$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e203332373237.roa File: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (raw, json) Hash identifier: 8zatHT3G4oUxl3buwx301fQuV8U2NBFNclu9rhLr4cg= Subject key identifier: CB:66:F2:0B:95:74:AA:09:6D:A4:21:58:86:E4:60:8A:A3:80:65:9B Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 434351287EA2F5EA7E36667074A180412762B959 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e203332373237.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 32727 IP address blocks: 2604:eb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 05:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:43:51:28:7e:a2:f5:ea:7e:36:66:70:74:a1:80:41:27:62:b9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=CB66F20B9574AA096DA4215886E4608AA380659B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2b:37:48:62:6f:b6:c2:ff:d6:ea:5b:5d:c7: cc:9c:4d:52:b1:77:7b:1f:7b:2e:fb:5c:d8:42:78: d7:80:74:91:7f:f4:5e:a0:a9:46:f1:62:4b:2d:c4: 7c:4b:aa:8c:19:7a:90:c2:72:39:7f:8b:8f:9d:70: c6:e6:a1:de:c5:e1:f7:d4:e8:6f:6c:4b:d7:77:36: e0:4e:3d:71:f0:1f:cd:10:e2:ca:7b:94:59:72:77: d7:5e:f7:6a:0a:6d:84:11:44:ff:62:db:b3:47:24: 28:7e:71:b9:d9:ad:d5:b9:1d:d4:3c:7e:21:0b:9f: 99:a2:7e:ea:38:5a:ca:53:81:de:92:e8:7c:da:d5: d9:04:b5:01:2a:7a:5b:fc:63:1c:f3:5f:57:d4:ec: fb:5e:e4:00:a4:52:7f:ce:58:32:e6:d7:32:df:fb: 94:a4:cc:79:27:50:62:c9:89:4c:ba:81:01:b9:b9: c5:13:de:51:a5:f4:79:50:73:61:d9:50:d6:ea:b9: 0c:cd:f8:3f:24:de:ba:39:a0:21:9e:bb:5a:b5:08: fa:af:9a:3e:f1:55:ff:cc:29:fa:11:89:51:54:b7: 78:2a:09:dd:13:6d:a5:ae:4f:9e:95:5f:b5:de:d7: 6f:55:9c:3f:83:87:e6:e9:b8:73:e4:3a:34:38:2a: 62:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:66:F2:0B:95:74:AA:09:6D:A4:21:58:86:E4:60:8A:A3:80:65:9B X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e203332373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:eb40::/32 Signature Algorithm: sha256WithRSAEncryption bf:2f:35:b8:e3:ea:2a:7d:b7:23:c4:de:be:05:09:01:3f:a9: ca:79:27:75:13:d8:ac:6b:03:2e:51:5c:c8:c4:aa:45:00:61: a4:2a:52:e0:7a:66:ad:84:f8:8f:14:fe:da:65:31:cb:11:fa: 00:d9:20:6e:24:0f:96:b4:f7:76:7d:0d:3d:8d:68:fa:a8:76: 61:91:40:b2:03:6d:ac:42:a0:e7:9f:3b:74:2e:9d:15:9d:65: 1c:2d:73:e5:31:46:6b:f0:d1:c5:7f:2d:b1:04:d0:bd:e2:24: f3:75:01:45:ab:70:61:bd:ba:48:2e:1e:80:c8:9c:4f:40:b9: 1e:68:ec:24:31:31:ac:16:7d:e6:09:cb:55:51:00:c2:f3:62: ad:d0:f5:a1:5d:9a:49:87:f6:d1:31:aa:2f:25:a6:6f:9c:2d: b5:a2:05:e4:3b:9c:6e:8d:11:c5:8e:5e:aa:a9:8a:75:98:56: 83:49:02:5e:c8:de:3a:c2:9f:d4:e6:9b:71:17:7e:b9:5e:61: 3d:74:96:f0:1a:f7:5e:d5:db:71:57:05:80:9e:60:91:5b:bb: 62:d1:62:6c:bc:c7:7a:36:11:0f:a0:f6:cc:fd:de:36:e0:a2: 5a:1c:92:d0:41:52:4f:4b:a2:79:06:9e:93:63:7e:81:22:d0: 2c:31:b3:5d -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUQ0NRKH6i9ep+NmZwdKGAQSdiuVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNzE4MDE1MTE0WhcNMjcwNzE3MDE1NjE0 WjAzMTEwLwYDVQQDEyhDQjY2RjIwQjk1NzRBQTA5NkRBNDIxNTg4NkU0NjA4QUEz ODA2NTlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmys3SGJvtsL/ 1upbXcfMnE1SsXd7H3su+1zYQnjXgHSRf/ReoKlG8WJLLcR8S6qMGXqQwnI5f4uP nXDG5qHexeH31OhvbEvXdzbgTj1x8B/NEOLKe5RZcnfXXvdqCm2EEUT/YtuzRyQo fnG52a3VuR3UPH4hC5+Zon7qOFrKU4Hekuh82tXZBLUBKnpb/GMc819X1Oz7XuQA pFJ/zlgy5tcy3/uUpMx5J1BiyYlMuoEBubnFE95RpfR5UHNh2VDW6rkMzfg/JN66 OaAhnrtatQj6r5o+8VX/zCn6EYlRVLd4KgndE22lrk+elV+13tdvVZw/g4fm6bhz 5Do0OCpiPQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFMtm8guVdKoJbaQhWIbkYIqj gGWbMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjM3MzIzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACYE60Aw DQYJKoZIhvcNAQELBQADggEBAL8vNbjj6ip9tyPE3r4FCQE/qcp5J3UT2KxrAy5R XMjEqkUAYaQqUuB6Zq2E+I8U/tplMcsR+gDZIG4kD5a093Z9DT2NaPqodmGRQLID baxCoOefO3QunRWdZRwtc+UxRmvw0cV/LbEE0L3iJPN1AUWrcGG9ukguHoDInE9A uR5o7CQxMawWfeYJy1VRAMLzYq3Q9aFdmkmH9tExqi8lpm+cLbWiBeQ7nG6NEcWO XqqpinWYVoNJAl7I3jrCn9Tmm3EXfrleYT10lvAa917V23FXBYCeYJFbu2LRYmy8 x3o2EQ+g9sz93jbgolocktBBUk9LonkGnpNjfoEi0Cwxs10= -----END CERTIFICATE-----Generated at Fri Jul 24 14:35:17 2026 by rpki-client