
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a59820ee-058c-3b89-802e-fa9e3f0427fe.roa
File: a59820ee-058c-3b89-802e-fa9e3f0427fe.roa (raw, json)
Hash identifier: 0h72ebFfJexun6hcQFJ8x0+tbNcb6nRhkNgnIm/XOyM=
Subject key identifier: 66:A4:46:55:20:39:B8:F9:5E:65:53:FD:0F:15:87:F8:C2:D4:C1:27
Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial: 010D0C9F4328584CC07C9AEE7F1014EC9FA69980
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a59820ee-058c-3b89-802e-fa9e3f0427fe.roa
Signing time: Wed 04 Feb 2026 14:00:39 +0000
ROA not before: Wed 04 Feb 2026 14:00:39 +0000
ROA not after: Tue 05 May 2026 13:00:39 +0000
asID: 399275
IP address blocks: 172.81.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c0:7c:9a:ee:7f:10:14:ec:9f:a6:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
Validity
Not Before: Feb 4 14:00:39 2026 GMT
Not After : May 5 13:00:39 2026 GMT
Subject: CN=cf3c164c-29c3-4039-a9ce-c3ccf4bc7458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:a2:81:c3:3b:34:fd:aa:e6:97:a4:2b:b1:
07:24:f4:38:e4:9f:e8:9a:29:c1:d2:8f:84:0c:c0:
6c:c1:98:31:4c:33:95:b5:dc:46:c2:15:df:8c:5a:
00:27:28:d4:6f:d6:c6:3a:82:8d:f2:c7:91:1c:05:
b5:6d:18:1d:89:ad:94:da:6e:f3:78:9e:b0:7d:29:
be:eb:79:f9:1c:e2:72:cf:a2:ea:1d:c8:35:f7:4e:
8e:0b:f9:1b:8a:31:5c:5d:76:07:7d:6b:aa:f2:74:
32:bc:f5:cd:da:39:c2:2a:57:36:5c:5e:73:3f:72:
9a:6e:2f:38:11:89:f9:1b:f3:b3:43:49:59:75:37:
ca:d0:43:da:c8:ad:e7:3f:48:e8:86:96:2a:b8:25:
6c:9f:51:21:d0:dd:7e:3d:5e:41:82:1c:01:98:6e:
cb:cb:f9:57:48:9d:3f:e8:14:ae:65:bd:3f:f1:44:
84:5f:22:84:5b:ea:49:8e:d6:d0:53:f7:cc:2a:76:
fa:3b:b8:b1:53:35:bb:49:3d:db:20:4b:46:ec:70:
14:f5:93:17:be:78:9c:01:d6:08:64:01:6b:49:a9:
b5:69:10:6b:23:95:43:0d:91:65:2f:01:f7:f0:3b:
6a:b3:e8:63:10:73:93:7a:be:7a:5a:bf:00:f4:7d:
85:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A4:46:55:20:39:B8:F9:5E:65:53:FD:0F:15:87:F8:C2:D4:C1:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a59820ee-058c-3b89-802e-fa9e3f0427fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
X509v3 Authority Key Identifier:
keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
sbgp-ipAddrBlock: critical
IPv4:
172.81.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:3f:2b:5d:86:79:ad:ea:4b:36:c9:2d:78:35:97:be:b4:cb:
28:4b:81:d9:84:a4:bd:2e:3b:6b:81:11:b9:49:54:d8:93:75:
e8:5a:e3:3a:da:78:ed:a3:2e:62:ab:3e:3b:6a:77:80:5b:27:
e4:52:3d:0e:e1:76:8c:fa:1c:3b:bc:e8:8d:3e:3c:e4:2f:ee:
4c:eb:c3:c0:88:1d:d9:73:bc:8c:71:fb:cc:f9:2d:31:e6:f0:
ee:9f:de:32:08:e3:b4:49:3e:a0:4c:e1:15:b1:86:b6:d9:98:
bb:61:69:99:f0:ad:47:82:80:fd:0f:a1:46:2a:f9:f2:11:70:
ef:f9:61:bf:ad:50:b0:d7:5f:6b:3d:bd:0e:9e:3e:01:63:4f:
78:f5:61:38:69:74:8c:e6:2e:cc:8a:bd:b5:e0:f5:0e:4b:d2:
4c:95:5c:72:0b:32:32:21:75:79:3f:bf:21:61:57:cb:e7:5a:
37:b9:28:d3:af:88:88:3e:80:22:b5:aa:50:12:0d:f8:37:38:
ab:95:af:c6:93:e9:a4:37:11:23:d0:c9:9c:7d:04:0f:9d:1e:
92:34:dd:04:30:c8:5f:82:4c:cb:97:c3:23:43:1b:3d:b0:b7:
67:94:d9:15:43:92:80:dc:81:e9:f7:f0:94:dd:60:2f:e4:ee:
cc:11:34:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:34 2026 by rpki-client