$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e203332373237.roa File: 323630343a656234303a3a2f33322d3438203d3e203332373237.roa (raw, json) Hash identifier: Cg5GGyK9gkttC4eDMEsZ6OW6P7xjuvdP8pUyBrle7tc= Subject key identifier: DB:43:AE:98:0E:44:33:C5:9A:B9:92:2B:F7:B7:5E:63:FD:F3:ED:ED Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 36A4E8BF5E4D4726BA817022D3C4BBE85D2012A4 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e203332373237.roa Signing time: Sat 16 Aug 2025 01:48:18 +0000 ROA not before: Sat 16 Aug 2025 01:43:18 +0000 ROA not after: Sat 15 Aug 2026 01:48:18 +0000 asID: 32727 IP address blocks: 2604:eb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 22:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a4:e8:bf:5e:4d:47:26:ba:81:70:22:d3:c4:bb:e8:5d:20:12:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Aug 16 01:43:18 2025 GMT Not After : Aug 15 01:48:18 2026 GMT Subject: CN=DB43AE980E4433C59AB9922BF7B75E63FDF3EDED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:18:20:5f:a5:90:0a:94:3e:9c:68:99:26:53: 49:d3:7e:4b:09:ea:b5:93:61:ac:e5:77:06:d2:ce: e7:2b:61:12:cd:18:4c:2e:60:6a:3a:3b:97:3c:b3: 45:ca:4a:4e:eb:ac:9f:9c:3c:e9:02:f9:f3:20:eb: 96:66:e2:b0:7b:df:7a:f8:da:80:69:45:f0:fb:32: b6:2e:5c:5f:02:11:d1:3c:05:8e:ae:f6:14:05:e3: eb:a3:ec:ac:8b:d9:24:25:32:30:08:c5:2a:ab:40: ae:78:65:ed:58:36:c7:64:fa:c3:da:a6:7d:7e:79: ed:d6:49:92:78:39:cc:fa:96:9b:8c:94:f0:6b:6f: e4:ed:28:62:98:66:d7:4d:0a:82:a5:41:2e:10:e7: 61:30:12:91:89:fa:2f:ad:c5:b3:e7:5c:25:78:ef: a2:6f:a4:ec:2c:96:fb:dd:21:5f:73:a3:dc:24:c1: ff:5a:88:01:f2:07:94:7e:29:f4:a9:c2:1d:c3:2a: 83:d7:cf:dd:a1:09:b2:12:8d:be:4b:03:cc:7f:3e: 82:1c:62:b5:36:40:fb:fb:4b:26:67:0d:a0:70:a8: 74:36:4f:a3:96:22:fa:2d:ea:0b:b6:73:9e:2e:d9: 61:a0:a4:1b:b3:95:32:fc:19:98:8d:6d:fe:25:1a: 0d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:43:AE:98:0E:44:33:C5:9A:B9:92:2B:F7:B7:5E:63:FD:F3:ED:ED X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e203332373237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:eb40::/32 Signature Algorithm: sha256WithRSAEncryption aa:72:3f:ba:0b:50:37:c5:a9:d6:30:97:3b:e0:b9:47:ce:98: 02:1d:f0:e6:56:34:88:0e:0f:b2:74:61:d6:1c:e5:48:d3:16: e2:56:f0:33:97:3f:75:78:92:2b:8c:ec:a1:b7:e3:78:a4:f5: 19:da:0c:96:0f:5a:68:17:47:f5:55:6f:72:d7:a3:dc:d5:4e: 21:48:a7:c1:b6:ab:2f:7a:3a:08:de:5a:fd:a5:d9:5c:a3:b7: 51:f4:e6:08:9c:7d:73:ca:51:16:fb:3d:9d:c8:95:0b:3f:4b: 4d:ba:0a:dc:66:99:99:ae:cc:a4:8c:c1:07:46:34:d8:42:80: 92:79:f4:52:12:14:7d:89:b4:12:a3:8e:68:53:cc:34:66:a4: 20:f4:b5:dc:c6:df:b8:a9:cb:6e:15:d8:47:c9:c6:28:b3:e5: e1:03:b7:d9:2b:3b:d6:14:ec:b3:5a:51:dd:ce:1f:5e:3e:5f: 2a:a4:2e:ec:3f:3c:64:2c:30:8a:84:f1:3b:3d:24:b4:5f:0f: 50:70:27:f3:53:1e:d7:9c:84:c7:c6:ba:f1:a1:22:9d:99:cf: d2:c0:6b:fe:c5:35:34:bb:0c:eb:bf:97:99:3c:b2:ae:52:e3: b3:79:3a:27:bb:0f:09:5f:52:85:50:75:00:a1:3d:fa:f2:5f: 4b:8a:6f:77 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUNqTov15NRya6gXAi08S76F0gEqQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwODE2MDE0MzE4WhcNMjYwODE1MDE0ODE4 WjAzMTEwLwYDVQQDEyhEQjQzQUU5ODBFNDQzM0M1OUFCOTkyMkJGN0I3NUU2M0ZE RjNFREVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hggX6WQCpQ+ nGiZJlNJ035LCeq1k2Gs5XcG0s7nK2ESzRhMLmBqOjuXPLNFykpO66yfnDzpAvnz IOuWZuKwe996+NqAaUXw+zK2LlxfAhHRPAWOrvYUBePro+ysi9kkJTIwCMUqq0Cu eGXtWDbHZPrD2qZ9fnnt1kmSeDnM+pabjJTwa2/k7ShimGbXTQqCpUEuEOdhMBKR ifovrcWz51wleO+ib6TsLJb73SFfc6PcJMH/WogB8geUfin0qcIdwyqD18/doQmy Eo2+SwPMfz6CHGK1NkD7+0smZw2gcKh0Nk+jliL6LeoLtnOeLtlhoKQbs5Uy/BmY jW3+JRoNaQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFNtDrpgORDPFmrmSK/e3XmP9 8+3tMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjM3MzIzNy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACYE60Aw DQYJKoZIhvcNAQELBQADggEBAKpyP7oLUDfFqdYwlzvguUfOmAId8OZWNIgOD7J0 YdYc5UjTFuJW8DOXP3V4kiuM7KG343ik9RnaDJYPWmgXR/VVb3LXo9zVTiFIp8G2 qy96OgjeWv2l2Vyjt1H05gicfXPKURb7PZ3IlQs/S026CtxmmZmuzKSMwQdGNNhC gJJ59FISFH2JtBKjjmhTzDRmpCD0tdzG37ipy24V2EfJxiiz5eEDt9krO9YU7LNa Ud3OH14+XyqkLuw/PGQsMIqE8Ts9JLRfD1BwJ/NTHtechMfGuvGhIp2Zz9LAa/7F NTS7DOu/l5k8sq5S47N5Oie7DwlfUoVQdQChPfryX0uKb3c= -----END CERTIFICATE-----Generated at Sun Aug 24 04:30:19 2025 by rpki-client