$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2033323034.roa File: 323630343a653863303a3a2f33322d3438203d3e2033323034.roa (raw, json) Hash identifier: 6Pp54gQT3IByeqo+WuS3or3CblQUutD2QvvflyjOfCo= Subject key identifier: C2:A2:C3:6D:A0:90:7E:7F:0E:14:36:02:76:FA:43:02:C5:61:DF:DF Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 725D1121488401019AD834A2BCDC029FBAFCE4D0 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2033323034.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 3204 IP address blocks: 2604:e8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 00:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5d:11:21:48:84:01:01:9a:d8:34:a2:bc:dc:02:9f:ba:fc:e4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=C2A2C36DA0907E7F0E14360276FA4302C561DFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:6a:a8:e5:fb:5c:57:16:df:fe:36:5b:b4: 60:d3:54:5a:53:4f:00:b4:99:0b:ea:7c:88:43:90: 10:ba:ff:b6:7b:b9:47:58:4f:28:67:a8:bf:38:d8: 73:00:3b:06:00:95:92:1e:d6:64:72:ba:9e:70:6a: 94:e6:fd:07:28:70:46:0b:2b:93:d9:a9:79:8f:0f: cc:c5:72:e2:5a:81:f5:09:e3:4c:59:91:db:49:94: 7b:1a:ae:6a:0b:21:58:e1:84:8b:c2:d6:7e:30:5a: e5:58:b1:9d:3c:13:1d:74:c1:42:75:ef:11:64:a3: 59:b7:09:dc:40:a4:a0:f5:2a:fc:50:08:a2:02:34: 38:f5:99:34:dc:06:18:65:8f:2b:96:1a:77:ad:38: ea:91:1a:01:8d:1d:69:8c:93:cc:40:1f:db:86:b6: 53:04:97:40:89:f5:f1:66:ee:c1:fe:44:e3:1a:2b: 30:4c:b2:0c:29:9d:6d:9b:fe:ef:19:45:d2:09:d6: aa:17:8e:69:14:3f:6f:d8:8b:0c:5b:5c:c0:90:28: a3:46:5f:9d:98:bd:bc:f2:dc:78:a1:ce:dc:5c:01: 4e:76:b6:80:d3:9f:c3:71:c2:1e:a9:ee:cd:c6:8d: 9e:e1:cc:4f:79:ca:70:b7:1b:55:de:de:88:c1:8f: b5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A2:C3:6D:A0:90:7E:7F:0E:14:36:02:76:FA:43:02:C5:61:DF:DF X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2033323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption a4:81:c1:c2:b5:2d:7c:ca:10:4c:3a:64:c8:75:31:9f:cb:b6: 76:e6:24:f3:ea:c5:fd:fc:31:b5:95:e5:fc:bc:fe:5b:f7:c7: ab:de:30:8f:30:a9:25:70:23:9b:96:61:32:20:ab:bb:bc:44: 5c:9d:14:72:16:1f:b6:3c:99:25:07:f5:03:72:fc:34:54:45: 43:f9:52:53:b8:df:5b:74:fe:3b:04:a3:d7:e0:c5:47:08:a2: 05:c8:a4:c4:6e:9c:21:84:74:b8:94:68:39:26:06:f3:81:32: bc:fd:e0:52:57:9e:72:9b:7e:fe:3c:9e:c9:46:c5:c0:84:b7: 47:38:55:37:da:ef:20:8f:92:27:6b:5f:5f:22:dd:bb:a9:0e: 55:f7:7b:12:49:36:69:48:68:e3:9e:cf:2f:c4:cc:12:ec:a7: 72:f9:fe:d3:f6:31:ea:50:f8:62:d2:17:b3:be:97:0d:02:be: 8d:65:80:08:c7:11:8c:5a:5d:6e:9e:61:d0:aa:ae:82:8c:9e: 8a:5b:fb:fa:ed:52:7a:bd:70:27:2c:16:55:95:94:16:bb:3d: c6:a5:40:b2:3d:c1:48:f8:b2:f8:72:67:e6:39:0a:b3:10:31: 15:1a:d7:cb:f3:8a:84:b5:91:81:86:e6:31:7e:f8:1b:f0:ef: be:67:e8:12 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUcl0RIUiEAQGa2DSivNwCn7r85NAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNzAyMTAzMDQ5WhcNMjcwNzAxMTAzNTQ5 WjAzMTEwLwYDVQQDEyhDMkEyQzM2REEwOTA3RTdGMEUxNDM2MDI3NkZBNDMwMkM1 NjFERkRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhJqqOX7XFcW 3/42W7Rg01RaU08AtJkL6nyIQ5AQuv+2e7lHWE8oZ6i/ONhzADsGAJWSHtZkcrqe cGqU5v0HKHBGCyuT2al5jw/MxXLiWoH1CeNMWZHbSZR7Gq5qCyFY4YSLwtZ+MFrl WLGdPBMddMFCde8RZKNZtwncQKSg9Sr8UAiiAjQ49Zk03AYYZY8rlhp3rTjqkRoB jR1pjJPMQB/bhrZTBJdAifXxZu7B/kTjGiswTLIMKZ1tm/7vGUXSCdaqF45pFD9v 2IsMW1zAkCijRl+dmL288tx4oc7cXAFOdraA05/DccIeqe7Nxo2e4cxPecpwtxtV 3t6IwY+1NwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFMKiw22gkH5/DhQ2Anb6QwLF Yd/fMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvMzIzNjMwMzQzYTY1Mzg2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOjAMA0G CSqGSIb3DQEBCwUAA4IBAQCkgcHCtS18yhBMOmTIdTGfy7Z25iTz6sX9/DG1leX8 vP5b98er3jCPMKklcCOblmEyIKu7vERcnRRyFh+2PJklB/UDcvw0VEVD+VJTuN9b dP47BKPX4MVHCKIFyKTEbpwhhHS4lGg5JgbzgTK8/eBSV55ym37+PJ7JRsXAhLdH OFU32u8gj5Ina19fIt27qQ5V93sSSTZpSGjjns8vxMwS7Kdy+f7T9jHqUPhi0hez vpcNAr6NZYAIxxGMWl1unmHQqq6CjJ6KW/v67VJ6vXAnLBZVlZQWuz3GpUCyPcFI +LL4cmfmOQqzEDEVGtfL84qEtZGBhuYxfvgb8O++Z+gS -----END CERTIFICATE-----Generated at Sun Jul 12 08:31:42 2026 by rpki-client