$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa File: 323630343a656234303a3a2f33322d3438203d3e2036323333.roa (raw, json) Hash identifier: qxnJBzayqDnpfpm3cAH29ojtmCs+UPghNdMoHjDeWEU= Subject key identifier: 49:CE:A4:1D:D9:7B:91:94:F9:7E:52:C0:BB:72:64:90:A4:AA:88:9D Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 5215DC429A7E009BA254E098BE8CA81BEF989DD7 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa Signing time: Sat 16 Aug 2025 01:48:18 +0000 ROA not before: Sat 16 Aug 2025 01:43:18 +0000 ROA not after: Sat 15 Aug 2026 01:48:18 +0000 asID: 6233 IP address blocks: 2604:eb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 22:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:15:dc:42:9a:7e:00:9b:a2:54:e0:98:be:8c:a8:1b:ef:98:9d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Aug 16 01:43:18 2025 GMT Not After : Aug 15 01:48:18 2026 GMT Subject: CN=49CEA41DD97B9194F97E52C0BB726490A4AA889D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:33:4f:89:17:64:4d:05:36:17:5c:22:ec:4b: 35:71:4e:47:f2:31:7d:86:51:b0:82:a9:00:94:d9: f0:09:fa:fa:58:4d:b1:36:e3:9a:be:19:de:09:f2: c3:a5:10:63:a5:d9:7c:d8:df:f8:74:8d:0a:26:17: b0:a8:39:8a:a1:47:93:8d:b7:fd:c6:78:c6:91:a6: 4b:26:9b:0f:1b:23:35:d2:96:7d:32:3d:42:f1:a7: 0b:b4:61:74:77:e1:20:c6:fa:a2:e0:a2:41:b3:0c: 50:e9:07:1e:53:74:77:cd:b5:dc:2c:f3:84:ed:26: c0:46:ed:6f:38:1a:06:8a:31:64:b1:11:d5:10:1a: a2:ab:73:cb:cf:3d:6d:16:ee:9f:5e:34:bb:e0:4c: 9d:77:06:d8:d6:8b:da:b9:95:cb:62:a1:4e:25:ee: 3b:90:ca:5c:8e:11:f6:e6:1a:ed:a2:7e:07:0c:d5: 79:ff:92:29:af:9d:b2:09:b9:e0:c6:08:44:6d:f2: d8:5d:c1:c8:24:8b:21:2b:ad:81:ac:08:f9:ca:12: ea:da:1f:ec:0d:99:d5:dc:a5:c7:c5:1f:b3:50:40: 81:ad:08:a7:42:75:1c:dc:df:85:32:09:69:fa:d1: f1:af:ae:2a:d8:cd:3b:b7:ce:32:d1:69:d9:4f:fc: 6a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CE:A4:1D:D9:7B:91:94:F9:7E:52:C0:BB:72:64:90:A4:AA:88:9D X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:eb40::/32 Signature Algorithm: sha256WithRSAEncryption 9f:cb:e1:b2:0d:17:fb:09:51:24:63:ee:c8:95:fc:a2:ab:58: 43:84:64:f0:f4:43:53:45:e6:a9:27:41:61:77:80:e2:05:8e: ba:f9:ba:dc:51:f4:59:c3:ce:d4:b6:73:c2:f4:60:97:92:1b: 6e:b0:60:2f:aa:8f:1a:45:e8:73:f6:70:ea:d3:c8:48:12:87: 64:f0:60:07:02:9f:14:b0:21:88:8e:bc:7a:52:be:1b:9e:e7: 7f:be:16:2d:11:ce:06:fe:5d:50:d6:41:27:cd:5b:6c:fd:76: 0a:0e:4b:f4:1c:b3:67:67:11:9d:a9:2e:5a:89:6f:5d:69:7e: 23:79:06:b0:07:de:ca:55:af:f4:20:12:cf:70:8c:a9:97:3a: 96:ce:1a:bf:ac:60:6f:51:21:61:4f:ec:aa:fd:1d:8c:3a:e8: 5d:9c:4f:70:ec:be:52:84:84:05:29:65:97:66:d4:32:ba:57: 8c:14:c1:08:df:08:c9:c9:a6:2a:85:f6:c4:7a:97:89:69:c9: 86:b6:41:85:05:ba:f6:bb:41:69:ab:8f:aa:6a:36:6a:f6:34: 0b:9e:2a:79:1f:3c:ac:45:4f:03:0d:9b:96:e2:b8:49:c8:ac: 5d:89:f9:4c:7c:08:32:9a:c5:b8:de:4f:92:48:1c:80:38:62: d2:4c:6e:61 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUUhXcQpp+AJuiVOCYvoyoG++YndcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjUwODE2MDE0MzE4WhcNMjYwODE1MDE0ODE4 WjAzMTEwLwYDVQQDEyg0OUNFQTQxREQ5N0I5MTk0Rjk3RTUyQzBCQjcyNjQ5MEE0 QUE4ODlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jNPiRdkTQU2 F1wi7Es1cU5H8jF9hlGwgqkAlNnwCfr6WE2xNuOavhneCfLDpRBjpdl82N/4dI0K JhewqDmKoUeTjbf9xnjGkaZLJpsPGyM10pZ9Mj1C8acLtGF0d+Egxvqi4KJBswxQ 6QceU3R3zbXcLPOE7SbARu1vOBoGijFksRHVEBqiq3PLzz1tFu6fXjS74EyddwbY 1ovauZXLYqFOJe47kMpcjhH25hrton4HDNV5/5Ipr52yCbngxghEbfLYXcHIJIsh K62BrAj5yhLq2h/sDZnV3KXHxR+zUECBrQinQnUc3N+FMglp+tHxr64q2M07t84y 0WnZT/xqjQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFEnOpB3Ze5GU+X5SwLtyZJCk qoidMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOtAMA0G CSqGSIb3DQEBCwUAA4IBAQCfy+GyDRf7CVEkY+7Ilfyiq1hDhGTw9ENTReapJ0Fh d4DiBY66+brcUfRZw87UtnPC9GCXkhtusGAvqo8aRehz9nDq08hIEodk8GAHAp8U sCGIjrx6Ur4bnud/vhYtEc4G/l1Q1kEnzVts/XYKDkv0HLNnZxGdqS5aiW9daX4j eQawB97KVa/0IBLPcIyplzqWzhq/rGBvUSFhT+yq/R2MOuhdnE9w7L5ShIQFKWWX ZtQyuleMFMEI3wjJyaYqhfbEepeJacmGtkGFBbr2u0Fpq4+qajZq9jQLnip5Hzys RU8DDZuW4rhJyKxdiflMfAgymsW43k+SSByAOGLSTG5h -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:04 2025 by rpki-client