
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa
File: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (raw, json)
Hash identifier: Jg/dOJ9vWsCWz0necaHH1kraMhqIxvWP0S2yGkWolhU=
Subject key identifier: A6:D4:FE:17:DB:75:41:89:E9:C7:6F:7C:97:B4:08:53:45:9E:4F:E4
Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial: 21E120D482FE78AF37D583A72D843DB6156FF13C
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa
Signing time: Sat 18 Jul 2026 01:56:14 +0000
ROA not before: Sat 18 Jul 2026 01:51:14 +0000
ROA not after: Sat 17 Jul 2027 01:56:14 +0000
asID: 949
IP address blocks: 2604:e4c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 04:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e1:20:d4:82:fe:78:af:37:d5:83:a7:2d:84:3d:b6:15:6f:f1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Validity
Not Before: Jul 18 01:51:14 2026 GMT
Not After : Jul 17 01:56:14 2027 GMT
Subject: CN=A6D4FE17DB754189E9C76F7C97B40853459E4FE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:75:53:bd:df:18:de:24:13:46:22:47:ed:
0e:8f:32:48:82:7f:83:39:b3:4e:3f:57:a9:65:03:
a8:82:bd:24:ba:89:0e:f1:20:06:75:18:43:89:32:
f4:60:09:3d:50:0e:3b:8c:e5:df:4d:d2:14:88:7d:
e1:28:47:b5:06:a1:27:2a:2e:36:19:57:59:fc:30:
57:04:9a:23:ff:d4:74:29:b0:78:60:53:63:e0:90:
48:97:4c:12:bb:ff:f3:ee:bf:60:d4:4e:07:c1:47:
34:7e:05:ec:37:de:49:ea:ec:b9:77:e0:1b:23:a5:
33:6f:63:43:e2:b7:44:10:51:df:b3:bc:17:81:e8:
e6:c9:12:59:b6:80:c5:18:dc:0b:47:35:38:c4:7e:
0a:5d:33:69:91:fb:04:da:00:1c:57:18:b0:29:3a:
a5:54:25:1d:33:75:76:73:21:ed:0d:ee:1e:3c:6c:
b7:0b:de:f7:2a:f9:5b:d6:19:31:9e:b8:f9:3d:5c:
52:d3:d0:21:1b:ec:10:17:61:f6:b7:d4:f7:8a:e5:
21:b4:0c:ef:b5:50:40:90:c4:8c:38:81:c3:cf:25:
6b:64:42:d4:91:f5:70:22:35:f0:3e:cc:dc:96:23:
67:e8:84:de:a6:69:0c:e6:26:f8:62:f7:4d:1f:1f:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D4:FE:17:DB:75:41:89:E9:C7:6F:7C:97:B4:08:53:45:9E:4F:E4
X509v3 Authority Key Identifier:
keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e20393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:e4c0::/32
Signature Algorithm: sha256WithRSAEncryption
3c:22:9b:93:a2:48:f4:3c:ae:06:07:0a:90:47:bd:67:dd:91:
96:1b:2e:83:6a:cf:08:f9:a3:c3:a9:1b:60:21:be:13:a5:da:
ee:1e:40:77:c4:a6:46:d9:d7:98:24:5e:c6:b1:a7:32:e1:83:
57:7f:e7:0b:d3:bd:e0:0a:77:43:51:81:cc:86:bf:06:79:25:
3c:9b:63:35:fc:4a:f4:6f:4f:e7:53:f5:ad:c9:ca:f7:17:84:
08:93:70:40:83:37:3b:a3:2e:03:14:8e:9e:32:d6:0b:04:e6:
33:37:4c:fe:79:f9:65:9a:b9:ac:59:c9:29:ef:11:28:0e:15:
13:b3:91:1a:50:86:b0:fb:64:cd:cd:6a:da:4b:90:2f:a9:84:
ce:f4:3b:68:9d:bd:3f:41:94:89:3b:a7:95:b3:ae:42:f2:1a:
0c:0a:29:6c:5b:61:60:e8:e8:d0:85:15:68:a4:ea:f8:aa:e7:
d1:2b:64:1b:21:1a:1c:94:69:bf:e9:6d:f4:5d:de:09:c5:c7:
0d:23:08:ad:0f:5f:3f:b2:58:81:02:8a:76:ed:5d:bb:0f:c5:
e9:2a:78:01:3a:bd:fc:5f:f0:c5:a9:46:56:f5:72:c2:57:ae:
4b:2f:7f:cf:6c:b7:9b:8e:ae:2d:28:48:6b:3a:77:56:f0:87:
a9:55:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:16:49 2026 by rpki-client