$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa File: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: um2KJiRM2FYgKS2flS9xc0kAi/zhNqqor0xvuCJG0hI= Subject key identifier: 00:11:08:86:17:CD:9B:91:8C:80:7D:50:08:92:24:18:3B:DD:8A:E8 Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Certificate serial: 3B377A8961CB964F88ED365DD1C4A3EE91661F78 Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa Signing time: Sat 16 Aug 2025 01:48:27 +0000 ROA not before: Sat 16 Aug 2025 01:43:27 +0000 ROA not after: Sat 15 Aug 2026 01:48:27 +0000 asID: 949 IP address blocks: 2604:e4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 20:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:37:7a:89:61:cb:96:4f:88:ed:36:5d:d1:c4:a3:ee:91:66:1f:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Validity Not Before: Aug 16 01:43:27 2025 GMT Not After : Aug 15 01:48:27 2026 GMT Subject: CN=0011088617CD9B918C807D50089224183BDD8AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:da:f3:2e:df:0b:9c:76:fe:7a:72:56:44: af:48:c5:66:7e:fc:76:4b:38:28:8d:3e:f3:05:6a: bc:e7:73:ec:b9:9b:52:0e:5e:0d:d4:6e:f1:40:f0: de:47:1b:bd:99:ce:6f:4b:96:7d:d7:21:4a:ad:94: 8f:9f:5e:05:85:9c:64:73:c1:7c:41:78:e8:65:c7: 82:8a:29:7c:7f:17:1b:4b:70:e3:33:dc:70:be:54: 7c:0a:7f:0a:2f:8f:99:88:a0:77:ce:cf:85:ef:83: a8:06:fc:95:21:ff:cf:39:9d:3d:b9:30:31:e8:c6: 3f:3a:45:8e:89:32:10:85:b6:b5:9a:b1:bf:95:78: de:ba:ea:25:fc:12:9d:d8:21:1f:0f:e8:9d:4c:66: 87:37:13:7c:ac:7e:df:a8:19:ca:56:92:60:65:eb: a0:d6:c3:27:d4:8d:99:95:88:41:31:be:22:ea:8d: cc:d7:b2:41:13:8a:ae:b5:43:00:00:73:51:2d:9e: 8a:44:5a:db:dc:08:66:f6:df:95:99:e3:f4:ce:56: 88:c3:2a:8c:d2:c8:9c:e7:04:2e:c7:7c:49:86:71: 93:03:82:8e:cc:15:d3:31:9c:56:77:4a:c6:59:c4: d3:37:b0:30:03:ea:be:60:e6:b7:fb:05:76:57:91: 6a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:11:08:86:17:CD:9B:91:8C:80:7D:50:08:92:24:18:3B:DD:8A:E8 X509v3 Authority Key Identifier: keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e4c0::/32 Signature Algorithm: sha256WithRSAEncryption 00:9d:39:d5:92:59:e7:2b:13:ad:62:2a:ce:24:fe:ed:9b:59: 11:1c:0f:2d:bf:3d:85:06:73:58:c6:45:ae:17:b4:a8:5a:af: f0:49:7f:f4:3f:6c:77:e0:d3:78:80:5f:53:a6:c2:8e:af:61: 25:56:eb:14:17:19:61:17:1e:bd:71:18:5f:28:8d:de:2c:0e: 5e:ad:52:98:b3:e6:b0:88:21:92:a7:14:d9:ec:17:b4:7a:80: 78:48:22:a8:8c:16:1d:f1:5b:ff:90:d3:3e:64:d6:c4:81:e3: 13:42:15:53:70:6e:02:a0:65:51:65:71:3d:d6:c8:dd:06:04: 19:bc:b2:9b:94:7f:1d:40:ea:75:21:53:6c:17:c6:52:a5:5a: 70:51:82:cc:f3:ec:48:86:60:da:65:15:b8:7f:7e:71:c0:60: a1:3e:24:d2:d2:31:e2:a9:7b:61:71:1c:38:e9:78:ef:dc:93: e4:eb:5a:e8:12:c7:e4:cc:4f:93:6a:d1:45:2d:f3:d6:df:ec: b5:23:a4:d1:17:a8:88:f2:53:96:31:d0:ef:07:0e:fe:1d:c4: 0d:d9:4d:f3:fe:54:9d:0a:57:8b:aa:09:09:81:b9:26:06:a5: 46:9b:e3:b6:0f:82:49:d5:32:ab:f8:3b:fb:ea:bd:a1:f0:69: 80:ba:70:81 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUOzd6iWHLlk+I7TZd0cSj7pFmH3gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh N2NmZjE3MzliMDI3YzY0MGIwHhcNMjUwODE2MDE0MzI3WhcNMjYwODE1MDE0ODI3 WjAzMTEwLwYDVQQDEygwMDExMDg4NjE3Q0Q5QjkxOEM4MDdENTAwODkyMjQxODNC REQ4QUU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lra8y7fC5x2 /npyVkSvSMVmfvx2SzgojT7zBWq853PsuZtSDl4N1G7xQPDeRxu9mc5vS5Z91yFK rZSPn14FhZxkc8F8QXjoZceCiil8fxcbS3DjM9xwvlR8Cn8KL4+ZiKB3zs+F74Oo BvyVIf/POZ09uTAx6MY/OkWOiTIQhba1mrG/lXjeuuol/BKd2CEfD+idTGaHNxN8 rH7fqBnKVpJgZeug1sMn1I2ZlYhBMb4i6o3M17JBE4qutUMAAHNRLZ6KRFrb3Ahm 9t+VmeP0zlaIwyqM0sic5wQux3xJhnGTA4KOzBXTMZxWd0rGWcTTN7AwA+q+YOa3 +wV2V5Fq0QIDAQABo4ICWzCCAlcwHQYDVR0OBBYEFAARCIYXzZuRjIB9UAiSJBg7 3YroMB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2 Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4 MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw MjdjNjQwYi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvMzIzNjMwMzQzYTY1MzQ2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTkwDANBgkq hkiG9w0BAQsFAAOCAQEAAJ051ZJZ5ysTrWIqziT+7ZtZERwPLb89hQZzWMZFrhe0 qFqv8El/9D9sd+DTeIBfU6bCjq9hJVbrFBcZYRcevXEYXyiN3iwOXq1SmLPmsIgh kqcU2ewXtHqAeEgiqIwWHfFb/5DTPmTWxIHjE0IVU3BuAqBlUWVxPdbI3QYEGbyy m5R/HUDqdSFTbBfGUqVacFGCzPPsSIZg2mUVuH9+ccBgoT4k0tIx4ql7YXEcOOl4 79yT5Ota6BLH5MxPk2rRRS3z1t/stSOk0ReoiPJTljHQ7wcO/h3EDdlN8/5UnQpX i6oJCYG5JgalRpvjtg+CSdUyq/g7++q9ofBpgLpwgQ== -----END CERTIFICATE-----Generated at Sun Aug 24 02:56:09 2025 by rpki-client