$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: GdI8Q5f0PHDBO/nrbcVSB9ngcddXaaU9zfCQBAsitnk= Subject key identifier: 6E:86:F4:7D:0A:99:F1:13:2F:C6:C1:5A:79:5B:8E:4F:2F:49:9C:78 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 40F57E210EB26E66EEB4EFE4FD3B9CFCD8BB95C5 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa Signing time: Fri 24 Oct 2025 15:24:32 +0000 ROA not before: Fri 24 Oct 2025 15:19:32 +0000 ROA not after: Fri 23 Oct 2026 15:24:32 +0000 asID: 5650 IP address blocks: 40.27.36.0/22 maxlen: 24 40.27.56.0/21 maxlen: 24 40.27.96.0/22 maxlen: 22 40.27.100.0/22 maxlen: 22 40.27.184.0/22 maxlen: 24 40.27.200.0/21 maxlen: 21 40.183.202.0/23 maxlen: 24 40.223.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f5:7e:21:0e:b2:6e:66:ee:b4:ef:e4:fd:3b:9c:fc:d8:bb:95:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Oct 24 15:19:32 2025 GMT Not After : Oct 23 15:24:32 2026 GMT Subject: CN=6E86F47D0A99F1132FC6C15A795B8E4F2F499C78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:5e:75:ef:31:c6:87:f2:5e:ec:39:78:8b: 57:15:02:10:72:fc:22:94:53:fd:ee:28:ca:9b:99: 1b:1c:63:0c:7f:60:3a:56:8f:f5:32:50:dc:04:02: ef:86:f2:4d:10:e1:55:47:16:b4:be:44:83:d1:7b: 7c:d2:32:b8:66:71:c0:1c:98:75:c0:e3:f8:00:4e: ba:9c:77:56:49:ff:c7:52:81:67:49:13:da:31:e4: 7a:c3:ec:87:ac:c4:86:17:51:21:28:6c:83:7a:31: 41:d7:52:b4:3e:9a:4e:c6:3f:72:ff:90:9d:be:37: 57:ad:73:f1:55:2f:44:a5:35:b1:63:4f:2e:f8:e1: b9:c0:8c:47:55:b1:8b:0a:d1:94:2b:83:f8:5d:d8: 1a:06:69:cc:a8:b5:4a:2f:97:27:b3:43:29:c8:2d: 0f:4c:18:0a:54:ca:d4:0d:c4:35:48:e5:bd:d0:ba: ab:cf:b1:1d:7a:28:76:3a:41:cd:88:f1:36:fd:be: eb:be:e7:49:29:23:00:9b:2a:f5:ea:03:bc:7d:52: 99:e7:26:7b:c4:3e:2b:c3:9b:08:07:a0:c1:14:52: f9:1a:d1:d6:5b:6a:58:e4:07:d0:ba:94:97:ab:b3: 0a:26:fc:ce:4a:dd:23:da:3b:2f:2e:a9:27:f4:5f: 7b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:86:F4:7D:0A:99:F1:13:2F:C6:C1:5A:79:5B:8E:4F:2F:49:9C:78 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.36.0/22 40.27.56.0/21 40.27.96.0/21 40.27.184.0/22 40.27.200.0/21 40.183.202.0/23 40.223.224.0/20 Signature Algorithm: sha256WithRSAEncryption af:52:f1:1e:fe:be:3e:82:3e:12:c9:b6:35:eb:7e:d7:c7:87: 2a:74:17:98:2b:96:e2:50:cd:20:a5:6a:ac:4f:e2:b6:a8:3a: 15:1b:22:12:86:6f:a5:ef:bf:70:e9:0d:a5:1e:d4:b5:d0:5e: 7e:50:7b:07:ae:26:9f:8a:4c:7c:2e:c7:03:6d:b0:e2:ce:0c: ec:23:50:09:1b:06:42:74:81:ae:d1:31:ec:ba:ba:0d:17:a9: a4:0d:bd:53:7b:54:f5:0b:a1:d3:73:21:d4:c7:53:39:3e:02: 5b:fe:f0:f3:70:36:f6:b4:b5:0a:b6:06:89:59:76:83:0a:76: 82:bd:2b:d6:bb:34:10:00:bb:20:a0:90:5c:91:d1:9f:a6:d0: bc:49:e2:0b:fb:0b:f6:53:66:93:d0:3a:6c:ef:1b:2b:f2:fe: 76:97:ed:b0:18:4c:b1:03:77:3b:11:eb:34:85:4b:54:64:f6: f7:66:10:78:5b:5a:24:9e:0d:13:d2:2b:78:0d:a1:39:cb:22: 17:ae:c7:97:6b:c1:63:9d:a7:aa:4a:fc:89:62:ec:ef:cc:d2: a6:cd:c9:cc:cf:76:47:56:6a:94:80:fa:c3:e3:2a:fc:9a:29: ff:33:53:35:1a:61:c0:6a:82:80:8c:14:7e:5f:de:a9:5c:84: 50:7d:d5:60 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgIUQPV+IQ6ybmbutO/k/Tuc/Ni7lcUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMDI0MTUxOTMyWhcNMjYxMDIzMTUyNDMy WjAzMTEwLwYDVQQDEyg2RTg2RjQ3RDBBOTlGMTEzMkZDNkMxNUE3OTVCOEU0RjJG NDk5Qzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0Vede8xxofy Xuw5eItXFQIQcvwilFP97ijKm5kbHGMMf2A6Vo/1MlDcBALvhvJNEOFVRxa0vkSD 0Xt80jK4ZnHAHJh1wOP4AE66nHdWSf/HUoFnSRPaMeR6w+yHrMSGF1EhKGyDejFB 11K0PppOxj9y/5CdvjdXrXPxVS9EpTWxY08u+OG5wIxHVbGLCtGUK4P4XdgaBmnM qLVKL5cns0MpyC0PTBgKVMrUDcQ1SOW90Lqrz7Edeih2OkHNiPE2/b7rvudJKSMA myr16gO8fVKZ5yZ7xD4rw5sIB6DBFFL5GtHWW2pY5AfQupSXq7MKJvzOSt0j2jsv Lqkn9F977QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFG6G9H0KmfETL8bBWnlbjk8v SZx4MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQwYI KwYBBQUHAQcBAf8ENDAyMDAEAgABMCoDBAIoGyQDBAMoGzgDBAMoG2ADBAIoG7gD BAMoG8gDBAEot8oDBAQo3+AwDQYJKoZIhvcNAQELBQADggEBAK9S8R7+vj6CPhLJ tjXrftfHhyp0F5grluJQzSClaqxP4raoOhUbIhKGb6Xvv3DpDaUe1LXQXn5Qeweu Jp+KTHwuxwNtsOLODOwjUAkbBkJ0ga7RMey6ug0XqaQNvVN7VPULodNzIdTHUzk+ Alv+8PNwNva0tQq2BolZdoMKdoK9K9a7NBAAuyCgkFyR0Z+m0LxJ4gv7C/ZTZpPQ OmzvGyvy/naX7bAYTLEDdzsR6zSFS1Rk9vdmEHhbWiSeDRPSK3gNoTnLIheux5dr wWOdp6pK/Ili7O/M0qbNyczPdkdWapSA+sPjKvyaKf8zUzUaYcBqgoCMFH5f3qlc hFB91WA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:04:27 2025 by rpki-client