$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2033323134.roa File: 323630353a336134303a3a2f33322d3438203d3e2033323134.roa (raw, json) Hash identifier: vcoufgyZts/HOBw8ZhUG7+OuiJoZnDJIZxziyt29X3U= Subject key identifier: 13:8E:CD:55:09:26:93:13:20:B9:3D:A3:6E:AA:34:30:D4:23:49:B7 Certificate issuer: /CN=73516995116535a22de5a23000d3e7814baad6490837f37731 Certificate serial: 7A320BE45E86BD152477B2C452952A738D56FEFE Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2033323134.roa Signing time: Thu 02 Jul 2026 10:28:20 +0000 ROA not before: Thu 02 Jul 2026 10:23:20 +0000 ROA not after: Thu 01 Jul 2027 10:28:20 +0000 asID: 3214 IP address blocks: 2605:3a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 05:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:32:0b:e4:5e:86:bd:15:24:77:b2:c4:52:95:2a:73:8d:56:fe:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731 Validity Not Before: Jul 2 10:23:20 2026 GMT Not After : Jul 1 10:28:20 2027 GMT Subject: CN=138ECD550926931320B93DA36EAA3430D42349B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:79:5b:50:8a:bf:66:e9:8e:f9:cd:25:5d: 76:64:ec:83:a2:bf:82:7a:a0:8b:d9:51:d0:51:fb: 83:ec:d3:76:12:15:ee:9a:f5:fa:7f:0a:ce:c9:7d: f0:ad:0b:d9:43:af:99:72:95:73:36:ce:85:c5:31: 0e:6e:d2:c1:54:79:63:8c:0e:c2:e3:c7:84:7f:0c: c9:9d:ac:a0:df:de:b7:38:34:07:a9:e6:d1:3a:37: 7b:a3:00:bb:50:de:5b:7a:3b:96:a3:a6:1d:70:13: 60:9a:81:e6:d1:00:bb:4d:6d:e0:2c:4b:55:58:24: af:4f:af:20:b1:13:8f:01:1d:77:f0:57:e2:b0:4e: 0f:eb:b6:e4:a8:05:c8:37:6d:f3:b2:f1:b7:70:82: f7:e3:92:e8:3f:04:9e:56:b7:79:4d:87:f9:cb:80: ba:19:e0:ec:d6:de:55:7b:4f:98:f4:c0:0e:a3:61: 2b:eb:9a:88:ba:49:d5:5a:fb:b5:d9:93:cd:33:36: 73:b3:d9:b1:12:ad:b7:71:f5:8e:04:cc:1c:f3:59: aa:09:21:8b:39:bd:81:ae:8e:9a:22:ee:5a:6a:df: ff:84:9d:89:be:68:a0:d4:64:74:a0:e9:18:3f:2f: 81:af:28:09:54:0d:dc:ec:c5:3d:87:15:14:4d:8f: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8E:CD:55:09:26:93:13:20:B9:3D:A3:6E:AA:34:30:D4:23:49:B7 X509v3 Authority Key Identifier: keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2033323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:3a40::/32 Signature Algorithm: sha256WithRSAEncryption 23:72:6d:83:70:49:18:a6:d9:f1:f3:9d:29:aa:e7:27:bf:c1: ac:88:9c:41:81:5c:e8:f2:5f:f7:35:a8:08:36:2f:40:a0:8f: c0:bd:53:3a:3d:67:77:e2:b5:02:98:cd:86:11:23:66:1f:9a: d7:e9:95:06:ec:70:d9:6c:95:b2:73:3a:76:f9:28:5c:62:ab: ed:80:ca:9d:f5:b0:51:55:7d:6a:5d:4a:f2:87:10:11:ee:8d: 1e:a0:1e:a3:3c:ae:b6:cd:68:4b:c1:80:4d:91:0d:a4:98:a1: 6c:00:56:a1:10:61:a3:27:bd:ed:c0:a2:1b:08:8b:da:d3:aa: 17:a2:53:bc:03:83:9b:a9:62:5b:f7:ce:bc:13:6e:38:c7:cc: 5d:69:43:0f:72:43:0d:74:52:ee:4f:3c:7e:3b:a7:5d:99:40: 5e:30:87:fa:6a:a9:15:d3:2a:18:fb:3a:8f:24:5d:28:c2:c1: 2f:9a:d4:7f:76:58:d5:6b:02:ca:e1:ed:43:ea:53:18:4e:a9: ef:f7:ec:00:c1:cd:2a:47:bb:bc:7f:0d:ed:ec:3f:aa:81:55: fc:25:ee:20:94:01:96:4d:d7:a2:cc:da:90:5b:ff:db:58:72: 81:8b:4f:0b:92:52:23:fb:61:b2:db:f5:38:3f:89:75:d1:3d: 99:e4:2c:aa -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUejIL5F6GvRUkd7LEUpUqc41W/v4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0 YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjYwNzAyMTAyMzIwWhcNMjcwNzAxMTAyODIw WjAzMTEwLwYDVQQDEygxMzhFQ0Q1NTA5MjY5MzEzMjBCOTNEQTM2RUFBMzQzMEQ0 MjM0OUI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBV5W1CKv2bp jvnNJV12ZOyDor+CeqCL2VHQUfuD7NN2EhXumvX6fwrOyX3wrQvZQ6+ZcpVzNs6F xTEObtLBVHljjA7C48eEfwzJnayg3963ODQHqebROjd7owC7UN5bejuWo6YdcBNg moHm0QC7TW3gLEtVWCSvT68gsROPAR138FfisE4P67bkqAXIN23zsvG3cIL345Lo PwSeVrd5TYf5y4C6GeDs1t5Ve0+Y9MAOo2Er65qIuknVWvu12ZPNMzZzs9mxEq23 cfWOBMwc81mqCSGLOb2Bro6aIu5aat//hJ2Jvmig1GR0oOkYPy+BrygJVA3c7MU9 hxUUTY8t4wIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFBOOzVUJJpMTILk9o26qNDDU I0m3MB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3 NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz N2YzNzczMS5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzNjMwMzUzYTMzNjEzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjMxMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBTpAMA0G CSqGSIb3DQEBCwUAA4IBAQAjcm2DcEkYptnx850pqucnv8GsiJxBgVzo8l/3NagI Ni9AoI/AvVM6PWd34rUCmM2GESNmH5rX6ZUG7HDZbJWyczp2+ShcYqvtgMqd9bBR VX1qXUryhxAR7o0eoB6jPK62zWhLwYBNkQ2kmKFsAFahEGGjJ73twKIbCIva06oX olO8A4ObqWJb9868E244x8xdaUMPckMNdFLuTzx+O6ddmUBeMIf6aqkV0yoY+zqP JF0owsEvmtR/dljVawLK4e1D6lMYTqnv9+wAwc0qR7u8fw3t7D+qgVX8Je4glAGW TdeizNqQW//bWHKBi08LklIj+2Gy2/U4P4l10T2Z5Cyq -----END CERTIFICATE-----Generated at Fri Jul 24 05:46:39 2026 by rpki-client