
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f34382d3438203d3e203535313538.roa
File: 323630353a3963303a3a2f34382d3438203d3e203535313538.roa (raw, json)
Hash identifier: P/SzfRSTtWIfSl9kKOppoG+ZTev987Ha1PDS+hIo4Pc=
Subject key identifier: 19:9A:62:A6:CC:D3:25:58:FA:79:D9:9D:20:EE:7D:E5:0E:1E:25:44
Certificate issuer: /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Certificate serial: 7B88D05426E4E39ED2F18722D9F37B4D74775C1B
Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f34382d3438203d3e203535313538.roa
Signing time: Sat 18 Jul 2026 01:56:15 +0000
ROA not before: Sat 18 Jul 2026 01:51:15 +0000
ROA not after: Sat 17 Jul 2027 01:56:15 +0000
asID: 55158
IP address blocks: 2605:9c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 01:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:88:d0:54:26:e4:e3:9e:d2:f1:87:22:d9:f3:7b:4d:74:77:5c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Validity
Not Before: Jul 18 01:51:15 2026 GMT
Not After : Jul 17 01:56:15 2027 GMT
Subject: CN=199A62A6CCD32558FA79D99D20EE7DE50E1E2544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:b0:84:0e:d0:8d:65:8a:df:67:80:ad:28:
d7:a3:09:c6:7d:c7:20:63:23:f8:40:d1:96:6b:17:
6c:d5:2c:19:79:4a:aa:25:c1:0f:6a:d2:83:97:bb:
74:56:50:a3:ad:be:02:87:50:9e:7d:8c:76:39:81:
98:e8:da:53:92:8c:f7:5e:3b:ad:7e:67:af:37:c3:
8d:e5:ea:c3:e4:e1:bf:a7:35:62:a5:89:1b:d4:78:
a6:5c:6d:de:f3:29:bc:c6:34:08:8f:24:0a:8b:5a:
36:2d:f2:23:2a:02:b3:2f:23:c3:e2:ca:53:1c:29:
16:45:6f:50:ae:8b:49:5b:9c:b5:45:1d:f6:e4:0b:
99:55:1d:46:5f:48:54:8e:59:fd:f6:bf:5b:82:35:
d4:f7:c3:5e:55:f1:dd:0f:ec:ac:cb:cb:0d:15:c5:
43:94:d1:32:c8:f8:7d:03:9e:45:ef:34:c8:e9:e2:
29:85:4f:fc:7b:5f:a3:4a:36:27:9b:63:50:50:56:
7f:cc:9f:e1:ef:02:49:43:4a:5a:f8:50:e7:08:bb:
32:2c:d3:32:bc:4b:04:5a:73:30:ca:e7:ca:86:e0:
b5:dd:c4:f7:91:24:76:be:82:61:f2:af:2d:71:7b:
73:43:c3:6a:3e:a8:3d:79:7f:f0:36:82:ff:e8:87:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:62:A6:CC:D3:25:58:FA:79:D9:9D:20:EE:7D:E5:0E:1E:25:44
X509v3 Authority Key Identifier:
keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f34382d3438203d3e203535313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9c0::/48
Signature Algorithm: sha256WithRSAEncryption
a3:a8:ed:8b:bd:42:f6:48:87:7b:b4:06:19:ec:ee:58:ca:0c:
34:cf:e4:d1:66:f0:86:b3:d4:f8:19:20:74:02:8c:0b:08:91:
31:2b:ca:57:e6:9b:08:f5:ad:ae:a8:0b:1d:8c:fb:22:bd:55:
7a:cd:94:1b:19:6f:4a:63:41:81:02:1d:7c:52:c4:34:48:07:
33:86:90:f1:67:0c:0d:96:d0:2a:39:b1:39:d3:74:70:a3:f3:
be:80:70:3e:3b:88:85:5a:16:6b:60:23:bc:b5:d5:b6:6f:34:
99:32:5f:e8:5b:c0:ba:ef:b2:22:da:02:9b:5e:89:7b:d4:c4:
79:bd:21:84:da:5d:79:3b:e5:c9:0e:98:6c:9d:56:2c:72:6a:
9b:83:c7:d2:ff:5c:1f:74:35:c7:6a:1a:9e:83:14:38:59:f3:
31:a8:91:84:66:af:0e:9a:6d:ca:bd:8f:f4:7e:85:25:2e:9c:
16:cf:8c:e0:77:42:ab:ee:18:dc:2a:42:92:b1:89:8c:69:1c:
76:de:01:63:b6:83:13:f8:b2:57:b6:48:b2:ec:04:a6:b0:b7:
2f:31:b4:68:ac:0b:96:de:91:7e:69:69:b6:46:26:b7:ad:25:
cc:ce:ec:7d:a0:72:e5:2f:79:9d:59:64:a6:4e:45:18:13:26:
78:72:ba:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:44:38 2026 by rpki-client