$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcca8c40-2a03-395b-8c71-379fa789c992.roa File: dcca8c40-2a03-395b-8c71-379fa789c992.roa (raw, json) Hash identifier: 7TIASYYJZAGd9/I/zIDwEIxaYKynIB8MV5IGBIgIzNA= Subject key identifier: 1C:EB:53:91:66:4D:E9:3D:59:2A:25:B7:D9:D5:20:4E:59:36:CB:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F49739C4D1F33C6F6A0361540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcca8c40-2a03-395b-8c71-379fa789c992.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 98.22.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:9c:4d:1f:33:c6:f6:a0:36:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e7b9fa44-c066-4007-b0d9-b53041dd28f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:85:99:fb:27:19:79:fb:73:77:fa:a7:b5:9c: 54:71:b2:64:2f:9b:40:d3:91:2c:b3:1b:cc:19:34: 11:4d:af:c7:31:7d:1c:fc:8b:39:de:80:ed:62:19: 13:23:2d:ab:ec:97:09:8b:43:47:70:39:cc:96:7d: 41:f2:33:26:09:3c:c9:b0:ae:a4:67:79:c0:f6:29: 83:f0:e7:87:d2:7a:35:ca:85:e2:31:fd:70:7c:f4: f4:fe:f3:f1:64:7f:57:22:3b:7d:27:93:2a:51:44: 4b:6d:b5:6e:ca:33:92:cf:6a:ac:a0:71:5a:73:eb: d0:aa:d6:fa:2c:da:3e:7c:ef:9c:5f:88:a4:64:a2: 01:b4:77:19:46:d7:f9:73:3a:79:c0:af:a3:aa:8b: 35:47:70:96:32:a5:29:18:94:76:c3:b5:7b:2a:bc: 5a:8b:ca:17:1a:1c:32:f0:67:92:93:26:3d:3b:0b: c7:2b:9e:ea:6d:88:72:28:4c:bc:c2:cd:8e:8b:b0: 0b:78:09:73:3c:b7:4f:d9:65:a8:f1:e3:d0:62:97: 5d:76:42:e8:96:11:a4:30:65:36:91:7f:3e:a3:80: 50:77:2f:0a:4f:88:22:09:50:d2:e9:c4:30:2a:69: 76:71:68:9d:f4:4e:96:9a:57:25:73:5f:4a:28:c4: e8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EB:53:91:66:4D:E9:3D:59:2A:25:B7:D9:D5:20:4E:59:36:CB:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcca8c40-2a03-395b-8c71-379fa789c992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:de:fc:ca:af:0e:be:4c:ba:68:d7:c7:ad:fe:7a:bb:e7:2e: a3:fc:8d:f0:02:a1:4f:7b:df:82:35:f8:3d:44:a9:84:09:42: 52:13:95:f7:97:c1:9b:9e:9b:66:42:12:f2:2a:b0:9c:00:77: 03:44:35:e7:56:68:cb:e0:d5:12:c4:f5:9c:21:02:b5:9b:50: 2d:7f:c8:d5:ec:ac:f2:b5:a0:16:d9:3c:03:32:b4:60:a3:48: cb:42:b3:f5:22:97:c9:a2:d7:5d:fc:5e:2c:83:3b:82:06:8a: 4b:9b:36:21:e5:5f:79:9c:e0:69:f2:46:ac:64:a8:62:f7:b5: 77:c2:11:bd:4e:89:1b:6e:04:f4:23:3a:c4:ee:db:0a:08:f3: 63:b6:e9:7d:45:4b:77:c6:30:0a:c3:34:53:39:94:4c:04:e8: b2:04:aa:44:34:40:fc:3e:c2:cc:f4:65:41:98:7b:52:63:ba: 1a:cc:d5:ca:b4:a1:38:92:96:07:df:38:db:33:f7:92:8b:7b: 2c:02:36:2b:b3:71:84:27:27:31:a0:11:ff:36:61:4b:b7:a3: f3:f1:9f:d0:cc:c1:2d:68:b2:88:00:84:68:78:16:9f:81:8f: 1b:07:cb:c2:38:d0:41:d6:10:f9:ef:3c:89:61:44:af:6a:60: 04:58:3e:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5xNHzPG9qA2FUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTdiOWZhNDQtYzA2Ni00MDA3LWIwZDktYjUzMDQxZGQyOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoWZ+ycZeftzd/qntZxUcbJkL5tA05EssxvM GTQRTa/HMX0c/Is53oDtYhkTIy2r7JcJi0NHcDnMln1B8jMmCTzJsK6kZ3nA9imD 8OeH0no1yoXiMf1wfPT0/vPxZH9XIjt9J5MqUURLbbVuyjOSz2qsoHFac+vQqtb6 LNo+fO+cX4ikZKIBtHcZRtf5czp5wK+jqos1R3CWMqUpGJR2w7V7Krxai8oXGhwy 8GeSkyY9OwvHK57qbYhyKEy8ws2Oi7ALeAlzPLdP2WWo8ePQYpdddkLolhGkMGU2 kX8+o4BQdy8KT4giCVDS6cQwKml2cWid9E6Wmlclc19KKMTouQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzrU5FmTek9WSolt9nVIE5ZNsuYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGNjYThjNDAtMmEwMy0z OTViLThjNzEtMzc5ZmE3ODljOTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXe/MqvDr5MumjXx63+ervnLqP8jfACoU9734I1+D1EqYQJQlITlfeX wZuem2ZCEvIqsJwAdwNENedWaMvg1RLE9ZwhArWbUC1/yNXsrPK1oBbZPAMytGCj SMtCs/Uil8mi1138XiyDO4IGikubNiHlX3mc4GnyRqxkqGL3tXfCEb1OiRtuBPQj OsTu2woI82O26X1FS3fGMArDNFM5lEwE6LIEqkQ0QPw+wsz0ZUGYe1JjuhrM1cq0 oTiSlgffONsz95KLeywCNiuzcYQnJzGgEf82YUu3o/Pxn9DMwS1osogAhGh4Fp+B jxsHy8I40EHWEPnvPIlhRK9qYARYPl0= -----END CERTIFICATE-----Generated at Mon Sep 28 21:42:25 2026 by rpki-client