$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e31312e302f32342d3234203d3e2036323333.roa File: 3130342e3234352e31312e302f32342d3234203d3e2036323333.roa (raw, json) Hash identifier: CM/1tvvJ+iG3JOaA56LGtrraZV8hJPHF16x5WexD3EA= Subject key identifier: 83:22:1C:C0:AF:62:4F:3E:80:40:2B:2D:6B:F0:B2:4B:C5:C7:FB:E8 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 210A9438261C4186C61CF11BDAC0FA3B6A3353DE Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31312e302f32342d3234203d3e2036323333.roa Signing time: Sat 16 Aug 2025 01:48:19 +0000 ROA not before: Sat 16 Aug 2025 01:43:19 +0000 ROA not after: Sat 15 Aug 2026 01:48:19 +0000 asID: 6233 IP address blocks: 104.245.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0a:94:38:26:1c:41:86:c6:1c:f1:1b:da:c0:fa:3b:6a:33:53:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Aug 16 01:43:19 2025 GMT Not After : Aug 15 01:48:19 2026 GMT Subject: CN=83221CC0AF624F3E80402B2D6BF0B24BC5C7FBE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:52:2d:74:12:94:ed:c9:e6:f2:3c:1d:1a:3c: 70:3a:0f:75:b7:77:e5:5c:d9:2a:7c:73:cd:5d:8f: 74:6b:40:99:13:f4:ad:61:dc:19:d5:f0:17:fa:e2: 2e:fa:4e:5a:32:32:01:61:40:6f:12:39:c4:bc:50: 1b:73:d6:e9:56:5a:0e:1b:1d:92:75:60:93:e6:06: 48:83:87:20:e6:20:36:a1:d3:e7:e3:f7:7b:6a:02: 85:5c:4e:56:08:0c:c7:57:ae:54:00:58:42:8c:3f: 2f:11:a1:49:c6:91:a1:58:6c:ed:b5:97:d3:62:8e: 96:5e:02:b4:79:c8:8d:af:ec:87:7d:8b:56:f2:bb: bd:ff:26:83:69:77:bf:e8:fb:c0:8a:0a:da:b9:c4: 3a:62:74:b9:b7:cd:7b:0a:ac:cb:fc:29:b7:d7:8e: d1:29:18:00:0e:ac:7b:c4:67:cd:ba:df:97:8f:c8: d0:e2:54:4d:42:d4:47:68:81:8b:00:da:03:43:e4: d5:52:83:ea:85:ba:ba:8e:14:5d:cd:0a:96:7d:b7: 7c:dd:a8:12:9e:ec:63:db:1a:ff:00:00:94:e3:dd: 0f:21:59:de:27:08:4b:54:07:79:93:6f:9f:a5:68: f8:1d:3f:b6:cb:73:2e:56:ff:2d:68:05:70:b7:0b: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:22:1C:C0:AF:62:4F:3E:80:40:2B:2D:6B:F0:B2:4B:C5:C7:FB:E8 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31312e302f32342d3234203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.245.11.0/24 Signature Algorithm: sha256WithRSAEncryption 51:17:cd:cd:c4:0f:4d:39:83:48:b6:01:a0:4c:29:60:b9:b3: bf:79:30:20:71:3b:1e:74:d3:91:81:75:63:a6:2c:dc:b0:ff: 22:99:1d:47:8d:ad:d9:57:b1:f3:88:bc:f1:d2:5b:86:40:3e: 7c:e6:8f:56:a4:38:ed:b2:ae:14:f9:74:c6:3d:f6:57:a3:8c: c6:e3:40:86:13:01:74:f5:55:0e:e1:6c:4c:ef:fe:2f:32:7f: 33:95:96:e1:ce:53:bb:ad:0b:00:39:80:16:0e:76:1e:d4:63: 40:65:71:cb:90:c6:cf:29:63:89:a0:d5:77:ea:70:c3:3f:6b: 43:29:67:61:c8:4a:48:b0:5d:ea:25:79:77:e2:dd:9e:75:32: 9d:67:c8:91:72:f0:3d:31:af:bb:83:ff:57:4f:fb:7e:28:60: a0:a6:09:62:2b:69:3f:78:2d:b4:58:ce:98:05:b9:ed:01:ed: 74:56:e9:2b:6e:f3:fa:33:0d:73:a5:68:a5:67:64:2a:66:28: 21:c3:a3:d6:1b:59:7f:8c:7e:ef:85:bc:28:9c:2b:28:17:d8: cb:bf:66:8a:be:21:a8:f8:0c:65:86:06:50:35:cb:72:17:67: 7a:96:a4:d9:15:59:c2:0b:db:a4:be:63:6e:cc:71:53:f3:e9: de:68:16:77 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUIQqUOCYcQYbGHPEb2sD6O2ozU94wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjUwODE2MDE0MzE5WhcNMjYwODE1MDE0ODE5 WjAzMTEwLwYDVQQDEyg4MzIyMUNDMEFGNjI0RjNFODA0MDJCMkQ2QkYwQjI0QkM1 QzdGQkU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlItdBKU7cnm 8jwdGjxwOg91t3flXNkqfHPNXY90a0CZE/StYdwZ1fAX+uIu+k5aMjIBYUBvEjnE vFAbc9bpVloOGx2SdWCT5gZIg4cg5iA2odPn4/d7agKFXE5WCAzHV65UAFhCjD8v EaFJxpGhWGzttZfTYo6WXgK0eciNr+yHfYtW8ru9/yaDaXe/6PvAigraucQ6YnS5 t817CqzL/Cm3147RKRgADqx7xGfNut+Xj8jQ4lRNQtRHaIGLANoDQ+TVUoPqhbq6 jhRdzQqWfbd83agSnuxj2xr/AACU490PIVneJwhLVAd5k2+fpWj4HT+2y3MuVv8t aAVwtwsxFQIDAQABo4ICXjCCAlowHQYDVR0OBBYEFIMiHMCvYk8+gEArLWvwskvF x/voMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzMDM0MmUzMjM0MzUyZTMxMzEy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGj1CzAN BgkqhkiG9w0BAQsFAAOCAQEAURfNzcQPTTmDSLYBoEwpYLmzv3kwIHE7HnTTkYF1 Y6Ys3LD/IpkdR42t2Vex84i88dJbhkA+fOaPVqQ47bKuFPl0xj32V6OMxuNAhhMB dPVVDuFsTO/+LzJ/M5WW4c5Tu60LADmAFg52HtRjQGVxy5DGzyljiaDVd+pwwz9r QylnYchKSLBd6iV5d+LdnnUynWfIkXLwPTGvu4P/V0/7fihgoKYJYitpP3gttFjO mAW57QHtdFbpK27z+jMNc6VopWdkKmYoIcOj1htZf4x+74W8KJwrKBfYy79mir4h qPgMZYYGUDXLchdnepak2RVZwgvbpL5jbsxxU/Pp3mgWdw== -----END CERTIFICATE-----Generated at Sun Aug 24 09:35:56 2025 by rpki-client