$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: AGhdzIGM96naUJq79pVbZZT2tF6gKD32f35mRRKHVD4= Subject key identifier: 48:C1:57:5D:F5:41:E2:6D:7F:6C:22:F0:B7:EB:12:C6:1E:72:DC:F1 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 7D84AC138971F0B9E6FE95A874BD09F701EBF233 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa Signing time: Fri 01 Aug 2025 14:51:27 +0000 ROA not before: Fri 01 Aug 2025 14:46:27 +0000 ROA not after: Fri 31 Jul 2026 14:51:27 +0000 asID: 5650 IP address blocks: 40.27.28.0/22 maxlen: 24 40.27.56.0/21 maxlen: 24 40.27.140.0/22 maxlen: 24 40.27.200.0/21 maxlen: 21 40.223.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:84:ac:13:89:71:f0:b9:e6:fe:95:a8:74:bd:09:f7:01:eb:f2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 1 14:46:27 2025 GMT Not After : Jul 31 14:51:27 2026 GMT Subject: CN=48C1575DF541E26D7F6C22F0B7EB12C61E72DCF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:c9:a5:9c:5e:42:79:af:93:b9:3d:6e:62: 4d:8d:11:3f:f4:24:31:56:e0:01:b2:41:f4:f3:e5: 6f:b7:d9:f3:cc:1e:5a:52:f6:c2:9d:a1:6e:61:ba: 86:1e:64:b2:bf:f3:41:13:e9:cb:bd:74:6b:c6:aa: d0:b1:eb:cb:52:66:99:e5:53:b1:8f:07:53:27:28: fb:79:da:19:96:fa:bf:25:bc:cc:3f:24:38:7c:01: 74:87:9c:c2:d7:66:ee:68:d1:8a:b9:09:4e:66:4c: d1:83:f6:b4:eb:c1:5c:28:fa:4d:28:9e:63:ec:28: 18:fe:93:12:12:4c:82:37:3b:38:1a:ed:5c:8f:a0: f1:16:d3:e6:ee:9c:a4:88:95:3b:01:a0:eb:1f:ae: c0:51:66:9e:db:3b:a7:36:1d:0d:98:ac:e1:a5:1f: e6:35:c7:98:c4:d1:44:31:43:0b:84:f7:53:2b:12: ee:a3:ce:88:48:8f:b6:b8:75:bd:71:ed:56:ee:2f: e3:b3:0a:86:40:f8:41:25:1e:03:fa:0c:cb:6c:8d: a1:85:55:eb:09:db:fb:8e:64:98:ab:52:2e:10:39: 70:8e:d3:c5:e8:37:36:ab:2d:31:1b:2f:48:1f:f4: 77:9c:ee:02:be:f1:a7:68:ab:4a:fd:bf:72:d7:8c: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C1:57:5D:F5:41:E2:6D:7F:6C:22:F0:B7:EB:12:C6:1E:72:DC:F1 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.28.0/22 40.27.56.0/21 40.27.140.0/22 40.27.200.0/21 40.223.224.0/20 Signature Algorithm: sha256WithRSAEncryption 01:b6:5c:8a:b2:f6:77:82:1c:b1:01:88:ec:6e:f8:84:fa:55: 49:ce:63:ad:f7:0a:a1:4f:0d:dd:99:c3:e8:2e:27:6c:2a:a6: d7:fb:4a:61:42:7b:4d:dc:e9:c5:8b:7b:40:f8:6e:bd:e5:62: 23:4f:9c:82:42:de:08:1b:44:ef:97:07:6f:25:77:63:92:23: a3:bc:d1:8a:ae:71:fa:0b:90:56:2d:94:84:a4:17:d5:14:2e: 04:2a:a8:ce:25:53:1a:5e:d3:db:37:03:a8:29:8c:0c:c0:57: 29:b9:44:16:43:79:a9:33:c7:16:76:f8:df:ee:7a:41:b7:09: 73:8a:09:08:59:e3:39:42:00:db:10:ef:af:e0:4e:da:01:1c: dc:92:c8:d7:6c:2c:49:c1:fe:dc:11:a2:ac:b5:dc:a8:ba:6f: 5e:89:11:e9:ff:d3:24:6d:50:06:87:d0:e0:25:b5:dc:f7:7e: 7f:cb:85:23:c9:52:82:66:70:b0:51:7a:00:8b:3d:e4:4b:27: b8:9b:53:d4:a1:bc:c1:c4:72:f0:5a:b0:d7:38:8b:95:c2:df: b0:44:0c:9e:8f:68:39:b2:4c:f1:5b:91:78:e1:f0:6a:4a:4d: a5:f4:0f:c7:f1:7d:65:9d:28:ec:2f:57:86:00:40:11:0e:90: 97:d5:18:14 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUfYSsE4lx8Lnm/pWodL0J9wHr8jMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwODAxMTQ0NjI3WhcNMjYwNzMxMTQ1MTI3 WjAzMTEwLwYDVQQDEyg0OEMxNTc1REY1NDFFMjZEN0Y2QzIyRjBCN0VCMTJDNjFF NzJEQ0YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDrJpZxeQnmv k7k9bmJNjRE/9CQxVuABskH08+Vvt9nzzB5aUvbCnaFuYbqGHmSyv/NBE+nLvXRr xqrQsevLUmaZ5VOxjwdTJyj7edoZlvq/JbzMPyQ4fAF0h5zC12buaNGKuQlOZkzR g/a068FcKPpNKJ5j7CgY/pMSEkyCNzs4Gu1cj6DxFtPm7pykiJU7AaDrH67AUWae 2zunNh0NmKzhpR/mNceYxNFEMUMLhPdTKxLuo86ISI+2uHW9ce1W7i/jswqGQPhB JR4D+gzLbI2hhVXrCdv7jmSYq1IuEDlwjtPF6Dc2qy0xGy9IH/R3nO4CvvGnaKtK /b9y14wipQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEjBV131QeJtf2wi8LfrEsYe ctzxMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYI KwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAIoGxwDBAMoGzgDBAIoG4wDBAMoG8gD BAQo3+AwDQYJKoZIhvcNAQELBQADggEBAAG2XIqy9neCHLEBiOxu+IT6VUnOY633 CqFPDd2Zw+guJ2wqptf7SmFCe03c6cWLe0D4br3lYiNPnIJC3ggbRO+XB28ld2OS I6O80YqucfoLkFYtlISkF9UULgQqqM4lUxpe09s3A6gpjAzAVym5RBZDeakzxxZ2 +N/uekG3CXOKCQhZ4zlCANsQ76/gTtoBHNySyNdsLEnB/twRoqy13Ki6b16JEen/ 0yRtUAaH0OAltdz3fn/LhSPJUoJmcLBRegCLPeRLJ7ibU9ShvMHEcvBasNc4i5XC 37BEDJ6PaDmyTPFbkXjh8GpKTaX0D8fxfWWdKOwvV4YAQBEOkJfVGBQ= -----END CERTIFICATE-----Generated at Wed Aug 6 04:04:18 2025 by rpki-client