$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2036323333.roa File: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (raw, json) Hash identifier: vT1Bi1E42esOqDhk6jaaZaT7b++scr5Ql7nsLVhnpFw= Subject key identifier: 22:1F:8F:80:B6:FD:CE:59:5F:09:A2:3B:73:1C:B8:0E:E3:09:E9:2F Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 513C3622694D1AF7B131B4F91BCC2187FB598060 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2036323333.roa Signing time: Sat 18 Jul 2026 01:56:16 +0000 ROA not before: Sat 18 Jul 2026 01:51:16 +0000 ROA not after: Sat 17 Jul 2027 01:56:16 +0000 asID: 6233 IP address blocks: 2604:e8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:3c:36:22:69:4d:1a:f7:b1:31:b4:f9:1b:cc:21:87:fb:59:80:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Jul 18 01:51:16 2026 GMT Not After : Jul 17 01:56:16 2027 GMT Subject: CN=221F8F80B6FDCE595F09A23B731CB80EE309E92F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:d3:c2:42:2a:c1:fe:fb:11:df:2c:97:0b: d0:10:dd:d0:43:82:4c:56:7f:8a:cb:50:ee:b1:4a: 2a:59:ff:07:a2:50:ce:3d:88:97:55:90:98:d9:f1: 0d:88:8f:89:ff:d5:53:8a:3c:b0:3c:ca:96:77:20: ff:25:77:fc:0e:51:05:ea:0e:f2:13:9d:c9:be:b2: b2:58:72:32:79:7f:c2:a9:d0:94:5f:53:f6:b1:46: 13:9c:a6:2e:02:6d:8f:82:96:78:d5:05:52:f8:31: 6a:22:cc:3a:4b:6a:5d:1c:61:6e:f7:19:06:73:5a: 34:88:d0:63:1c:99:2f:2a:15:b5:13:9f:d8:9d:96: 25:e9:be:2f:a8:cd:1c:34:3e:b2:0b:64:9e:a9:0c: 48:8d:c4:77:80:79:c9:3f:f5:0c:67:a3:4a:f5:9a: 97:7a:30:60:de:d5:98:cb:96:ec:42:bd:2e:2d:49: 49:fe:bc:b9:58:75:ea:00:07:54:08:12:c5:ad:e2: 07:4d:42:0e:54:d4:12:b9:8c:ce:68:fe:18:33:1e: 53:10:e5:2e:db:f7:19:f9:00:b9:59:91:31:d9:9c: 2f:ca:95:77:8a:29:94:07:70:1f:15:c5:4d:8f:4d: c8:3c:f1:01:56:6b:8e:9b:da:59:06:51:22:65:18: f0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1F:8F:80:B6:FD:CE:59:5F:09:A2:3B:73:1C:B8:0E:E3:09:E9:2F X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption ba:83:fe:68:69:96:8b:6c:dd:9a:90:be:ff:e6:6e:9e:94:cd: a8:8c:9f:2d:8a:5a:97:42:c9:d0:c3:d0:1f:dc:9c:a2:fa:29: 95:da:88:80:54:18:31:7c:7c:23:9e:6f:74:e1:27:67:63:28: 13:31:92:ef:06:8b:ca:5a:59:94:c4:61:ba:33:9b:24:cd:4b: 23:fd:3b:32:a3:c4:86:4c:e2:90:31:07:07:be:55:a7:61:b8: d7:76:9a:cd:73:07:d0:8c:83:25:e8:52:87:e4:eb:fe:e7:0a: fb:71:c1:72:3d:3b:13:bc:35:66:85:1d:d0:a6:56:bc:89:94: b6:fe:1d:3e:94:39:36:ed:19:67:e3:ba:f9:e5:d5:13:a0:29: bd:a5:78:0c:ec:8a:21:30:b8:57:24:4c:bc:7a:77:b6:87:13: e2:ef:35:80:72:40:3b:6f:71:27:b9:89:c8:b4:4a:a3:a3:c7: dc:73:8c:cc:9e:65:7e:bb:10:6e:7d:be:59:0c:72:74:89:6b: 6d:b5:3c:98:ed:e7:ac:03:8c:7f:ac:3d:7f:00:30:10:ae:ae: 85:b3:e5:ca:ed:d3:bc:72:96:eb:d1:12:71:e4:76:99:44:97: 24:5a:9d:47:87:af:d2:27:37:89:c6:a7:af:82:68:d3:dc:f0: a8:63:74:69 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUUTw2ImlNGvexMbT5G8whh/tZgGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNzE4MDE1MTE2WhcNMjcwNzE3MDE1NjE2 WjAzMTEwLwYDVQQDEygyMjFGOEY4MEI2RkRDRTU5NUYwOUEyM0I3MzFDQjgwRUUz MDlFOTJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd3TwkIqwf77 Ed8slwvQEN3QQ4JMVn+Ky1DusUoqWf8HolDOPYiXVZCY2fENiI+J/9VTijywPMqW dyD/JXf8DlEF6g7yE53JvrKyWHIyeX/CqdCUX1P2sUYTnKYuAm2PgpZ41QVS+DFq Isw6S2pdHGFu9xkGc1o0iNBjHJkvKhW1E5/YnZYl6b4vqM0cND6yC2SeqQxIjcR3 gHnJP/UMZ6NK9ZqXejBg3tWYy5bsQr0uLUlJ/ry5WHXqAAdUCBLFreIHTUIOVNQS uYzOaP4YMx5TEOUu2/cZ+QC5WZEx2ZwvypV3iimUB3AfFcVNj03IPPEBVmuOm9pZ BlEiZRjwYQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFCIfj4C2/c5ZXwmiO3McuA7j CekvMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvMzIzNjMwMzQzYTY1Mzg2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOjAMA0G CSqGSIb3DQEBCwUAA4IBAQC6g/5oaZaLbN2akL7/5m6elM2ojJ8tilqXQsnQw9Af 3Jyi+imV2oiAVBgxfHwjnm904SdnYygTMZLvBovKWlmUxGG6M5skzUsj/Tsyo8SG TOKQMQcHvlWnYbjXdprNcwfQjIMl6FKH5Ov+5wr7ccFyPTsTvDVmhR3Qpla8iZS2 /h0+lDk27Rln47r55dUToCm9pXgM7IohMLhXJEy8ene2hxPi7zWAckA7b3EnuYnI tEqjo8fcc4zMnmV+uxBufb5ZDHJ0iWtttTyY7eesA4x/rD1/ADAQrq6Fs+XK7dO8 cpbr0RJx5HaZRJckWp1Hh6/SJzeJxqevgmjT3PCoY3Rp -----END CERTIFICATE-----Generated at Fri Jul 24 04:55:47 2026 by rpki-client