
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2033323034.roa
File: 323630343a656234303a3a2f33322d3438203d3e2033323034.roa (raw, json)
Hash identifier: 3pwNews3uMNMCidBav91ANIbsjSMyNfG4jIB5sU0Fq4=
Subject key identifier: 70:65:81:9F:B6:B0:77:D6:B6:57:21:71:18:57:2A:BC:0D:8A:06:12
Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Certificate serial: 32432616376454FCBDD7BBDFD877052BEDCDB033
Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2033323034.roa
Signing time: Thu 02 Jul 2026 10:35:48 +0000
ROA not before: Thu 02 Jul 2026 10:30:48 +0000
ROA not after: Thu 01 Jul 2027 10:35:48 +0000
asID: 3204
IP address blocks: 2604:eb40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Jul 2026 01:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:43:26:16:37:64:54:fc:bd:d7:bb:df:d8:77:05:2b:ed:cd:b0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf
Validity
Not Before: Jul 2 10:30:48 2026 GMT
Not After : Jul 1 10:35:48 2027 GMT
Subject: CN=7065819FB6B077D6B657217118572ABC0D8A0612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:7a:d1:23:9b:94:9a:97:36:16:af:25:f9:
9b:22:d7:a4:bd:bf:bd:1a:f9:c6:2d:45:ee:08:f9:
4d:03:dd:84:cd:3d:78:6a:90:aa:c0:86:21:a7:8b:
48:d4:7a:30:77:c8:f2:ca:c4:d9:b9:cb:74:ee:d2:
11:93:4f:b0:e6:c5:06:96:d7:71:b8:49:1a:11:5d:
a0:84:9e:fa:53:c3:d7:4e:1d:d3:e7:2f:04:8c:4a:
8c:0d:2e:b1:2c:6c:50:97:e9:c7:b7:c3:54:0f:2d:
75:4a:7a:99:5b:52:6f:d7:b8:1f:04:cd:cd:57:13:
c4:ef:2a:11:86:92:53:db:c1:b3:8e:38:05:da:b3:
26:25:75:81:c3:ff:79:30:01:55:e7:45:aa:63:f8:
40:0f:61:e1:be:60:9f:dd:bf:c5:f6:77:be:29:0e:
a9:d6:5c:92:76:a7:d0:f3:3b:41:da:a1:c5:3e:48:
1d:5e:84:1a:fa:48:2e:e3:e2:16:5f:0b:79:4a:5f:
53:fa:fb:91:d2:aa:20:e2:96:84:02:51:8c:e9:9f:
70:30:ae:a0:1f:4c:0a:2c:6e:4b:79:24:ed:71:99:
d7:b3:16:71:3c:25:8b:b3:d3:e0:61:37:8b:ad:30:
b2:7b:28:76:8c:f5:b2:50:b8:f1:60:4d:cb:82:4c:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:65:81:9F:B6:B0:77:D6:B6:57:21:71:18:57:2A:BC:0D:8A:06:12
X509v3 Authority Key Identifier:
keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2033323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:eb40::/32
Signature Algorithm: sha256WithRSAEncryption
bd:d9:db:38:6e:19:7c:cb:66:44:5f:4f:02:fe:0c:c9:a6:2e:
54:b5:f2:46:28:fd:7f:0b:8f:ad:7e:c9:06:60:94:8e:83:88:
06:c3:89:61:54:fe:a1:b6:73:ba:c9:b9:6d:2d:2a:46:40:e1:
bd:e7:41:b0:20:9c:ea:bf:65:51:5b:ca:fa:2e:01:c1:1f:d6:
8e:10:a9:9f:c4:be:13:d0:aa:ea:82:eb:ca:d2:07:26:6e:06:
59:4e:a2:a2:4d:99:8f:d2:d5:9a:24:bd:37:1e:b9:b0:76:9d:
38:31:f8:a7:93:87:55:60:66:bc:2d:03:b2:80:e7:27:1c:7a:
8a:1f:9f:a1:0e:50:53:03:a7:11:fd:e4:c9:0e:6c:7a:9e:5e:
b5:12:e4:f4:ac:0b:46:c1:19:12:ee:a6:c1:cb:ce:52:a5:ed:
b1:30:02:ee:4b:92:9a:7c:37:61:a6:b4:3c:50:f1:86:40:e9:
00:97:a8:7e:2c:ec:8e:b5:ac:87:72:bf:2c:a1:ef:5b:e3:1e:
2d:9d:9f:5a:16:ab:41:22:11:bb:ad:68:55:ad:82:36:1d:b3:
d8:69:e9:68:6d:83:40:e1:c7:e5:9a:03:60:06:6d:e9:e5:82:
5c:f7:87:31:0d:e7:d8:c5:f2:17:f3:ab:59:1d:a1:2f:7f:3e:
b5:d2:2c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:31:41 2026 by rpki-client