$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2033323538.roa File: 323630353a3963303a3a2f33322d3438203d3e2033323538.roa (raw, json) Hash identifier: vPtPS8inJJTSfbA0i1RIVhD+nITSZaU+tlFJPsOIgSA= Subject key identifier: 40:D5:E3:D4:1A:32:A8:49:81:AD:BC:10:7D:42:7E:3F:BF:EE:BB:71 Certificate issuer: /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450 Certificate serial: 08BAF7930B7BC1625066141917C3C2EA5B676C41 Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2033323538.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 3258 IP address blocks: 2605:9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 01:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ba:f7:93:0b:7b:c1:62:50:66:14:19:17:c3:c2:ea:5b:67:6c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=40D5E3D41A32A84981ADBC107D427E3FBFEEBB71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:24:fd:fb:8f:45:01:a6:c0:5d:3d:fc:6c: a1:a8:1b:b6:4c:bf:92:a0:bc:7f:8d:97:cb:11:8d: 99:12:6f:c3:e5:7b:56:a0:b2:c9:aa:c5:f5:03:fd: a1:33:e4:f8:ce:a1:7f:be:8d:b4:5d:9d:76:84:4a: 1c:db:80:44:89:18:59:fe:e7:38:a6:b3:92:f9:a0: c4:cf:91:fb:61:eb:8c:38:4e:ee:ae:f4:15:71:9d: cc:ed:b1:ce:86:c0:03:48:e8:e5:6f:b9:d0:9b:da: d3:69:86:e0:60:f5:f3:5c:a1:ff:35:f5:ba:6d:6a: 20:d4:fd:0e:fe:45:09:34:d4:a1:b9:7e:4e:39:81: 29:e6:0d:32:07:aa:20:21:96:f8:d7:73:c8:ca:38: 56:8d:96:98:ee:93:bc:bd:9c:21:66:52:4b:24:b6: c6:de:91:02:e9:cd:fb:be:91:17:b5:3f:ca:15:dd: 3a:a9:2f:13:b5:20:18:4c:54:b3:8f:a3:69:91:13: 4d:34:1b:42:77:98:f0:ea:6f:80:ae:42:c8:d0:2d: 5c:e5:ae:fd:2b:5f:91:12:a0:1b:fd:5c:1a:1d:c7: 1e:01:95:3c:29:5b:39:55:62:69:cf:5f:75:7a:7e: 5e:d3:b6:38:44:3d:22:48:03:ea:10:bc:75:94:22: 53:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D5:E3:D4:1A:32:A8:49:81:AD:BC:10:7D:42:7E:3F:BF:EE:BB:71 X509v3 Authority Key Identifier: keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9c0::/32 Signature Algorithm: sha256WithRSAEncryption 19:f6:39:53:b2:dd:6a:c4:ba:55:f9:57:ba:2d:ef:bc:86:a0: 0d:57:d0:b4:9f:6b:04:26:46:08:d5:d7:f3:bc:f0:6b:f9:6d: 71:4f:f5:f6:6b:e0:f3:cc:9c:42:e3:52:a4:83:e1:b7:aa:49: a9:bb:03:7a:a0:2a:76:f6:0f:3a:92:d9:6a:3c:d4:29:f9:46: 0b:bf:d7:ee:44:ea:00:06:59:2b:9e:2e:80:af:2a:27:31:e1: d1:65:c1:47:cc:b4:ac:88:aa:6b:dd:30:c1:2c:e1:2c:57:0b: 94:9c:5a:8b:bc:49:01:f2:5b:de:c4:b2:53:d4:90:10:0e:50: 76:65:be:dd:c2:66:7b:a7:e6:23:79:44:0f:fb:88:94:9a:a4: 07:8a:10:c8:17:2e:95:12:16:5a:00:4d:9a:f8:97:14:f3:a1: a2:7c:cd:77:8f:d3:f7:19:3e:2d:aa:ae:f3:a7:4d:45:eb:fe: 20:07:83:a4:bb:a3:c7:ee:ad:f8:db:34:04:c7:05:e2:63:fd: 1e:15:7f:64:ae:70:cb:ab:30:62:b6:1b:32:d0:4b:a0:74:cd: f5:1a:3f:d9:a0:ed:59:7e:80:1f:54:24:36:21:8d:c1:52:77: de:94:43:f3:39:16:be:15:32:9d:86:32:ed:51:25:19:29:1d: 0b:70:5d:3f -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUCLr3kwt7wWJQZhQZF8PC6ltnbEEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTlmYWMxNDY3MjEyMmJkZGZjN2ExMjc4OTgwZDY5NWM2 MDlkNWVhZWVkYjBkZjI0NTAwHhcNMjYwNzAyMTAzMDQ4WhcNMjcwNzAxMTAzNTQ4 WjAzMTEwLwYDVQQDEyg0MEQ1RTNENDFBMzJBODQ5ODFBREJDMTA3RDQyN0UzRkJG RUVCQjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtckk/fuPRQGm wF09/GyhqBu2TL+SoLx/jZfLEY2ZEm/D5XtWoLLJqsX1A/2hM+T4zqF/vo20XZ12 hEoc24BEiRhZ/uc4prOS+aDEz5H7YeuMOE7urvQVcZ3M7bHOhsADSOjlb7nQm9rT aYbgYPXzXKH/NfW6bWog1P0O/kUJNNShuX5OOYEp5g0yB6ogIZb413PIyjhWjZaY 7pO8vZwhZlJLJLbG3pEC6c37vpEXtT/KFd06qS8TtSAYTFSzj6NpkRNNNBtCd5jw 6m+ArkLI0C1c5a79K1+REqAb/VwaHcceAZU8KVs5VWJpz191en5e07Y4RD0iSAPq ELx1lCJTlwIDAQABo4ICWzCCAlcwHQYDVR0OBBYEFEDV49QaMqhJga28EH1Cfj+/ 7rtxMB8GA1UdIwQYMBaAFFEwedTP+/34ECTKG0jKt3vVFmZXMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTEvNTEzMDc5RDRDRkZCRkRGODEwMjRDQTFCNDhDQUI3N0JENTE2NjY1 Ny5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2RhYjc2YzZiLTBlODYtNGEwMy1hNTlhLWYzZmM3N2Ri YmE2Mi9lOWZhYzE0NjcyMTIyYmRkZmM3YTEyNzg5ODBkNjk1YzYwOWQ1ZWFlZWRi MGRmMjQ1MC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTEvMzIzNjMwMzUzYTM5NjMzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDMzMzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUJwDANBgkq hkiG9w0BAQsFAAOCAQEAGfY5U7LdasS6VflXui3vvIagDVfQtJ9rBCZGCNXX87zw a/ltcU/19mvg88ycQuNSpIPht6pJqbsDeqAqdvYPOpLZajzUKflGC7/X7kTqAAZZ K54ugK8qJzHh0WXBR8y0rIiqa90wwSzhLFcLlJxai7xJAfJb3sSyU9SQEA5QdmW+ 3cJme6fmI3lED/uIlJqkB4oQyBculRIWWgBNmviXFPOhonzNd4/T9xk+Laqu86dN Rev+IAeDpLujx+6t+Ns0BMcF4mP9HhV/ZK5wy6swYrYbMtBLoHTN9Ro/2aDtWX6A H1QkNiGNwVJ33pRD8zkWvhUynYYy7VElGSkdC3BdPw== -----END CERTIFICATE-----Generated at Sun Jul 12 08:31:42 2026 by rpki-client