
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e392e302f32342d3234203d3e2034373835.roa
File: 3130342e3234352e392e302f32342d3234203d3e2034373835.roa (raw, json)
Hash identifier: YgqrYfgGBIIcf/EKIMly+3XAg/Jkk2uR/WVk0jCt4/c=
Subject key identifier: 24:10:97:92:D4:58:CB:A1:D0:CC:9B:B0:B8:71:FF:DD:10:C8:15:88
Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial: 1FA26F06D6CC52D0A69933C9A89C97CFCD680818
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e392e302f32342d3234203d3e2034373835.roa
Signing time: Sat 18 Jul 2026 01:56:15 +0000
ROA not before: Sat 18 Jul 2026 01:51:15 +0000
ROA not after: Sat 17 Jul 2027 01:56:15 +0000
asID: 4785
IP address blocks: 104.245.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 09:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a2:6f:06:d6:cc:52:d0:a6:99:33:c9:a8:9c:97:cf:cd:68:08:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Validity
Not Before: Jul 18 01:51:15 2026 GMT
Not After : Jul 17 01:56:15 2027 GMT
Subject: CN=24109792D458CBA1D0CC9BB0B871FFDD10C81588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:33:80:f6:ec:9d:bc:12:20:a6:07:6f:83:
3a:ae:a6:33:51:e8:5b:8f:2d:50:0f:ac:1b:9b:d9:
df:d1:24:fd:38:0d:d3:3b:96:a7:7d:9a:48:6d:4e:
20:c2:c9:b8:95:90:09:10:32:a2:01:6e:9c:f9:cc:
0d:25:cc:da:d0:47:5e:9e:0b:9d:96:4c:ff:3f:68:
87:c3:38:ad:6d:7a:08:ee:87:5f:f5:78:15:22:02:
a7:a7:24:5f:69:10:a1:81:22:b7:26:f9:c6:02:9c:
29:a5:df:7a:3a:67:06:6b:40:c6:8b:20:d2:43:46:
28:0d:3d:7f:d4:10:dc:91:f0:77:ae:5f:c8:da:40:
dc:1e:b7:ab:c8:3e:77:43:c5:a3:c3:04:a6:b0:f4:
70:e2:af:5f:81:ed:ad:26:42:14:49:7d:19:13:86:
bf:1a:0b:9e:1d:0e:c1:be:fc:8c:60:2c:2f:09:92:
13:ef:8f:02:c2:96:8d:c3:8d:d3:57:b7:4c:90:a2:
7f:82:87:26:5c:23:1e:5f:8e:42:bb:df:5c:ef:87:
31:20:78:62:7a:40:e1:cf:42:c8:9f:74:d1:81:c4:
4f:3a:f8:99:d4:25:90:e2:b2:dc:8c:2e:5c:53:d6:
2f:e7:8d:6e:a6:6b:eb:ae:e3:53:1a:bc:33:8a:0a:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:10:97:92:D4:58:CB:A1:D0:CC:9B:B0:B8:71:FF:DD:10:C8:15:88
X509v3 Authority Key Identifier:
keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e392e302f32342d3234203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.245.9.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c7:f9:69:00:cc:27:45:b1:4b:5a:1a:e0:85:4f:e6:65:86:
26:e0:60:a9:70:eb:41:bf:70:1d:7d:6a:8a:75:42:fd:97:fc:
5c:01:53:c3:83:0f:bc:35:f9:a1:aa:2a:ae:44:cb:5a:85:28:
1d:96:b5:0e:fd:95:f4:07:c2:da:20:08:6a:75:5e:1f:e8:37:
49:e0:26:c0:fd:5d:87:de:3a:ca:ed:b4:75:ce:4b:c7:24:18:
ed:12:97:26:29:26:f0:0f:3a:c4:04:78:da:27:fd:54:a0:71:
77:ff:fe:44:73:28:84:83:36:a3:71:90:25:dc:37:60:0a:ac:
a7:ab:e3:0f:c5:72:ae:ae:bc:7d:d4:bd:7f:dd:ec:20:0f:e3:
b3:e4:ae:40:5f:1b:9b:ab:cf:31:7a:85:6f:43:a4:12:78:b5:
7c:26:85:6a:a2:37:bd:40:14:a2:3b:31:87:20:ea:6b:5c:05:
ff:b5:2b:62:d9:00:6c:6c:33:9b:57:c7:74:7b:37:9b:91:f9:
4a:f8:58:2c:bb:20:b3:3f:b4:e3:4e:20:d0:c8:e9:a4:3b:5d:
85:87:d5:25:e0:cc:c1:d9:aa:06:c3:94:76:b1:2b:0c:75:21:
99:d9:0b:fc:7e:39:5b:81:9e:9f:53:1b:50:73:6d:17:17:60:
82:8e:86:dc
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUH6JvBtbMUtCmmTPJqJyXz81oCBgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk
MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwNzE4MDE1MTE1WhcNMjcwNzE3MDE1NjE1
WjAzMTEwLwYDVQQDEygyNDEwOTc5MkQ0NThDQkExRDBDQzlCQjBCODcxRkZERDEw
QzgxNTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooUzgPbsnbwS
IKYHb4M6rqYzUehbjy1QD6wbm9nf0ST9OA3TO5anfZpIbU4gwsm4lZAJEDKiAW6c
+cwNJcza0Edengudlkz/P2iHwzitbXoI7odf9XgVIgKnpyRfaRChgSK3JvnGApwp
pd96OmcGa0DGiyDSQ0YoDT1/1BDckfB3rl/I2kDcHreryD53Q8WjwwSmsPRw4q9f
ge2tJkIUSX0ZE4a/GgueHQ7BvvyMYCwvCZIT748CwpaNw43TV7dMkKJ/gocmXCMe
X45Cu99c74cxIHhiekDhz0LIn3TRgcRPOviZ1CWQ4rLcjC5cU9Yv541upmvrruNT
Grwzigpv/wIDAQABo4ICXDCCAlgwHQYDVR0OBBYEFCQQl5LUWMuh0MybsLhx/90Q
yBWIMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2
ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi
ODE0YzUyNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzMDM0MmUzMjM0MzUyZTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABo9QkwDQYJ
KoZIhvcNAQELBQADggEBAJrH+WkAzCdFsUtaGuCFT+ZlhibgYKlw60G/cB19aop1
Qv2X/FwBU8ODD7w1+aGqKq5Ey1qFKB2WtQ79lfQHwtogCGp1Xh/oN0ngJsD9XYfe
OsrttHXOS8ckGO0SlyYpJvAPOsQEeNon/VSgcXf//kRzKISDNqNxkCXcN2AKrKer
4w/Fcq6uvH3UvX/d7CAP47PkrkBfG5urzzF6hW9DpBJ4tXwmhWqiN71AFKI7MYcg
6mtcBf+1K2LZAGxsM5tXx3R7N5uR+Ur4WCy7ILM/tONOINDI6aQ7XYWH1SXgzMHZ
qgbDlHaxKwx1IZnZC/x+OVuBnp9TG1BzbRcXYIKOhtw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:33 2026 by rpki-client