$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e20393439.roa File: 323630343a653034303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: 4v1SrmgiQCV+Ch/v3NbW8uQWzBRKmePFNtYdwe6aiMo= Subject key identifier: 2A:A5:96:D6:AD:08:2F:2C:64:EC:18:62:0B:EC:8E:FB:BE:A5:7A:01 Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Certificate serial: 4956CFCF89B7599E9B12D8481B7297248476A19D Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e20393439.roa Signing time: Sat 18 Jul 2026 01:56:15 +0000 ROA not before: Sat 18 Jul 2026 01:51:15 +0000 ROA not after: Sat 17 Jul 2027 01:56:15 +0000 asID: 949 IP address blocks: 2604:e040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 22:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:56:cf:cf:89:b7:59:9e:9b:12:d8:48:1b:72:97:24:84:76:a1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Validity Not Before: Jul 18 01:51:15 2026 GMT Not After : Jul 17 01:56:15 2027 GMT Subject: CN=2AA596D6AD082F2C64EC18620BEC8EFBBEA57A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:f2:9f:18:2e:08:d4:ae:b9:02:ab:ed:66: a9:5b:75:e4:03:63:3f:83:78:c1:11:97:d2:76:7d: 42:cf:c5:0b:bb:93:19:81:1d:29:ea:59:7b:02:45: 36:36:4c:cd:4c:98:17:35:e6:6d:de:5a:88:26:55: 9b:04:1f:e4:ee:77:bc:cf:cb:bf:92:d9:da:35:3c: d2:72:16:7b:3a:af:8c:47:d5:01:ab:18:f1:37:31: 26:92:7b:f8:57:f8:58:01:99:ad:5e:33:13:ef:51: 6e:eb:e6:8e:80:56:9e:5c:ef:01:a1:6d:41:4b:f1: 65:bb:5e:73:b5:93:04:71:3d:8f:74:54:10:0b:a0: fc:22:e1:70:74:34:ec:9d:a8:94:ff:d1:fc:52:2b: e1:84:63:e2:b8:ec:16:1a:d3:42:3b:6b:53:00:fe: 43:ee:37:ba:0c:b9:5d:02:75:fb:b6:d1:62:4f:d8: db:fb:f6:2a:1d:3f:58:6f:68:64:2c:95:6b:c7:bc: 3f:b3:fe:bc:1e:e6:e8:bd:eb:d9:1b:9c:0a:80:1a: bb:d7:bb:36:d5:e5:3e:71:4d:9f:99:66:83:95:d7: 81:8a:93:97:47:df:7c:a3:4b:85:53:76:55:b6:ac: 4d:55:43:63:b7:6c:01:49:51:5b:67:90:50:fd:f1: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A5:96:D6:AD:08:2F:2C:64:EC:18:62:0B:EC:8E:FB:BE:A5:7A:01 X509v3 Authority Key Identifier: keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e040::/32 Signature Algorithm: sha256WithRSAEncryption 51:d4:99:3a:82:4d:b7:78:e5:b4:00:84:fb:fc:0b:d3:41:f1: 2b:b8:1c:1f:5e:fb:6b:91:b7:77:26:f3:fc:10:d5:bd:20:e4: a4:ec:07:fe:de:4c:3f:4e:3b:ee:02:3b:39:de:86:0f:aa:24: 8d:6f:07:a9:3f:40:74:43:39:e3:28:97:a2:d6:5e:32:8d:ce: 3a:94:dc:7d:48:d5:61:a0:9f:29:29:63:f3:d9:73:6b:71:b7: d7:e5:96:26:f1:96:05:71:6a:99:a0:07:83:b0:54:75:d8:e9: bf:b5:c7:de:1a:f9:fb:5a:8f:e9:18:4c:65:e4:6d:32:9b:9f: 85:47:64:e5:bc:92:3c:00:ee:eb:82:41:e1:02:b5:1f:b0:0e: 75:97:ae:d5:d9:04:75:c2:32:45:9d:43:eb:16:38:ed:ef:c1: 7d:5f:d5:5d:9d:a3:50:27:2d:24:25:05:2f:00:65:78:92:38: 77:94:5d:3c:18:e4:ed:82:6d:b6:b7:88:6a:c7:37:ab:6e:ff: 51:68:6e:8b:02:0c:c5:c8:72:1e:41:a7:d0:67:f6:94:91:38: 95:1a:05:f6:8f:81:58:62:26:50:28:c8:63:a9:c9:db:02:24: b9:02:77:b1:6c:a2:8e:4b:44:8f:76:d2:bd:a8:2e:51:8d:c9: f8:c3:6a:54 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUSVbPz4m3WZ6bEthIG3KXJIR2oZ0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjYwNzE4MDE1MTE1WhcNMjcwNzE3MDE1NjE1 WjAzMTEwLwYDVQQDEygyQUE1OTZENkFEMDgyRjJDNjRFQzE4NjIwQkVDOEVGQkJF QTU3QTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyrynxguCNSu uQKr7WapW3XkA2M/g3jBEZfSdn1Cz8ULu5MZgR0p6ll7AkU2NkzNTJgXNeZt3lqI JlWbBB/k7ne8z8u/ktnaNTzSchZ7Oq+MR9UBqxjxNzEmknv4V/hYAZmtXjMT71Fu 6+aOgFaeXO8BoW1BS/Flu15ztZMEcT2PdFQQC6D8IuFwdDTsnaiU/9H8UivhhGPi uOwWGtNCO2tTAP5D7je6DLldAnX7ttFiT9jb+/YqHT9Yb2hkLJVrx7w/s/68Hubo vevZG5wKgBq717s21eU+cU2fmWaDldeBipOXR998o0uFU3ZVtqxNVUNjt2wBSVFb Z5BQ/fHbxwIDAQABo4ICWzCCAlcwHQYDVR0OBBYEFCqlltatCC8sZOwYYgvsjvu+ pXoBMB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5 NzUxMmM0Mi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMzIzNjMwMzQzYTY1MzAzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTgQDANBgkq hkiG9w0BAQsFAAOCAQEAUdSZOoJNt3jltACE+/wL00HxK7gcH177a5G3dybz/BDV vSDkpOwH/t5MP0477gI7Od6GD6okjW8HqT9AdEM54yiXotZeMo3OOpTcfUjVYaCf KSlj89lza3G31+WWJvGWBXFqmaAHg7BUddjpv7XH3hr5+1qP6RhMZeRtMpufhUdk 5bySPADu64JB4QK1H7AOdZeu1dkEdcIyRZ1D6xY47e/BfV/VXZ2jUCctJCUFLwBl eJI4d5RdPBjk7YJttreIasc3q27/UWhuiwIMxchyHkGn0Gf2lJE4lRoF9o+BWGIm UCjIY6nJ2wIkuQJ3sWyijktEj3bSvaguUY3J+MNqVA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:22:45 2026 by rpki-client