
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa
File: 3134322e3134372e39342e302f32342d3234203d3e203535313538.roa (raw, json)
Hash identifier: xbyDmuTeBwrd1ssen9RkwJhbYRXk1kD9lLhfh/JkHJ4=
Subject key identifier: DA:99:3D:92:06:64:FA:C2:10:DC:B4:20:9E:8E:2B:10:A2:D0:41:D2
Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial: 27B5AC0E3E63CAA6E04E97E4C3363DA59B95A8F9
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa
Signing time: Sat 18 Jul 2026 01:56:14 +0000
ROA not before: Sat 18 Jul 2026 01:51:14 +0000
ROA not after: Sat 17 Jul 2027 01:56:14 +0000
asID: 55158
IP address blocks: 142.147.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b5:ac:0e:3e:63:ca:a6:e0:4e:97:e4:c3:36:3d:a5:9b:95:a8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Validity
Not Before: Jul 18 01:51:14 2026 GMT
Not After : Jul 17 01:56:14 2027 GMT
Subject: CN=DA993D920664FAC210DCB4209E8E2B10A2D041D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:72:f4:25:48:42:e7:5c:a9:86:79:ce:03:5a:
b4:4c:24:55:0f:9b:45:13:95:7d:f1:13:22:1e:90:
c6:62:df:04:9e:51:11:09:7e:67:04:54:1f:57:40:
ad:61:49:84:19:16:d7:9c:cb:3e:f0:63:55:f4:f0:
2c:3f:ea:ac:24:a5:8e:5c:75:d4:47:fa:2d:e6:f5:
7b:e5:fd:3d:74:f0:e8:a6:62:08:78:45:dd:73:23:
19:be:a9:c6:4a:7a:5b:69:dc:39:3f:60:f3:56:b0:
6a:7a:05:82:b1:59:e7:d2:04:ee:0a:93:9a:fb:9f:
b8:bf:13:fb:5e:37:c3:e3:d8:cf:50:28:47:e3:eb:
e1:b6:64:10:9d:97:57:b7:73:d7:02:84:7a:79:85:
8f:ef:f8:78:08:d4:f3:16:48:25:05:17:95:0a:6c:
b4:86:f7:76:bc:b3:17:f6:6b:0d:ff:5f:73:61:c4:
3b:a4:67:17:95:38:32:bc:f3:3f:b3:94:b5:c8:99:
da:ad:a4:3b:41:e4:6e:30:b3:a7:5f:d8:29:d2:2d:
40:f3:da:2e:65:66:c2:5e:87:25:92:34:49:71:a3:
30:88:9a:e3:7d:dc:3e:0c:6d:8c:75:46:97:13:98:
17:13:3f:cc:c2:fe:e2:40:20:87:19:88:e5:88:31:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:99:3D:92:06:64:FA:C2:10:DC:B4:20:9E:8E:2B:10:A2:D0:41:D2
X509v3 Authority Key Identifier:
keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39342e302f32342d3234203d3e203535313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.147.94.0/24
Signature Algorithm: sha256WithRSAEncryption
63:14:3b:e0:14:fb:e9:04:0c:d4:9e:85:7c:6f:44:d6:71:29:
11:53:aa:bc:de:71:02:b8:b2:61:13:2f:a7:28:01:bb:f3:c3:
9b:b7:08:67:e9:0d:7b:2d:7e:b7:2a:7a:e9:57:57:1f:0f:f2:
9f:6f:93:7d:09:8f:c4:5a:5d:e9:30:cc:c7:04:93:87:b0:b6:
c5:80:3c:9d:ba:11:e4:3f:01:04:ed:00:f2:49:2b:29:4b:8f:
cf:e9:27:b8:ff:6c:1f:36:0e:26:e1:bf:fb:1e:0a:fa:27:79:
11:df:19:68:2d:7c:99:ae:75:cf:9b:13:28:c7:9c:47:6f:02:
cc:d7:8b:5c:a4:2a:13:e1:ab:2b:e6:a0:4b:34:79:1b:d6:0e:
88:4b:3d:42:e6:42:4b:ea:f6:1d:9a:0b:b3:01:8f:61:6e:56:
6a:79:db:f3:8b:4a:b2:44:39:c3:73:e8:11:3d:14:97:dc:51:
c0:2d:77:5d:aa:88:a9:ee:a3:a2:cd:1f:d7:a1:50:16:54:0a:
e3:dd:34:8e:e7:39:3a:34:9a:56:99:64:79:5b:a3:ac:40:a6:
ca:ca:d4:49:5d:01:22:a5:18:24:be:45:81:63:cf:69:b0:0c:
19:20:d7:f5:43:af:24:9e:52:48:41:83:72:b9:ec:77:ad:4a:
f4:57:5e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:01 2026 by rpki-client