
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2034373835.roa
File: 323630353a3963303a3a2f33322d3438203d3e2034373835.roa (raw, json)
Hash identifier: TMNOBewSO4Iavtt6V6ebRHJW9CMFLXOICeGKzlQlvRU=
Subject key identifier: 02:FC:01:8E:EB:36:04:15:99:7D:A2:C1:DB:9A:62:0B:B4:99:CD:3F
Certificate issuer: /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Certificate serial: 350C26B64DD6F4B709C38994DB98455D9DF95A77
Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2034373835.roa
Signing time: Thu 02 Jul 2026 11:29:53 +0000
ROA not before: Thu 02 Jul 2026 11:24:53 +0000
ROA not after: Thu 01 Jul 2027 11:29:53 +0000
asID: 4785
IP address blocks: 2605:9c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Jul 2026 01:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0c:26:b6:4d:d6:f4:b7:09:c3:89:94:db:98:45:5d:9d:f9:5a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450
Validity
Not Before: Jul 2 11:24:53 2026 GMT
Not After : Jul 1 11:29:53 2027 GMT
Subject: CN=02FC018EEB360415997DA2C1DB9A620BB499CD3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:bf:74:0a:52:28:fc:9e:13:6a:d0:a9:c7:
f7:eb:ae:97:a4:12:cf:e1:ca:e7:bc:56:3c:5e:c9:
3f:7c:e9:b3:35:a6:e2:6e:ef:89:98:ef:56:06:8f:
86:ed:ab:60:8e:b2:e7:2d:81:f3:96:5c:69:5d:05:
dc:80:59:57:6c:db:78:ff:24:9f:10:49:81:63:62:
c4:47:9d:a5:98:41:a0:f5:23:a3:47:57:69:f7:8f:
20:45:c1:0b:6c:97:11:bf:62:e6:bc:b0:98:2a:a9:
5d:77:4b:6a:d5:a0:b1:e1:c3:c4:98:a7:07:9e:a3:
42:bb:b1:87:e1:3c:ef:45:c9:47:19:c1:7f:39:e4:
ec:fe:de:2b:b1:aa:08:6f:d6:fa:eb:c2:9c:6b:28:
fa:91:ba:d9:ea:f3:d3:b3:1a:64:c8:85:0c:e0:3f:
cc:f3:b5:6b:32:67:05:7c:85:b6:38:c3:14:4d:36:
1a:40:f0:bd:67:d9:2d:1b:53:5a:e8:06:28:a9:3f:
4e:59:94:6e:3a:a7:e9:38:b3:a2:71:2f:01:4f:da:
0c:24:8c:fb:da:99:3b:c5:75:13:a5:d3:cd:70:8a:
b2:dc:e0:66:a2:6c:87:46:df:41:80:5b:1b:31:e7:
a8:8f:91:f2:66:73:77:2d:f3:50:fa:c7:c4:a3:a0:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FC:01:8E:EB:36:04:15:99:7D:A2:C1:DB:9A:62:0B:B4:99:CD:3F
X509v3 Authority Key Identifier:
keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2034373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9c0::/32
Signature Algorithm: sha256WithRSAEncryption
98:97:e6:a7:51:02:0d:a5:bf:f6:60:2a:55:6c:1c:26:27:12:
21:fb:15:2e:04:77:8d:71:a7:74:98:7d:66:5a:96:41:8b:95:
1d:e3:f4:17:cf:49:5d:7e:4b:dd:a1:59:35:38:67:c5:1c:4a:
39:d6:b1:64:df:ff:59:b9:7b:63:f7:7e:64:13:cf:59:bc:ee:
64:48:15:d5:78:03:95:3d:6c:f7:74:b1:5c:34:f4:12:17:69:
ea:ba:a8:4c:57:37:d9:ab:a3:84:de:3b:9b:b9:5b:6c:3c:11:
38:5d:ac:16:c9:b4:b5:1f:27:9c:7b:dd:a7:93:df:c6:71:e8:
02:55:68:50:04:ca:f7:c7:d4:75:0f:3c:56:63:5d:40:ad:86:
c6:78:a8:7c:4f:89:8d:03:e3:f4:7d:c9:57:5a:d7:f4:a0:98:
8a:8e:23:cf:20:a8:dc:57:3c:ec:e6:9a:53:14:ee:5d:2c:5a:
e0:82:c4:a3:d1:47:17:6d:d8:86:b1:ea:af:1f:7b:b7:87:ba:
90:e6:b6:7e:c9:00:5a:60:16:02:e7:4e:6c:bf:ad:bd:31:de:
2d:2f:1f:e6:22:6c:17:f8:65:6c:35:7a:1e:0f:bd:0b:08:c3:
37:1e:2f:04:55:9f:e7:48:a5:0e:28:43:85:86:43:d3:19:4e:
ed:33:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:30:29 2026 by rpki-client