$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38392e302f32342d3234203d3e2036323333.roa File: 3134322e3134372e38392e302f32342d3234203d3e2036323333.roa (raw, json) Hash identifier: RhnUqne7UFlAI2MIKSse6xuFYq3NBE5sM/3l9P2NJxk= Subject key identifier: 6B:FB:F2:2F:47:63:8B:BD:2D:18:11:D0:51:8E:C4:17:46:0B:E0:FA Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 7040D3DCEE91044781BD7E35550BF2E3A76C9122 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38392e302f32342d3234203d3e2036323333.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 6233 IP address blocks: 142.147.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 02:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:40:d3:dc:ee:91:04:47:81:bd:7e:35:55:0b:f2:e3:a7:6c:91:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=6BFBF22F47638BBD2D1811D0518EC417460BE0FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:3a:cb:63:4c:af:ae:5e:21:98:a6:dc:20: 48:5b:2a:be:14:35:5b:ac:42:38:44:06:53:3d:41: 84:19:e2:6a:4b:b0:d1:8d:9e:28:fa:fc:34:83:f1: 71:16:09:c7:79:d6:65:ac:9c:15:39:7e:b6:d8:79: 05:46:f3:00:80:66:96:f7:d5:52:a1:af:ab:a3:5e: 4f:d8:a0:70:4d:e6:51:fb:43:0a:21:bd:71:6e:d2: 8e:2c:0e:86:a8:41:3a:04:09:19:2f:3a:e0:e7:a9: 95:49:a5:93:5b:3a:e7:64:5b:87:e1:e8:4f:9c:6d: e7:1f:68:8a:b1:fb:1c:de:7a:32:9d:fd:44:81:9e: 59:41:bb:4b:16:7b:01:f0:8c:b8:e8:4f:bb:88:a8: 2c:27:1d:df:3b:07:3e:2d:9c:2d:b3:5a:c3:22:88: 3b:77:21:f2:35:07:db:64:99:46:ed:12:23:19:d9: a1:64:9f:42:1f:8c:98:ae:73:07:5d:20:1a:f5:34: e0:33:bb:6a:7c:af:c2:7f:9a:21:08:20:b8:13:0b: b0:c4:d5:b2:21:bc:cb:b7:81:7f:1b:e4:3c:fa:54: 18:52:24:f4:09:2d:89:72:22:e5:05:26:66:4a:5e: 3e:c3:94:9f:11:bb:ca:c6:01:98:38:03:cb:18:60: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:FB:F2:2F:47:63:8B:BD:2D:18:11:D0:51:8E:C4:17:46:0B:E0:FA X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38392e302f32342d3234203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.147.89.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:71:5c:24:ac:95:2a:00:73:28:9b:ef:50:5f:8b:75:9b:6f: c0:eb:8d:f2:2e:2a:eb:61:55:7f:84:b0:14:83:ef:0a:6d:15: 82:06:7d:6c:28:24:6b:ec:bd:54:ae:b3:38:2b:6d:37:60:67: 50:e7:ae:e7:7d:28:82:8b:7b:4d:b0:dd:af:b9:07:5a:91:fd: 2c:c5:bd:a3:64:ad:5e:a1:1d:91:41:be:e2:81:4a:56:69:5f: 0f:c9:6f:ef:ab:12:56:69:f7:7c:6d:7c:4f:8f:d7:0f:2e:ce: 54:99:e1:66:06:46:ce:a3:52:f7:e1:c3:1a:99:27:3d:90:96: a4:67:42:5e:d4:ac:f2:60:66:a5:e2:b0:f4:99:57:54:dc:82: c2:39:d1:5b:7a:26:ae:b4:7f:06:61:88:11:f3:3e:11:f1:f1: 15:84:38:bd:54:e9:09:c1:de:35:2c:46:d4:ec:49:20:35:c3: a9:ef:e7:02:b2:c2:0b:39:ef:6e:6b:44:c7:fb:45:a5:ee:a9: 8d:3c:07:3c:ae:4d:91:f9:bf:cd:57:0d:65:45:de:b0:11:05: ac:6e:8f:3d:2a:1a:c1:d4:da:3d:5a:2f:0b:60:e6:73:6a:ab: f8:25:eb:e2:39:5f:2e:90:b7:8b:49:b8:be:05:ab:3e:21:b1: 72:b0:2d:34 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUcEDT3O6RBEeBvX41VQvy46dskSIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwNzE4MDE1MTE1WhcNMjcwNzE3MDE1NjE1 WjAzMTEwLwYDVQQDEyg2QkZCRjIyRjQ3NjM4QkJEMkQxODExRDA1MThFQzQxNzQ2 MEJFMEZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGs6y2NMr65e IZim3CBIWyq+FDVbrEI4RAZTPUGEGeJqS7DRjZ4o+vw0g/FxFgnHedZlrJwVOX62 2HkFRvMAgGaW99VSoa+ro15P2KBwTeZR+0MKIb1xbtKOLA6GqEE6BAkZLzrg56mV SaWTWzrnZFuH4ehPnG3nH2iKsfsc3noynf1EgZ5ZQbtLFnsB8Iy46E+7iKgsJx3f Owc+LZwts1rDIog7dyHyNQfbZJlG7RIjGdmhZJ9CH4yYrnMHXSAa9TTgM7tqfK/C f5ohCCC4EwuwxNWyIbzLt4F/G+Q8+lQYUiT0CS2JciLlBSZmSl4+w5SfEbvKxgGY OAPLGGB7GwIDAQABo4ICXjCCAlowHQYDVR0OBBYEFGv78i9HY4u9LRgR0FGOxBdG C+D6MB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzNDMyMmUzMTM0MzcyZTM4Mzky ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI6TWTAN BgkqhkiG9w0BAQsFAAOCAQEAK3FcJKyVKgBzKJvvUF+LdZtvwOuN8i4q62FVf4Sw FIPvCm0VggZ9bCgka+y9VK6zOCttN2BnUOeu530ogot7TbDdr7kHWpH9LMW9o2St XqEdkUG+4oFKVmlfD8lv76sSVmn3fG18T4/XDy7OVJnhZgZGzqNS9+HDGpknPZCW pGdCXtSs8mBmpeKw9JlXVNyCwjnRW3omrrR/BmGIEfM+EfHxFYQ4vVTpCcHeNSxG 1OxJIDXDqe/nArLCCznvbmtEx/tFpe6pjTwHPK5Nkfm/zVcNZUXesBEFrG6PPSoa wdTaPVovC2Dmc2qr+CXr4jlfLpC3i0m4vgWrPiGxcrAtNA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:10:42 2026 by rpki-client