
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2034373835.roa
File: 323630343a613834303a3a2f33322d3438203d3e2034373835.roa (raw, json)
Hash identifier: jPuGyjuyvhWiwl6HouHpsEp6ylfxeJqFOYdGwqeK764=
Subject key identifier: 31:12:5C:5E:96:02:A3:5E:E8:A3:78:B9:89:EA:BC:68:25:5C:E2:77
Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial: 73553605D1413A14EBA9EF3E1F769C4EBAC26882
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2034373835.roa
Signing time: Thu 02 Jul 2026 11:29:53 +0000
ROA not before: Thu 02 Jul 2026 11:24:53 +0000
ROA not after: Thu 01 Jul 2027 11:29:53 +0000
asID: 4785
IP address blocks: 2604:a840::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Jul 2026 02:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:55:36:05:d1:41:3a:14:eb:a9:ef:3e:1f:76:9c:4e:ba:c2:68:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Validity
Not Before: Jul 2 11:24:53 2026 GMT
Not After : Jul 1 11:29:53 2027 GMT
Subject: CN=31125C5E9602A35EE8A378B989EABC68255CE277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:bc:fb:38:62:f4:2d:fd:5c:75:77:49:cc:
28:92:de:2f:63:2d:d9:2d:b2:02:be:53:81:d4:8e:
ed:a9:68:da:8b:06:55:65:00:97:34:18:82:74:d7:
1e:1a:ff:2d:f9:ae:59:f2:e3:99:42:2d:96:6d:4f:
74:7f:f0:40:d0:3d:95:69:1b:98:18:17:65:41:0b:
61:70:4d:9f:ce:47:f0:ef:b6:d3:15:0a:26:42:9f:
6b:d2:bc:b8:2d:17:12:b8:6b:10:58:25:6b:0f:40:
59:69:f6:b6:19:14:99:62:cf:86:09:87:1f:9c:8c:
98:05:97:bc:bd:f7:d9:99:0a:cf:ad:89:e2:69:76:
ab:65:c2:32:62:55:f4:f0:b2:f8:ac:cd:da:8a:32:
0e:f5:eb:83:4f:97:e1:f3:88:94:f1:f1:63:0e:3e:
4c:2f:77:8f:3f:c6:53:09:c3:cf:79:15:e5:bc:32:
ab:90:82:a2:b8:62:8f:fd:b9:d6:2c:1b:9a:4f:51:
7f:3e:56:44:bf:58:61:77:6f:e7:74:85:46:23:dc:
cf:3b:63:be:03:ef:20:3e:c3:a5:ae:f5:5c:1a:d8:
3a:4b:83:79:cf:8b:a6:83:f8:38:0f:21:b4:63:d2:
15:4a:fc:e9:17:d7:ed:74:a4:d0:98:b2:c6:19:91:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:12:5C:5E:96:02:A3:5E:E8:A3:78:B9:89:EA:BC:68:25:5C:E2:77
X509v3 Authority Key Identifier:
keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:a840::/32
Signature Algorithm: sha256WithRSAEncryption
8b:08:87:92:28:81:6c:28:25:13:71:f8:d7:86:96:86:e9:0b:
af:e0:9e:0a:e8:df:6c:13:63:09:e2:e2:9a:da:63:3e:40:61:
c2:2d:7c:84:ac:78:52:cf:b0:08:47:a4:b5:12:6d:03:95:76:
f0:ef:c2:c9:01:68:7a:c6:e8:2f:6b:e0:81:ce:dd:58:18:2c:
64:cb:f7:b5:10:3c:85:60:f3:a3:7e:a3:cc:e4:15:a7:07:d5:
06:53:a3:b7:21:c9:66:8a:be:99:4d:01:f4:7a:d2:80:28:1f:
11:ea:7c:65:6f:1f:cc:4a:32:83:b9:85:30:5d:0d:e4:2c:65:
e8:43:05:11:9f:ba:af:c7:b3:fd:7a:12:ec:82:9f:9b:02:7b:
80:46:58:45:ce:25:8f:6e:c7:c2:5b:92:8e:2b:59:4e:99:02:
4b:cd:30:de:4d:63:29:09:df:7a:20:a8:3f:82:37:54:5d:26:
a9:fc:fa:4c:7d:0c:78:ff:a4:23:d0:f0:44:5c:3b:13:7d:3e:
ff:36:24:10:8e:25:45:78:b0:b9:3b:0b:52:b4:6f:d5:b7:ff:
d9:6b:6c:62:82:e8:af:34:22:94:f0:e6:a5:41:1c:b3:5d:89:
fb:7d:4b:fa:74:17:32:2a:d2:77:7c:76:70:8d:f2:05:d4:fb:
29:c2:4a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 04:16:12 2026 by rpki-client