$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e20393439.roa File: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: f+HaZjVWcN26J6ndRl/Wo/J0zcvoJ2uN/TvBmjrcBnA= Subject key identifier: 36:95:0B:E7:15:E6:5F:F9:E5:19:07:D0:3B:19:F7:BB:44:E2:F8:F5 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 5A56054FD52278E1D6120BDB5D72556876D7EE98 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e20393439.roa Signing time: Sat 16 Aug 2025 01:48:29 +0000 ROA not before: Sat 16 Aug 2025 01:43:29 +0000 ROA not after: Sat 15 Aug 2026 01:48:29 +0000 asID: 949 IP address blocks: 2604:e8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:56:05:4f:d5:22:78:e1:d6:12:0b:db:5d:72:55:68:76:d7:ee:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Aug 16 01:43:29 2025 GMT Not After : Aug 15 01:48:29 2026 GMT Subject: CN=36950BE715E65FF9E51907D03B19F7BB44E2F8F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:e7:8f:b5:9f:8b:72:77:94:8d:1d:fb:ae: cc:e1:ce:9b:f9:73:58:b4:65:aa:be:a7:b9:80:e6: 46:c7:54:6b:1c:9f:d6:25:40:fb:2c:28:d3:d7:d0: ce:da:d8:a9:a4:aa:f0:8f:39:8f:e5:cc:96:bb:02: 1b:4c:2e:ef:5d:87:83:ee:4f:ab:14:27:03:a8:d8: cb:23:bd:38:83:66:8a:b2:90:15:26:17:15:f5:48: da:10:41:48:64:89:8d:29:4e:b8:70:4a:cd:50:1d: 73:ae:57:7a:67:3a:7c:b3:b1:11:df:9e:04:64:36: ff:c7:12:b9:b0:e7:46:15:6c:52:b9:16:02:c0:0b: ec:c1:67:82:11:62:8c:11:ea:9f:eb:71:85:8d:c7: 06:26:15:84:5f:a3:f2:80:f6:94:62:77:ac:a7:33: e1:4b:96:70:f6:ac:10:57:24:a0:86:47:a7:9c:43: 92:d1:c2:71:02:c3:9d:15:c7:8a:09:2b:10:88:ae: 4e:cc:41:e4:ad:ea:fa:fc:96:11:1e:b4:ac:51:fc: 9e:1a:72:30:c5:59:a1:f1:b8:93:f9:79:09:57:b7: 55:b7:36:4f:43:47:f7:3e:e9:c8:e2:0a:e2:49:3d: de:43:a8:4e:fc:4d:d1:1f:50:f9:e5:bb:96:bb:b4: e8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:95:0B:E7:15:E6:5F:F9:E5:19:07:D0:3B:19:F7:BB:44:E2:F8:F5 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:37:2d:74:54:d1:d1:1a:3b:88:d9:67:91:55:9f:29:9f:c5: 13:fb:15:ef:8d:3b:61:ab:40:3f:d4:9b:8b:86:9b:82:1a:9b: 1e:a3:72:96:d1:7b:21:7e:f0:60:7c:d6:8b:e4:26:8c:6c:0f: 7c:ed:63:3d:03:d4:f3:cf:71:8e:1b:b9:fc:aa:92:2a:6f:34: 99:29:eb:a5:7a:83:23:31:ac:4c:5f:dc:b5:e3:93:a6:18:62: cb:6d:eb:32:33:4d:0f:ce:61:33:44:de:29:d9:0c:15:3e:1e: 8a:7a:8b:0e:7c:eb:2e:bb:4c:a2:4b:9e:c5:15:f3:e2:34:ab: 8e:26:19:d8:88:65:10:9b:f0:4f:a5:ba:97:5d:e6:4f:21:98: dc:1c:75:b5:60:e2:cc:be:42:cf:8c:67:be:eb:11:d7:a3:66: 67:53:fe:fe:f6:3c:a2:f0:c8:f4:ef:ba:dc:3d:38:32:7e:59: 81:28:20:16:55:26:3f:15:3d:36:94:27:ce:02:1a:3b:01:25: 67:da:a2:ff:c8:50:10:6b:6e:72:df:43:0c:7a:fe:7f:6d:e3: ad:90:7f:d7:e2:51:34:d7:43:f0:47:0d:12:74:6d:32:87:d7: 51:f4:e8:e7:f7:71:3b:e3:42:d8:8b:88:16:4c:b1:4d:a8:24: da:ff:26:94 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUWlYFT9UieOHWEgvbXXJVaHbX7pgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjUwODE2MDE0MzI5WhcNMjYwODE1MDE0ODI5 WjAzMTEwLwYDVQQDEygzNjk1MEJFNzE1RTY1RkY5RTUxOTA3RDAzQjE5RjdCQjQ0 RTJGOEY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9bnj7Wfi3J3 lI0d+67M4c6b+XNYtGWqvqe5gOZGx1RrHJ/WJUD7LCjT19DO2tippKrwjzmP5cyW uwIbTC7vXYeD7k+rFCcDqNjLI704g2aKspAVJhcV9UjaEEFIZImNKU64cErNUB1z rld6Zzp8s7ER354EZDb/xxK5sOdGFWxSuRYCwAvswWeCEWKMEeqf63GFjccGJhWE X6PygPaUYnespzPhS5Zw9qwQVySghkennEOS0cJxAsOdFceKCSsQiK5OzEHkrer6 /JYRHrSsUfyeGnIwxVmh8biT+XkJV7dVtzZPQ0f3PunI4griST3eQ6hO/E3RH1D5 5buWu7ToQQIDAQABo4ICWzCCAlcwHQYDVR0OBBYEFDaVC+cV5l/55RkH0DsZ97tE 4vj1MB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvMzIzNjMwMzQzYTY1Mzg2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTowDANBgkq hkiG9w0BAQsFAAOCAQEAXjctdFTR0Ro7iNlnkVWfKZ/FE/sV7407YatAP9Sbi4ab ghqbHqNyltF7IX7wYHzWi+QmjGwPfO1jPQPU889xjhu5/KqSKm80mSnrpXqDIzGs TF/cteOTphhiy23rMjNND85hM0TeKdkMFT4einqLDnzrLrtMokuexRXz4jSrjiYZ 2IhlEJvwT6W6l13mTyGY3Bx1tWDizL5Cz4xnvusR16NmZ1P+/vY8ovDI9O+63D04 Mn5ZgSggFlUmPxU9NpQnzgIaOwElZ9qi/8hQEGtuct9DDHr+f23jrZB/1+JRNNdD 8EcNEnRtMofXUfTo5/dxO+NC2IuIFkyxTagk2v8mlA== -----END CERTIFICATE-----Generated at Sun Aug 24 05:37:34 2025 by rpki-client