$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2038383838.roa File: 323630343a653863303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: glekDeUgXWlI8WExfCgOlnFZXkLmuhBsXXbJb/HS10Q= Subject key identifier: FC:05:D8:99:AB:2B:02:78:BC:90:34:66:55:85:3E:69:18:4C:2D:1C Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 39AC874E2E074863150081DF866A57E6C3D5ABED Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 8888 IP address blocks: 2604:e8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 00:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ac:87:4e:2e:07:48:63:15:00:81:df:86:6a:57:e6:c3:d5:ab:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=FC05D899AB2B0278BC90346655853E69184C2D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:8b:cc:b2:1f:58:85:6e:c6:43:5d:c2:7d: 0e:9c:7f:73:05:17:82:7f:d0:b7:38:b6:40:66:db: 02:f8:2d:3c:41:7d:0a:13:51:b1:aa:eb:d3:5b:7e: 9c:84:db:50:5e:69:9a:5a:88:3b:b6:dd:98:a9:76: 25:89:64:af:02:f8:0a:fb:b9:0c:09:16:ab:f2:00: 85:53:6b:b0:59:f3:64:78:c5:3f:9a:8a:3b:de:41: 95:17:7e:9e:c8:1f:10:1b:ce:81:99:09:66:ba:ff: 97:14:84:14:ab:d0:b8:b2:14:16:ce:7c:b1:c0:44: 80:b4:98:a6:c0:49:72:1f:b1:a8:4c:2e:57:66:0e: 9b:93:d2:75:92:c4:b4:22:8a:f9:f3:a3:30:90:c4: 2d:34:51:f5:9a:1d:ce:00:84:e7:ab:08:c3:f8:99: a8:c2:1c:e2:7e:2b:be:72:78:b8:0c:c5:79:aa:19: 47:5c:9c:f9:93:2c:7a:a6:eb:f1:62:ac:91:2a:04: 59:0e:b1:3a:4f:3b:b8:26:a9:f4:e7:1f:f4:19:09: 46:6b:54:11:9e:51:66:b2:72:ba:0d:40:ea:54:d1: 7e:be:73:3f:1a:0f:a9:76:51:48:bc:35:b5:e4:5b: bc:51:92:4a:59:d1:fa:40:cc:35:85:43:b5:6e:56: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:05:D8:99:AB:2B:02:78:BC:90:34:66:55:85:3E:69:18:4C:2D:1C X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption 57:9c:e9:1b:6c:6a:58:13:d7:c9:32:c3:20:a7:4a:12:5f:7b: 2d:27:2a:d4:15:a3:c5:aa:f2:17:64:a1:dc:42:a4:08:05:4f: 79:d3:da:43:c3:e8:55:f7:2a:e9:1b:dc:70:9c:e8:96:8f:eb: ef:bb:6c:2d:74:97:cb:75:a2:f8:90:1f:04:fe:a8:60:27:71: 7e:1b:78:d0:86:fe:bc:25:09:94:3e:fb:cf:46:47:d0:1b:08: 93:9d:6d:ec:68:3c:91:ae:6d:59:7b:32:e9:37:e2:46:47:d7: 3c:01:5f:a2:60:20:17:5f:b0:56:bb:f5:3f:9a:e3:f2:9e:06: ca:a5:8e:fd:7c:f0:3b:63:41:14:4a:e8:c9:f5:2f:1c:2f:fa: 2c:01:d0:81:b6:13:ca:5c:1f:7d:c1:fe:c1:75:de:10:66:c1: 2e:55:53:32:0b:94:b4:07:12:d4:78:f8:11:c4:f6:eb:dd:95: fc:bc:2a:5f:f4:6a:c9:e4:c3:03:d8:79:b2:b1:1d:80:4d:04: 01:be:55:57:d9:bb:8e:6b:6c:c8:20:3e:2c:a8:32:a5:51:bb: bb:0b:a7:96:e7:a0:d6:50:b1:33:87:77:35:13:7b:7b:6d:2e: ca:2e:ae:c3:25:3d:2d:ae:e1:20:f6:5c:ea:15:5a:67:cd:61: 80:d9:f8:86 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUOayHTi4HSGMVAIHfhmpX5sPVq+0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNzAyMTAzMDQ5WhcNMjcwNzAxMTAzNTQ5 WjAzMTEwLwYDVQQDEyhGQzA1RDg5OUFCMkIwMjc4QkM5MDM0NjY1NTg1M0U2OTE4 NEMyRDFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS6LzLIfWIVu xkNdwn0OnH9zBReCf9C3OLZAZtsC+C08QX0KE1GxquvTW36chNtQXmmaWog7tt2Y qXYliWSvAvgK+7kMCRar8gCFU2uwWfNkeMU/moo73kGVF36eyB8QG86BmQlmuv+X FIQUq9C4shQWznyxwESAtJimwElyH7GoTC5XZg6bk9J1ksS0Ior586MwkMQtNFH1 mh3OAITnqwjD+Jmowhzifiu+cni4DMV5qhlHXJz5kyx6puvxYqyRKgRZDrE6Tzu4 Jqn05x/0GQlGa1QRnlFmsnK6DUDqVNF+vnM/Gg+pdlFIvDW15Fu8UZJKWdH6QMw1 hUO1blZPwwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFPwF2JmrKwJ4vJA0ZlWFPmkY TC0cMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvMzIzNjMwMzQzYTY1Mzg2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOjAMA0G CSqGSIb3DQEBCwUAA4IBAQBXnOkbbGpYE9fJMsMgp0oSX3stJyrUFaPFqvIXZKHc QqQIBU9509pDw+hV9yrpG9xwnOiWj+vvu2wtdJfLdaL4kB8E/qhgJ3F+G3jQhv68 JQmUPvvPRkfQGwiTnW3saDyRrm1ZezLpN+JGR9c8AV+iYCAXX7BWu/U/muPyngbK pY79fPA7Y0EUSujJ9S8cL/osAdCBthPKXB99wf7Bdd4QZsEuVVMyC5S0BxLUePgR xPbr3ZX8vCpf9GrJ5MMD2HmysR2ATQQBvlVX2buOa2zIID4sqDKlUbu7C6eW56DW ULEzh3c1E3t7bS7KLq7DJT0truEg9lzqFVpnzWGA2fiG -----END CERTIFICATE-----Generated at Sun Jul 12 08:30:30 2026 by rpki-client