$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2033323538.roa File: 323630343a613834303a3a2f33322d3438203d3e2033323538.roa (raw, json) Hash identifier: yiH6qIdNbeDZhrwhvUbNqyhXUoyuO1L65Wc+DPLVhX4= Subject key identifier: 1B:BC:7A:97:3F:31:46:56:03:2A:9C:DF:67:E1:50:DF:7E:F2:04:24 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 0BC108E34CF9D2CD0D4046392055B43999708007 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2033323538.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 3258 IP address blocks: 2604:a840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 02:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c1:08:e3:4c:f9:d2:cd:0d:40:46:39:20:55:b4:39:99:70:80:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=1BBC7A973F314656032A9CDF67E150DF7EF20424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:26:d6:be:05:6f:ca:99:33:97:d2:27:f8: 72:6d:49:14:47:69:71:c2:4c:1f:aa:1e:f0:47:cd: 10:73:6e:8e:ed:07:c1:70:08:96:03:4a:85:12:2b: 7e:69:d2:01:a4:fc:a4:4a:93:08:c5:de:7a:d4:12: ea:9d:6e:97:ef:36:7a:35:a1:dd:c6:25:74:f5:26: 92:b7:de:0b:84:fb:7b:9f:fa:07:93:cc:b6:9c:3d: b8:2f:fe:ff:f1:0c:bb:88:f3:0c:1f:c3:6f:e1:76: 39:a6:28:c7:95:37:c4:bd:58:b5:f6:e5:d6:98:00: f4:b2:a2:17:7f:fc:33:f9:d9:9a:3d:59:04:30:1f: ba:61:db:71:fd:01:ce:33:b1:db:c7:ce:4e:27:dd: ee:22:ef:29:4d:04:eb:18:b5:82:5e:8c:94:dd:1d: 76:69:f2:70:b6:a3:73:8c:65:e6:3f:47:53:ba:b7: 3a:77:21:2a:22:7d:25:ac:b8:41:cf:d6:86:0a:a7: 52:d0:87:15:ce:92:27:05:6a:96:19:48:18:99:59: 1a:1c:06:ea:51:0a:18:1d:d0:f9:89:a1:da:df:0f: 21:c8:5e:68:b0:17:57:64:d1:52:5b:a9:6e:a4:43: 11:1e:6c:f2:4b:e7:47:fa:e0:eb:a6:d8:a4:af:30: c0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BC:7A:97:3F:31:46:56:03:2A:9C:DF:67:E1:50:DF:7E:F2:04:24 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:a840::/32 Signature Algorithm: sha256WithRSAEncryption 0f:ec:8a:3a:b5:4b:cd:ae:44:6f:88:5e:d6:62:25:df:8a:5c: 13:44:dc:76:ac:fe:b6:e5:37:99:a7:a8:ee:ea:fa:ab:c7:76: 1d:d8:d7:cb:01:b3:fe:5f:c6:49:2a:7c:63:8b:69:1a:fb:e7: c1:c0:1c:f5:83:30:40:c5:e1:53:e7:17:34:81:60:17:92:28: 2b:3e:37:9a:bf:66:8d:78:06:c0:05:f8:ce:89:d8:ff:e9:da: a4:7f:23:e3:1d:73:06:2f:ec:df:9f:50:d7:85:87:20:d3:13: 5e:3c:d7:15:71:0d:e6:48:df:2e:13:05:0d:be:9b:9e:db:68: da:1f:64:ad:7c:aa:27:cd:1c:47:ba:10:38:c6:6f:5a:fe:52: 3a:fe:64:41:e1:4c:9a:0e:24:24:45:32:68:2e:82:d1:fe:4d: 98:20:b4:f7:99:b1:f8:ec:87:f7:bc:24:7f:c7:43:6c:b3:7e: fd:5a:f2:e6:9a:a7:6b:88:57:ff:5b:6a:44:93:75:ab:66:ce: fe:a7:65:8a:2b:40:01:39:17:7e:be:c7:f0:3a:49:7b:35:da: 0c:53:09:ca:c5:aa:88:0c:43:7d:88:f2:16:3a:0f:86:fd:2d: 2b:5c:03:f4:ba:a6:30:c8:41:c6:a0:66:40:8f:9a:24:83:2d: d1:2d:50:30 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUC8EI40z50s0NQEY5IFW0OZlwgAcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwNzAyMTAzMDQ3WhcNMjcwNzAxMTAzNTQ3 WjAzMTEwLwYDVQQDEygxQkJDN0E5NzNGMzE0NjU2MDMyQTlDREY2N0UxNTBERjdF RjIwNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VAm1r4Fb8qZ M5fSJ/hybUkUR2lxwkwfqh7wR80Qc26O7QfBcAiWA0qFEit+adIBpPykSpMIxd56 1BLqnW6X7zZ6NaHdxiV09SaSt94LhPt7n/oHk8y2nD24L/7/8Qy7iPMMH8Nv4XY5 pijHlTfEvVi19uXWmAD0sqIXf/wz+dmaPVkEMB+6Ydtx/QHOM7Hbx85OJ93uIu8p TQTrGLWCXoyU3R12afJwtqNzjGXmP0dTurc6dyEqIn0lrLhBz9aGCqdS0IcVzpIn BWqWGUgYmVkaHAbqUQoYHdD5iaHa3w8hyF5osBdXZNFSW6lupEMRHmzyS+dH+uDr ptikrzDAUwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFBu8epc/MUZWAyqc32fhUN9+ 8gQkMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzIzNjMwMzQzYTYxMzgzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBKhAMA0G CSqGSIb3DQEBCwUAA4IBAQAP7Io6tUvNrkRviF7WYiXfilwTRNx2rP625TeZp6ju 6vqrx3Yd2NfLAbP+X8ZJKnxji2ka++fBwBz1gzBAxeFT5xc0gWAXkigrPjeav2aN eAbABfjOidj/6dqkfyPjHXMGL+zfn1DXhYcg0xNePNcVcQ3mSN8uEwUNvpue22ja H2StfKonzRxHuhA4xm9a/lI6/mRB4UyaDiQkRTJoLoLR/k2YILT3mbH47If3vCR/ x0Nss379WvLmmqdriFf/W2pEk3WrZs7+p2WKK0ABORd+vsfwOkl7NdoMUwnKxaqI DEN9iPIWOg+G/S0rXAP0uqYwyEHGoGZAj5okgy3RLVAw -----END CERTIFICATE-----Generated at Sun Jul 12 04:16:56 2026 by rpki-client