
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa
File: 323630343a613834303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier: kcsjJKzYyxRMvbUFX3o46is/VSYzuraAIfUbIRhw+Bc=
Subject key identifier: 80:A7:9D:82:47:D0:D2:CA:1B:61:3A:5C:67:C4:C5:5B:F5:AD:C1:2E
Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial: 7C9438CDC11CE2BAED83594ED0DD966C6D988407
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa
Signing time: Sat 18 Jul 2026 01:56:15 +0000
ROA not before: Sat 18 Jul 2026 01:51:15 +0000
ROA not after: Sat 17 Jul 2027 01:56:15 +0000
asID: 949
IP address blocks: 2604:a840::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:94:38:cd:c1:1c:e2:ba:ed:83:59:4e:d0:dd:96:6c:6d:98:84:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Validity
Not Before: Jul 18 01:51:15 2026 GMT
Not After : Jul 17 01:56:15 2027 GMT
Subject: CN=80A79D8247D0D2CA1B613A5C67C4C55BF5ADC12E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:d0:f3:31:74:8a:2d:fe:87:a0:b2:b8:db:
b2:3f:37:bf:51:d5:3f:3f:6b:ba:cd:77:10:7a:ab:
e1:0f:12:8e:51:72:61:67:79:25:70:7e:94:58:ef:
b4:5c:65:18:9e:96:68:6f:29:bd:f0:e3:cc:f2:51:
c2:a1:83:59:32:55:46:ad:ef:88:b0:5b:f9:31:02:
6e:8a:c5:52:06:32:8b:90:43:3e:e9:30:49:49:62:
d2:76:9d:30:36:5c:3f:4a:40:73:45:3f:67:ac:6e:
43:59:f4:c8:44:34:c8:1a:a3:90:e7:19:71:2a:b5:
03:98:5f:c9:cd:5f:f5:9f:fb:6d:20:5f:60:3a:a8:
ab:3e:e3:f7:c5:fc:69:40:be:cb:c3:4d:b1:bc:5d:
a1:2f:e7:66:e5:3f:5e:d0:b5:e7:a4:a5:db:ef:40:
b6:a9:6e:3d:52:9f:dc:ac:4f:b5:29:b4:21:d9:19:
dc:80:2d:f6:f2:90:28:43:93:24:21:26:96:1d:03:
2d:7c:6b:75:00:b5:21:ac:88:19:84:dd:4c:ae:03:
6f:18:6a:bb:9b:38:e1:9f:3b:d2:49:21:e2:2d:05:
68:6d:0f:2a:bc:4e:14:d1:90:fb:d1:d4:3e:42:28:
07:1c:38:a7:bb:0e:13:62:06:38:0e:93:7b:3d:66:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A7:9D:82:47:D0:D2:CA:1B:61:3A:5C:67:C4:C5:5B:F5:AD:C1:2E
X509v3 Authority Key Identifier:
keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:a840::/32
Signature Algorithm: sha256WithRSAEncryption
7f:d5:ff:a9:7f:70:e9:a5:ea:82:4f:a1:b2:39:70:ad:dd:56:
f8:e2:9f:45:37:42:48:25:0e:f2:77:82:18:d2:f6:d1:06:ba:
60:52:f0:25:61:05:c4:5e:5a:6e:92:8b:8f:70:81:80:a2:04:
19:96:6f:91:90:8a:32:c7:72:1f:a7:bc:a9:ce:15:76:f8:b5:
0f:d1:da:41:eb:3b:52:91:d1:af:df:52:9b:ec:56:89:cf:34:
bd:a1:80:6a:19:f8:b3:04:8f:d4:bc:4c:e4:55:9a:2e:dd:d0:
96:84:e8:6f:ee:69:3b:dc:12:fc:30:69:a6:bd:3b:16:73:04:
48:8f:cb:43:06:cb:82:da:98:37:db:63:c5:7c:a7:51:33:89:
39:09:6c:99:7a:53:4d:30:ca:84:43:e8:04:7f:25:a4:43:e8:
93:e2:b2:6b:ae:ed:d8:d7:07:ce:f8:cb:21:00:47:dc:f4:77:
ea:c6:02:2d:74:e5:d2:09:60:fe:02:8e:ce:57:2e:bc:52:e4:
ff:d7:c5:2e:65:aa:48:d4:42:65:4d:b1:74:fd:62:22:be:bb:
dc:8a:0c:72:a8:5a:52:7a:39:ab:e7:15:ba:40:db:9b:88:98:
3e:07:8c:98:2a:e8:f9:07:8d:74:12:16:69:a0:fa:64:19:8a:
d4:ca:16:ee
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIUfJQ4zcEc4rrtg1lO0N2WbG2YhAcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk
MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwNzE4MDE1MTE1WhcNMjcwNzE3MDE1NjE1
WjAzMTEwLwYDVQQDEyg4MEE3OUQ4MjQ3RDBEMkNBMUI2MTNBNUM2N0M0QzU1QkY1
QURDMTJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFHQ8zF0ii3+
h6CyuNuyPze/UdU/P2u6zXcQeqvhDxKOUXJhZ3klcH6UWO+0XGUYnpZobym98OPM
8lHCoYNZMlVGre+IsFv5MQJuisVSBjKLkEM+6TBJSWLSdp0wNlw/SkBzRT9nrG5D
WfTIRDTIGqOQ5xlxKrUDmF/JzV/1n/ttIF9gOqirPuP3xfxpQL7Lw02xvF2hL+dm
5T9e0LXnpKXb70C2qW49Up/crE+1KbQh2RncgC328pAoQ5MkISaWHQMtfGt1ALUh
rIgZhN1MrgNvGGq7mzjhnzvSSSHiLQVobQ8qvE4U0ZD70dQ+QigHHDinuw4TYgY4
DpN7PWYRuQIDAQABo4ICWzCCAlcwHQYDVR0OBBYEFICnnYJH0NLKG2E6XGfExVv1
rcEuMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5
OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm
NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2
ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi
ODE0YzUyNC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzIzNjMwMzQzYTYxMzgzNDMwM2Ez
YTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSoQDANBgkq
hkiG9w0BAQsFAAOCAQEAf9X/qX9w6aXqgk+hsjlwrd1W+OKfRTdCSCUO8neCGNL2
0Qa6YFLwJWEFxF5abpKLj3CBgKIEGZZvkZCKMsdyH6e8qc4Vdvi1D9HaQes7UpHR
r99Sm+xWic80vaGAahn4swSP1LxM5FWaLt3QloTob+5pO9wS/DBppr07FnMESI/L
QwbLgtqYN9tjxXynUTOJOQlsmXpTTTDKhEPoBH8lpEPok+Kya67t2NcHzvjLIQBH
3PR36sYCLXTl0glg/gKOzlcuvFLk/9fFLmWqSNRCZU2xdP1iIr673IoMcqhaUno5
q+cVukDbm4iYPgeMmCro+QeNdBIWaaD6ZBmK1MoW7g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:18 2026 by rpki-client