$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: vq7g6e+vCtXhFpFXo2F1JTiyi1JznJ0SbjyVuTVgxjg= Subject key identifier: 88:E2:7F:73:5C:46:E3:49:AC:FA:63:15:45:70:7E:6B:C2:D9:E2:83 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 564AF7A58D4DFFA61DD184F046AF97F943289502 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa Signing time: Mon 26 Jan 2026 15:50:06 +0000 ROA not before: Mon 26 Jan 2026 15:45:06 +0000 ROA not after: Mon 25 Jan 2027 15:50:06 +0000 asID: 5650 IP address blocks: 40.27.36.0/22 maxlen: 24 40.27.96.0/22 maxlen: 22 40.27.100.0/22 maxlen: 22 40.27.136.0/21 maxlen: 21 40.27.148.0/22 maxlen: 22 40.27.152.0/22 maxlen: 22 40.27.176.0/21 maxlen: 21 40.27.184.0/22 maxlen: 24 40.27.200.0/21 maxlen: 21 40.27.220.0/22 maxlen: 22 40.27.240.0/22 maxlen: 22 40.183.202.0/23 maxlen: 24 40.223.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4a:f7:a5:8d:4d:ff:a6:1d:d1:84:f0:46:af:97:f9:43:28:95:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jan 26 15:45:06 2026 GMT Not After : Jan 25 15:50:06 2027 GMT Subject: CN=88E27F735C46E349ACFA631545707E6BC2D9E283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ea:a5:5b:f6:bb:a2:ec:e8:bb:ef:57:80:dd: e9:3c:66:5c:c6:86:44:8b:d8:b0:56:4a:b8:27:5c: 4b:82:92:27:dd:e4:5b:10:b0:5b:ee:a9:e9:ba:65: 2b:93:87:19:a4:6a:ae:7a:7f:f4:a2:2f:c9:bd:b5: 86:52:5e:c0:97:39:92:40:4f:fd:08:b6:10:35:50: ab:46:8f:ca:1b:6d:81:04:03:b9:b9:89:d8:58:42: e3:73:f7:72:b2:22:40:f0:56:12:42:03:be:13:65: ce:0d:33:be:44:76:d1:a2:f4:37:69:c1:b4:bd:43: 64:b8:4e:91:68:36:46:37:ee:5d:14:be:76:4f:35: e8:1e:85:44:ee:9e:21:f1:1c:88:7c:13:22:6b:27: 12:b7:90:ed:63:d0:85:a9:7e:0a:b9:16:75:6b:81: 2d:f3:ef:ee:3e:b0:57:59:23:bc:8e:f2:a3:40:92: 1e:cc:8c:5a:e6:23:ce:1d:67:d2:2c:67:ea:06:75: 08:cc:3d:07:ec:b0:71:02:c1:5e:7c:fc:63:c3:03: 32:38:af:2b:cf:f2:ed:27:86:61:84:f0:01:9b:73: 5a:cd:da:8a:41:64:db:6a:cf:a3:7f:fa:ea:ed:67: df:7e:5f:ec:f5:6a:ca:bb:74:cc:d9:0e:dc:3b:75: 6e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E2:7F:73:5C:46:E3:49:AC:FA:63:15:45:70:7E:6B:C2:D9:E2:83 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.36.0/22 40.27.96.0/21 40.27.136.0/21 40.27.148.0-40.27.155.255 40.27.176.0-40.27.187.255 40.27.200.0/21 40.27.220.0/22 40.27.240.0/22 40.183.202.0/23 40.223.224.0/20 Signature Algorithm: sha256WithRSAEncryption 86:d2:cf:05:e0:a7:06:d3:5e:3c:fb:f4:53:24:d9:ed:f1:13: de:be:ee:48:6b:d9:ce:70:17:5c:74:a7:10:e3:b9:43:75:d6: 6c:83:8d:41:d9:47:e2:6c:d6:ab:8b:65:5d:b4:35:f2:8f:7e: 88:f4:1c:85:2d:e4:a3:13:ec:18:58:dc:3a:5f:6a:b1:2d:18: 60:73:95:5f:58:3b:ec:8a:c4:93:21:d3:6c:d4:da:a6:e6:a0: 49:66:2b:a1:ec:ff:72:39:19:1e:41:aa:b4:7b:dd:18:57:21: 27:bc:e3:38:28:62:6e:59:29:1e:5c:3d:ec:4d:df:2c:a1:f6: 7a:80:df:c3:bc:f0:84:b8:20:5e:7d:2b:12:e0:4c:83:0c:24: 70:67:24:da:5e:7a:a3:b0:65:5e:9d:9e:cb:32:6a:02:5a:e2: 95:1a:7b:40:e7:52:e4:37:ea:22:ab:04:67:bd:c1:5c:ac:25: 92:ae:37:34:a3:73:45:57:3b:d1:9b:e7:34:95:19:77:2d:78: a2:24:85:83:a8:cd:29:fe:58:a0:b5:aa:30:26:31:f1:a5:3e: 00:79:09:d2:aa:f2:ad:83:69:76:af:77:9e:da:20:96:da:5b: 66:4e:20:51:d2:19:8a:2c:56:ef:ed:43:2e:38:01:29:4a:38: 79:98:97:7b -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUVkr3pY1N/6Yd0YTwRq+X+UMolQIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwMTI2MTU0NTA2WhcNMjcwMTI1MTU1MDA2 WjAzMTEwLwYDVQQDEyg4OEUyN0Y3MzVDNDZFMzQ5QUNGQTYzMTU0NTcwN0U2QkMy RDlFMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeqlW/a7ouzo u+9XgN3pPGZcxoZEi9iwVkq4J1xLgpIn3eRbELBb7qnpumUrk4cZpGquen/0oi/J vbWGUl7AlzmSQE/9CLYQNVCrRo/KG22BBAO5uYnYWELjc/dysiJA8FYSQgO+E2XO DTO+RHbRovQ3acG0vUNkuE6RaDZGN+5dFL52TzXoHoVE7p4h8RyIfBMiaycSt5Dt Y9CFqX4KuRZ1a4Et8+/uPrBXWSO8jvKjQJIezIxa5iPOHWfSLGfqBnUIzD0H7LBx AsFefPxjwwMyOK8rz/LtJ4ZhhPABm3NazdqKQWTbas+jf/rq7Wfffl/s9WrKu3TM 2Q7cO3VulwIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFIjif3NcRuNJrPpjFUVwfmvC 2eKDMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZQYI KwYBBQUHAQcBAf8EVjBUMFIEAgABMEwDBAIoGyQDBAMoG2ADBAMoG4gwDAMEAigb lAMEAigbmDAMAwQEKBuwAwQCKBu4AwQDKBvIAwQCKBvcAwQCKBvwAwQBKLfKAwQE KN/gMA0GCSqGSIb3DQEBCwUAA4IBAQCG0s8F4KcG0148+/RTJNnt8RPevu5Ia9nO cBdcdKcQ47lDddZsg41B2UfibNari2VdtDXyj36I9ByFLeSjE+wYWNw6X2qxLRhg c5VfWDvsisSTIdNs1Nqm5qBJZiuh7P9yORkeQaq0e90YVyEnvOM4KGJuWSkeXD3s Td8sofZ6gN/DvPCEuCBefSsS4EyDDCRwZyTaXnqjsGVenZ7LMmoCWuKVGntA51Lk N+oiqwRnvcFcrCWSrjc0o3NFVzvRm+c0lRl3LXiiJIWDqM0p/ligtaowJjHxpT4A eQnSqvKtg2l2r3ee2iCW2ltmTiBR0hmKLFbv7UMuOAEpSjh5mJd7 -----END CERTIFICATE-----Generated at Mon Mar 2 06:11:16 2026 by rpki-client