$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2039333132.roa File: 323630343a613834303a3a2f33322d3438203d3e2039333132.roa (raw, json) Hash identifier: bcm1e0/Zo7W1OIAbfZ301arkjB2KYxW4Lr97+LTnr+4= Subject key identifier: 89:4E:E8:2E:FF:5A:E7:34:88:27:08:D1:37:F8:94:C3:49:9B:0C:F6 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 6CC61DED4A488923837EEB65298561F53A5F481F Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2039333132.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 9312 IP address blocks: 2604:a840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 02:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c6:1d:ed:4a:48:89:23:83:7e:eb:65:29:85:61:f5:3a:5f:48:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=894EE82EFF5AE734882708D137F894C3499B0CF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ad:48:fe:3f:0d:d9:af:51:db:60:83:13:94: 46:47:78:71:66:a4:b1:d2:dc:df:39:09:43:f2:c0: be:99:cb:24:a9:ed:ed:6c:11:da:b1:9e:29:a9:6b: 73:48:93:b6:32:7e:b7:0d:7e:75:78:62:17:78:10: fa:4d:7e:3a:d0:38:f5:2f:48:32:ad:d7:a4:fc:ac: 40:ed:50:4f:d6:16:0b:d1:a4:49:f4:72:c9:ac:7e: 5a:56:41:cc:01:cd:32:cd:8d:99:dc:e6:32:25:a0: 56:56:ab:77:05:5c:aa:2a:9b:f6:86:81:4d:f1:13: ce:02:35:2f:d0:9d:7d:22:c0:a6:96:cf:b0:e7:b5: 7d:1e:c8:bf:6a:e5:cc:fc:63:9f:ad:57:ad:6b:4d: 72:d3:c1:74:a5:41:b8:dc:94:2f:d3:8d:c3:41:ed: 8a:d1:b9:1b:d9:86:dd:7b:ef:b2:b5:e6:a6:1b:f2: 59:99:54:d7:68:a3:af:05:f2:ea:99:04:76:77:db: d9:e8:0a:6d:af:e3:83:c4:9a:9a:64:ce:6e:f0:76: ca:e0:d5:11:99:7a:1e:ff:79:90:96:05:0b:19:11: 53:6c:3a:a4:ef:5f:d2:27:5c:dc:1e:e3:91:36:85: 4d:8d:2c:7e:bc:b9:d6:d5:c8:51:c0:61:e0:de:7a: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4E:E8:2E:FF:5A:E7:34:88:27:08:D1:37:F8:94:C3:49:9B:0C:F6 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/323630343a613834303a3a2f33322d3438203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:a840::/32 Signature Algorithm: sha256WithRSAEncryption 85:c2:f5:7d:18:28:fb:ad:94:36:16:30:a4:a1:81:f0:dd:b8: 4a:c1:ca:df:37:f2:7b:ee:25:0e:6c:ac:5b:98:6e:0e:dd:a7: f8:6a:53:35:ca:3a:2b:3b:74:c7:38:bb:51:ed:98:80:55:d2: 71:7a:2a:1d:ba:2e:93:e6:a6:53:f3:c0:87:19:f7:37:7e:d7: a6:48:c8:57:7f:30:c9:2a:49:19:7a:dc:cc:27:69:71:da:94: 6d:f7:50:86:6b:d8:8e:14:c8:97:23:ac:cc:76:c3:4f:d1:b4: a5:fc:c2:f9:75:87:16:5c:f8:6a:72:05:a6:3e:2a:90:c5:0f: d9:57:c4:3d:3e:54:e5:29:b4:9c:cc:c1:df:7f:05:ab:e1:a2: 4b:3e:68:a9:65:58:69:5d:53:70:bf:bb:71:31:91:64:0c:89: 16:01:19:75:c6:f0:33:df:ee:c8:8f:81:8e:ef:7d:4a:b9:15: 69:71:17:17:22:af:d2:7c:9a:62:15:be:65:aa:0d:2c:0e:e8: 64:5e:9b:e8:cf:53:65:d7:79:42:52:d0:65:87:21:1b:8e:cf: bf:1c:47:f5:99:b5:5b:42:a5:9a:0b:8b:82:c7:b8:ed:ac:5c: fb:62:78:2b:40:40:51:47:5d:41:40:26:a5:4c:aa:ef:e3:57: 4b:ff:85:2f -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUbMYd7UpIiSODfutlKYVh9TpfSB8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjYwNzAyMTAzMDQ3WhcNMjcwNzAxMTAzNTQ3 WjAzMTEwLwYDVQQDEyg4OTRFRTgyRUZGNUFFNzM0ODgyNzA4RDEzN0Y4OTRDMzQ5 OUIwQ0Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq1I/j8N2a9R 22CDE5RGR3hxZqSx0tzfOQlD8sC+mcskqe3tbBHasZ4pqWtzSJO2Mn63DX51eGIX eBD6TX460Dj1L0gyrdek/KxA7VBP1hYL0aRJ9HLJrH5aVkHMAc0yzY2Z3OYyJaBW Vqt3BVyqKpv2hoFN8RPOAjUv0J19IsCmls+w57V9Hsi/auXM/GOfrVeta01y08F0 pUG43JQv043DQe2K0bkb2Ybde++yteamG/JZmVTXaKOvBfLqmQR2d9vZ6Aptr+OD xJqaZM5u8HbK4NURmXoe/3mQlgULGRFTbDqk71/SJ1zcHuORNoVNjSx+vLnW1chR wGHg3npdPwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFIlO6C7/Wuc0iCcI0Tf4lMNJ mwz2MB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzIzNjMwMzQzYTYxMzgzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBKhAMA0G CSqGSIb3DQEBCwUAA4IBAQCFwvV9GCj7rZQ2FjCkoYHw3bhKwcrfN/J77iUObKxb mG4O3af4alM1yjorO3THOLtR7ZiAVdJxeiodui6T5qZT88CHGfc3ftemSMhXfzDJ KkkZetzMJ2lx2pRt91CGa9iOFMiXI6zMdsNP0bSl/ML5dYcWXPhqcgWmPiqQxQ/Z V8Q9PlTlKbSczMHffwWr4aJLPmipZVhpXVNwv7txMZFkDIkWARl1xvAz3+7Ij4GO 731KuRVpcRcXIq/SfJpiFb5lqg0sDuhkXpvoz1Nl13lCUtBlhyEbjs+/HEf1mbVb QqWaC4uCx7jtrFz7YngrQEBRR11BQCalTKrv41dL/4Uv -----END CERTIFICATE-----Generated at Sun Jul 12 04:16:10 2026 by rpki-client