
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/32332e3135392e3136302e302f32342d3234203d3e203236353438.roa
File: 32332e3135392e3136302e302f32342d3234203d3e203236353438.roa (raw, json)
Hash identifier: oklFKc/+omk9CMeP/iwowJS86PfqcGnqXO7kCuAKIWQ=
Subject key identifier: 88:57:C6:CE:45:37:CB:3F:08:30:FC:61:CE:6D:A9:45:EB:E1:72:68
Certificate issuer: /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Certificate serial: 0FF69EF9878D605388AD6C4F7EFA64F6D8B9BEAF
Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/51/32332e3135392e3136302e302f32342d3234203d3e203236353438.roa
Signing time: Sat 18 Jul 2026 01:56:15 +0000
ROA not before: Sat 18 Jul 2026 01:51:15 +0000
ROA not after: Sat 17 Jul 2027 01:56:15 +0000
asID: 26548
IP address blocks: 23.159.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 01:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f6:9e:f9:87:8d:60:53:88:ad:6c:4f:7e:fa:64:f6:d8:b9:be:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Validity
Not Before: Jul 18 01:51:15 2026 GMT
Not After : Jul 17 01:56:15 2027 GMT
Subject: CN=8857C6CE4537CB3F0830FC61CE6DA945EBE17268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:85:d0:9a:87:19:65:3f:40:2b:f5:39:c1:
c7:96:42:53:e1:30:9c:02:2a:0e:59:90:01:fb:2b:
ea:c2:e2:6b:da:58:92:ad:32:81:56:d0:31:3e:8a:
f4:a1:ec:96:94:d0:57:04:5f:19:e9:a1:72:e1:c2:
e7:4b:07:9f:ce:24:99:23:12:fd:23:31:71:a4:d1:
74:58:19:98:e5:be:cd:47:db:2f:9f:37:23:3b:e9:
0e:9c:b6:cd:ac:9f:7b:d5:5f:9a:4a:73:dc:42:38:
69:e1:72:ad:ae:dd:46:2e:7d:6e:ed:e4:30:33:21:
24:44:3e:07:6e:45:b4:9e:62:a2:a0:a4:f5:0b:23:
8a:fb:1d:1d:5c:a2:03:fa:85:45:e5:63:3c:d4:1c:
72:84:37:7a:0f:4b:a0:78:9a:9a:c7:2d:99:38:b0:
6f:ba:fc:34:14:f4:1a:38:6f:0e:aa:6e:23:a0:80:
bc:04:d2:83:30:b2:f5:f7:ec:f7:4d:70:c0:af:e0:
ff:d9:83:8b:3e:84:f2:5b:54:fc:0d:36:cc:7a:74:
01:f6:26:e7:a0:9f:29:22:3d:4a:b2:69:96:6b:ee:
3c:d2:ca:38:8d:ed:c9:c8:1d:11:73:4e:59:6d:f4:
91:ed:57:e8:bb:d4:72:49:7f:fa:33:64:62:49:ec:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:57:C6:CE:45:37:CB:3F:08:30:FC:61:CE:6D:A9:45:EB:E1:72:68
X509v3 Authority Key Identifier:
keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/32332e3135392e3136302e302f32342d3234203d3e203236353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.159.160.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1f:d0:2d:a0:aa:1a:6a:ae:ed:61:df:5f:91:00:68:5b:38:
97:3e:d6:d6:c2:80:b2:3f:0b:89:94:25:d7:cb:5e:33:2c:b6:
fd:00:8d:d2:7a:fc:3a:67:26:93:84:ee:4b:cc:6e:58:5f:9f:
bf:ca:e0:8c:0b:03:92:53:53:33:df:94:c9:cd:30:0d:67:7f:
44:e3:da:30:8e:01:f5:02:ef:b9:da:ed:62:a1:40:fb:94:20:
1e:6d:88:ef:d5:1c:4b:43:7c:b8:bc:5c:49:70:b0:93:32:59:
7f:5e:03:21:2b:72:60:54:3d:3a:24:8d:19:0b:3e:1e:bf:ff:
9e:a3:5e:c7:cd:9e:d3:5a:10:c6:c9:74:70:fd:df:76:c0:9b:
ee:d4:bd:a7:a7:a9:62:5b:73:22:2c:86:01:c5:f1:48:22:87:
15:ab:84:3a:72:54:27:35:2f:ee:42:ad:b5:dc:25:6c:be:7b:
0b:84:8b:2d:99:77:4c:40:dd:d2:51:c7:8e:92:76:c9:be:08:
f5:e8:e8:b7:82:fd:3c:42:64:4b:56:2b:54:06:1e:c0:f5:7a:
0b:02:9d:70:a8:47:04:98:26:5b:aa:c4:65:eb:42:dc:43:16:
30:de:24:a1:cb:0b:ba:34:ed:ee:18:20:e9:da:e1:8a:59:30:
f5:f1:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:33 2026 by rpki-client