$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e203632353939.roa File: 323630343a653034303a3a2f33322d3438203d3e203632353939.roa (raw, json) Hash identifier: a1zxU38JeQqH/zLsFxJm6z2yhZTwu46MbBzyS5lnzRM= Subject key identifier: 8D:B1:DE:69:71:5E:98:76:11:C9:DF:D9:64:72:22:2B:8C:65:A3:A5 Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Certificate serial: 561A52A397FDA1FFD691DD678FECE86C83051168 Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e203632353939.roa Signing time: Sat 18 Jul 2026 01:56:16 +0000 ROA not before: Sat 18 Jul 2026 01:51:16 +0000 ROA not after: Sat 17 Jul 2027 01:56:16 +0000 asID: 62599 IP address blocks: 2604:e040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 22:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1a:52:a3:97:fd:a1:ff:d6:91:dd:67:8f:ec:e8:6c:83:05:11:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Validity Not Before: Jul 18 01:51:16 2026 GMT Not After : Jul 17 01:56:16 2027 GMT Subject: CN=8DB1DE69715E987611C9DFD96472222B8C65A3A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:01:f1:c4:18:ca:96:43:54:fe:53:6e:ba: ca:9f:25:7e:6c:31:8b:45:0e:e4:94:61:49:4b:8b: be:ec:0b:b2:59:0d:ae:39:11:54:4c:75:a4:f2:ee: 6a:00:06:a2:82:25:86:1c:bf:b1:98:fa:38:5a:c2: 90:59:9c:19:93:c2:04:f9:5f:02:57:72:32:7a:66: d6:b3:6a:66:1e:55:c1:09:fc:dc:df:b9:bd:4b:f1: 1d:3e:1b:d1:cb:06:4e:cb:3c:18:0a:36:ef:d7:4f: 85:b3:9e:14:3b:f9:8b:e7:11:f4:69:5e:3b:a5:e5: f5:9f:68:d9:86:27:f2:61:dc:a8:05:70:72:a8:95: 6b:6d:d3:c9:95:76:d9:a1:cb:14:ac:50:76:f7:76: 10:72:86:4b:b9:1f:be:d9:a5:ca:d2:11:08:7c:ec: 39:8a:16:7e:29:b5:b5:58:db:6c:b9:00:47:53:d4: 9d:8a:a0:a6:4c:8d:5c:ef:d8:d0:b5:9d:b6:a7:68: fc:5e:65:0f:a4:51:d0:f0:55:ba:76:ad:bc:63:d4: 36:23:95:60:e0:0c:41:57:3c:95:29:7e:4c:23:23: c2:30:91:cd:b1:7f:3e:54:5c:8c:a0:11:2a:3a:b2: 74:71:d9:b5:48:0f:9b:62:d5:ae:ac:49:fa:a7:07: 0e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B1:DE:69:71:5E:98:76:11:C9:DF:D9:64:72:22:2B:8C:65:A3:A5 X509v3 Authority Key Identifier: keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e203632353939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e040::/32 Signature Algorithm: sha256WithRSAEncryption 24:70:75:22:89:69:28:18:0c:e4:49:25:9e:80:f0:72:76:56: d7:10:b6:39:73:0d:96:ac:a1:bb:ea:ac:6d:e6:3b:e3:44:b4: 60:d0:00:89:a3:ad:cb:5f:0e:a3:96:c5:df:d2:be:94:ce:d6: 71:8f:90:9a:b8:22:55:f9:74:45:10:84:39:12:6d:4f:ec:7e: 5f:14:63:9c:0c:85:38:42:6f:1c:8d:4e:10:40:45:6c:71:b3: 18:63:95:ea:b1:49:e3:8d:f0:f8:06:9b:d8:9e:62:29:dc:ef: eb:e8:35:1e:1e:2f:19:a3:56:81:3f:51:da:a3:a2:9c:d0:41: 68:49:bc:94:ac:42:ac:e6:ee:6f:95:5a:b4:5f:da:bb:26:3f: fc:64:44:e6:45:6e:2d:b1:d4:a2:95:76:56:2c:43:14:aa:9f: 50:76:fc:99:71:57:22:99:70:fd:9b:86:c0:eb:98:1f:10:6c: 92:41:88:fe:19:1b:00:50:3e:34:ff:01:33:af:a0:13:4f:f1: 4e:38:38:b5:bf:76:6b:ab:2b:53:3e:bf:66:e9:ba:3c:e7:9f: b4:a4:d8:1c:71:ac:04:dd:e0:fc:8b:a1:71:6b:32:a3:d7:e3: a6:fa:14:80:11:8b:f0:ad:91:4f:22:e4:19:ad:5a:71:50:d9: 63:1a:70:aa -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUVhpSo5f9of/Wkd1nj+zobIMFEWgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjYwNzE4MDE1MTE2WhcNMjcwNzE3MDE1NjE2 WjAzMTEwLwYDVQQDEyg4REIxREU2OTcxNUU5ODc2MTFDOURGRDk2NDcyMjIyQjhD NjVBM0E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgIB8cQYypZD VP5TbrrKnyV+bDGLRQ7klGFJS4u+7AuyWQ2uORFUTHWk8u5qAAaigiWGHL+xmPo4 WsKQWZwZk8IE+V8CV3IyembWs2pmHlXBCfzc37m9S/EdPhvRywZOyzwYCjbv10+F s54UO/mL5xH0aV47peX1n2jZhifyYdyoBXByqJVrbdPJlXbZocsUrFB293YQcoZL uR++2aXK0hEIfOw5ihZ+KbW1WNtsuQBHU9SdiqCmTI1c79jQtZ22p2j8XmUPpFHQ 8FW6dq28Y9Q2I5Vg4AxBVzyVKX5MIyPCMJHNsX8+VFyMoBEqOrJ0cdm1SA+bYtWu rEn6pwcOowIDAQABo4ICXzCCAlswHQYDVR0OBBYEFI2x3mlxXph2Ecnf2WRyIiuM ZaOlMB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5 NzUxMmM0Mi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMzIzNjMwMzQzYTY1MzAzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMjM1MzkzOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACYE4EAw DQYJKoZIhvcNAQELBQADggEBACRwdSKJaSgYDORJJZ6A8HJ2VtcQtjlzDZasobvq rG3mO+NEtGDQAImjrctfDqOWxd/SvpTO1nGPkJq4IlX5dEUQhDkSbU/sfl8UY5wM hThCbxyNThBARWxxsxhjleqxSeON8PgGm9ieYinc7+voNR4eLxmjVoE/UdqjopzQ QWhJvJSsQqzm7m+VWrRf2rsmP/xkROZFbi2x1KKVdlYsQxSqn1B2/JlxVyKZcP2b hsDrmB8QbJJBiP4ZGwBQPjT/ATOvoBNP8U44OLW/dmurK1M+v2bpujznn7Sk2Bxx rATd4PyLoXFrMqPX46b6FIARi/CtkU8i5BmtWnFQ2WMacKo= -----END CERTIFICATE-----Generated at Fri Jul 24 07:35:59 2026 by rpki-client