$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e203632383035.roa File: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (raw, json) Hash identifier: wElBQ2J8Npd+aQ0+qgvvzRNMA0Gs9g0abGDOi6K8G/c= Subject key identifier: 54:D6:F4:7F:24:C0:A7:0F:F2:58:08:64:3B:4B:21:4D:02:B8:DC:DF Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 20EE98A673E003FC2B9A4C820CEA150C9A7F82AE Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e203632383035.roa Signing time: Sat 18 Jul 2026 01:56:16 +0000 ROA not before: Sat 18 Jul 2026 01:51:16 +0000 ROA not after: Sat 17 Jul 2027 01:56:16 +0000 asID: 62805 IP address blocks: 2604:e8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ee:98:a6:73:e0:03:fc:2b:9a:4c:82:0c:ea:15:0c:9a:7f:82:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Jul 18 01:51:16 2026 GMT Not After : Jul 17 01:56:16 2027 GMT Subject: CN=54D6F47F24C0A70FF25808643B4B214D02B8DCDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:73:66:bb:79:59:43:bf:72:32:2d:c4:78:e7: 2a:82:a4:eb:d3:bd:17:4f:b9:07:08:50:58:00:b7: 69:6e:6c:ac:ab:4b:63:4e:ea:9c:3f:53:32:99:a1: 84:a0:5f:16:7e:f6:59:27:54:12:02:04:ea:00:81: c1:12:e8:1f:3a:e7:9d:bf:d4:06:d2:a4:d2:d1:b0: 2e:e1:fe:e1:e8:26:30:cf:cd:8d:47:51:3b:69:e3: b5:e9:f6:f1:da:c4:ef:d7:13:8d:01:5b:25:3d:78: a7:80:56:99:44:29:99:1b:a5:da:b7:b7:53:0d:ae: 3d:ac:5d:21:a1:aa:3a:6f:7b:9c:15:aa:bb:9f:09: cb:d5:8f:03:0d:7c:4c:69:58:ec:4d:e9:ec:9f:1d: 93:5a:b1:5a:27:75:ba:38:3c:0d:dc:ba:73:e9:be: 9b:6a:60:6b:71:d1:dd:18:1f:41:df:f2:50:f4:43: 1a:8c:a8:c8:ea:c8:0b:11:d2:b4:bc:f0:86:b2:ec: 08:89:2a:92:d7:7d:6f:8a:d0:fb:87:23:3f:69:ff: 5c:29:04:f8:83:fa:f7:70:fd:8f:02:d6:61:c3:82: e4:6b:b6:27:00:0b:62:74:02:6f:22:a1:99:58:63: be:ff:da:b6:65:33:e1:a0:35:de:fa:33:b7:b1:78: 43:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D6:F4:7F:24:C0:A7:0F:F2:58:08:64:3B:4B:21:4D:02:B8:DC:DF X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e203632383035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption 22:38:6e:17:cc:69:7f:a0:f6:4e:20:78:45:4c:aa:47:0f:25: 8f:d5:3d:b8:f5:91:3b:02:00:42:36:d4:42:5d:ce:55:c1:a9: 10:11:17:01:91:a8:46:c9:79:f4:70:66:55:a8:06:58:1a:fc: d3:a6:39:28:8a:03:1f:5e:eb:04:69:0e:54:53:29:53:08:75: 41:c8:a1:47:47:d5:43:cb:8d:89:02:56:5a:2f:38:ce:fa:6a: e5:60:a4:9c:ce:97:1a:11:a6:fe:22:b3:91:9e:20:b8:09:21: 7e:ba:9f:ac:55:32:0e:4e:c0:7b:48:4f:01:4e:a0:e4:2a:cf: 6d:34:97:53:39:77:ef:fc:ed:bc:cf:29:8a:70:92:02:9e:54: 4f:89:c9:96:59:09:3e:0d:32:97:f8:a5:37:18:f0:78:54:f8: 36:c8:2b:12:ea:c6:2d:8b:a1:ee:7f:5f:19:60:69:74:14:bc: f9:9f:79:b1:b6:1e:8b:f2:13:07:2b:e4:34:2d:ed:ab:b2:cd: 67:e9:99:d5:20:aa:08:45:d7:e6:0c:f6:82:0a:cc:23:fe:7c: 83:dc:d7:64:8b:04:14:5b:c2:9d:42:6a:5c:fe:ee:d8:0c:16: 37:d2:7f:3f:0e:62:94:78:2c:9e:97:af:37:5e:e1:b6:89:71: 07:c9:46:10 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUIO6YpnPgA/wrmkyCDOoVDJp/gq4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNzE4MDE1MTE2WhcNMjcwNzE3MDE1NjE2 WjAzMTEwLwYDVQQDEyg1NEQ2RjQ3RjI0QzBBNzBGRjI1ODA4NjQzQjRCMjE0RDAy QjhEQ0RGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHNmu3lZQ79y Mi3EeOcqgqTr070XT7kHCFBYALdpbmysq0tjTuqcP1MymaGEoF8WfvZZJ1QSAgTq AIHBEugfOuedv9QG0qTS0bAu4f7h6CYwz82NR1E7aeO16fbx2sTv1xONAVslPXin gFaZRCmZG6Xat7dTDa49rF0hoao6b3ucFaq7nwnL1Y8DDXxMaVjsTensnx2TWrFa J3W6ODwN3Lpz6b6bamBrcdHdGB9B3/JQ9EMajKjI6sgLEdK0vPCGsuwIiSqS131v itD7hyM/af9cKQT4g/r3cP2PAtZhw4Lka7YnAAtidAJvIqGZWGO+/9q2ZTPhoDXe +jO3sXhDKQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFFTW9H8kwKcP8lgIZDtLIU0C uNzfMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvMzIzNjMwMzQzYTY1Mzg2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMjM4MzAzNS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACYE6MAw DQYJKoZIhvcNAQELBQADggEBACI4bhfMaX+g9k4geEVMqkcPJY/VPbj1kTsCAEI2 1EJdzlXBqRARFwGRqEbJefRwZlWoBlga/NOmOSiKAx9e6wRpDlRTKVMIdUHIoUdH 1UPLjYkCVlovOM76auVgpJzOlxoRpv4is5GeILgJIX66n6xVMg5OwHtITwFOoOQq z200l1M5d+/87bzPKYpwkgKeVE+JyZZZCT4NMpf4pTcY8HhU+DbIKxLqxi2Loe5/ XxlgaXQUvPmfebG2HovyEwcr5DQt7auyzWfpmdUgqghF1+YM9oIKzCP+fIPc12SL BBRbwp1Calz+7tgMFjfSfz8OYpR4LJ6Xrzde4baJcQfJRhA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:55:47 2026 by rpki-client