
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2033323134.roa
File: 323630353a3963303a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier: oq1FThgfpc+YlaZJ7MG0FWsyOY7W0iCNy3yPviNLX3Y=
Subject key identifier: D8:6F:00:5A:E6:7D:9E:59:AA:77:F6:20:A4:AE:6B:3D:F2:18:1F:42
Certificate issuer: /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Certificate serial: 1A800D309C69DA88D58004FFE217A374BC798C09
Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2033323134.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 3214
IP address blocks: 2605:9c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Jul 2026 01:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:80:0d:30:9c:69:da:88:d5:80:04:ff:e2:17:a3:74:bc:79:8c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=D86F005AE67D9E59AA77F620A4AE6B3DF2181F42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:c7:ff:2f:71:08:52:57:49:7d:d8:e2:a5:
db:81:04:01:05:3a:79:14:cd:47:1d:64:fb:cc:b2:
69:b7:f5:6a:0b:aa:d9:3b:ed:c2:28:b9:6e:e8:5a:
2d:06:d2:5b:8f:e8:41:5f:24:7d:0e:34:a7:59:39:
b1:14:f8:29:bc:33:89:6e:68:f9:19:5f:c3:61:b1:
5c:2a:b9:e7:4d:c3:aa:68:11:93:a5:82:29:0b:70:
23:ec:ae:2d:87:17:98:b6:7b:40:c0:0a:9e:20:2a:
ff:2f:1c:ff:e4:d8:23:f9:ff:8e:e5:5a:8f:15:62:
da:2b:a8:81:c8:74:b9:79:d2:4f:4b:7d:5b:25:46:
44:8c:08:36:3c:6c:05:f3:dc:45:c6:4e:6e:10:67:
45:21:6a:f4:97:be:c8:8d:7e:3e:6e:28:bf:e3:9b:
ca:84:d6:ad:ee:ab:a9:25:a4:5a:02:d1:89:eb:73:
5d:93:46:1c:7e:ec:fa:9c:2b:c8:1c:39:fd:c1:4d:
48:00:9b:31:c9:de:13:31:d5:06:9f:31:45:03:01:
17:40:aa:93:38:05:a5:23:3d:ec:fe:82:59:49:17:
be:8f:f5:4c:54:48:f2:17:3f:5c:09:27:4c:7d:94:
2f:09:c7:9f:33:0a:6b:34:91:35:62:b4:9d:af:bb:
ea:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6F:00:5A:E6:7D:9E:59:AA:77:F6:20:A4:AE:6B:3D:F2:18:1F:42
X509v3 Authority Key Identifier:
keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9c0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:98:92:47:dd:ac:28:da:50:80:8f:f6:d9:46:36:bb:5c:69:
20:34:09:54:e0:da:82:ff:12:28:60:33:a3:40:54:27:50:47:
4a:54:ac:5f:2a:a5:83:a9:37:aa:98:e4:c2:c0:ec:af:1f:6f:
ac:d7:84:f3:03:8e:43:35:ea:fd:89:33:f6:ec:ad:18:78:f8:
83:fb:6b:e5:bf:3b:2e:fb:37:b8:88:10:d4:a2:28:6e:e8:d5:
7d:b8:04:a0:ab:05:13:55:80:e1:37:96:e2:15:f0:7e:cd:96:
4b:b8:09:40:8c:6a:e8:cb:d5:7a:69:1d:85:83:69:9a:30:76:
d3:eb:83:42:d6:cf:6e:9f:0c:f4:23:d5:f9:3e:be:2a:51:8d:
6b:f4:71:fd:eb:43:6d:98:59:02:e7:8b:6e:75:7f:86:c7:d7:
05:c2:7d:bc:75:6c:9f:c1:68:e5:a7:75:68:8e:dc:4b:e0:10:
6c:e8:b7:9c:b7:80:9a:85:81:8e:1e:c8:db:33:37:78:12:d8:
b3:d4:e3:09:3a:0c:48:cd:f1:8e:54:a0:70:8f:37:92:31:11:
76:11:22:2c:d2:f2:36:46:8f:78:a8:a1:20:b8:2d:12:aa:12:
f5:81:43:6f:3e:e6:94:45:13:1e:a4:02:99:6f:2d:a9:b1:7d:
c7:c2:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:31:20 2026 by rpki-client