$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2036323333.roa File: 323630343a613834303a3a2f33322d3438203d3e2036323333.roa (raw, json) Hash identifier: KfWnTMEVQvJybqIim3RIlHFlNK2Vzr7q/aC6EJcgMWk= Subject key identifier: 15:14:EC:C2:F5:96:A4:F7:E1:A3:5E:15:97:5E:5F:3B:37:0F:A6:91 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 1455D295ECC2204B7BB9473BF996CC96BFEBE0E3 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2036323333.roa Signing time: Sat 16 Aug 2025 01:48:19 +0000 ROA not before: Sat 16 Aug 2025 01:43:19 +0000 ROA not after: Sat 15 Aug 2026 01:48:19 +0000 asID: 6233 IP address blocks: 2604:a840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:55:d2:95:ec:c2:20:4b:7b:b9:47:3b:f9:96:cc:96:bf:eb:e0:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Aug 16 01:43:19 2025 GMT Not After : Aug 15 01:48:19 2026 GMT Subject: CN=1514ECC2F596A4F7E1A35E15975E5F3B370FA691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:b3:db:3e:85:3f:d4:bc:b3:f1:91:21:ee: 2d:7e:12:2c:6c:25:41:b1:2b:0e:be:42:7d:e9:18: 7e:4d:8e:bd:21:77:f1:b4:3a:54:6b:70:a6:d8:06: a1:03:39:9d:a8:27:b7:62:fa:d5:d3:8e:a2:eb:75: 3a:d1:d0:76:71:9f:83:a0:f6:3d:11:62:77:d5:7d: ef:49:0d:a6:d0:4e:81:52:af:2f:ec:fe:54:2c:79: 04:d8:e4:c6:e5:21:ce:71:d8:04:e4:a4:ba:d2:7a: 16:43:70:f1:5b:e4:cf:33:26:f9:76:e4:1d:5e:33: f5:9e:05:4f:01:26:0a:4e:d8:63:d0:12:93:b0:aa: 99:29:03:af:b6:1f:45:73:43:8a:f6:01:4f:02:f9: 6f:8d:cd:a1:12:40:33:43:cb:2f:b8:71:fe:a9:b4: 6c:7a:f7:23:94:75:bf:0f:f2:d6:30:12:8a:1b:66: d4:1e:54:2d:68:29:7e:54:90:14:b6:19:14:ef:32: 90:7a:4e:26:59:5a:40:3a:a7:e9:e6:99:51:64:a0: de:4b:1b:e5:61:f6:79:43:a1:f2:e7:46:11:e4:6b: 83:17:7c:0b:89:cc:a2:41:56:4d:c2:05:19:33:e9: e3:49:dc:9f:df:fc:cc:e6:aa:e6:a8:36:37:60:8f: 13:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:14:EC:C2:F5:96:A4:F7:E1:A3:5E:15:97:5E:5F:3B:37:0F:A6:91 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:a840::/32 Signature Algorithm: sha256WithRSAEncryption 65:96:12:b2:50:4b:a0:48:61:3b:fc:54:33:66:f1:66:54:a3: 60:04:6e:b1:79:04:a4:b7:e3:0f:30:2c:59:f6:c2:eb:74:db: df:cc:8d:96:74:d4:48:ff:18:8b:9a:19:cf:3d:c8:3d:91:3e: b6:4e:01:84:03:bd:3b:16:70:53:cb:d4:af:7a:84:43:4b:15: 59:bd:58:e8:0e:f2:19:91:be:19:6c:16:ed:94:64:3e:7f:a1: 4f:7d:96:2f:c2:3e:a0:f0:b6:6f:bc:0d:d2:e1:1c:12:70:81: d4:2a:39:d5:98:8d:d0:5c:20:56:22:8a:3b:79:78:02:46:18: 2c:78:c9:25:7b:13:03:6a:89:bb:c8:c6:a8:bd:6d:4e:12:ab: 6d:f7:75:dd:9f:c9:71:fe:21:31:dc:b7:80:38:09:c2:12:d4: 54:03:08:33:b2:4b:df:ff:f3:26:ab:6c:5d:c3:ac:2f:52:b6: 69:13:50:84:91:2f:00:96:08:15:1a:f6:d4:42:4c:e7:d5:e6: 04:09:de:34:5b:3e:70:fe:29:ed:a1:71:fa:df:1d:a3:c4:d4: 73:06:a2:a5:84:5e:ac:71:b5:1e:a8:7a:41:be:3f:47:46:56: 61:a0:f9:7b:ae:69:38:05:5d:c4:fc:b9:4f:c6:1b:6a:d9:19: ce:c8:ca:d0 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUFFXSlezCIEt7uUc7+ZbMlr/r4OMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjUwODE2MDE0MzE5WhcNMjYwODE1MDE0ODE5 WjAzMTEwLwYDVQQDEygxNTE0RUNDMkY1OTZBNEY3RTFBMzVFMTU5NzVFNUYzQjM3 MEZBNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgGz2z6FP9S8 s/GRIe4tfhIsbCVBsSsOvkJ96Rh+TY69IXfxtDpUa3Cm2AahAzmdqCe3YvrV046i 63U60dB2cZ+DoPY9EWJ31X3vSQ2m0E6BUq8v7P5ULHkE2OTG5SHOcdgE5KS60noW Q3DxW+TPMyb5duQdXjP1ngVPASYKTthj0BKTsKqZKQOvth9Fc0OK9gFPAvlvjc2h EkAzQ8svuHH+qbRsevcjlHW/D/LWMBKKG2bUHlQtaCl+VJAUthkU7zKQek4mWVpA Oqfp5plRZKDeSxvlYfZ5Q6Hy50YR5GuDF3wLicyiQVZNwgUZM+njSdyf3/zM5qrm qDY3YI8TOQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFBUU7ML1lqT34aNeFZdeXzs3 D6aRMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzIzNjMwMzQzYTYxMzgzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBKhAMA0G CSqGSIb3DQEBCwUAA4IBAQBllhKyUEugSGE7/FQzZvFmVKNgBG6xeQSkt+MPMCxZ 9sLrdNvfzI2WdNRI/xiLmhnPPcg9kT62TgGEA707FnBTy9SveoRDSxVZvVjoDvIZ kb4ZbBbtlGQ+f6FPfZYvwj6g8LZvvA3S4RwScIHUKjnVmI3QXCBWIoo7eXgCRhgs eMklexMDaom7yMaovW1OEqtt93Xdn8lx/iEx3LeAOAnCEtRUAwgzskvf//Mmq2xd w6wvUrZpE1CEkS8AlggVGvbUQkzn1eYECd40Wz5w/intoXH63x2jxNRzBqKlhF6s cbUeqHpBvj9HRlZhoPl7rmk4BV3E/LlPxhtq2RnOyMrQ -----END CERTIFICATE-----Generated at Sun Aug 24 09:35:59 2025 by rpki-client