$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa File: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (raw, json) Hash identifier: y0uJ+hMTxtf8whXhbeKquYP1HRGdODoI512PgSgBSrM= Subject key identifier: 3A:E3:9F:C3:39:64:CF:56:57:B8:CA:35:E6:58:3D:05:85:12:FF:3F Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Certificate serial: 2967CA3A0DAD831704F510EC8818CD1A661FDACF Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa Signing time: Sat 18 Jul 2026 01:56:14 +0000 ROA not before: Sat 18 Jul 2026 01:51:14 +0000 ROA not after: Sat 17 Jul 2027 01:56:14 +0000 asID: 11930 IP address blocks: 2604:e4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 04:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:67:ca:3a:0d:ad:83:17:04:f5:10:ec:88:18:cd:1a:66:1f:da:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Validity Not Before: Jul 18 01:51:14 2026 GMT Not After : Jul 17 01:56:14 2027 GMT Subject: CN=3AE39FC33964CF5657B8CA35E6583D058512FF3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:1c:a3:39:17:82:46:77:f4:cd:56:75:d8: 13:fb:e2:36:38:21:0a:9a:6f:3b:d3:0b:1a:38:8e: 95:df:b2:23:99:7e:36:ba:8f:4f:b0:cc:06:a0:db: 31:97:6f:35:77:e8:a3:18:ee:91:1c:a3:48:2d:19: 7c:a0:32:d9:61:22:ec:df:22:1d:bf:f1:5f:a1:8b: af:9f:44:83:06:84:b1:7d:81:c9:24:8b:13:cc:f8: 91:bc:f1:46:82:6f:02:e2:bf:98:71:28:6b:98:9e: 4a:6f:2c:ba:06:91:bf:6c:71:37:a8:e0:39:b7:81: b0:53:f5:a1:c3:fc:77:ca:a0:ee:1d:42:2a:1a:8a: 22:43:ed:ad:38:a7:33:6f:32:b0:26:ad:5b:0b:6f: 0c:20:de:ca:6a:de:93:40:56:7d:ef:dc:17:82:68: 36:8a:0c:12:5b:14:8e:f8:9c:c3:56:72:24:04:cc: 0e:98:1b:ae:78:76:96:f1:22:2c:f7:a1:89:14:15: 85:e4:70:aa:5f:72:6a:0c:7e:84:15:d5:63:25:85: b6:c1:8a:5d:19:ff:4e:91:5a:94:6f:8c:77:a2:ec: 00:7a:14:89:85:2f:a6:2b:d5:7b:f3:1f:0c:da:ec: 04:a8:1f:9e:1a:3e:29:c7:22:1f:15:67:49:3d:55: 6d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E3:9F:C3:39:64:CF:56:57:B8:CA:35:E6:58:3D:05:85:12:FF:3F X509v3 Authority Key Identifier: keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e4c0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:4e:29:e3:03:2f:00:cf:07:30:8d:07:b9:2e:33:07:5b:56: 6f:ba:0c:fb:3e:7d:4a:41:55:56:77:e5:79:8d:84:a7:a4:f9: b2:49:73:2f:0f:c1:9b:85:0f:de:29:36:7e:ac:1b:63:87:45: cd:ed:56:c2:25:d1:b5:aa:ab:93:1b:87:8c:a5:b4:71:76:77: 29:d9:a0:dd:22:23:43:47:a2:3a:83:cb:53:a4:f7:c2:59:4f: 4a:47:9f:35:d2:39:fc:ed:ef:08:e0:40:4a:4e:d9:88:8d:23: 94:01:77:36:cd:08:1d:6d:58:ae:1a:d1:ae:6a:a5:79:fc:8d: 1f:25:80:7f:2a:c1:ce:c2:1f:80:3d:17:56:30:e7:73:ae:66: e8:fc:95:9c:e0:9b:77:46:ce:d7:d3:d0:33:89:21:c1:1c:7d: 58:6c:f9:a5:bd:fe:3b:72:7e:69:f7:5a:7d:48:2e:e1:fd:9e: f8:82:33:4f:c6:7f:6e:6f:0f:f8:9f:bc:6f:c6:84:04:75:34: 8c:eb:9f:e0:01:b5:d9:88:de:4d:50:b6:05:14:d6:64:3f:2e: 45:d3:71:ec:aa:19:1b:fa:ef:5a:f4:47:fd:2d:9a:fa:33:9f: 46:dd:18:9e:78:ed:50:b2:ed:00:3e:96:1c:e8:d2:b9:d2:e6: 49:71:bb:12 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUKWfKOg2tgxcE9RDsiBjNGmYf2s8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh N2NmZjE3MzliMDI3YzY0MGIwHhcNMjYwNzE4MDE1MTE0WhcNMjcwNzE3MDE1NjE0 WjAzMTEwLwYDVQQDEygzQUUzOUZDMzM5NjRDRjU2NTdCOENBMzVFNjU4M0QwNTg1 MTJGRjNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojEcozkXgkZ3 9M1WddgT++I2OCEKmm870wsaOI6V37IjmX42uo9PsMwGoNsxl281d+ijGO6RHKNI LRl8oDLZYSLs3yIdv/FfoYuvn0SDBoSxfYHJJIsTzPiRvPFGgm8C4r+YcShrmJ5K byy6BpG/bHE3qOA5t4GwU/Whw/x3yqDuHUIqGooiQ+2tOKczbzKwJq1bC28MIN7K at6TQFZ979wXgmg2igwSWxSO+JzDVnIkBMwOmBuueHaW8SIs96GJFBWF5HCqX3Jq DH6EFdVjJYW2wYpdGf9OkVqUb4x3ouwAehSJhS+mK9V78x8M2uwEqB+eGj4pxyIf FWdJPVVtrQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFDrjn8M5ZM9WV7jKNeZYPQWF Ev8/MB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2 Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4 MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw MjdjNjQwYi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvMzIzNjMwMzQzYTY1MzQ2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzEzMTM5MzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACYE5MAw DQYJKoZIhvcNAQELBQADggEBAF5OKeMDLwDPBzCNB7kuMwdbVm+6DPs+fUpBVVZ3 5XmNhKek+bJJcy8PwZuFD94pNn6sG2OHRc3tVsIl0bWqq5Mbh4yltHF2dynZoN0i I0NHojqDy1Ok98JZT0pHnzXSOfzt7wjgQEpO2YiNI5QBdzbNCB1tWK4a0a5qpXn8 jR8lgH8qwc7CH4A9F1Yw53OuZuj8lZzgm3dGztfT0DOJIcEcfVhs+aW9/jtyfmn3 Wn1ILuH9nviCM0/Gf25vD/ifvG/GhAR1NIzrn+ABtdmI3k1QtgUU1mQ/LkXTceyq GRv671r0R/0tmvozn0bdGJ547VCy7QA+lhzo0rnS5klxuxI= -----END CERTIFICATE-----Generated at Fri Jul 24 08:44:37 2026 by rpki-client