$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa File: 3130342e3234352e382e302f32312d3234203d3e20393439.roa (raw, json) Hash identifier: T8524IkTl53YxIGY4nfQDm1ogpfKBQpuEVKmOtHeDPs= Subject key identifier: 2F:09:80:18:CC:08:62:E0:ED:90:AC:89:BA:6A:CD:1F:D4:55:02:D2 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 05109CD9AE57E64641ADB3D341AD702ABA0CC901 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa Signing time: Sat 16 Aug 2025 01:48:20 +0000 ROA not before: Sat 16 Aug 2025 01:43:20 +0000 ROA not after: Sat 15 Aug 2026 01:48:20 +0000 asID: 949 IP address blocks: 104.245.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:10:9c:d9:ae:57:e6:46:41:ad:b3:d3:41:ad:70:2a:ba:0c:c9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Aug 16 01:43:20 2025 GMT Not After : Aug 15 01:48:20 2026 GMT Subject: CN=2F098018CC0862E0ED90AC89BA6ACD1FD45502D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:13:cd:06:4f:36:01:4a:09:ce:0b:78:3c: 7b:8e:b7:a6:3e:b6:b2:5c:98:9c:ff:c9:b9:89:ad: 0e:b5:6f:71:38:0a:e3:a4:4e:eb:cf:a0:91:eb:6d: ba:de:9a:60:e0:f5:68:75:f6:f7:ae:f7:69:48:da: 24:ce:80:ac:58:0f:6b:71:be:00:bd:6f:d3:fd:99: 2a:ea:34:3b:e0:b7:29:0d:3d:32:53:a2:08:35:8c: fa:7e:4a:5d:c3:7f:de:64:67:06:6e:3a:1c:61:22: d0:a9:aa:6a:51:39:89:dd:a5:57:76:3e:06:a7:22: d5:6e:ac:1c:9f:2a:22:7f:28:ff:af:9b:1f:7b:c6: 29:1a:87:63:f4:56:71:0a:b4:5d:8a:e0:d1:e3:c7: 13:54:03:d0:08:91:64:9c:17:f4:63:a8:4e:61:65: 55:6f:f0:69:e4:c8:e2:dc:dd:4a:7f:8d:8a:4b:b1: a7:7c:73:39:74:e4:6e:5f:7f:cb:0b:91:07:7a:8f: a1:f2:e5:09:40:fd:03:1e:82:00:c4:3d:b6:0d:f0: 98:f2:1c:68:b2:9c:a3:b8:a5:5c:62:24:3c:c0:ce: b1:75:b5:ce:2f:85:8a:b5:14:8f:c0:30:26:a4:cc: 22:70:dc:c6:e6:99:c1:fb:f8:7a:77:c9:44:db:4a: ba:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:09:80:18:CC:08:62:E0:ED:90:AC:89:BA:6A:CD:1F:D4:55:02:D2 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.245.8.0/21 Signature Algorithm: sha256WithRSAEncryption b0:31:e4:47:9e:dc:c5:d8:04:86:df:c6:69:19:e0:a4:9a:e6: fa:88:53:29:51:68:ca:85:eb:e7:0b:12:17:7e:87:eb:15:af: 6f:fc:e0:33:33:d8:f1:4f:32:5b:ef:ca:e9:2a:ec:b6:f4:b7: 3a:b7:e0:81:a0:ba:a8:e7:dc:1c:ba:63:be:bd:59:28:46:44: c2:6b:10:cb:e9:e4:75:60:9b:ee:cb:f5:34:af:a0:ed:69:55: e1:06:b6:3e:a4:9e:32:83:63:46:98:ac:dc:a2:c0:38:51:03: 44:14:44:31:a2:29:07:c7:6c:2a:e2:e3:b9:35:c3:a5:0e:ed: 91:de:ab:d5:b4:b5:e2:84:d8:5f:f2:89:75:4d:f8:95:f9:e8: 26:cf:a6:c9:3f:da:f4:7e:8e:ba:14:d2:0a:fb:23:d1:f3:5c: f7:8c:c9:37:81:4d:2b:43:6f:73:cd:e1:40:93:c7:c3:32:91: 03:6f:02:41:d2:85:ef:6d:58:2c:37:c1:17:68:a6:cf:f2:9d: 1c:5d:be:6e:99:79:7a:f0:90:1d:da:9b:f1:dd:bb:ec:22:93: 2e:5d:ed:88:7b:af:d7:81:ba:9b:45:11:b7:85:bd:bd:3d:9d: 82:b6:8d:a0:01:ba:b3:fa:cf:b3:76:9d:e4:1b:65:d7:0a:5f: b2:a9:76:6d -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUBRCc2a5X5kZBrbPTQa1wKroMyQEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjUwODE2MDE0MzIwWhcNMjYwODE1MDE0ODIw WjAzMTEwLwYDVQQDEygyRjA5ODAxOENDMDg2MkUwRUQ5MEFDODlCQTZBQ0QxRkQ0 NTUwMkQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiUTzQZPNgFK Cc4LeDx7jremPrayXJic/8m5ia0OtW9xOArjpE7rz6CR62263ppg4PVodfb3rvdp SNokzoCsWA9rcb4AvW/T/Zkq6jQ74LcpDT0yU6IINYz6fkpdw3/eZGcGbjocYSLQ qapqUTmJ3aVXdj4GpyLVbqwcnyoifyj/r5sfe8YpGodj9FZxCrRdiuDR48cTVAPQ CJFknBf0Y6hOYWVVb/Bp5Mji3N1Kf42KS7GnfHM5dORuX3/LC5EHeo+h8uUJQP0D HoIAxD22DfCY8hxospyjuKVcYiQ8wM6xdbXOL4WKtRSPwDAmpMwicNzG5pnB+/h6 d8lE20q6AQIDAQABo4ICWjCCAlYwHQYDVR0OBBYEFC8JgBjMCGLg7ZCsibpqzR/U VQLSMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzMDM0MmUzMjM0MzUyZTM4MmUz MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPUIMA0GCSqG SIb3DQEBCwUAA4IBAQCwMeRHntzF2ASG38ZpGeCkmub6iFMpUWjKhevnCxIXfofr Fa9v/OAzM9jxTzJb78rpKuy29Lc6t+CBoLqo59wcumO+vVkoRkTCaxDL6eR1YJvu y/U0r6DtaVXhBrY+pJ4yg2NGmKzcosA4UQNEFEQxoikHx2wq4uO5NcOlDu2R3qvV tLXihNhf8ol1TfiV+egmz6bJP9r0fo66FNIK+yPR81z3jMk3gU0rQ29zzeFAk8fD MpEDbwJB0oXvbVgsN8EXaKbP8p0cXb5umXl68JAd2pvx3bvsIpMuXe2Ie6/Xgbqb RRG3hb29PZ2Cto2gAbqz+s+zdp3kG2XXCl+yqXZt -----END CERTIFICATE-----Generated at Sun Aug 24 04:02:02 2025 by rpki-client