$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa File: 323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa (raw, json) Hash identifier: n6yTN9/ggQ3vkm7l30Hsgu/57B4zsZzw2XWAG9zD9lw= Subject key identifier: 29:AD:0F:31:26:0F:53:FB:59:0A:01:0C:36:DC:E0:3A:5A:C5:A5:A4 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 6BC95606D1D39C59B3404141ED64AA793CCB96AC Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 55158 IP address blocks: 2604:eb40:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 05:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c9:56:06:d1:d3:9c:59:b3:40:41:41:ed:64:aa:79:3c:cb:96:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=29AD0F31260F53FB590A010C36DCE03A5AC5A5A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:19:4b:92:74:64:b1:7c:18:b8:21:af:5a:23: 08:ed:fc:f3:ae:da:5c:03:a7:12:2d:2f:a8:36:a5: 88:42:6f:e3:3f:b7:85:33:73:29:e9:ec:7a:74:f0: 96:e6:57:fc:03:31:1d:3c:e6:2b:73:e7:91:d9:dc: 12:ab:92:a5:9d:ed:b7:7e:f9:a5:bc:9b:c2:c5:42: 35:fb:02:73:5c:43:33:14:a7:98:f9:db:eb:6d:07: 0e:3a:b1:2c:39:18:c6:aa:d4:bd:21:2a:7d:26:f2: a8:db:12:58:19:b7:5c:68:c1:03:91:77:d3:94:1e: 4e:df:a3:a8:a9:ef:6b:59:3b:97:b9:55:f4:7c:9e: 68:ad:6f:f6:41:ea:26:a3:a1:6f:1f:b1:a4:cc:af: 49:5c:b1:45:ab:30:49:f9:80:00:93:3b:14:c8:76: c9:82:da:d0:94:72:6d:f4:e4:4e:e8:41:25:fd:82: 77:12:30:23:2d:66:d4:e8:ac:be:41:60:47:9e:c5: ac:3d:b1:8f:e5:8e:d8:9b:4d:86:2b:2b:f0:f2:88: 3f:d5:3d:14:5d:df:a7:05:48:a5:c3:34:9f:b2:a9: f9:54:a2:c2:cf:91:23:79:0a:32:1d:c3:83:2f:ba: de:28:2a:26:8b:e7:8c:d7:7f:81:5d:d9:2b:66:2f: 32:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AD:0F:31:26:0F:53:FB:59:0A:01:0C:36:DC:E0:3A:5A:C5:A5:A4 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a363a3a2f34382d3438203d3e203535313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:eb40:6::/48 Signature Algorithm: sha256WithRSAEncryption 04:03:56:4b:f6:d5:a4:6c:3b:ab:b5:df:2b:5f:f0:67:a1:aa: af:71:91:19:6b:22:29:c2:f0:08:ea:9c:9c:3f:9c:c7:1a:61: 5a:74:7e:50:0e:76:87:8c:84:74:26:dd:32:a4:b7:e4:2a:a3: 83:11:9c:56:25:b3:df:7b:97:52:e2:c3:46:fa:96:42:37:bf: b4:8c:3f:fc:96:4b:19:3a:3e:7b:c4:81:5d:a3:5e:95:02:4a: 78:aa:f0:31:26:e4:d3:55:e1:1f:8c:9f:f7:39:eb:72:9a:cb: c0:29:e0:89:7e:f7:34:d4:a0:42:61:5f:b2:44:c3:f0:0f:40: 3e:6c:63:dc:b9:5e:c7:17:28:2a:78:79:65:63:3c:ec:48:e9: b8:4a:f9:92:bf:be:b9:49:49:9c:10:df:f3:d8:00:4b:bd:c9: 99:bd:3b:67:73:6e:ec:33:cd:fd:a5:bf:53:52:8a:eb:66:26: b7:92:4c:09:51:1c:8d:06:dd:5b:4e:66:34:ae:05:4d:54:05: 15:e5:38:53:d8:03:75:12:46:69:a6:24:8b:ca:77:f3:32:c4: 06:5e:7a:6c:e7:52:73:48:50:03:6c:e5:c1:ce:22:c5:14:5b: 17:2e:3e:24:1b:11:1b:dc:d5:71:fd:ee:5c:6c:28:5c:ec:b2: 33:1f:5a:bf -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUa8lWBtHTnFmzQEFB7WSqeTzLlqwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNzE4MDE1MTE0WhcNMjcwNzE3MDE1NjE0 WjAzMTEwLwYDVQQDEygyOUFEMEYzMTI2MEY1M0ZCNTkwQTAxMEMzNkRDRTAzQTVB QzVBNUE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixlLknRksXwY uCGvWiMI7fzzrtpcA6cSLS+oNqWIQm/jP7eFM3Mp6ex6dPCW5lf8AzEdPOYrc+eR 2dwSq5Klne23fvmlvJvCxUI1+wJzXEMzFKeY+dvrbQcOOrEsORjGqtS9ISp9JvKo 2xJYGbdcaMEDkXfTlB5O36Ooqe9rWTuXuVX0fJ5orW/2Qeomo6FvH7GkzK9JXLFF qzBJ+YAAkzsUyHbJgtrQlHJt9ORO6EEl/YJ3EjAjLWbU6Ky+QWBHnsWsPbGP5Y7Y m02GKyvw8og/1T0UXd+nBUilwzSfsqn5VKLCz5EjeQoyHcODL7reKComi+eM13+B XdkrZi8yGQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFCmtDzEmD1P7WQoBDDbc4Dpa xaWkMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzMTM1Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm BOtAAAYwDQYJKoZIhvcNAQELBQADggEBAAQDVkv21aRsO6u13ytf8Gehqq9xkRlr IinC8AjqnJw/nMcaYVp0flAOdoeMhHQm3TKkt+Qqo4MRnFYls997l1Liw0b6lkI3 v7SMP/yWSxk6PnvEgV2jXpUCSniq8DEm5NNV4R+Mn/c563Kay8Ap4Il+9zTUoEJh X7JEw/APQD5sY9y5XscXKCp4eWVjPOxI6bhK+ZK/vrlJSZwQ3/PYAEu9yZm9O2dz buwzzf2lv1NSiutmJreSTAlRHI0G3VtOZjSuBU1UBRXlOFPYA3USRmmmJIvKd/My xAZeemznUnNIUANs5cHOIsUUWxcuPiQbERvc1XH97lxsKFzssjMfWr8= -----END CERTIFICATE-----Generated at Fri Jul 24 06:03:10 2026 by rpki-client