$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2039333132.roa File: 323630343a653863303a3a2f33322d3438203d3e2039333132.roa (raw, json) Hash identifier: Gx4JSdXhsb3t6cRlU5pcEof2tSSnaoYVAUmDF07dqWM= Subject key identifier: 69:50:F1:C5:93:F8:E5:7E:15:3A:87:BA:4A:3A:00:91:9D:65:2A:FB Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 01470CFCFB08C4954671D7C2F61BB06C8D8D3388 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2039333132.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 9312 IP address blocks: 2604:e8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 00:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:47:0c:fc:fb:08:c4:95:46:71:d7:c2:f6:1b:b0:6c:8d:8d:33:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=6950F1C593F8E57E153A87BA4A3A00919D652AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:96:b1:d3:1f:48:f4:50:39:cc:f2:f6:fb: a4:a0:2f:64:4b:63:4c:75:45:c2:97:35:ad:3f:b0: 0e:98:52:a2:43:0c:08:98:cc:61:24:04:b2:df:bd: 2c:d7:bc:fe:79:9b:31:a7:c9:97:a8:4f:84:e1:73: 7a:d7:48:be:18:92:2d:3d:34:7c:56:4d:08:f4:3e: e1:72:6e:26:bf:7b:fc:d0:b0:be:25:2c:01:5a:0f: 27:7b:a9:1a:06:cd:91:c1:b6:56:f7:60:71:57:90: 28:61:83:f6:07:fd:a2:30:f9:1d:91:e1:2b:14:cc: ec:07:96:9a:7a:62:87:e5:fe:a2:33:32:a8:8a:09: b3:06:fc:75:ab:66:df:5b:9d:f0:18:06:8d:5a:12: 44:41:ca:42:d4:5c:fa:bf:f5:83:9b:89:6e:81:1b: 4c:4c:65:01:dd:c2:05:19:08:e8:be:fc:a5:99:b6: dd:dd:2f:5a:d3:94:0c:29:0b:37:e9:52:14:a1:b1: 32:f6:43:75:0e:e6:b7:39:72:44:f3:1b:a0:4f:04: b1:e6:d3:ec:19:de:00:5b:cb:de:1e:58:f2:e8:06: 26:bf:ad:69:c6:24:09:43:01:c6:06:87:5c:b0:fd: e9:e5:26:f8:8b:55:de:70:21:38:62:02:7c:d6:70: 79:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:50:F1:C5:93:F8:E5:7E:15:3A:87:BA:4A:3A:00:91:9D:65:2A:FB X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption 72:e7:a1:1c:8f:ac:8a:5e:a1:d3:b6:f5:6b:19:00:a7:af:b1: c3:d6:46:be:b5:62:08:f1:f8:ea:03:35:87:ad:43:c7:32:cf: 8a:12:dd:bf:16:3b:4a:5e:1f:d8:65:2b:df:cf:e9:be:eb:e2: 21:62:bd:1c:5c:6d:92:35:85:67:38:6e:64:a2:99:05:d6:48: df:2a:59:51:f8:3f:9f:98:a0:e0:17:a2:7f:62:79:8d:10:23: a2:d4:62:ce:5b:3a:c2:e4:3f:cb:f2:0f:0d:22:d1:d0:28:15: 16:4d:ff:e0:cd:55:3c:02:27:7c:1f:6a:b9:35:36:7e:9d:95: 44:a2:1d:f5:22:38:38:40:f8:bd:4d:da:4b:fb:2c:49:42:9f: a9:60:f2:a3:2f:64:fc:62:84:75:7e:bd:15:8d:84:5f:65:02: ad:fb:8b:b9:36:73:3f:a6:f3:a1:7d:08:eb:ad:2c:82:22:64: d0:32:33:e6:30:d9:c2:3b:24:a4:ee:4e:57:d9:b3:32:37:87: d1:64:1b:ce:f6:aa:65:69:26:48:54:02:ec:58:9a:ab:a9:e5: c8:97:63:e8:45:75:4e:82:0c:f6:cd:e6:a3:4c:08:ed:d6:f2: ce:1c:72:86:5e:20:c1:3e:ed:8d:4c:49:26:2f:2c:2c:49:d2: 60:73:7f:47 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUAUcM/PsIxJVGcdfC9huwbI2NM4gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjYwNzAyMTAzMDQ5WhcNMjcwNzAxMTAzNTQ5 WjAzMTEwLwYDVQQDEyg2OTUwRjFDNTkzRjhFNTdFMTUzQTg3QkE0QTNBMDA5MTlE NjUyQUZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswCWsdMfSPRQ Oczy9vukoC9kS2NMdUXClzWtP7AOmFKiQwwImMxhJASy370s17z+eZsxp8mXqE+E 4XN610i+GJItPTR8Vk0I9D7hcm4mv3v80LC+JSwBWg8ne6kaBs2RwbZW92BxV5Ao YYP2B/2iMPkdkeErFMzsB5aaemKH5f6iMzKoigmzBvx1q2bfW53wGAaNWhJEQcpC 1Fz6v/WDm4lugRtMTGUB3cIFGQjovvylmbbd3S9a05QMKQs36VIUobEy9kN1Dua3 OXJE8xugTwSx5tPsGd4AW8veHljy6AYmv61pxiQJQwHGBodcsP3p5Sb4i1XecCE4 YgJ81nB5RwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFGlQ8cWT+OV+FTqHuko6AJGd ZSr7MB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvMzIzNjMwMzQzYTY1Mzg2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOjAMA0G CSqGSIb3DQEBCwUAA4IBAQBy56Ecj6yKXqHTtvVrGQCnr7HD1ka+tWII8fjqAzWH rUPHMs+KEt2/FjtKXh/YZSvfz+m+6+IhYr0cXG2SNYVnOG5kopkF1kjfKllR+D+f mKDgF6J/YnmNECOi1GLOWzrC5D/L8g8NItHQKBUWTf/gzVU8Aid8H2q5NTZ+nZVE oh31Ijg4QPi9TdpL+yxJQp+pYPKjL2T8YoR1fr0VjYRfZQKt+4u5NnM/pvOhfQjr rSyCImTQMjPmMNnCOySk7k5X2bMyN4fRZBvO9qplaSZIVALsWJqrqeXIl2PoRXVO ggz2zeajTAjt1vLOHHKGXiDBPu2NTEkmLywsSdJgc39H -----END CERTIFICATE-----Generated at Sun Jul 12 08:31:14 2026 by rpki-client