$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2033323134.roa File: 323630343a653863303a3a2f33322d3438203d3e2033323134.roa (raw, json) Hash identifier: wB7fCIOvBoo2CFeKFSOnjURbXONS2wJ8mbqMhBnRDL8= Subject key identifier: BC:3E:C5:5B:B0:0F:68:1F:61:BB:83:08:FC:11:90:44:D1:93:FA:2B Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 4D36F11B55EC74D8524FF8A59B5647F5663622E0 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2033323134.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 3214 IP address blocks: 2604:e8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 00:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:36:f1:1b:55:ec:74:d8:52:4f:f8:a5:9b:56:47:f5:66:36:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=BC3EC55BB00F681F61BB8308FC119044D193FA2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:b4:7f:cb:94:79:47:53:27:e3:cd:d6:9d: f5:29:b1:22:1d:fa:05:dc:50:c8:96:f9:bc:b2:fc: 9f:e8:2b:cf:fd:2c:c7:b2:e3:d5:d8:2c:54:27:d5: b8:95:6b:0f:f3:a8:f0:29:11:0f:42:88:55:92:61: e7:51:1f:55:f1:0f:d7:0f:9f:56:a9:e0:33:44:64: 2a:f5:fd:20:a8:f3:5e:e3:3d:e6:94:07:13:ab:48: fe:1b:25:51:3b:5a:8e:52:b1:90:2b:91:69:9c:4a: 52:2f:01:00:1b:a0:a8:fc:75:b6:30:e6:c0:77:9c: a5:7c:b8:c4:ab:23:f1:07:2a:27:9f:89:64:8e:20: a9:55:68:9f:d6:07:da:fd:9d:1c:4d:3d:0f:a4:ba: cf:46:83:ea:a2:22:99:fd:69:ab:90:40:f7:1e:3b: c3:77:21:88:09:ad:a9:92:d0:f6:ca:70:08:9f:23: 76:96:73:07:8b:cf:87:c3:2d:2e:a4:ad:e7:ff:9f: cc:24:44:78:3b:85:b2:95:fb:83:2d:17:ed:b8:bb: 81:a2:c0:00:a7:94:1a:f3:02:28:4e:a7:c2:2c:3e: d1:07:53:dd:4d:be:ca:7c:bb:ed:9a:ad:38:57:4d: b5:c2:e6:58:8b:6f:1e:74:58:1d:3b:74:8d:6c:35: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3E:C5:5B:B0:0F:68:1F:61:BB:83:08:FC:11:90:44:D1:93:FA:2B X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2033323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption 26:87:61:20:05:0e:16:21:3b:36:51:c5:af:04:07:00:e3:6f: bc:b5:46:f2:87:05:62:dd:9f:1a:a1:bb:d4:a4:06:75:7d:04: 75:e6:21:f9:8c:c6:f8:9c:17:7d:0f:57:1d:a8:83:c1:ad:a9: 52:60:41:4d:e9:be:a8:89:df:60:f5:17:60:10:32:83:30:91: 4b:1c:92:b2:9c:84:ab:df:08:1c:e9:4c:83:7e:93:24:79:8c: f6:50:96:2e:13:6c:38:e1:81:db:75:8a:64:fa:13:5e:10:87: f5:b2:b4:e4:93:c8:96:7d:d8:f2:af:04:0b:ae:e1:3e:ee:bd: a8:13:64:dd:1a:b4:e4:65:72:22:d4:d7:e8:bc:36:85:ab:e7: c5:9f:1b:c2:c3:e0:7a:ea:fe:7e:54:a1:fc:74:0e:fc:21:53: 2c:25:68:e5:a5:6e:7d:26:6c:03:bd:31:d7:62:54:07:36:7e: 75:4a:d4:07:6e:3d:e4:bd:f7:4f:de:58:93:79:a6:9a:bc:ee: 37:17:71:c7:6e:c4:66:04:9e:57:68:58:aa:84:5b:d0:a3:ac: 56:9f:1a:83:0d:60:26:0c:c4:88:90:b0:66:9a:00:cf:51:57: 33:16:7f:5c:b8:c0:60:94:eb:c6:dc:8d:9e:b2:42:25:d7:78: 31:07:71:65 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUTTbxG1XsdNhST/ilm1ZH9WY2IuAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNzAyMTAzMDQ5WhcNMjcwNzAxMTAzNTQ5 WjAzMTEwLwYDVQQDEyhCQzNFQzU1QkIwMEY2ODFGNjFCQjgzMDhGQzExOTA0NEQx OTNGQTJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjK0f8uUeUdT J+PN1p31KbEiHfoF3FDIlvm8svyf6CvP/SzHsuPV2CxUJ9W4lWsP86jwKREPQohV kmHnUR9V8Q/XD59WqeAzRGQq9f0gqPNe4z3mlAcTq0j+GyVRO1qOUrGQK5FpnEpS LwEAG6Co/HW2MObAd5ylfLjEqyPxByonn4lkjiCpVWif1gfa/Z0cTT0PpLrPRoPq oiKZ/WmrkED3HjvDdyGICa2pktD2ynAInyN2lnMHi8+Hwy0upK3n/5/MJER4O4Wy lfuDLRftuLuBosAAp5Qa8wIoTqfCLD7RB1PdTb7KfLvtmq04V021wuZYi28edFgd O3SNbDVaNwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFLw+xVuwD2gfYbuDCPwRkETR k/orMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvMzIzNjMwMzQzYTY1Mzg2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjMxMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOjAMA0G CSqGSIb3DQEBCwUAA4IBAQAmh2EgBQ4WITs2UcWvBAcA42+8tUbyhwVi3Z8aobvU pAZ1fQR15iH5jMb4nBd9D1cdqIPBralSYEFN6b6oid9g9RdgEDKDMJFLHJKynISr 3wgc6UyDfpMkeYz2UJYuE2w44YHbdYpk+hNeEIf1srTkk8iWfdjyrwQLruE+7r2o E2TdGrTkZXIi1NfovDaFq+fFnxvCw+B66v5+VKH8dA78IVMsJWjlpW59JmwDvTHX YlQHNn51StQHbj3kvfdP3liTeaaavO43F3HHbsRmBJ5XaFiqhFvQo6xWnxqDDWAm DMSIkLBmmgDPUVczFn9cuMBglOvG3I2eskIl13gxB3Fl -----END CERTIFICATE-----Generated at Sun Jul 12 08:31:15 2026 by rpki-client