$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e20393439.roa File: 323630343a656234303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: 9AVqyEcHTnIoj85ljZf3wDmCXLNsBzXUmDyKEp/tnHI= Subject key identifier: 7B:54:F5:C9:14:CD:BF:7F:84:BE:F3:7C:E8:E2:66:F4:A6:07:1E:26 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 46A4A3368C3F9DAAC181508F3B87228384841B53 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e20393439.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 949 IP address blocks: 2604:eb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 11:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a4:a3:36:8c:3f:9d:aa:c1:81:50:8f:3b:87:22:83:84:84:1b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=7B54F5C914CDBF7F84BEF37CE8E266F4A6071E26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:ff:cf:59:14:5d:dd:16:19:35:46:6e:ce: 6d:17:76:13:db:91:3b:e8:01:fe:a1:52:9d:ed:e0: 72:f3:e8:cb:c2:b8:dd:69:e9:bf:72:69:63:59:33: 29:05:92:15:cd:1e:5f:7a:5f:f5:32:2b:10:9f:c5: 5b:63:02:25:81:c5:70:29:03:99:65:49:c2:50:9d: e4:36:d8:64:bc:f8:df:b7:d1:77:75:c9:4a:ce:1e: ee:61:a7:94:d1:df:48:c2:fa:7f:47:19:62:bc:41: 7b:98:5a:ab:c9:ad:71:35:50:ad:a8:ee:d8:b7:39: 9c:8f:1f:20:52:1c:d3:55:43:d4:a0:de:49:5f:fc: b3:90:ca:9c:7f:3c:af:58:d3:2c:59:ab:89:5b:fa: cf:92:0b:36:8e:6f:1d:06:4b:c9:32:cd:a4:d4:6e: 54:4a:f5:d3:e1:16:55:7f:8b:dd:fd:98:93:8c:4c: 8f:c1:75:c5:9e:3e:1c:ce:96:45:b1:0a:93:48:ce: cc:21:5b:29:b9:e3:17:ff:26:8b:ed:ab:fc:cd:d4: e9:c0:9f:e8:83:9b:3e:a5:5a:01:6a:d8:1d:72:a1: 30:5e:1f:c0:ac:9b:cb:4b:f1:91:50:ea:13:75:9b: 7a:de:a2:f2:e2:bf:09:e5:a3:29:95:df:bd:8f:2f: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:54:F5:C9:14:CD:BF:7F:84:BE:F3:7C:E8:E2:66:F4:A6:07:1E:26 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:eb40::/32 Signature Algorithm: sha256WithRSAEncryption 07:4c:f6:b0:0a:77:65:0c:96:4a:91:66:1e:a8:ed:7d:01:42: 0d:71:a7:5a:1b:f6:14:fa:21:45:13:15:b4:67:d5:73:c5:e1: 5d:68:55:4f:58:e1:b9:ad:72:4e:be:69:29:82:c4:2d:59:1b: aa:f6:4e:35:08:9f:38:61:cb:95:72:4f:05:f1:c1:08:56:96: bf:b3:86:4f:47:86:aa:94:3e:05:cc:87:7c:90:65:41:41:3c: 91:5c:5b:37:1d:d4:b2:39:11:80:20:27:b8:72:74:49:9c:ba: 13:e3:5e:de:d9:79:75:0d:66:76:80:af:42:5b:7f:05:ec:76: 6f:bc:22:43:ae:c8:d5:48:74:c0:d7:82:32:f8:1a:1f:9d:c0: 65:52:0e:f3:f7:4f:e0:af:c5:e2:a4:13:8c:39:d7:31:2b:d7: 87:ab:ee:e2:ae:39:fe:5c:6e:02:bd:ca:f5:50:ef:e1:ea:fc: a2:7c:be:79:02:68:59:06:6a:0d:05:29:28:21:57:87:37:80: d8:0b:78:ee:67:dc:d0:86:de:9f:ce:e5:93:63:19:43:90:43: 33:52:7f:14:6f:6d:cf:89:f4:02:39:8e:f3:12:bf:45:71:54: 6a:38:ef:17:99:60:09:a8:7f:e9:a5:99:57:74:d0:34:09:3f: bf:41:78:d9 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIURqSjNow/narBgVCPO4cig4SEG1MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNzE4MDE1MTE0WhcNMjcwNzE3MDE1NjE0 WjAzMTEwLwYDVQQDEyg3QjU0RjVDOTE0Q0RCRjdGODRCRUYzN0NFOEUyNjZGNEE2 MDcxRTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo3/z1kUXd0W GTVGbs5tF3YT25E76AH+oVKd7eBy8+jLwrjdaem/cmljWTMpBZIVzR5fel/1MisQ n8VbYwIlgcVwKQOZZUnCUJ3kNthkvPjft9F3dclKzh7uYaeU0d9Iwvp/RxlivEF7 mFqrya1xNVCtqO7Ytzmcjx8gUhzTVUPUoN5JX/yzkMqcfzyvWNMsWauJW/rPkgs2 jm8dBkvJMs2k1G5USvXT4RZVf4vd/ZiTjEyPwXXFnj4czpZFsQqTSM7MIVspueMX /yaL7av8zdTpwJ/og5s+pVoBatgdcqEwXh/ArJvLS/GRUOoTdZt63qLy4r8J5aMp ld+9jy8v1QIDAQABo4ICWzCCAlcwHQYDVR0OBBYEFHtU9ckUzb9/hL7zfOjiZvSm Bx4mMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrQDANBgkq hkiG9w0BAQsFAAOCAQEAB0z2sAp3ZQyWSpFmHqjtfQFCDXGnWhv2FPohRRMVtGfV c8XhXWhVT1jhua1yTr5pKYLELVkbqvZONQifOGHLlXJPBfHBCFaWv7OGT0eGqpQ+ BcyHfJBlQUE8kVxbNx3UsjkRgCAnuHJ0SZy6E+Ne3tl5dQ1mdoCvQlt/Bex2b7wi Q67I1Uh0wNeCMvgaH53AZVIO8/dP4K/F4qQTjDnXMSvXh6vu4q45/lxuAr3K9VDv 4er8ony+eQJoWQZqDQUpKCFXhzeA2At47mfc0Iben87lk2MZQ5BDM1J/FG9tz4n0 AjmO8xK/RXFUajjvF5lgCah/6aWZV3TQNAk/v0F42Q== -----END CERTIFICATE-----Generated at Fri Jul 24 04:49:44 2026 by rpki-client