytuoW/dh hWfsKwILhZOG3aVlR4tZD4AlcQvhPuAGtDPKOEwIfOyr75o+SudvbC2vh9qbo/xV e9eCkmEeAPZ18H3iykOZhyI8K/ZUC1PFBHNjyVvBzhVRR+0HKQNUskNcl/h1zgMH iEBYNfc1xDv9lRqjNmnR/eXS0lFv6nw= -----END CERTIFICATE-----Generated at Mon May 12 10:39:04 2025 by rpki-client