$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2033323538.roa File: 323630343a656234303a3a2f33322d3438203d3e2033323538.roa (raw, json) Hash identifier: woyxCcNJI7fsr34kVoF8NWqcANCeOXTcnZy/yxfcGEw= Subject key identifier: D0:C9:AE:63:C5:40:4B:94:75:87:67:FA:B4:3C:E8:09:A2:1D:92:D1 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 3A6E32DE5CE9951917D70E1771748723103D069C Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2033323538.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 3258 IP address blocks: 2604:eb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 01:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6e:32:de:5c:e9:95:19:17:d7:0e:17:71:74:87:23:10:3d:06:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=D0C9AE63C5404B94758767FAB43CE809A21D92D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:bf:8e:be:7c:2a:ae:b2:05:87:e3:86:60: cd:8e:9e:a5:03:fe:e1:b1:64:0c:62:ef:20:ce:d1: 33:77:c6:bf:b0:cf:f1:02:99:81:83:06:b6:99:22: 2f:7a:af:b1:67:1c:e9:10:66:1b:fb:8d:9d:37:6e: 3e:e5:99:04:88:90:24:82:93:90:60:ca:35:1a:03: cc:bf:a5:98:0a:78:2f:a0:f8:63:0d:3b:75:09:f6: af:a0:a8:0b:d6:fc:5e:f5:d5:c8:03:f4:03:b4:41: 39:96:eb:10:ea:34:c8:70:ad:dd:aa:40:4f:03:b7: f5:3a:be:3e:70:41:2b:56:26:e9:06:b4:10:b9:4f: c7:2d:6b:f8:94:83:9a:29:13:98:a2:02:ae:5b:ba: 77:ee:22:44:72:ba:30:f7:e4:42:08:97:33:c8:a1: e4:a1:e8:86:9f:e5:27:f0:02:85:bd:66:61:c5:f8: 0f:31:d9:6f:53:05:14:dc:ea:2e:15:f4:db:6a:79: 2b:0c:a1:d4:ff:3a:ad:cc:d5:d2:30:b3:c6:21:ef: 6f:f6:d1:ba:6c:5a:7e:0d:f2:a4:04:fc:e4:c1:2a: 88:06:9a:ec:80:3a:ab:3c:56:c4:79:64:f8:1d:b6: 32:4a:1e:f7:75:78:aa:bd:d6:05:e9:f4:a9:19:fa: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C9:AE:63:C5:40:4B:94:75:87:67:FA:B4:3C:E8:09:A2:1D:92:D1 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:eb40::/32 Signature Algorithm: sha256WithRSAEncryption 2c:3a:a9:cd:2a:85:b5:2d:66:06:71:72:f2:f8:16:3d:0a:23: fd:42:2f:83:d0:ee:28:27:13:e9:85:cf:03:b3:94:8d:8c:3a: 1b:78:2e:46:f3:a1:04:f1:ef:a2:ea:21:50:ee:42:fe:df:90: 91:62:94:5d:20:de:20:9c:0e:dc:e4:a6:9c:aa:3b:dd:08:75: c9:5f:57:2c:39:11:69:d1:bc:6a:46:4f:74:c9:48:3b:95:c2: ec:e0:c4:a5:20:ec:56:41:ac:e4:fa:9f:06:01:64:b5:58:92: b3:e2:6a:60:bc:04:c8:cc:b2:1f:0e:49:27:3b:e6:8a:b3:ca: 12:99:e2:21:56:f0:7c:cd:26:86:e0:08:56:5c:18:98:87:f8: 4b:d4:3d:32:44:51:f4:a2:43:09:87:07:83:12:91:fa:64:b3: 58:78:ee:36:ac:44:9e:b3:a6:99:38:1d:ae:27:32:4c:1e:7d: 8e:9d:d7:78:da:c8:eb:a1:aa:c9:b0:7d:ba:5e:f1:66:ae:2e: f3:cd:95:5e:cd:9f:1d:60:5f:58:c6:1f:e4:52:6f:09:fb:5b: 3d:13:37:75:23:13:72:eb:ba:fa:df:d8:78:aa:23:32:1a:b4: cf:e5:d9:13:08:cc:68:df:f1:d3:e3:6b:f2:fc:de:35:8d:98: c8:6f:c7:e3 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUOm4y3lzplRkX1w4XcXSHIxA9BpwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNzAyMTAzMDQ4WhcNMjcwNzAxMTAzNTQ4 WjAzMTEwLwYDVQQDEyhEMEM5QUU2M0M1NDA0Qjk0NzU4NzY3RkFCNDNDRTgwOUEy MUQ5MkQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJu/jr58Kq6y BYfjhmDNjp6lA/7hsWQMYu8gztEzd8a/sM/xApmBgwa2mSIveq+xZxzpEGYb+42d N24+5ZkEiJAkgpOQYMo1GgPMv6WYCngvoPhjDTt1CfavoKgL1vxe9dXIA/QDtEE5 lusQ6jTIcK3dqkBPA7f1Or4+cEErVibpBrQQuU/HLWv4lIOaKROYogKuW7p37iJE crow9+RCCJczyKHkoeiGn+Un8AKFvWZhxfgPMdlvUwUU3OouFfTbankrDKHU/zqt zNXSMLPGIe9v9tG6bFp+DfKkBPzkwSqIBprsgDqrPFbEeWT4HbYySh73dXiqvdYF 6fSpGfqyxwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFNDJrmPFQEuUdYdn+rQ86Ami HZLRMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOtAMA0G CSqGSIb3DQEBCwUAA4IBAQAsOqnNKoW1LWYGcXLy+BY9CiP9Qi+D0O4oJxPphc8D s5SNjDobeC5G86EE8e+i6iFQ7kL+35CRYpRdIN4gnA7c5KacqjvdCHXJX1csORFp 0bxqRk90yUg7lcLs4MSlIOxWQazk+p8GAWS1WJKz4mpgvATIzLIfDkknO+aKs8oS meIhVvB8zSaG4AhWXBiYh/hL1D0yRFH0okMJhweDEpH6ZLNYeO42rESes6aZOB2u JzJMHn2Ondd42sjroarJsH26XvFmri7zzZVezZ8dYF9Yxh/kUm8J+1s9Ezd1IxNy 67r639h4qiMyGrTP5dkTCMxo3/HT42vy/N41jZjIb8fj -----END CERTIFICATE-----Generated at Sun Jul 12 08:31:00 2026 by rpki-client