$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/32332e3135392e3136302e302f32342d3234203d3e203236353438.roa File: 32332e3135392e3136302e302f32342d3234203d3e203236353438.roa (raw, json) Hash identifier: 4ppgfOVc7m6eW4VCYHN1LeLPloowDK6MaV3H3HBgkaI= Subject key identifier: AE:1C:1E:C8:CE:52:77:EB:06:97:A8:81:B1:0D:3E:68:29:56:46:74 Certificate issuer: /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450 Certificate serial: 4662F33C08739F9CB4F5AA4CE55C807B39886352 Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/51/32332e3135392e3136302e302f32342d3234203d3e203236353438.roa Signing time: Sat 16 Aug 2025 01:48:29 +0000 ROA not before: Sat 16 Aug 2025 01:43:29 +0000 ROA not after: Sat 15 Aug 2026 01:48:29 +0000 asID: 26548 IP address blocks: 23.159.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 20:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:62:f3:3c:08:73:9f:9c:b4:f5:aa:4c:e5:5c:80:7b:39:88:63:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450 Validity Not Before: Aug 16 01:43:29 2025 GMT Not After : Aug 15 01:48:29 2026 GMT Subject: CN=AE1C1EC8CE5277EB0697A881B10D3E6829564674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:2d:68:fc:62:28:9a:25:3c:b7:4d:c4:90: a5:09:3b:12:c6:94:70:1d:fd:2a:92:e1:9b:e9:0b: aa:74:4a:d5:ad:c0:2e:9f:d1:fc:cc:5f:1c:c3:96: e4:2e:cc:88:ef:fe:bf:c1:f6:0a:55:4f:ab:9b:b5: 8e:aa:5c:81:e9:13:07:8b:3a:76:09:b1:a7:29:8c: 48:1d:f2:04:9f:66:4c:02:34:2a:1a:e1:d7:25:52: 35:ee:a5:39:18:1e:43:ab:64:da:13:01:07:c5:5b: 01:e7:cb:33:c3:e7:11:d8:0f:09:b9:d2:e6:b9:ae: 4e:9f:88:86:40:d4:b4:d6:5c:04:e6:dc:ca:77:c2: c0:b4:60:ee:d5:7e:b2:6b:e8:e2:ba:69:79:3e:27: f5:09:3c:36:eb:8f:a0:2b:5b:73:67:81:1f:36:2e: 66:c3:f3:dc:57:b7:3a:65:ec:41:ab:85:86:67:40: 33:91:42:b5:8f:bb:da:6f:6a:54:e5:0c:0e:91:1c: 92:3d:c7:24:26:28:5a:95:5d:dc:9a:e8:dd:65:40: 2d:7e:5a:d5:7e:a8:1b:c9:3e:72:10:fe:02:ea:f5: 80:91:9c:ab:ab:e5:10:71:8a:95:c3:96:36:63:2c: 16:58:a3:dc:7b:d8:6d:ec:67:f1:ab:c7:45:30:b6: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1C:1E:C8:CE:52:77:EB:06:97:A8:81:B1:0D:3E:68:29:56:46:74 X509v3 Authority Key Identifier: keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/32332e3135392e3136302e302f32342d3234203d3e203236353438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.159.160.0/24 Signature Algorithm: sha256WithRSAEncryption 70:b0:7a:37:9e:14:fe:fd:7a:52:0f:64:6c:c2:d5:98:87:c6: 65:09:10:43:b4:bd:ce:d0:e8:1b:49:9c:1e:11:c1:7c:45:de: a6:26:fe:7b:78:fe:db:ce:77:78:58:70:ae:0f:9d:6c:99:c9: cc:94:f6:d1:f0:ff:cf:65:e9:cb:44:f1:39:d6:24:ee:4b:1d: 0e:33:c2:30:8f:91:08:df:41:39:35:70:13:28:9f:3d:b6:a2: ec:fe:c8:f6:66:69:ab:9c:b8:30:70:c8:fd:0f:34:e5:8b:9e: 50:3a:9e:d6:09:42:52:f8:54:54:3b:bb:f3:ce:64:eb:81:15: d9:23:73:a3:d1:c9:64:e0:c8:04:e3:10:60:80:3f:af:ed:7d: 81:74:71:24:3f:78:24:0b:dc:44:c8:f7:39:82:a5:c4:8b:2b: e1:75:85:00:7f:aa:57:fd:da:0d:11:04:7d:e9:89:10:71:cc: 84:e6:ea:a7:2e:a2:c9:e4:8f:d1:97:50:be:23:46:9b:7e:2f: 46:17:12:e2:f2:d2:70:fb:32:b8:7d:00:f8:5c:e8:b5:a0:ee: 7c:73:d1:2a:f7:e7:11:91:5f:30:43:7e:f5:96:a9:04:86:7a: 76:98:cc:c7:21:a9:40:8d:63:b5:de:2e:14:90:61:13:c1:1e: 3e:f2:90:d0 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIURmLzPAhzn5y09apM5VyAezmIY1IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTlmYWMxNDY3MjEyMmJkZGZjN2ExMjc4OTgwZDY5NWM2 MDlkNWVhZWVkYjBkZjI0NTAwHhcNMjUwODE2MDE0MzI5WhcNMjYwODE1MDE0ODI5 WjAzMTEwLwYDVQQDEyhBRTFDMUVDOENFNTI3N0VCMDY5N0E4ODFCMTBEM0U2ODI5 NTY0Njc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue8taPxiKJol PLdNxJClCTsSxpRwHf0qkuGb6QuqdErVrcAun9H8zF8cw5bkLsyI7/6/wfYKVU+r m7WOqlyB6RMHizp2CbGnKYxIHfIEn2ZMAjQqGuHXJVI17qU5GB5Dq2TaEwEHxVsB 58szw+cR2A8JudLmua5On4iGQNS01lwE5tzKd8LAtGDu1X6ya+jiuml5Pif1CTw2 64+gK1tzZ4EfNi5mw/PcV7c6ZexBq4WGZ0AzkUK1j7vab2pU5QwOkRySPcckJiha lV3cmujdZUAtflrVfqgbyT5yEP4C6vWAkZyrq+UQcYqVw5Y2YywWWKPce9ht7Gfx q8dFMLbTFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK4cHsjOUnfrBpeogbENPmgp VkZ0MB8GA1UdIwQYMBaAFFEwedTP+/34ECTKG0jKt3vVFmZXMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTEvNTEzMDc5RDRDRkZCRkRGODEwMjRDQTFCNDhDQUI3N0JENTE2NjY1 Ny5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2RhYjc2YzZiLTBlODYtNGEwMy1hNTlhLWYzZmM3N2Ri YmE2Mi9lOWZhYzE0NjcyMTIyYmRkZmM3YTEyNzg5ODBkNjk1YzYwOWQ1ZWFlZWRi MGRmMjQ1MC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTEvMzIzMzJlMzEzNTM5MmUzMTM2MzAy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzUzNDM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5+g MA0GCSqGSIb3DQEBCwUAA4IBAQBwsHo3nhT+/XpSD2RswtWYh8ZlCRBDtL3O0Ogb SZweEcF8Rd6mJv57eP7bznd4WHCuD51smcnMlPbR8P/PZenLRPE51iTuSx0OM8Iw j5EI30E5NXATKJ89tqLs/sj2ZmmrnLgwcMj9DzTli55QOp7WCUJS+FRUO7vzzmTr gRXZI3Oj0clk4MgE4xBggD+v7X2BdHEkP3gkC9xEyPc5gqXEiyvhdYUAf6pX/doN EQR96YkQccyE5uqnLqLJ5I/Rl1C+I0abfi9GFxLi8tJw+zK4fQD4XOi1oO58c9Eq 9+cRkV8wQ371lqkEhnp2mMzHIalAjWO13i4UkGETwR4+8pDQ -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:07 2025 by rpki-client