$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa File: 3134322e3134372e38382e302f32312d3234203d3e2036323333.roa (raw, json) Hash identifier: PsaxYaFFNgIVFn8NYLn5iFDo26nPs15VoRUG+gbERz0= Subject key identifier: 6F:37:D1:29:BB:22:D2:C8:A7:11:18:FA:49:58:C2:A2:8E:03:0B:8F Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 0D31FE2AA42B6C0E5A9FE32D9BE093AF1F50DEA0 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa Signing time: Sat 16 Aug 2025 01:48:20 +0000 ROA not before: Sat 16 Aug 2025 01:43:20 +0000 ROA not after: Sat 15 Aug 2026 01:48:20 +0000 asID: 6233 IP address blocks: 142.147.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:31:fe:2a:a4:2b:6c:0e:5a:9f:e3:2d:9b:e0:93:af:1f:50:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Aug 16 01:43:20 2025 GMT Not After : Aug 15 01:48:20 2026 GMT Subject: CN=6F37D129BB22D2C8A71118FA4958C2A28E030B8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:3d:2e:f7:31:dc:e8:3d:a7:7e:5f:8b:84: 01:37:4e:6f:95:74:64:8d:c1:74:98:f0:a3:96:0f: a8:50:cf:d6:ee:7d:9b:43:fa:b8:75:2c:12:99:9d: 5b:c7:b2:bd:99:b9:64:14:f9:7c:af:18:8f:91:6d: 94:b5:e7:a7:8c:02:5f:43:b1:70:99:85:46:a9:87: 7e:4b:10:30:57:79:57:1a:71:a0:cf:0c:3d:70:c4: 81:78:be:33:a9:7a:3a:bf:12:58:8b:69:1c:ec:b8: fd:60:94:99:7d:4c:42:b6:24:66:32:80:78:d2:fc: 24:15:9d:9c:30:3f:33:71:78:0b:16:d4:12:f5:00: 4e:7e:4f:c0:ee:83:8f:4b:a0:a2:d8:22:f7:f3:e4: 76:fb:35:5e:f4:73:22:96:94:ef:59:1d:68:9c:67: 64:4c:17:9d:34:ff:31:ff:a3:ea:c3:17:1d:28:d4: dd:59:a5:90:b0:68:73:61:47:ca:03:13:67:e4:c5: 1d:e4:f7:6f:af:ff:24:d1:13:66:f5:4b:b0:36:91: d1:81:23:2b:c7:ed:a6:91:f8:dc:36:9c:c1:aa:15: 01:7d:4b:2d:d0:e0:fa:16:81:de:24:fc:9a:c3:3a: cb:38:c2:b9:4b:99:bc:4b:bb:8c:76:9c:d2:b9:76: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:37:D1:29:BB:22:D2:C8:A7:11:18:FA:49:58:C2:A2:8E:03:0B:8F X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.147.88.0/21 Signature Algorithm: sha256WithRSAEncryption 39:60:1e:93:e4:d0:ca:e8:4a:b4:83:19:9d:88:8f:93:91:88: 08:b0:04:b6:c5:e6:f5:67:9f:dc:24:fc:7d:ec:a5:9c:20:59: 44:b7:5b:40:08:a6:94:0d:c7:fb:03:f5:91:f7:25:d8:6b:c3: 0a:bb:a1:bd:e2:33:31:89:34:5a:18:b3:a0:9a:98:c7:89:76: 3f:d6:e4:8d:3a:5e:0d:7e:bf:9c:cf:9c:23:a1:72:ca:8b:85: a4:6c:2c:ab:c2:7c:4c:0d:0b:47:bd:7f:86:cb:fa:98:64:3e: b2:81:1b:04:22:41:7d:36:ea:a0:c0:27:c9:79:1e:2f:cf:a9: 91:b8:c9:79:a7:67:41:50:14:a6:9a:7f:f0:84:98:d1:54:fb: 17:5e:a0:ee:cf:90:eb:59:ad:d8:57:f0:af:e9:97:48:82:68: a8:3b:0e:e5:d1:40:78:d6:32:f7:b2:f6:6a:e6:9d:74:8a:c4: fe:e6:79:51:75:dd:a7:8a:b5:0f:de:88:50:c4:68:18:70:b4: ee:98:b1:ab:e7:4d:4a:3b:4d:0f:9e:19:98:d2:6d:81:6a:b8: 01:4e:f2:45:89:4d:66:40:f2:b1:37:a7:a2:66:7f:35:37:12: 66:5f:65:a5:6a:b4:1f:84:23:dd:28:f8:43:bc:e7:aa:31:d8: 02:7f:ee:5f -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUDTH+KqQrbA5an+Mtm+CTrx9Q3qAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjUwODE2MDE0MzIwWhcNMjYwODE1MDE0ODIw WjAzMTEwLwYDVQQDEyg2RjM3RDEyOUJCMjJEMkM4QTcxMTE4RkE0OTU4QzJBMjhF MDMwQjhGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns49Lvcx3Og9 p35fi4QBN05vlXRkjcF0mPCjlg+oUM/W7n2bQ/q4dSwSmZ1bx7K9mblkFPl8rxiP kW2UteenjAJfQ7FwmYVGqYd+SxAwV3lXGnGgzww9cMSBeL4zqXo6vxJYi2kc7Lj9 YJSZfUxCtiRmMoB40vwkFZ2cMD8zcXgLFtQS9QBOfk/A7oOPS6Ci2CL38+R2+zVe 9HMilpTvWR1onGdkTBedNP8x/6PqwxcdKNTdWaWQsGhzYUfKAxNn5MUd5Pdvr/8k 0RNm9UuwNpHRgSMrx+2mkfjcNpzBqhUBfUst0OD6FoHeJPyawzrLOMK5S5m8S7uM dpzSuXbC6QIDAQABo4ICXjCCAlowHQYDVR0OBBYEFG830Sm7ItLIpxEY+klYwqKO AwuPMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzNDMyMmUzMTM0MzcyZTM4Mzgy ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA46TWDAN BgkqhkiG9w0BAQsFAAOCAQEAOWAek+TQyuhKtIMZnYiPk5GICLAEtsXm9Wef3CT8 feylnCBZRLdbQAimlA3H+wP1kfcl2GvDCruhveIzMYk0WhizoJqYx4l2P9bkjTpe DX6/nM+cI6FyyouFpGwsq8J8TA0LR71/hsv6mGQ+soEbBCJBfTbqoMAnyXkeL8+p kbjJeadnQVAUppp/8ISY0VT7F16g7s+Q61mt2Ffwr+mXSIJoqDsO5dFAeNYy97L2 auaddIrE/uZ5UXXdp4q1D96IUMRoGHC07pixq+dNSjtND54ZmNJtgWq4AU7yRYlN ZkDysTenomZ/NTcSZl9lpWq0H4Qj3Sj4Q7znqjHYAn/uXw== -----END CERTIFICATE-----Generated at Sun Aug 24 04:08:02 2025 by rpki-client