$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2033323538.roa File: 323630343a653863303a3a2f33322d3438203d3e2033323538.roa (raw, json) Hash identifier: tihNcymQDG5rLDuTNdu8vKzzLueFMEP6ix9PxPTPBPo= Subject key identifier: 4B:9A:9F:9B:87:33:4E:EF:42:42:C9:1A:91:C5:20:58:89:D6:0B:5D Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 7A1D444214895ED4B92E354786AF960CD361B149 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2033323538.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 3258 IP address blocks: 2604:e8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 00:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1d:44:42:14:89:5e:d4:b9:2e:35:47:86:af:96:0c:d3:61:b1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=4B9A9F9B87334EEF4242C91A91C5205889D60B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:9b:4b:40:af:c7:94:29:10:01:43:4d:96: 5b:c0:85:6d:dd:e2:e5:a7:b1:98:60:b9:5f:d4:d1: f5:4a:91:f3:0d:08:66:de:7a:f5:9d:f3:c3:0e:79: 94:f4:aa:87:34:55:5e:f5:7a:2f:89:4d:b5:3a:34: 4b:e0:a6:b0:0f:50:6d:46:1b:c6:0d:f8:5d:ce:81: 1d:90:cd:02:e6:22:e8:45:5f:5c:c4:ab:ba:c0:ee: 71:c7:e1:ce:04:9c:67:cd:be:01:21:f3:d2:0d:38: d8:4f:1a:8c:c1:54:ae:4d:1d:93:5e:8c:3c:87:3f: 4c:29:5c:48:b7:28:ea:f2:6f:c1:ab:93:0a:c8:17: 26:fb:46:51:0b:78:bc:61:2f:80:88:37:62:7f:32: 79:bc:85:21:df:7b:8f:62:0b:e3:5a:42:9d:c8:f4: 91:22:57:e1:b0:9b:c1:3d:47:23:0e:20:a9:3d:e2: b0:8c:60:c7:74:1d:db:b0:76:37:39:af:8c:40:5f: 4c:65:6e:70:e5:e6:d3:b5:9a:1c:25:e4:c8:a6:80: 64:c2:25:51:c3:2e:43:42:f1:95:80:41:7c:5c:38: b6:30:38:5f:63:88:8e:2e:a0:dc:a7:4f:ca:7d:33: 33:04:0b:de:34:6d:f1:f1:9d:8a:1b:99:4f:52:ca: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9A:9F:9B:87:33:4E:EF:42:42:C9:1A:91:C5:20:58:89:D6:0B:5D X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption 75:9e:31:28:f0:98:07:7d:4c:3d:2d:66:cd:40:97:b4:fa:e5: ce:a5:88:98:ec:49:3c:ce:98:79:76:da:15:4b:95:be:91:23: a8:ad:d4:80:90:69:94:db:9d:d1:b9:f1:e6:ae:0f:65:af:00: 91:fb:14:c1:10:06:6e:53:1d:39:c8:ee:66:72:7a:76:b1:8e: ca:ee:b2:a7:cd:18:50:5c:ce:7a:3d:fa:b8:98:b2:34:72:fe: 15:44:a2:6e:25:e7:09:f9:28:fc:5a:81:f3:6a:1c:41:ac:45: e5:fb:db:a7:cb:ae:23:70:51:b9:30:00:f8:e3:92:f4:7c:09: 8f:ab:de:8d:a2:57:b5:3d:43:4c:85:4f:55:c3:fc:e5:56:3e: 8a:86:d8:38:68:28:14:27:2c:86:e8:14:4d:89:f1:fe:d6:56: 07:cb:03:ea:2b:bf:fc:d0:d5:c0:6b:17:c4:d4:a1:3c:a7:0d: e4:16:28:b2:c7:6e:5f:a5:d0:0f:6b:77:21:05:84:e3:1a:5e: f5:ce:91:fb:f0:3d:fe:54:01:09:f1:79:f1:b1:ae:c6:49:dd: 13:9d:eb:55:a4:9f:21:e2:19:d3:43:40:24:29:9c:fb:99:0e: bb:c0:04:ea:bf:a0:90:b2:89:5d:d5:d1:d6:ed:77:0b:0e:d4: 2f:45:a6:cd -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUeh1EQhSJXtS5LjVHhq+WDNNhsUkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNzAyMTAzMDQ5WhcNMjcwNzAxMTAzNTQ5 WjAzMTEwLwYDVQQDEyg0QjlBOUY5Qjg3MzM0RUVGNDI0MkM5MUE5MUM1MjA1ODg5 RDYwQjVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXibS0Cvx5Qp EAFDTZZbwIVt3eLlp7GYYLlf1NH1SpHzDQhm3nr1nfPDDnmU9KqHNFVe9XoviU21 OjRL4KawD1BtRhvGDfhdzoEdkM0C5iLoRV9cxKu6wO5xx+HOBJxnzb4BIfPSDTjY TxqMwVSuTR2TXow8hz9MKVxItyjq8m/Bq5MKyBcm+0ZRC3i8YS+AiDdifzJ5vIUh 33uPYgvjWkKdyPSRIlfhsJvBPUcjDiCpPeKwjGDHdB3bsHY3Oa+MQF9MZW5w5ebT tZocJeTIpoBkwiVRwy5DQvGVgEF8XDi2MDhfY4iOLqDcp0/KfTMzBAveNG3x8Z2K G5lPUsq2KQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFEuan5uHM07vQkLJGpHFIFiJ 1gtdMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvMzIzNjMwMzQzYTY1Mzg2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOjAMA0G CSqGSIb3DQEBCwUAA4IBAQB1njEo8JgHfUw9LWbNQJe0+uXOpYiY7Ek8zph5dtoV S5W+kSOordSAkGmU253RufHmrg9lrwCR+xTBEAZuUx05yO5mcnp2sY7K7rKnzRhQ XM56Pfq4mLI0cv4VRKJuJecJ+Sj8WoHzahxBrEXl+9uny64jcFG5MAD445L0fAmP q96Nole1PUNMhU9Vw/zlVj6Khtg4aCgUJyyG6BRNifH+1lYHywPqK7/80NXAaxfE 1KE8pw3kFiiyx25fpdAPa3chBYTjGl71zpH78D3+VAEJ8Xnxsa7GSd0TnetVpJ8h 4hnTQ0AkKZz7mQ67wATqv6CQsold1dHW7XcLDtQvRabN -----END CERTIFICATE-----Generated at Sun Jul 12 08:31:14 2026 by rpki-client