$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2033323034.roa File: 323630353a3963303a3a2f33322d3438203d3e2033323034.roa (raw, json) Hash identifier: kXeEqTtXGWe0t5mZhT4EMDAUUGfiQNjbDxa8it1dGdM= Subject key identifier: 6F:B4:B9:EC:3E:F5:9E:05:8F:D4:61:6A:FD:96:2E:AD:D5:E5:73:C7 Certificate issuer: /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450 Certificate serial: 230AA2255F0253F01BA4163B41888C6744829149 Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2033323034.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 3204 IP address blocks: 2605:9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 01:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0a:a2:25:5f:02:53:f0:1b:a4:16:3b:41:88:8c:67:44:82:91:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=6FB4B9EC3EF59E058FD4616AFD962EADD5E573C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:1f:70:74:36:6e:e1:73:0b:3e:6d:0b:4f: 55:05:76:c6:f9:32:d4:52:37:aa:cd:ac:0d:9b:0c: d5:cc:34:0e:df:49:b1:f4:db:43:f1:62:e7:3f:b9: 76:c0:95:b1:9c:27:92:85:2b:1a:42:58:09:ef:dc: 32:6e:0d:04:c8:3b:fe:15:9f:d0:89:bc:91:70:00: 32:4d:0d:40:1e:a3:e1:cd:ba:cc:80:a9:73:69:1e: 22:7f:6d:da:bf:13:86:16:8f:b9:68:3e:4d:79:c8: 72:20:85:8c:82:10:5b:ad:25:a8:bb:08:5c:8f:63: c6:7c:9b:ef:2d:1a:dd:99:7d:ee:bb:62:c1:3d:6a: 37:10:ce:2c:7e:37:bd:8b:a5:50:64:3b:39:a7:1d: 74:3a:bc:1a:46:ba:60:a5:32:5f:ee:98:64:0d:b7: 86:d2:83:73:89:61:68:df:71:84:0b:d3:bf:83:e2: 1a:35:44:35:39:7a:c9:ea:47:3a:db:12:0f:da:3b: 59:16:03:09:b7:a1:28:7f:95:8c:3c:69:29:23:a1: 4e:1c:33:76:d0:6b:ba:7a:99:64:e5:c6:19:73:b8: 0c:a1:62:24:b9:18:13:d7:ed:e5:21:35:7d:9c:e6: 5b:9e:73:6a:d1:17:e6:61:67:94:d1:49:4e:38:79: f3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B4:B9:EC:3E:F5:9E:05:8F:D4:61:6A:FD:96:2E:AD:D5:E5:73:C7 X509v3 Authority Key Identifier: keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2033323034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9c0::/32 Signature Algorithm: sha256WithRSAEncryption 35:7d:53:b5:37:55:50:17:cb:fc:69:4c:6c:ba:05:9f:a9:e0: b8:7b:7b:c6:cc:d9:fd:45:81:be:2a:4b:eb:27:16:6a:1a:8f: 23:41:f2:25:b4:6d:6e:d9:2f:50:34:3e:78:c7:82:f9:a2:3f: 9a:b6:f5:86:86:c4:3d:e5:df:1c:cb:e2:ca:55:40:ef:a7:84: 4a:97:26:05:ce:08:7a:8b:17:c4:fd:1e:b1:7b:23:e1:82:d7: 58:83:55:5c:18:95:98:36:ca:9c:a9:98:3b:f6:ca:64:66:33: 49:bd:d7:b8:c0:3d:a5:ac:74:4e:e6:3a:87:c2:59:ea:0e:f0: c8:09:8d:db:c3:35:0e:48:c4:a5:4c:c3:89:a5:55:50:ef:13: 47:1f:3f:5b:b4:77:a4:90:80:54:65:eb:b3:03:7d:b1:fd:b6: 5e:21:c0:a9:7b:8a:c0:b6:e0:6c:0f:93:e2:43:5b:32:07:e4: c9:45:a6:69:f3:21:9e:c9:24:84:d8:a5:7b:87:6a:3a:3a:ae: 58:87:35:8e:d0:97:28:6c:3a:0d:07:c3:26:96:f3:75:d8:2b: ee:db:33:d6:16:6f:09:ee:95:7f:74:d6:8f:31:19:d6:00:52: 9c:f9:00:f9:a0:87:a2:ce:9f:e5:6f:6e:fd:29:03:6c:1b:46: 77:40:d2:79 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUIwqiJV8CU/AbpBY7QYiMZ0SCkUkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTlmYWMxNDY3MjEyMmJkZGZjN2ExMjc4OTgwZDY5NWM2 MDlkNWVhZWVkYjBkZjI0NTAwHhcNMjYwNzAyMTAzMDQ4WhcNMjcwNzAxMTAzNTQ4 WjAzMTEwLwYDVQQDEyg2RkI0QjlFQzNFRjU5RTA1OEZENDYxNkFGRDk2MkVBREQ1 RTU3M0M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0IfcHQ2buFz Cz5tC09VBXbG+TLUUjeqzawNmwzVzDQO30mx9NtD8WLnP7l2wJWxnCeShSsaQlgJ 79wybg0EyDv+FZ/QibyRcAAyTQ1AHqPhzbrMgKlzaR4if23avxOGFo+5aD5Nechy IIWMghBbrSWouwhcj2PGfJvvLRrdmX3uu2LBPWo3EM4sfje9i6VQZDs5px10Orwa RrpgpTJf7phkDbeG0oNziWFo33GEC9O/g+IaNUQ1OXrJ6kc62xIP2jtZFgMJt6Eo f5WMPGkpI6FOHDN20Gu6eplk5cYZc7gMoWIkuRgT1+3lITV9nOZbnnNq0RfmYWeU 0UlOOHnzOwIDAQABo4ICWzCCAlcwHQYDVR0OBBYEFG+0uew+9Z4Fj9Rhav2WLq3V 5XPHMB8GA1UdIwQYMBaAFFEwedTP+/34ECTKG0jKt3vVFmZXMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTEvNTEzMDc5RDRDRkZCRkRGODEwMjRDQTFCNDhDQUI3N0JENTE2NjY1 Ny5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2RhYjc2YzZiLTBlODYtNGEwMy1hNTlhLWYzZmM3N2Ri YmE2Mi9lOWZhYzE0NjcyMTIyYmRkZmM3YTEyNzg5ODBkNjk1YzYwOWQ1ZWFlZWRi MGRmMjQ1MC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTEvMzIzNjMwMzUzYTM5NjMzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMzMzIzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUJwDANBgkq hkiG9w0BAQsFAAOCAQEANX1TtTdVUBfL/GlMbLoFn6nguHt7xszZ/UWBvipL6ycW ahqPI0HyJbRtbtkvUDQ+eMeC+aI/mrb1hobEPeXfHMviylVA76eESpcmBc4IeosX xP0esXsj4YLXWINVXBiVmDbKnKmYO/bKZGYzSb3XuMA9pax0TuY6h8JZ6g7wyAmN 28M1DkjEpUzDiaVVUO8TRx8/W7R3pJCAVGXrswN9sf22XiHAqXuKwLbgbA+T4kNb MgfkyUWmafMhnskkhNile4dqOjquWIc1jtCXKGw6DQfDJpbzddgr7tsz1hZvCe6V f3TWjzEZ1gBSnPkA+aCHos6f5W9u/SkDbBtGd0DSeQ== -----END CERTIFICATE-----Generated at Sun Jul 12 08:32:01 2026 by rpki-client