$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: 0v2/fC1bFsmH/25OGAAmV5gPzE7fkTMb37dknmgSFmA= Subject key identifier: E2:F4:36:C7:A2:58:CA:D7:EC:7B:80:02:68:E4:54:7F:C9:32:E2:D0 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 163A23FA587A0E0A638630026FB0ABF3D8841630 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5650.roa Signing time: Sun 14 Sep 2025 22:38:49 +0000 ROA not before: Sun 14 Sep 2025 22:33:49 +0000 ROA not after: Sun 13 Sep 2026 22:38:49 +0000 asID: 5650 IP address blocks: 96.44.150.0/24 maxlen: 24 104.223.114.0/24 maxlen: 24 216.97.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 05:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3a:23:fa:58:7a:0e:0a:63:86:30:02:6f:b0:ab:f3:d8:84:16:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Sep 14 22:33:49 2025 GMT Not After : Sep 13 22:38:49 2026 GMT Subject: CN=E2F436C7A258CAD7EC7B800268E4547FC932E2D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:03:a3:9f:f3:ee:a3:0b:ba:54:d6:80:df: d6:8e:7e:0c:5b:8e:23:03:7f:54:ca:99:6c:15:de: 8d:c1:ca:f1:5d:f9:da:68:60:c0:39:8d:68:58:b5: ac:07:8c:24:30:d0:33:d7:d6:62:38:f4:04:80:49: f1:8b:01:34:c6:b8:05:72:d9:11:d1:af:d8:55:ac: e5:18:6f:b0:53:62:f6:d0:ff:58:04:4a:80:17:a3: 1a:9c:4f:21:96:42:55:ae:83:bc:81:d5:74:e6:c0: b8:aa:a9:d2:ec:93:f8:b2:45:eb:3f:39:7a:ba:70: 5b:3c:16:c4:a9:1d:bd:f5:e1:e4:6b:4a:db:a2:f6: 16:81:64:b8:89:2f:d8:e0:25:1e:f5:1a:ca:c5:11: 99:00:73:32:12:b1:9e:82:cb:8e:1e:02:c7:77:96: 9e:91:2b:40:9b:77:cb:f1:db:c1:93:29:39:a3:91: e3:de:24:94:21:d0:19:f3:ee:af:d4:2d:36:ce:0a: e0:a9:c0:a1:85:6e:9c:54:5f:3b:75:b0:e9:9b:f8: 1e:f8:3e:ed:c8:6f:2b:ff:ed:c1:10:f1:2b:88:26: d2:96:26:f8:81:76:8b:fd:a9:e1:95:96:f0:d2:56: 37:4e:93:fe:a5:8d:b4:bc:a1:eb:c3:0d:2d:8e:e9: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F4:36:C7:A2:58:CA:D7:EC:7B:80:02:68:E4:54:7F:C9:32:E2:D0 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.44.150.0/24 104.223.114.0/24 216.97.236.0/23 Signature Algorithm: sha256WithRSAEncryption 16:d9:15:52:dd:2b:da:16:c2:33:56:99:ba:89:9f:e6:9e:6c: a6:87:4f:69:09:0a:70:31:11:12:56:5d:91:be:49:23:1a:ee: 57:e7:d3:6c:9a:22:1f:76:07:b1:0e:ce:e3:00:33:4f:d8:ba: 17:ff:cd:98:74:8b:7c:23:01:84:19:3d:4f:e6:96:63:8d:3c: 0b:5d:d3:b6:88:fc:b1:d3:19:2e:09:2e:c0:88:74:a4:61:8f: 6f:80:99:f6:a3:13:c2:3d:71:65:e4:1a:8e:8f:ee:7f:03:27: 10:62:cf:95:b9:45:b1:d6:21:ac:12:74:ef:30:1d:ee:25:fa: 34:74:b4:24:96:c3:aa:09:9d:73:88:a2:1c:61:8c:db:b9:f9: 88:c9:c4:6d:21:52:ad:bb:42:b7:b3:63:7a:3c:34:13:84:ed: 59:59:3a:31:0d:76:73:db:74:7d:95:c7:66:13:9c:c3:b3:30: 1f:19:47:8d:4c:a0:98:bd:d6:1b:c0:b8:af:55:b0:70:c9:6a: dc:70:48:6c:b4:11:87:8f:80:17:a0:95:84:31:0c:61:34:f9: b6:20:bb:78:bb:61:a9:d8:36:8f:a6:e6:a0:db:c0:56:e1:99: bf:3b:76:68:09:2c:13:30:67:ea:39:29:1f:09:c9:43:cb:48: e8:b2:25:68 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUFjoj+lh6DgpjhjACb7Cr89iEFjAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwOTE0MjIzMzQ5WhcNMjYwOTEzMjIzODQ5 WjAzMTEwLwYDVQQDEyhFMkY0MzZDN0EyNThDQUQ3RUM3QjgwMDI2OEU0NTQ3RkM5 MzJFMkQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdADo5/z7qML ulTWgN/Wjn4MW44jA39UyplsFd6NwcrxXfnaaGDAOY1oWLWsB4wkMNAz19ZiOPQE gEnxiwE0xrgFctkR0a/YVazlGG+wU2L20P9YBEqAF6ManE8hlkJVroO8gdV05sC4 qqnS7JP4skXrPzl6unBbPBbEqR299eHka0rbovYWgWS4iS/Y4CUe9RrKxRGZAHMy ErGegsuOHgLHd5aekStAm3fL8dvBkyk5o5Hj3iSUIdAZ8+6v1C02zgrgqcChhW6c VF87dbDpm/ge+D7tyG8r/+3BEPEriCbSlib4gXaL/anhlZbw0lY3TpP+pY20vKHr ww0tjunNvQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFOL0NseiWMrX7HuAAmjkVH/J MuLQMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABgLJYDBABo33IDBAHYYewwDQYJKoZI hvcNAQELBQADggEBABbZFVLdK9oWwjNWmbqJn+aebKaHT2kJCnAxERJWXZG+SSMa 7lfn02yaIh92B7EOzuMAM0/Yuhf/zZh0i3wjAYQZPU/mlmONPAtd07aI/LHTGS4J LsCIdKRhj2+AmfajE8I9cWXkGo6P7n8DJxBiz5W5RbHWIawSdO8wHe4l+jR0tCSW w6oJnXOIohxhjNu5+YjJxG0hUq27QrezY3o8NBOE7VlZOjENdnPbdH2Vx2YTnMOz MB8ZR41MoJi91hvAuK9VsHDJatxwSGy0EYePgBeglYQxDGE0+bYgu3i7YanYNo+m 5qDbwFbhmb87dmgJLBMwZ+o5KR8JyUPLSOiyJWg= -----END CERTIFICATE-----Generated at Tue Nov 4 19:23:44 2025 by rpki-client