
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e31312e302f32342d3234203d3e2036323333.roa
File: 3130342e3234352e31312e302f32342d3234203d3e2036323333.roa (raw, json)
Hash identifier: kZXFcfz96ye/6krpfjVQdDOgThlyhF0P1qjiJ/rUQLE=
Subject key identifier: CE:11:7F:9E:1A:9A:35:B5:E5:75:4C:A1:66:42:B6:D2:64:0A:95:0D
Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial: 48A04652058795534BA74CD20A2FA1B5902351D7
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31312e302f32342d3234203d3e2036323333.roa
Signing time: Sat 18 Jul 2026 01:56:14 +0000
ROA not before: Sat 18 Jul 2026 01:51:14 +0000
ROA not after: Sat 17 Jul 2027 01:56:14 +0000
asID: 6233
IP address blocks: 104.245.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a0:46:52:05:87:95:53:4b:a7:4c:d2:0a:2f:a1:b5:90:23:51:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Validity
Not Before: Jul 18 01:51:14 2026 GMT
Not After : Jul 17 01:56:14 2027 GMT
Subject: CN=CE117F9E1A9A35B5E5754CA16642B6D2640A950D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:d5:41:c3:bd:01:00:66:24:f2:6b:84:3c:
c7:a6:e8:e7:61:0f:a7:bb:29:0d:d6:79:e1:47:f3:
e6:7a:22:12:d0:37:3a:0a:2b:37:1c:93:95:d0:43:
3e:f8:3b:54:c8:0b:02:f0:57:0e:68:e6:23:d3:ff:
c7:f1:6e:91:9f:40:b5:06:1a:46:a0:91:97:06:af:
e8:5d:21:71:4a:b1:87:56:d7:c4:47:5a:d6:7b:86:
67:de:f0:f2:7d:0c:15:52:1f:fe:cb:b9:14:90:e3:
64:cc:9c:76:2a:c4:e1:7f:72:c4:4a:8a:86:96:ea:
84:49:87:9c:e2:be:10:69:d9:be:77:6c:ff:fd:13:
75:d0:78:38:38:6b:a7:67:3d:4f:c9:2f:35:e4:34:
41:a8:99:7f:6b:c0:c6:95:81:4c:7a:05:5e:ea:0d:
ed:e2:0c:8b:cc:a2:be:dc:0e:c8:58:24:23:b5:39:
0c:0d:09:d9:ad:24:72:b3:0d:b1:f9:91:6c:ed:70:
b2:13:d2:39:b7:21:86:14:1d:4c:82:80:5b:46:5b:
81:ff:4b:b2:f4:21:79:04:4c:12:5d:f8:43:d6:62:
86:6d:55:08:6d:98:79:20:90:fc:63:e2:09:24:dd:
0d:ff:a1:77:13:de:c4:c8:2b:e0:3c:46:f2:ba:93:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:11:7F:9E:1A:9A:35:B5:E5:75:4C:A1:66:42:B6:D2:64:0A:95:0D
X509v3 Authority Key Identifier:
keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31312e302f32342d3234203d3e2036323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.245.11.0/24
Signature Algorithm: sha256WithRSAEncryption
26:70:91:78:f2:ca:5f:48:e0:c6:b3:1a:8b:ad:7c:89:f9:41:
97:cf:e1:6d:07:92:16:da:2a:18:1d:b7:96:ce:f1:c4:e6:79:
8d:fb:78:d8:cd:e2:21:c3:d8:74:cc:f0:d8:80:9b:94:eb:bc:
91:3b:4a:7b:df:86:be:01:7b:79:fb:71:97:bf:9d:48:ea:1b:
71:6e:53:1d:fd:94:c2:3e:12:da:78:d3:da:61:37:24:f7:ad:
17:af:8d:f4:c3:29:3e:61:08:8c:80:e0:ff:c9:1a:99:11:38:
b8:ba:ee:12:e4:2b:86:b8:0b:61:06:a2:43:04:c7:a2:50:23:
3a:a6:d7:d9:05:46:e1:ac:2e:c6:e1:91:f7:22:4a:d0:75:1d:
7b:6b:dd:9c:cc:11:2c:0a:84:f4:d8:e1:51:8b:9c:9a:56:17:
f4:bd:4e:5e:74:3f:89:12:f1:0c:09:91:0d:be:b4:b3:f1:73:
64:06:2f:73:b7:e6:fc:ac:5f:0d:81:6d:fb:f4:fa:a9:42:d1:
53:3d:b7:b6:43:3e:89:3d:6e:14:34:f9:50:83:28:57:0d:6f:
d0:7a:eb:45:52:f3:70:0a:d8:6f:25:5b:8c:92:61:90:6e:c0:
de:7c:9e:63:0f:fe:67:26:97:0d:c6:b1:cd:f9:00:fa:0c:cc:
ab:56:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:16:52 2026 by rpki-client