$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa File: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (raw, json) Hash identifier: RV2WT7CidrsEpWqL3Fl+XLXxooyuRb3zFv1+H32O6bI= Subject key identifier: F6:F0:BC:D7:E1:B7:91:FA:58:C3:B5:2A:4B:D7:62:48:37:AA:A5:9D Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 29AEAE1A778F7CCCB2F040AD25EC2C85040BF36E Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 6233 IP address blocks: 2604:eb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 05:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ae:ae:1a:77:8f:7c:cc:b2:f0:40:ad:25:ec:2c:85:04:0b:f3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=F6F0BCD7E1B791FA58C3B52A4BD7624837AAA59D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cc:08:a9:d7:65:24:c1:4f:5c:8b:15:f4:26: 24:7b:21:fc:8a:b7:17:89:29:38:cf:22:59:85:b0: 62:e8:48:77:7b:b3:28:ea:58:30:7b:bd:48:05:24: 07:ea:1e:b2:11:6b:5a:e2:ac:22:a8:cc:a8:25:c3: d9:6c:bd:2c:f8:e3:73:ff:90:20:9d:30:a8:67:90: 54:13:8d:40:0a:18:d8:fe:a8:29:97:a8:34:17:c2: 03:fd:e2:95:34:5f:30:c7:4f:a8:9a:b5:7e:f4:fd: e1:14:a9:4a:05:ba:c1:4b:80:4c:48:2a:52:82:01: 52:a1:57:82:4f:4f:ef:d3:d6:40:56:7b:0c:a6:21: 85:15:d9:2d:2a:b8:a8:83:a5:75:30:61:1b:e5:fd: db:d3:27:ed:76:25:20:1f:65:05:77:f4:7b:e1:fe: 48:1a:68:a7:54:01:c2:43:2e:68:e8:08:99:5e:b8: 7e:b1:50:64:6c:e8:19:49:77:7b:21:af:39:79:bb: be:3f:90:6c:75:52:ab:73:6e:58:53:10:96:aa:3a: 9d:d0:71:61:ae:e9:b4:bc:3f:28:b8:54:d7:b1:24: f8:10:83:7a:f2:58:34:2b:46:fc:4b:41:1c:aa:6d: b8:e1:aa:4f:8f:1b:01:2c:a7:92:87:8b:b6:27:2c: 79:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F0:BC:D7:E1:B7:91:FA:58:C3:B5:2A:4B:D7:62:48:37:AA:A5:9D X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:eb40::/32 Signature Algorithm: sha256WithRSAEncryption 1b:b2:fd:ec:20:27:e7:50:8d:bc:b8:95:e5:35:31:b5:db:2a: eb:27:72:ed:73:33:94:99:3d:fe:8a:3f:b4:3b:2c:89:f1:84: 57:45:6c:06:cb:ed:89:6f:55:7a:83:ae:fe:07:6f:15:0c:d1: 45:61:fb:ec:1e:60:04:cd:32:ce:b6:c5:7a:a8:af:ea:4e:70: c1:a0:3b:05:81:ec:99:cc:92:af:3c:1a:71:37:46:5c:6c:c0: 66:25:c8:67:62:d6:0d:c6:54:1e:3d:22:7c:cb:40:55:c6:4f: 18:97:b7:21:af:e3:16:3f:c7:f6:42:a7:a8:60:27:e1:f1:6d: d7:59:b6:d5:42:f7:cf:62:11:e3:06:04:ed:ab:de:d6:3f:bb: a7:c8:d7:0d:1e:ed:33:a3:79:57:0b:c7:70:f6:2e:ed:89:0c: 02:e1:b7:35:a3:43:39:4d:03:8b:ab:8f:c8:b7:b4:92:2b:d3: 46:cf:45:f7:b7:eb:bd:f9:9e:19:5d:ea:5c:8c:95:45:0a:4b: fd:2d:ca:d9:1d:2e:6e:6e:0d:2b:8b:8b:9b:d6:3c:4e:01:b6: 0b:cb:08:71:6a:03:b0:25:7d:ac:f2:86:70:e1:c1:81:0e:27: 4d:bb:07:0a:c7:76:ec:ba:5e:86:20:04:84:e5:da:d6:18:40: 70:58:15:5b -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUKa6uGnePfMyy8ECtJewshQQL824wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNzE4MDE1MTE0WhcNMjcwNzE3MDE1NjE0 WjAzMTEwLwYDVQQDEyhGNkYwQkNEN0UxQjc5MUZBNThDM0I1MkE0QkQ3NjI0ODM3 QUFBNTlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcwIqddlJMFP XIsV9CYkeyH8ircXiSk4zyJZhbBi6Eh3e7Mo6lgwe71IBSQH6h6yEWta4qwiqMyo JcPZbL0s+ONz/5AgnTCoZ5BUE41AChjY/qgpl6g0F8ID/eKVNF8wx0+omrV+9P3h FKlKBbrBS4BMSCpSggFSoVeCT0/v09ZAVnsMpiGFFdktKriog6V1MGEb5f3b0yft diUgH2UFd/R74f5IGminVAHCQy5o6AiZXrh+sVBkbOgZSXd7Ia85ebu+P5BsdVKr c25YUxCWqjqd0HFhrum0vD8ouFTXsST4EIN68lg0K0b8S0Ecqm244apPjxsBLKeS h4u2Jyx5hwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFPbwvNfht5H6WMO1KkvXYkg3 qqWdMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOtAMA0G CSqGSIb3DQEBCwUAA4IBAQAbsv3sICfnUI28uJXlNTG12yrrJ3LtczOUmT3+ij+0 OyyJ8YRXRWwGy+2Jb1V6g67+B28VDNFFYfvsHmAEzTLOtsV6qK/qTnDBoDsFgeyZ zJKvPBpxN0ZcbMBmJchnYtYNxlQePSJ8y0BVxk8Yl7chr+MWP8f2QqeoYCfh8W3X WbbVQvfPYhHjBgTtq97WP7unyNcNHu0zo3lXC8dw9i7tiQwC4bc1o0M5TQOLq4/I t7SSK9NGz0X3t+u9+Z4ZXepcjJVFCkv9LcrZHS5ubg0ri4ub1jxOAbYLywhxagOw JX2s8oZw4cGBDidNuwcKx3bsul6GIASE5drWGEBwWBVb -----END CERTIFICATE-----Generated at Fri Jul 24 07:15:57 2026 by rpki-client