$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa File: 323630343a613834303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: +srvz8C27iXoh4/wHeKT6bnnQhe+kCVRRtOx0VrIsuA= Subject key identifier: C2:F0:A7:D7:42:79:DA:01:6D:29:3D:99:A2:CE:C7:3F:68:73:B1:85 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 354B473DB6737BA6E365D43DC4844867540FF789 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa Signing time: Sat 16 Aug 2025 01:48:20 +0000 ROA not before: Sat 16 Aug 2025 01:43:20 +0000 ROA not after: Sat 15 Aug 2026 01:48:20 +0000 asID: 949 IP address blocks: 2604:a840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4b:47:3d:b6:73:7b:a6:e3:65:d4:3d:c4:84:48:67:54:0f:f7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Aug 16 01:43:20 2025 GMT Not After : Aug 15 01:48:20 2026 GMT Subject: CN=C2F0A7D74279DA016D293D99A2CEC73F6873B185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6b:17:2f:85:98:37:19:1e:ac:b9:21:6d:c3: 57:b6:ce:b6:eb:02:64:6b:3a:3f:32:f3:cb:ed:d7: 41:0e:8e:cc:43:06:8a:c9:0d:9b:33:46:b5:10:06: b6:dc:41:d8:bb:09:fd:61:a9:a4:fb:d2:21:31:eb: b2:0c:99:3e:d0:4f:ac:eb:ad:1b:69:59:8b:59:f2: 74:00:a6:39:72:c4:a7:41:0c:44:c2:41:04:c1:bb: 36:ad:6e:22:7c:10:9d:c7:62:e1:d1:ec:55:23:29: eb:72:58:30:e6:ba:5f:bc:37:75:28:ae:63:d1:fb: f2:d8:30:d1:d6:8b:cb:1b:69:0e:a4:c9:e3:9a:87: 51:df:46:27:58:e4:a7:7c:97:55:cd:8c:6d:85:37: e6:ac:60:96:b5:0e:70:9f:6c:ed:ac:34:a0:73:43: d9:9a:85:19:44:b2:4e:b8:86:22:0a:27:67:c0:36: c5:a0:26:3b:e4:fd:5f:ae:02:71:1a:c2:0c:9f:a3: 6b:1c:a7:68:fe:89:e5:ec:19:11:9e:fb:c0:8d:17: c7:9e:04:94:42:4b:80:89:f1:27:9d:e6:db:4d:90: 35:ac:39:c5:47:85:b1:b6:a3:e3:f5:ef:10:f8:7d: 3f:b2:5c:3c:18:79:af:b1:f0:26:60:5a:16:23:ec: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F0:A7:D7:42:79:DA:01:6D:29:3D:99:A2:CE:C7:3F:68:73:B1:85 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:a840::/32 Signature Algorithm: sha256WithRSAEncryption a3:be:db:c8:6b:c6:d4:34:a6:8f:18:9a:98:67:f3:fc:a2:9e: b0:36:fe:91:90:8f:4e:d0:93:29:96:c0:c2:91:36:6d:0b:18: f5:7c:74:85:d7:a9:e5:df:6c:fa:95:4c:5e:3f:90:1a:09:de: 84:f6:1c:10:4e:2e:6a:eb:c2:fe:1c:41:f3:28:ba:f6:3b:99: 60:1f:58:f5:b9:53:0a:61:c4:1b:64:15:cc:79:20:03:cf:05: 46:ca:1c:6e:9d:45:1a:9d:52:f8:d9:39:6d:57:80:f7:e2:1d: 5d:e1:0d:cd:a2:17:b3:ca:d3:c5:71:09:44:6c:92:02:be:ab: e8:e5:cc:c5:12:d9:dc:77:0e:62:31:df:86:b7:87:f2:3b:09: 29:9c:20:ef:67:25:5c:6e:b2:e1:49:00:db:6a:c3:1c:95:c0: 22:19:8f:fa:86:07:20:56:4c:5a:89:1c:d5:a5:1c:3b:84:3c: a0:c0:01:9c:0f:15:96:96:55:c0:5f:d8:db:5e:2a:78:44:25: 24:f4:b0:8e:24:1f:97:90:fc:1b:2c:2b:8c:1e:42:93:9d:e5: 15:05:99:b6:b9:72:68:e4:f9:91:08:bc:52:76:5c:19:4c:4c: 17:3e:8f:74:f1:8c:14:92:3e:f2:86:04:b4:5b:31:9a:a5:d2: da:99:33:cc -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUNUtHPbZze6bjZdQ9xIRIZ1QP94kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjUwODE2MDE0MzIwWhcNMjYwODE1MDE0ODIw WjAzMTEwLwYDVQQDEyhDMkYwQTdENzQyNzlEQTAxNkQyOTNEOTlBMkNFQzczRjY4 NzNCMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8msXL4WYNxke rLkhbcNXts626wJkazo/MvPL7ddBDo7MQwaKyQ2bM0a1EAa23EHYuwn9Yamk+9Ih MeuyDJk+0E+s660baVmLWfJ0AKY5csSnQQxEwkEEwbs2rW4ifBCdx2Lh0exVIynr clgw5rpfvDd1KK5j0fvy2DDR1ovLG2kOpMnjmodR30YnWOSnfJdVzYxthTfmrGCW tQ5wn2ztrDSgc0PZmoUZRLJOuIYiCidnwDbFoCY75P1frgJxGsIMn6NrHKdo/onl 7BkRnvvAjRfHngSUQkuAifEnnebbTZA1rDnFR4WxtqPj9e8Q+H0/slw8GHmvsfAm YFoWI+xwHwIDAQABo4ICWzCCAlcwHQYDVR0OBBYEFMLwp9dCedoBbSk9maLOxz9o c7GFMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzIzNjMwMzQzYTYxMzgzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSoQDANBgkq hkiG9w0BAQsFAAOCAQEAo77byGvG1DSmjxiamGfz/KKesDb+kZCPTtCTKZbAwpE2 bQsY9Xx0hdep5d9s+pVMXj+QGgnehPYcEE4uauvC/hxB8yi69juZYB9Y9blTCmHE G2QVzHkgA88FRsocbp1FGp1S+Nk5bVeA9+IdXeENzaIXs8rTxXEJRGySAr6r6OXM xRLZ3HcOYjHfhreH8jsJKZwg72clXG6y4UkA22rDHJXAIhmP+oYHIFZMWokc1aUc O4Q8oMABnA8VlpZVwF/Y214qeEQlJPSwjiQfl5D8GywrjB5Ck53lFQWZtrlyaOT5 kQi8UnZcGUxMFz6PdPGMFJI+8oYEtFsxmqXS2pkzzA== -----END CERTIFICATE-----Generated at Sun Aug 24 07:39:25 2025 by rpki-client