$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: 7sM5fF7bL++92MVoNZ59yiNe/Eh9TA+T9OI7kIlRo2Y= Subject key identifier: 68:B2:12:C4:A1:D4:57:5D:DE:57:50:06:FA:8A:96:FD:D0:03:23:B8 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 6FAB0F1FCE5EC3B8942240A94CCE1F70A9CCCF29 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa Signing time: Mon 14 Jul 2025 15:48:21 +0000 ROA not before: Mon 14 Jul 2025 15:43:21 +0000 ROA not after: Mon 13 Jul 2026 15:48:21 +0000 asID: 5650 IP address blocks: 40.27.28.0/22 maxlen: 24 40.27.56.0/21 maxlen: 24 40.27.140.0/22 maxlen: 24 40.223.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ab:0f:1f:ce:5e:c3:b8:94:22:40:a9:4c:ce:1f:70:a9:cc:cf:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jul 14 15:43:21 2025 GMT Not After : Jul 13 15:48:21 2026 GMT Subject: CN=68B212C4A1D4575DDE575006FA8A96FDD00323B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:45:83:73:11:38:c9:26:27:23:8c:28:4b: 4c:47:42:af:fa:4c:db:02:66:8a:fa:ee:bd:08:f4: fa:ee:23:86:e1:0f:88:3a:f4:3a:a5:69:82:af:a2: c1:21:09:99:fc:80:70:4e:6f:7c:0d:cc:c6:b8:be: 58:38:fd:db:b8:4f:47:88:c4:83:6c:ef:ee:7d:96: 7d:33:5f:4d:8e:de:f4:a4:a1:45:24:bb:28:5c:db: 74:2e:44:03:59:f4:fa:40:dc:c4:bd:87:1b:cb:b9: 40:cd:a2:e1:2a:b4:1f:b7:02:64:33:d5:0a:8e:f7: 52:09:98:a9:f5:80:4e:74:6c:f2:6a:5f:48:71:83: c2:2b:32:97:25:c9:a3:d6:14:e4:33:5a:b4:ce:7b: f5:f6:43:87:ad:9f:db:83:47:92:cd:5b:8a:63:26: bf:42:40:67:54:d9:0b:6c:f8:c6:20:a5:28:02:56: f9:61:a1:27:e9:bd:76:ed:97:78:0d:78:4e:05:b3: d1:db:9f:d8:25:70:84:87:8e:fe:8f:84:fa:ee:73: 33:b9:75:13:62:6e:30:d1:0c:ad:ce:47:3d:f6:00: aa:c8:90:b9:3c:29:14:f6:8c:aa:47:19:db:ad:ff: f8:41:67:d8:a3:a4:a7:ea:75:ca:34:75:a4:cc:8f: bc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B2:12:C4:A1:D4:57:5D:DE:57:50:06:FA:8A:96:FD:D0:03:23:B8 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.28.0/22 40.27.56.0/21 40.27.140.0/22 40.223.224.0/20 Signature Algorithm: sha256WithRSAEncryption a1:bf:03:6b:d2:9b:1a:de:1c:dc:9b:c7:0d:86:dc:06:94:54: b6:d8:b2:7b:b0:bf:1c:14:2b:6f:08:c2:b9:10:22:f3:c3:5b: a9:92:04:97:86:a0:aa:83:0b:91:a8:b1:5a:9e:fd:1b:a4:ad: 1b:59:32:65:f9:52:90:9b:bf:15:96:c0:93:82:c2:68:85:d7: a6:ed:8a:f6:47:e2:e2:a5:45:ad:dd:fd:88:91:a0:c1:17:f5: 77:92:e3:0e:ca:9a:af:d8:9a:44:f8:3f:5e:f4:31:38:16:17: fa:82:88:2e:cc:73:fd:b6:ee:e0:a0:4e:4c:79:d0:32:6b:ce: 4f:d1:33:64:71:18:76:fd:63:1b:89:80:63:5a:b7:9f:50:d1: 76:dc:42:8c:bd:a9:57:d0:da:a9:6f:e3:2a:70:e6:df:c7:e4: 17:c3:8b:7d:d1:4a:0e:0f:51:da:85:8f:4c:fe:30:2f:f7:7e: bd:ab:61:b1:47:ce:cd:36:d0:5a:2b:7a:3b:ed:1e:34:f6:7c: 32:ae:87:2f:01:ee:74:7b:df:f2:f9:15:20:9d:e6:44:e8:9e: b5:20:fd:e4:f8:df:97:a0:1f:dd:fa:a1:4c:34:3c:4e:c4:ee: f8:b2:4f:ff:d4:89:50:4e:1c:a2:72:bc:fc:b1:48:b0:e7:b1: 0c:3b:40:03 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUb6sPH85ew7iUIkCpTM4fcKnMzykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNzE0MTU0MzIxWhcNMjYwNzEzMTU0ODIx WjAzMTEwLwYDVQQDEyg2OEIyMTJDNEExRDQ1NzVEREU1NzUwMDZGQThBOTZGREQw MDMyM0I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFdFg3MROMkm JyOMKEtMR0Kv+kzbAmaK+u69CPT67iOG4Q+IOvQ6pWmCr6LBIQmZ/IBwTm98DczG uL5YOP3buE9HiMSDbO/ufZZ9M19Njt70pKFFJLsoXNt0LkQDWfT6QNzEvYcby7lA zaLhKrQftwJkM9UKjvdSCZip9YBOdGzyal9IcYPCKzKXJcmj1hTkM1q0znv19kOH rZ/bg0eSzVuKYya/QkBnVNkLbPjGIKUoAlb5YaEn6b127Zd4DXhOBbPR25/YJXCE h47+j4T67nMzuXUTYm4w0Qytzkc99gCqyJC5PCkU9oyqRxnbrf/4QWfYo6Sn6nXK NHWkzI+8rwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFGiyEsSh1Fdd3ldQBvqKlv3Q AyO4MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYI KwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAIoGxwDBAMoGzgDBAIoG4wDBAQo3+Aw DQYJKoZIhvcNAQELBQADggEBAKG/A2vSmxreHNybxw2G3AaUVLbYsnuwvxwUK28I wrkQIvPDW6mSBJeGoKqDC5GosVqe/RukrRtZMmX5UpCbvxWWwJOCwmiF16btivZH 4uKlRa3d/YiRoMEX9XeS4w7Kmq/YmkT4P170MTgWF/qCiC7Mc/227uCgTkx50DJr zk/RM2RxGHb9YxuJgGNat59Q0XbcQoy9qVfQ2qlv4ypw5t/H5BfDi33RSg4PUdqF j0z+MC/3fr2rYbFHzs020ForejvtHjT2fDKuhy8B7nR73/L5FSCd5kTonrUg/eT4 35egH936oUw0PE7E7viyT//UiVBOHKJyvPyxSLDnsQw7QAM= -----END CERTIFICATE-----Generated at Sun Jul 20 14:16:20 2025 by rpki-client