$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa File: 3130342e3234352e382e302f32342d3234203d3e203336333531.roa (raw, json) Hash identifier: W9b88tuR+zxrqkL9jUkwWndXsYdYuFiHYJBuqax9uJE= Subject key identifier: 5F:1A:C2:16:CC:72:62:E3:48:6D:13:B4:F2:9F:25:50:D1:B9:96:C8 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 027B14B9EE848C030A81A35D79761107268973CA Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 36351 IP address blocks: 104.245.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 02:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7b:14:b9:ee:84:8c:03:0a:81:a3:5d:79:76:11:07:26:89:73:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=5F1AC216CC7262E3486D13B4F29F2550D1B996C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:56:4c:96:39:3a:32:fd:20:55:04:c7:51: 56:7c:fa:1a:e8:ac:ce:af:25:1d:22:6a:30:98:e4: f5:c7:28:1f:ce:0c:5a:2f:23:d0:37:73:ca:d9:d6: c1:87:ca:ab:12:ce:e5:0c:bc:ff:ef:83:c6:e9:1c: 6a:00:ce:6e:49:c2:02:9d:34:fa:47:2d:1e:12:a0: 03:80:2a:71:c3:e0:dd:ec:5c:dc:48:17:72:25:5b: 2b:08:7d:eb:11:12:c7:a2:8a:67:a8:63:0b:09:7e: 73:a3:b6:2e:af:b0:fc:d2:d1:c6:55:a5:0e:5d:e7: 64:d7:30:30:4a:4d:f3:4f:0b:77:80:17:eb:61:01: ed:57:da:19:94:84:86:17:f5:b6:73:ac:89:aa:f9: c6:07:a5:20:c0:eb:96:ea:eb:d3:4a:96:f6:3c:57: 77:4d:0c:f0:a5:b6:e8:18:c1:c5:be:31:85:4b:aa: e8:1c:7d:5d:b9:68:d7:d3:ae:39:1e:c0:e8:78:8a: b0:83:41:fa:51:63:d7:21:8f:2b:21:56:fb:8a:27: 74:25:12:0c:46:d7:fe:76:6a:49:1f:c9:5e:05:f5: 53:45:0a:ed:5c:5e:8e:ff:7a:89:8c:50:c6:4e:c3: bb:8b:04:15:49:27:f7:12:e3:08:e1:09:76:f2:d1: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1A:C2:16:CC:72:62:E3:48:6D:13:B4:F2:9F:25:50:D1:B9:96:C8 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.245.8.0/24 Signature Algorithm: sha256WithRSAEncryption 70:d5:31:d1:33:32:95:60:99:78:a2:73:50:cc:57:e1:cc:88: 39:ac:95:80:83:12:20:b5:91:51:c7:29:64:36:b6:97:9a:65: 51:c9:bd:fe:52:52:d6:f3:33:69:36:42:8f:6a:9d:18:cf:12: e3:1d:42:91:0b:8d:1e:b4:cc:de:a7:8f:e3:bc:13:f1:83:26: 9f:04:1b:61:dd:1f:79:06:04:f9:9c:b8:a9:d3:3b:ab:83:da: b8:66:05:21:71:27:68:16:47:00:b0:1a:f7:ae:81:17:6e:36: c7:88:43:19:24:ef:8e:12:be:b2:f7:10:ed:4e:fe:a2:cb:81: 1a:74:be:31:aa:7e:60:f6:18:73:9f:19:f4:f1:24:bd:5a:8f: 81:28:34:8f:9d:5a:20:e7:44:87:d8:7c:e2:e8:41:96:50:41: 43:37:7e:24:5e:ad:48:43:64:a6:a9:d0:d4:a7:c0:4e:64:f2: c0:fc:05:3c:b6:01:e7:dd:6e:20:ec:40:41:44:e8:4e:9f:fa: e6:aa:60:d3:ad:a9:a9:29:ce:da:f1:8b:d1:d3:44:87:10:6d: d7:a6:ba:7e:04:50:8f:77:87:c8:f9:d0:31:33:50:f0:66:00: f3:cd:0c:53:08:01:78:91:42:1e:50:c8:7a:0e:3c:a8:1f:c5: 7a:b1:e0:c0 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUAnsUue6EjAMKgaNdeXYRByaJc8owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwNzE4MDE1MTE1WhcNMjcwNzE3MDE1NjE1 WjAzMTEwLwYDVQQDEyg1RjFBQzIxNkNDNzI2MkUzNDg2RDEzQjRGMjlGMjU1MEQx Qjk5NkM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfFWTJY5OjL9 IFUEx1FWfPoa6KzOryUdImowmOT1xygfzgxaLyPQN3PK2dbBh8qrEs7lDLz/74PG 6RxqAM5uScICnTT6Ry0eEqADgCpxw+Dd7FzcSBdyJVsrCH3rERLHoopnqGMLCX5z o7Yur7D80tHGVaUOXedk1zAwSk3zTwt3gBfrYQHtV9oZlISGF/W2c6yJqvnGB6Ug wOuW6uvTSpb2PFd3TQzwpbboGMHFvjGFS6roHH1duWjX0645HsDoeIqwg0H6UWPX IY8rIVb7iid0JRIMRtf+dmpJH8leBfVTRQrtXF6O/3qJjFDGTsO7iwQVSSf3EuMI 4Ql28tFnhwIDAQABo4ICXjCCAlowHQYDVR0OBBYEFF8awhbMcmLjSG0TtPKfJVDR uZbIMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzMDM0MmUzMjM0MzUyZTM4MmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzNjMzMzUzMS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGj1CDAN BgkqhkiG9w0BAQsFAAOCAQEAcNUx0TMylWCZeKJzUMxX4cyIOayVgIMSILWRUccp ZDa2l5plUcm9/lJS1vMzaTZCj2qdGM8S4x1CkQuNHrTM3qeP47wT8YMmnwQbYd0f eQYE+Zy4qdM7q4PauGYFIXEnaBZHALAa966BF242x4hDGSTvjhK+svcQ7U7+osuB GnS+Map+YPYYc58Z9PEkvVqPgSg0j51aIOdEh9h84uhBllBBQzd+JF6tSENkpqnQ 1KfATmTywPwFPLYB591uIOxAQUToTp/65qpg062pqSnO2vGL0dNEhxBt16a6fgRQ j3eHyPnQMTNQ8GYA880MUwgBeJFCHlDIeg48qB/FerHgwA== -----END CERTIFICATE-----Generated at Fri Jul 24 08:42:40 2026 by rpki-client