$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2034373835.roa File: 323630343a653863303a3a2f33322d3438203d3e2034373835.roa (raw, json) Hash identifier: t6Lqf90fM+B1Alaz+AUSvgl8z7na7/3WnB/tp3E/5LA= Subject key identifier: 2D:2A:60:6E:9D:58:B9:B5:34:62:7C:B3:FA:EE:36:67:AA:4D:4F:42 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 12156B4CC2F524F648A0F33BC82FE583A4751A8B Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2034373835.roa Signing time: Thu 02 Jul 2026 11:29:53 +0000 ROA not before: Thu 02 Jul 2026 11:24:53 +0000 ROA not after: Thu 01 Jul 2027 11:29:53 +0000 asID: 4785 IP address blocks: 2604:e8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 00:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:15:6b:4c:c2:f5:24:f6:48:a0:f3:3b:c8:2f:e5:83:a4:75:1a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Jul 2 11:24:53 2026 GMT Not After : Jul 1 11:29:53 2027 GMT Subject: CN=2D2A606E9D58B9B534627CB3FAEE3667AA4D4F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c6:97:38:ad:3b:37:17:92:3f:e9:06:c8:25: 6e:5f:76:77:d3:a4:bf:db:7b:5f:9f:8c:89:c0:2a: 14:b3:e2:36:61:c8:aa:d3:21:29:f4:43:c6:49:1c: b1:d0:e3:94:53:d7:78:92:6c:f1:28:ef:18:1f:7b: b7:da:34:b9:0a:3f:b4:1f:79:dd:a3:fa:96:f0:46: c9:0f:9f:33:92:4f:9a:9e:68:18:c2:99:5b:b4:b6: e9:3e:40:31:11:1c:d3:5a:ef:2a:0f:75:9a:9d:34: d1:e2:67:48:82:96:fc:89:bf:18:3d:f8:0e:12:39: e0:75:22:35:bb:b6:35:e4:0e:3e:f7:20:c9:35:89: ef:25:0d:f6:19:44:dd:b4:e0:ea:f0:39:29:4c:ca: 51:17:d3:44:1f:37:04:6f:59:cd:27:c8:d7:7c:e0: cb:cd:a3:a8:71:62:4b:94:0a:f7:7b:27:c3:18:cd: 66:69:a1:39:67:60:c7:42:63:88:e0:01:c7:91:5b: 2c:cd:0f:9b:a2:b7:34:c7:3c:1a:35:11:41:ce:93: 19:a8:7b:a6:ba:c9:47:f3:73:89:96:f6:70:17:ed: 13:a2:75:0a:c5:f3:1a:45:24:f6:1c:95:28:07:68: 90:70:49:c0:40:14:2b:b0:ad:4b:10:92:cf:b7:f8: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2A:60:6E:9D:58:B9:B5:34:62:7C:B3:FA:EE:36:67:AA:4D:4F:42 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption a0:ea:0e:b3:69:b5:b9:f2:7e:81:4c:d4:99:0c:35:d6:9f:88: 6e:fb:26:e5:9e:c5:4e:63:bc:fc:1c:92:5a:44:c9:cb:6d:d5: 22:9f:ad:c1:76:e2:ce:de:29:ae:5d:72:d9:e5:55:cc:20:d2: 54:ba:83:ce:3e:38:28:d4:48:4c:8c:36:7f:65:1a:ef:86:03: 3f:70:57:a5:ca:4b:24:7f:9e:a8:eb:62:4d:5f:20:7a:31:ea: 11:cd:fb:a0:fb:0e:32:44:9e:1a:30:39:b2:97:e8:4d:00:3a: 15:3a:58:65:90:21:0b:0a:3c:04:de:9f:67:b0:0e:ba:6d:5d: 66:81:38:e8:f4:38:f1:cf:05:1b:bc:52:e1:87:a6:d1:d8:23: 06:aa:ac:8b:05:11:3e:c1:82:1b:87:cb:7d:89:29:ea:c4:11: 30:f8:0a:9d:62:03:0c:24:69:a9:c4:32:f3:f6:a1:9e:d1:2e: 3b:9e:e6:4d:8a:b9:ec:5d:db:f6:3e:83:b0:ce:87:ad:a4:26: b6:66:e6:95:80:66:12:a3:fa:b7:ee:16:62:3c:14:aa:ae:e4: ed:80:4a:83:34:a8:f7:42:c2:5b:56:b8:10:bd:92:14:d2:ef: 2c:5a:5e:60:59:5a:00:ae:de:93:a7:dc:61:a2:ca:cb:41:bf: e3:5e:c6:4a -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUEhVrTML1JPZIoPM7yC/lg6R1GoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNzAyMTEyNDUzWhcNMjcwNzAxMTEyOTUz WjAzMTEwLwYDVQQDEygyRDJBNjA2RTlENThCOUI1MzQ2MjdDQjNGQUVFMzY2N0FB NEQ0RjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMaXOK07NxeS P+kGyCVuX3Z306S/23tfn4yJwCoUs+I2Yciq0yEp9EPGSRyx0OOUU9d4kmzxKO8Y H3u32jS5Cj+0H3ndo/qW8EbJD58zkk+anmgYwplbtLbpPkAxERzTWu8qD3WanTTR 4mdIgpb8ib8YPfgOEjngdSI1u7Y15A4+9yDJNYnvJQ32GUTdtODq8DkpTMpRF9NE HzcEb1nNJ8jXfODLzaOocWJLlAr3eyfDGM1maaE5Z2DHQmOI4AHHkVsszQ+borc0 xzwaNRFBzpMZqHumuslH83OJlvZwF+0TonUKxfMaRST2HJUoB2iQcEnAQBQrsK1L EJLPt/h57wIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFC0qYG6dWLm1NGJ8s/ruNmeq TU9CMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvMzIzNjMwMzQzYTY1Mzg2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOjAMA0G CSqGSIb3DQEBCwUAA4IBAQCg6g6zabW58n6BTNSZDDXWn4hu+yblnsVOY7z8HJJa RMnLbdUin63BduLO3imuXXLZ5VXMINJUuoPOPjgo1EhMjDZ/ZRrvhgM/cFelyksk f56o62JNXyB6MeoRzfug+w4yRJ4aMDmyl+hNADoVOlhlkCELCjwE3p9nsA66bV1m gTjo9DjxzwUbvFLhh6bR2CMGqqyLBRE+wYIbh8t9iSnqxBEw+AqdYgMMJGmpxDLz 9qGe0S47nuZNirnsXdv2PoOwzoetpCa2ZuaVgGYSo/q37hZiPBSqruTtgEqDNKj3 QsJbVrgQvZIU0u8sWl5gWVoArt6Tp9xhosrLQb/jXsZK -----END CERTIFICATE-----Generated at Sun Jul 12 08:30:09 2026 by rpki-client