$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2033323134.roa File: 323630343a613834303a3a2f33322d3438203d3e2033323134.roa (raw, json) Hash identifier: lFQpk0FKqpDMgnhLF0ZRO7ADSJkGrixRoBu8Pg0+5R8= Subject key identifier: 0E:85:03:8E:40:0F:FC:7C:46:1B:B7:6C:15:ED:2B:D6:86:F6:ED:1D Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 1647639369B9FAB1867861B14274D83D3A6B2F37 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2033323134.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 3214 IP address blocks: 2604:a840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 02:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:47:63:93:69:b9:fa:b1:86:78:61:b1:42:74:d8:3d:3a:6b:2f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=0E85038E400FFC7C461BB76C15ED2BD686F6ED1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:29:12:6d:2f:f5:9b:11:b4:74:85:ae:cc: 38:97:1f:6d:bd:42:1c:62:32:f6:ce:6f:15:9a:9c: 73:b0:60:8e:86:50:78:ae:6b:68:60:07:10:62:c1: 55:36:b9:16:c0:08:d1:1a:39:00:f5:2c:d4:c9:99: b2:c8:36:84:2a:92:6a:4d:09:42:46:c2:02:5b:62: 41:84:d6:2d:5a:0a:fb:7c:de:b4:47:bd:d2:c2:93: f9:9e:88:2d:2a:57:dd:e8:aa:ae:8e:7f:2f:98:8b: af:39:63:09:d7:ec:18:9c:3a:66:cb:b4:9e:f3:7a: d7:2b:10:1d:b6:4e:aa:21:5f:e1:4a:8f:f2:a2:36: 60:55:da:ce:74:1d:ea:b2:25:cc:8b:0f:b7:20:44: 08:7f:87:7a:f2:51:81:3f:a8:7c:27:61:c9:c0:36: 55:a0:67:d7:79:3a:4c:cd:5a:05:07:a8:d9:3e:47: a8:96:b0:63:2b:21:35:36:fc:10:f4:06:e2:3e:74: b8:20:06:b0:b9:c8:34:e4:5a:8c:6e:78:fc:78:a7: 59:76:06:e4:07:32:d6:4e:af:ea:b5:4e:8f:e7:be: ec:24:88:b6:da:23:80:dd:8f:65:3f:75:fe:c7:63: cc:49:5c:87:be:bc:bb:2a:92:6a:58:23:e1:36:ea: c4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:85:03:8E:40:0F:FC:7C:46:1B:B7:6C:15:ED:2B:D6:86:F6:ED:1D X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2033323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:a840::/32 Signature Algorithm: sha256WithRSAEncryption 37:76:68:7a:47:85:b1:79:59:2d:46:34:fb:00:04:43:50:f1: 38:ae:17:4e:ac:f0:04:40:9a:f6:91:ef:f8:2d:a0:3c:d3:26: 7b:fa:d4:86:32:d2:6c:7c:04:7b:62:18:5c:5a:bd:44:4b:41: b2:d8:10:4b:65:94:52:84:a8:57:2a:0f:af:4c:a0:f8:a2:01: 23:39:9e:b1:1f:c6:b9:42:4f:38:5a:e5:f1:36:ef:6b:0d:39: f5:28:84:62:2e:d1:71:89:cc:a7:60:cc:e6:a2:a9:2e:fc:92: 2c:c9:8c:83:9f:40:aa:7b:03:cf:93:7b:1e:f6:71:e0:16:d2: de:4b:30:f5:cb:e8:b9:d6:81:43:44:18:02:36:f6:40:4a:f8: 99:82:3d:81:0a:7a:2a:cf:d9:b0:95:19:e9:b6:7e:b5:43:f9: d9:db:d3:c8:15:f8:f0:0e:7c:b5:31:9e:fe:53:82:ef:ea:97: 04:89:01:b6:93:f5:92:28:c7:c6:59:01:41:d1:e1:3a:d3:df: e2:68:4e:3e:03:69:5b:2b:a4:b1:64:f6:1d:2e:ca:2b:61:c9: 80:3e:81:2b:ad:f9:9e:04:e9:03:27:0c:ea:61:8c:5f:ae:89: e1:10:d2:12:1a:3a:11:e2:a3:c3:df:a8:88:ae:5a:05:6b:19: 7c:d3:b0:6d -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUFkdjk2m5+rGGeGGxQnTYPTprLzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwNzAyMTAzMDQ3WhcNMjcwNzAxMTAzNTQ3 WjAzMTEwLwYDVQQDEygwRTg1MDM4RTQwMEZGQzdDNDYxQkI3NkMxNUVEMkJENjg2 RjZFRDFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKopEm0v9ZsR tHSFrsw4lx9tvUIcYjL2zm8VmpxzsGCOhlB4rmtoYAcQYsFVNrkWwAjRGjkA9SzU yZmyyDaEKpJqTQlCRsICW2JBhNYtWgr7fN60R73SwpP5nogtKlfd6Kqujn8vmIuv OWMJ1+wYnDpmy7Se83rXKxAdtk6qIV/hSo/yojZgVdrOdB3qsiXMiw+3IEQIf4d6 8lGBP6h8J2HJwDZVoGfXeTpMzVoFB6jZPkeolrBjKyE1NvwQ9AbiPnS4IAawucg0 5FqMbnj8eKdZdgbkBzLWTq/qtU6P577sJIi22iOA3Y9lP3X+x2PMSVyHvry7KpJq WCPhNurEwwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFA6FA45AD/x8Rhu3bBXtK9aG 9u0dMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzIzNjMwMzQzYTYxMzgzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjMxMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBKhAMA0G CSqGSIb3DQEBCwUAA4IBAQA3dmh6R4WxeVktRjT7AARDUPE4rhdOrPAEQJr2ke/4 LaA80yZ7+tSGMtJsfAR7YhhcWr1ES0Gy2BBLZZRShKhXKg+vTKD4ogEjOZ6xH8a5 Qk84WuXxNu9rDTn1KIRiLtFxicynYMzmoqku/JIsyYyDn0CqewPPk3se9nHgFtLe SzD1y+i51oFDRBgCNvZASviZgj2BCnoqz9mwlRnptn61Q/nZ29PIFfjwDny1MZ7+ U4Lv6pcEiQG2k/WSKMfGWQFB0eE609/iaE4+A2lbK6SxZPYdLsorYcmAPoErrfme BOkDJwzqYYxfronhENISGjoR4qPD36iIrloFaxl807Bt -----END CERTIFICATE-----Generated at Sun Jul 12 04:16:11 2026 by rpki-client