$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32342d3234203d3e2036323333.roa File: 3134322e3134372e38382e302f32342d3234203d3e2036323333.roa (raw, json) Hash identifier: yfhrNtYlj5kNaOE4hg1UMdbmcoR/K7TgMgcQQLoQ2m0= Subject key identifier: D9:2F:C5:77:11:50:59:F7:07:44:30:7C:10:5F:25:17:32:DB:54:49 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 33C512E33C21A06A452B1D6CDADEEC1937C6C4A3 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32342d3234203d3e2036323333.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 6233 IP address blocks: 142.147.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 02:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c5:12:e3:3c:21:a0:6a:45:2b:1d:6c:da:de:ec:19:37:c6:c4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=D92FC577115059F70744307C105F251732DB5449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:e7:34:63:e1:14:0e:c8:0b:a4:d1:27:57: 75:58:cc:5e:53:2e:32:c9:e7:7a:41:71:ed:02:c0: fb:ea:48:ce:d0:2a:53:0e:85:3d:48:68:68:63:0f: b1:cb:ff:97:49:ac:70:7f:1d:04:5f:7f:b4:5a:5e: 22:a7:24:4c:84:d1:40:75:25:60:e4:33:e7:ac:73: 8a:be:13:a7:c6:83:d5:8c:7e:38:ee:50:ff:ad:df: 0d:d3:b4:bc:59:90:b1:c7:a8:7a:15:4c:3a:20:bb: 12:cf:d2:f3:2b:3b:83:f2:d0:92:ae:b3:cb:b0:3b: 03:22:76:2c:f7:da:fd:1f:ba:ec:de:1d:f0:63:70: 4d:ae:8c:a7:44:d9:f2:28:88:b5:cb:46:69:f2:e8: df:02:0d:25:3a:4d:c4:9a:b1:5b:e8:d3:20:7a:2f: 13:86:6b:de:4f:ce:3f:53:b0:ae:86:eb:07:c4:e5: 70:43:d1:15:e5:d7:c2:37:45:00:a2:cb:1c:2a:ab: 4e:af:76:01:36:b4:4d:72:f1:bb:57:bb:49:94:e4: 72:5f:68:04:6a:a7:54:1b:7a:dd:8c:fe:60:02:7a: 4b:0b:2c:0e:6a:10:c6:fc:f7:2a:ff:26:0e:29:7c: 17:db:68:50:1a:e5:74:93:15:ec:2c:74:db:fd:1d: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2F:C5:77:11:50:59:F7:07:44:30:7C:10:5F:25:17:32:DB:54:49 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32342d3234203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.147.88.0/24 Signature Algorithm: sha256WithRSAEncryption 20:b6:19:fc:db:3b:1a:b0:8f:1d:91:fd:ba:85:9f:ce:f4:6c: d8:4f:c3:0d:75:24:ca:50:59:48:f7:bc:a4:de:16:e5:bd:1f: 6b:fc:23:22:8b:fa:7f:76:59:f2:7a:ae:c7:a1:4f:10:72:70: d7:12:d9:f2:c6:0b:d4:90:50:17:35:0f:c3:bf:59:bf:e6:28: 98:e9:a5:88:22:dd:11:97:a6:cc:6c:1d:b9:3f:88:65:82:ef: 9d:bf:82:0a:d0:29:42:c8:88:8f:25:6e:d3:42:cd:3d:7d:ca: 14:79:bb:d9:ff:c8:d8:7e:42:62:03:bc:bd:5c:2c:83:fb:e3: 2a:b7:56:b9:d6:39:c9:a3:42:c5:38:c6:7f:a2:4d:eb:65:38: dc:9a:f5:49:8c:44:01:35:7f:24:97:15:61:18:ae:c4:fc:8e: 98:3e:91:53:ff:f7:cc:ab:6d:80:8f:98:f7:f2:3f:7e:75:3f: 54:36:68:5d:53:1c:7a:2f:60:21:5f:70:e1:41:d1:98:c7:24: fe:a8:b9:9f:e1:1a:3f:3f:c8:12:bc:2f:75:4c:5e:77:9c:e2: 7d:c9:08:13:fe:2f:88:75:d4:89:02:3c:ed:5b:4c:b8:d1:d7: a1:6a:bd:92:b1:7b:cc:09:26:1a:7b:33:7d:2d:69:47:c2:90: 88:4f:95:c4 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUM8US4zwhoGpFKx1s2t7sGTfGxKMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwNzE4MDE1MTE0WhcNMjcwNzE3MDE1NjE0 WjAzMTEwLwYDVQQDEyhEOTJGQzU3NzExNTA1OUY3MDc0NDMwN0MxMDVGMjUxNzMy REI1NDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OHnNGPhFA7I C6TRJ1d1WMxeUy4yyed6QXHtAsD76kjO0CpTDoU9SGhoYw+xy/+XSaxwfx0EX3+0 Wl4ipyRMhNFAdSVg5DPnrHOKvhOnxoPVjH447lD/rd8N07S8WZCxx6h6FUw6ILsS z9LzKzuD8tCSrrPLsDsDInYs99r9H7rs3h3wY3BNroynRNnyKIi1y0Zp8ujfAg0l Ok3EmrFb6NMgei8ThmveT84/U7CuhusHxOVwQ9EV5dfCN0UAosscKqtOr3YBNrRN cvG7V7tJlORyX2gEaqdUG3rdjP5gAnpLCywOahDG/Pcq/yYOKXwX22hQGuV0kxXs LHTb/R367wIDAQABo4ICXjCCAlowHQYDVR0OBBYEFNkvxXcRUFn3B0QwfBBfJRcy 21RJMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzNDMyMmUzMTM0MzcyZTM4Mzgy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI6TWDAN BgkqhkiG9w0BAQsFAAOCAQEAILYZ/Ns7GrCPHZH9uoWfzvRs2E/DDXUkylBZSPe8 pN4W5b0fa/wjIov6f3ZZ8nqux6FPEHJw1xLZ8sYL1JBQFzUPw79Zv+YomOmliCLd EZemzGwduT+IZYLvnb+CCtApQsiIjyVu00LNPX3KFHm72f/I2H5CYgO8vVwsg/vj KrdWudY5yaNCxTjGf6JN62U43Jr1SYxEATV/JJcVYRiuxPyOmD6RU//3zKttgI+Y 9/I/fnU/VDZoXVMcei9gIV9w4UHRmMck/qi5n+EaPz/IErwvdUxed5zifckIE/4v iHXUiQI87VtMuNHXoWq9krF7zAkmGnszfS1pR8KQiE+VxA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:08:59 2026 by rpki-client