$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2033323034.roa File: 323630343a613834303a3a2f33322d3438203d3e2033323034.roa (raw, json) Hash identifier: +W+ncQbBPvVrAheLsHOGXAGfAuXubEtRX4VEjVc3HPQ= Subject key identifier: 2D:D3:10:D4:8D:AF:D8:3A:97:E5:6D:45:07:BD:A0:A3:02:B9:A4:36 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 2F3CAA113563E0B22A7050D6C54525D3763B893C Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2033323034.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 3204 IP address blocks: 2604:a840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 02:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3c:aa:11:35:63:e0:b2:2a:70:50:d6:c5:45:25:d3:76:3b:89:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=2DD310D48DAFD83A97E56D4507BDA0A302B9A436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:31:cf:2a:99:e9:d1:f9:9f:42:93:f7:45: e4:82:36:9c:0d:1f:76:ca:24:54:49:41:79:1a:87: b9:ab:7d:61:51:4c:8e:8d:76:0b:ad:4a:01:10:ba: 61:3c:97:2f:74:a2:6b:ad:e0:b1:60:6d:1b:c6:ee: 5d:07:ce:58:7d:8c:0b:f6:39:91:f9:fb:eb:fd:1a: 8a:02:f4:8d:79:9b:07:88:4f:50:02:87:0a:8b:a5: 48:05:68:4a:16:ad:d5:08:84:a3:8a:73:b2:a9:a7: c6:42:6e:c6:89:39:36:d7:81:3b:e6:ba:fd:e0:3f: 43:76:04:46:76:0d:aa:d9:ea:d6:a6:e7:10:f3:5c: 50:f3:f1:6d:2c:1c:47:f2:47:7c:21:22:93:fa:33: 38:76:77:e6:69:e6:8f:9d:0d:de:c4:43:c1:60:6e: 6b:72:7a:f1:11:c9:f9:a6:3c:f9:f1:f8:c5:96:8a: 75:8d:4f:fa:4e:ea:54:99:42:f0:88:33:d5:1a:90: 11:74:53:10:41:92:12:91:ac:2d:fd:c8:08:ef:2b: 54:d6:a4:fa:5a:75:b5:5e:56:4c:85:8b:e7:68:25: d0:4d:c8:26:71:01:d5:1b:e7:70:4d:93:50:db:60: 16:12:7a:8b:c4:4e:43:eb:74:c1:17:cf:5b:13:3c: 9e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D3:10:D4:8D:AF:D8:3A:97:E5:6D:45:07:BD:A0:A3:02:B9:A4:36 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2033323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:a840::/32 Signature Algorithm: sha256WithRSAEncryption 94:68:9c:5e:95:32:d3:08:97:d8:94:f2:da:b2:85:b5:7e:33: cb:c5:da:33:0c:c9:c2:fd:ca:53:0a:6a:a5:e6:1c:7f:07:ca: 2f:6b:97:6f:92:c5:0b:7a:39:89:72:5d:5f:0c:75:e8:52:a1: d1:d7:8d:fc:e8:66:4d:c6:b1:a1:07:3c:88:0d:f3:0b:74:2e: 78:d3:d7:6b:83:9b:ed:96:b7:72:a3:86:21:5d:b3:16:26:29: 0e:15:14:c7:f8:cc:0d:bc:2e:8d:24:54:4d:f1:6e:23:f2:dd: 80:33:f8:64:28:65:2c:49:14:e2:bb:9e:94:3a:84:dc:d4:43: c8:18:9b:b5:97:2e:7f:e5:7c:ef:2a:75:27:80:55:b6:6f:1f: 83:a3:7b:ea:c3:1b:d1:2d:7b:79:ef:51:11:d6:1c:d1:c4:0e: 6a:44:0c:a0:fb:13:d1:8b:72:25:a6:94:73:a8:aa:04:65:87: 6a:4b:d7:99:27:78:f8:5f:16:c5:12:90:78:b5:99:fd:0b:ba: cf:d6:e6:5e:8e:9a:99:97:42:68:cd:30:e6:74:5d:3f:97:bd: fa:26:5f:40:5a:8b:cb:f2:67:a7:b2:ee:9a:8a:1b:2d:92:ae: 58:df:a1:2c:a4:2c:0e:88:13:de:11:8a:3d:c9:a0:1b:da:35: b1:36:5c:4b -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIULzyqETVj4LIqcFDWxUUl03Y7iTwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwNzAyMTAzMDQ3WhcNMjcwNzAxMTAzNTQ3 WjAzMTEwLwYDVQQDEygyREQzMTBENDhEQUZEODNBOTdFNTZENDUwN0JEQTBBMzAy QjlBNDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryAxzyqZ6dH5 n0KT90XkgjacDR92yiRUSUF5Goe5q31hUUyOjXYLrUoBELphPJcvdKJrreCxYG0b xu5dB85YfYwL9jmR+fvr/RqKAvSNeZsHiE9QAocKi6VIBWhKFq3VCISjinOyqafG Qm7GiTk214E75rr94D9DdgRGdg2q2erWpucQ81xQ8/FtLBxH8kd8ISKT+jM4dnfm aeaPnQ3exEPBYG5rcnrxEcn5pjz58fjFlop1jU/6TupUmULwiDPVGpARdFMQQZIS kawt/cgI7ytU1qT6WnW1XlZMhYvnaCXQTcgmcQHVG+dwTZNQ22AWEnqLxE5D63TB F89bEzyeRQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFC3TENSNr9g6l+VtRQe9oKMC uaQ2MB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzIzNjMwMzQzYTYxMzgzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBKhAMA0G CSqGSIb3DQEBCwUAA4IBAQCUaJxelTLTCJfYlPLasoW1fjPLxdozDMnC/cpTCmql 5hx/B8ova5dvksULejmJcl1fDHXoUqHR14386GZNxrGhBzyIDfMLdC5409drg5vt lrdyo4YhXbMWJikOFRTH+MwNvC6NJFRN8W4j8t2AM/hkKGUsSRTiu56UOoTc1EPI GJu1ly5/5XzvKnUngFW2bx+Do3vqwxvRLXt571ER1hzRxA5qRAyg+xPRi3IlppRz qKoEZYdqS9eZJ3j4XxbFEpB4tZn9C7rP1uZejpqZl0JozTDmdF0/l736Jl9AWovL 8mensu6aihstkq5Y36EspCwOiBPeEYo9yaAb2jWxNlxL -----END CERTIFICATE-----Generated at Sun Jul 12 04:16:56 2026 by rpki-client