$ rpki-client -vvf rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2038383838.roa File: 323630353a3963303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: tgHKYVhnAOAcNozuDUr9A7j41lMt8bbwSg6uDBtF2CQ= Subject key identifier: 8D:0B:25:4F:8D:B9:79:7F:05:2F:46:97:C8:A7:3F:BD:B5:A4:CD:2E Certificate issuer: /CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450 Certificate serial: 15AEB5EF9A168299E2B91554B40034A4EC46709F Authority key identifier: 51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 8888 IP address blocks: 2605:9c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 01:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ae:b5:ef:9a:16:82:99:e2:b9:15:54:b4:00:34:a4:ec:46:70:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450 Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=8D0B254F8DB9797F052F4697C8A73FBDB5A4CD2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9c:34:44:87:69:ff:d2:5c:40:bd:45:29:96: db:e0:32:f8:9e:c3:e3:8a:de:bc:80:87:ae:cf:8c: 22:f2:47:1c:12:08:69:97:c8:10:49:0b:07:dd:2f: 93:8c:3c:67:ff:5d:46:ab:0c:1d:49:77:22:f3:a8: 0d:2d:f6:89:24:2d:c5:96:dd:de:62:cc:ad:70:1c: f9:a2:90:65:d9:7c:01:3b:4d:5b:16:e4:b8:b9:76: 61:9b:1d:bd:f0:08:34:f5:82:c0:16:3b:b6:d9:86: 13:2f:6d:68:f1:4b:1f:73:47:98:22:9a:a9:c8:f9: 56:e5:83:d4:71:6e:39:0a:3f:74:71:e1:68:8b:f3: 98:76:24:db:06:19:70:cd:aa:c8:6d:18:4b:9a:a3: 27:31:f0:fe:d2:d6:1a:7e:a8:c3:95:36:51:93:f1: 64:11:e1:ee:83:50:95:50:8f:83:0f:31:78:54:b2: 70:49:81:00:e2:df:b3:ea:75:ca:4e:47:06:22:a7: 3c:10:b8:5a:ad:a9:a5:ac:f0:9a:18:48:72:27:4b: e5:9c:83:ed:18:0e:5a:a6:2f:ec:45:90:5e:70:9a: c2:ad:c1:b7:f9:ed:7d:84:18:7c:a7:88:10:63:9a: 1e:98:df:a4:4e:d1:8f:53:76:e5:e0:3a:b1:58:fc: 6f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0B:25:4F:8D:B9:79:7F:05:2F:46:97:C8:A7:3F:BD:B5:A4:CD:2E X509v3 Authority Key Identifier: keyid:51:30:79:D4:CF:FB:FD:F8:10:24:CA:1B:48:CA:B7:7B:D5:16:66:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/51/513079D4CFFBFDF81024CA1B48CAB77BD5166657.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/e9fac14672122bddfc7a1278980d695c609d5eaeedb0df2450.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/51/323630353a3963303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9c0::/32 Signature Algorithm: sha256WithRSAEncryption ab:a0:a2:59:39:66:fb:bd:4a:b8:52:f6:72:66:f5:f7:40:2c: 88:83:ca:0c:6f:59:b5:ee:91:a1:57:30:72:4a:16:09:dd:ec: d6:8a:5d:5d:1c:26:81:2b:96:de:fd:a6:d3:06:8c:f7:6d:df: 23:f3:fa:ac:78:c2:6a:a7:b5:00:ce:24:ba:11:e7:cb:a8:b2: 33:bc:68:16:00:d3:a7:cc:93:2d:92:f3:46:be:2f:07:89:5c: f6:00:b0:da:f0:f8:e2:ac:2c:41:16:30:d2:11:34:66:b9:ee: c4:29:62:5a:96:57:0c:33:58:f6:b3:6f:98:8e:e2:ff:2e:8b: aa:e2:07:b2:e2:e1:6a:c8:6e:2c:0d:30:c9:62:1c:25:f3:d6: 95:99:f2:60:e0:50:5f:3b:10:4c:e1:2a:3d:fb:bf:a0:63:a5: d2:39:e2:26:7e:c3:dd:34:74:d7:d8:d2:a1:62:57:e3:4f:5c: f1:31:95:b6:ab:40:c8:49:8a:90:26:6e:30:3d:ff:1f:a8:a6: 5f:41:13:b8:c6:ed:bc:a5:27:e5:e1:c0:46:73:10:fc:ba:02: ea:b6:3a:8f:18:cb:32:ff:1e:4a:06:82:25:ca:d9:70:0e:4f: 21:98:89:c0:a0:7a:d0:4b:19:53:a8:3c:9e:75:44:f9:5c:a6: 0f:1f:24:f1 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUFa6175oWgpniuRVUtAA0pOxGcJ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZTlmYWMxNDY3MjEyMmJkZGZjN2ExMjc4OTgwZDY5NWM2 MDlkNWVhZWVkYjBkZjI0NTAwHhcNMjYwNzAyMTAzMDQ4WhcNMjcwNzAxMTAzNTQ4 WjAzMTEwLwYDVQQDEyg4RDBCMjU0RjhEQjk3OTdGMDUyRjQ2OTdDOEE3M0ZCREI1 QTRDRDJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Zw0RIdp/9Jc QL1FKZbb4DL4nsPjit68gIeuz4wi8kccEghpl8gQSQsH3S+TjDxn/11GqwwdSXci 86gNLfaJJC3Flt3eYsytcBz5opBl2XwBO01bFuS4uXZhmx298Ag09YLAFju22YYT L21o8Usfc0eYIpqpyPlW5YPUcW45Cj90ceFoi/OYdiTbBhlwzarIbRhLmqMnMfD+ 0tYafqjDlTZRk/FkEeHug1CVUI+DDzF4VLJwSYEA4t+z6nXKTkcGIqc8ELharaml rPCaGEhyJ0vlnIPtGA5api/sRZBecJrCrcG3+e19hBh8p4gQY5oemN+kTtGPU3bl 4DqxWPxv4QIDAQABo4ICWzCCAlcwHQYDVR0OBBYEFI0LJU+NuXl/BS9Gl8inP721 pM0uMB8GA1UdIwQYMBaAFFEwedTP+/34ECTKG0jKt3vVFmZXMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTEvNTEzMDc5RDRDRkZCRkRGODEwMjRDQTFCNDhDQUI3N0JENTE2NjY1 Ny5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2RhYjc2YzZiLTBlODYtNGEwMy1hNTlhLWYzZmM3N2Ri YmE2Mi9lOWZhYzE0NjcyMTIyYmRkZmM3YTEyNzg5ODBkNjk1YzYwOWQ1ZWFlZWRi MGRmMjQ1MC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTEvMzIzNjMwMzUzYTM5NjMzMDNhM2Ey ZjMzMzIyZDM0MzgyMDNkM2UyMDM4MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUJwDANBgkq hkiG9w0BAQsFAAOCAQEAq6CiWTlm+71KuFL2cmb190AsiIPKDG9Zte6RoVcwckoW Cd3s1opdXRwmgSuW3v2m0waM923fI/P6rHjCaqe1AM4kuhHny6iyM7xoFgDTp8yT LZLzRr4vB4lc9gCw2vD44qwsQRYw0hE0ZrnuxCliWpZXDDNY9rNvmI7i/y6LquIH suLhashuLA0wyWIcJfPWlZnyYOBQXzsQTOEqPfu/oGOl0jniJn7D3TR019jSoWJX 409c8TGVtqtAyEmKkCZuMD3/H6imX0ETuMbtvKUn5eHARnMQ/LoC6rY6jxjLMv8e SgaCJcrZcA5PIZiJwKB60EsZU6g8nnVE+VymDx8k8Q== -----END CERTIFICATE-----Generated at Sun Jul 12 08:31:01 2026 by rpki-client