$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2038383838.roa File: 323630343a613834303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: bc9166HX3fXP5C1uN7wmTw6p15lkhO1qUVvwVeAO19U= Subject key identifier: 42:59:2E:B2:14:B9:9A:9B:1D:66:5B:BA:9E:51:E7:A2:D2:B3:07:C3 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 72008FF01543F99FA50C0D4D6685B64ABC861953 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 8888 IP address blocks: 2604:a840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 02:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:00:8f:f0:15:43:f9:9f:a5:0c:0d:4d:66:85:b6:4a:bc:86:19:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=42592EB214B99A9B1D665BBA9E51E7A2D2B307C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:a9:ea:46:0e:cb:e2:45:cd:65:61:88:75: 32:18:2c:b5:74:d7:94:79:06:35:c8:7e:46:87:d7: bb:00:3e:dc:a7:d8:db:0c:a6:e6:11:5b:7b:60:4f: 5c:d4:98:36:a8:23:7c:d2:a6:44:7c:b9:98:9c:23: 62:be:98:c0:fa:86:3c:1c:d0:b6:dc:ba:ef:fd:6c: 95:c5:5d:8c:ad:ce:bb:d5:b3:9c:cc:d7:6d:d5:0c: 31:14:71:69:20:7b:0d:ec:96:a8:1a:7a:5a:d8:3f: 00:e1:df:7e:91:10:94:c3:41:e3:0a:7d:3b:48:c2: e1:69:54:56:05:21:e7:9c:91:1a:d0:c8:3d:4c:c5: 18:72:cc:52:7a:f4:15:c9:f3:3e:72:e4:30:8f:72: 17:ee:c3:fd:ac:62:07:e8:26:89:18:f1:0b:5c:6e: ce:f9:0f:b2:4d:ed:3e:45:8e:e7:e7:ba:1f:b2:e7: e7:a7:18:a3:01:7f:e8:d7:da:e9:c2:88:95:0d:04: 1b:c9:38:e7:29:24:4f:19:24:82:ec:30:18:c7:a6: 09:5d:7d:ab:a9:22:2a:54:a7:ef:04:15:6f:a2:54: 47:7e:eb:c8:74:fb:a1:b3:f6:61:13:24:05:b5:5c: 92:1f:a7:dc:7e:ec:0c:71:95:ca:6e:55:d3:20:38: 0a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:59:2E:B2:14:B9:9A:9B:1D:66:5B:BA:9E:51:E7:A2:D2:B3:07:C3 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:a840::/32 Signature Algorithm: sha256WithRSAEncryption 1c:1a:70:1e:6a:a5:28:94:35:1b:2f:34:4c:69:05:ee:37:41: 1e:21:0d:e0:e4:68:2c:34:fe:33:41:9a:0a:d4:ee:13:1b:57: 0f:ea:6a:32:b4:fb:11:15:db:ba:f4:ee:4c:1d:f6:d7:91:64: fc:fd:e9:b7:67:92:23:df:65:0c:21:cb:65:59:2f:73:b5:b6: 3c:8b:b2:f3:fd:f4:fa:5a:e3:0f:a2:c5:b6:9a:b2:59:97:9f: 9a:dd:56:29:50:7f:4d:3f:46:b7:5a:05:b9:2a:f9:21:d3:8c: 43:58:1a:0f:86:a0:2a:76:f1:57:4a:06:1f:a9:f6:04:9f:31: 9d:09:b9:f8:f0:f9:6a:75:68:27:89:48:ef:ff:24:31:70:e4: 41:45:0b:a2:4f:a3:6b:d5:6b:b9:f0:dd:ba:61:27:5a:7c:f3: c5:d1:9b:fb:92:bf:49:7c:bc:e6:93:68:df:75:68:33:fe:a2: b0:e2:89:73:3e:4b:f9:32:6f:65:64:d9:f4:af:b5:6d:8b:35: 90:a5:40:36:64:60:15:8d:ca:3a:21:4a:f7:62:63:06:06:7f: e2:d8:47:40:1c:e9:37:7a:57:31:3c:24:67:72:f2:a0:85:1e: bd:04:d3:bc:65:7d:0f:37:96:d6:bf:5e:75:b1:8b:62:03:55: b0:5e:b2:d9 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUcgCP8BVD+Z+lDA1NZoW2SryGGVMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwNzAyMTAzMDQ3WhcNMjcwNzAxMTAzNTQ3 WjAzMTEwLwYDVQQDEyg0MjU5MkVCMjE0Qjk5QTlCMUQ2NjVCQkE5RTUxRTdBMkQy QjMwN0MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iOp6kYOy+JF zWVhiHUyGCy1dNeUeQY1yH5Gh9e7AD7cp9jbDKbmEVt7YE9c1Jg2qCN80qZEfLmY nCNivpjA+oY8HNC23Lrv/WyVxV2Mrc671bOczNdt1QwxFHFpIHsN7JaoGnpa2D8A 4d9+kRCUw0HjCn07SMLhaVRWBSHnnJEa0Mg9TMUYcsxSevQVyfM+cuQwj3IX7sP9 rGIH6CaJGPELXG7O+Q+yTe0+RY7n57ofsufnpxijAX/o19rpwoiVDQQbyTjnKSRP GSSC7DAYx6YJXX2rqSIqVKfvBBVvolRHfuvIdPuhs/ZhEyQFtVySH6fcfuwMcZXK blXTIDgKDQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFEJZLrIUuZqbHWZbup5R56LS swfDMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzIzNjMwMzQzYTYxMzgzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBKhAMA0G CSqGSIb3DQEBCwUAA4IBAQAcGnAeaqUolDUbLzRMaQXuN0EeIQ3g5GgsNP4zQZoK 1O4TG1cP6moytPsRFdu69O5MHfbXkWT8/em3Z5Ij32UMIctlWS9ztbY8i7Lz/fT6 WuMPosW2mrJZl5+a3VYpUH9NP0a3WgW5Kvkh04xDWBoPhqAqdvFXSgYfqfYEnzGd Cbn48PlqdWgniUjv/yQxcORBRQuiT6Nr1Wu58N26YSdafPPF0Zv7kr9JfLzmk2jf dWgz/qKw4olzPkv5Mm9lZNn0r7VtizWQpUA2ZGAVjco6IUr3YmMGBn/i2EdAHOk3 elcxPCRncvKghR69BNO8ZX0PN5bWv151sYtiA1WwXrLZ -----END CERTIFICATE-----Generated at Sun Jul 12 04:16:11 2026 by rpki-client