$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2034373835.roa File: 323630343a656234303a3a2f33322d3438203d3e2034373835.roa (raw, json) Hash identifier: hkynmaVjSV7Kkxsmh84RfGlcDhTRN3+eHugCXHa7dxQ= Subject key identifier: E5:4D:A5:5C:A8:F6:75:2C:2B:B2:1B:9B:A7:9E:FE:CA:5F:70:F8:99 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 067F34618FECD120CF615F35E7956FA39C111414 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2034373835.roa Signing time: Thu 02 Jul 2026 11:29:53 +0000 ROA not before: Thu 02 Jul 2026 11:24:53 +0000 ROA not after: Thu 01 Jul 2027 11:29:53 +0000 asID: 4785 IP address blocks: 2604:eb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 01:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7f:34:61:8f:ec:d1:20:cf:61:5f:35:e7:95:6f:a3:9c:11:14:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jul 2 11:24:53 2026 GMT Not After : Jul 1 11:29:53 2027 GMT Subject: CN=E54DA55CA8F6752C2BB21B9BA79EFECA5F70F899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0e:78:f1:93:c8:58:cf:b9:93:85:b9:ea:a7: 64:c2:aa:af:5e:a5:36:b8:bc:ba:ae:f9:50:4d:5c: 41:db:3e:f8:ad:bb:f6:ca:c9:92:a6:48:df:cb:0a: 06:f5:52:97:67:df:6a:d7:87:c7:f8:b4:55:c5:bb: 47:67:ec:e0:5d:b3:a5:84:88:a0:e4:8a:c4:ff:df: fa:1a:0c:35:ef:21:d9:89:2b:bd:5b:d5:4f:27:86: 63:8c:cc:fd:83:72:31:8e:a1:62:78:a8:7e:00:1e: c2:3e:d5:40:3f:72:a2:7d:b6:fc:7b:51:96:4e:f5: 19:5f:09:01:7a:24:e2:d6:19:07:88:84:79:7a:ae: c9:5b:b0:8b:ee:dd:fb:3b:ef:65:a1:7a:7d:e5:cd: 5b:ac:33:62:5c:ce:ff:9b:14:b9:a0:70:bc:e3:c6: 71:e4:50:63:0f:82:2c:d5:ad:e1:96:9c:41:37:35: a0:ce:db:f1:6d:3d:ff:61:59:65:b2:9b:45:a7:91: 18:86:4d:13:69:c0:53:f9:dd:9c:9c:41:5b:0f:e4: 8b:eb:f4:4d:19:46:be:08:4c:83:5e:db:62:61:7c: a7:48:3a:df:8d:98:ad:51:58:bc:bd:d8:4b:6d:63: 1a:55:1c:a2:22:b2:41:f7:a2:ff:8f:2f:38:53:66: 4a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:A5:5C:A8:F6:75:2C:2B:B2:1B:9B:A7:9E:FE:CA:5F:70:F8:99 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:eb40::/32 Signature Algorithm: sha256WithRSAEncryption 15:c1:76:bf:de:c5:a8:2d:1b:fb:ec:79:2c:9b:ec:be:09:97: a9:3c:b9:6b:7c:03:b4:24:8e:fd:6d:ab:77:e9:c5:61:40:a9: 69:2d:72:e7:b2:a7:75:67:79:66:9f:65:bb:b1:13:81:64:c9: 5a:c5:fd:02:d0:cc:13:b7:ed:b4:be:56:47:2f:c8:cf:5a:05: b7:af:a1:53:55:c6:71:9b:28:63:db:2e:9d:4d:ab:50:30:93: 79:a0:bb:6a:de:cd:d5:b7:93:2a:a2:6c:97:f0:94:d2:e9:3d: e6:95:9a:d6:1d:9f:68:cf:bd:58:43:62:ea:b1:70:43:53:89: 95:e6:dc:bd:4a:aa:e9:03:a9:6a:b7:18:5c:04:60:bb:ef:6b: ae:bf:1b:98:0c:c1:b8:68:d1:07:9c:6a:a1:90:46:c1:9f:d4: 65:f4:c1:67:c9:30:2a:96:73:6b:f4:19:f4:d5:ee:d8:8a:04: d5:2c:17:d1:ed:e1:45:8a:81:95:52:36:f6:f4:12:d2:e0:62: d3:7f:51:2e:44:d4:05:eb:30:d6:4e:52:8c:fb:76:1a:39:8b: 2c:ce:56:ea:f5:ad:a1:9a:f9:31:86:6c:cc:94:62:6d:4c:58: 60:8d:d4:c4:ff:a1:c3:db:2c:ef:bb:eb:c3:48:11:dd:42:85: 55:6f:3f:81 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUBn80YY/s0SDPYV8155Vvo5wRFBQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNzAyMTEyNDUzWhcNMjcwNzAxMTEyOTUz WjAzMTEwLwYDVQQDEyhFNTREQTU1Q0E4RjY3NTJDMkJCMjFCOUJBNzlFRkVDQTVG NzBGODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg548ZPIWM+5 k4W56qdkwqqvXqU2uLy6rvlQTVxB2z74rbv2ysmSpkjfywoG9VKXZ99q14fH+LRV xbtHZ+zgXbOlhIig5IrE/9/6Ggw17yHZiSu9W9VPJ4ZjjMz9g3IxjqFieKh+AB7C PtVAP3Kifbb8e1GWTvUZXwkBeiTi1hkHiIR5eq7JW7CL7t37O+9loXp95c1brDNi XM7/mxS5oHC848Zx5FBjD4Is1a3hlpxBNzWgztvxbT3/YVllsptFp5EYhk0TacBT +d2cnEFbD+SL6/RNGUa+CEyDXttiYXynSDrfjZitUVi8vdhLbWMaVRyiIrJB96L/ jy84U2ZKBQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFOVNpVyo9nUsK7Ibm6ee/spf cPiZMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOtAMA0G CSqGSIb3DQEBCwUAA4IBAQAVwXa/3sWoLRv77Hksm+y+CZepPLlrfAO0JI79bat3 6cVhQKlpLXLnsqd1Z3lmn2W7sROBZMlaxf0C0MwTt+20vlZHL8jPWgW3r6FTVcZx myhj2y6dTatQMJN5oLtq3s3Vt5MqomyX8JTS6T3mlZrWHZ9oz71YQ2LqsXBDU4mV 5ty9SqrpA6lqtxhcBGC772uuvxuYDMG4aNEHnGqhkEbBn9Rl9MFnyTAqlnNr9Bn0 1e7YigTVLBfR7eFFioGVUjb29BLS4GLTf1EuRNQF6zDWTlKM+3YaOYsszlbq9a2h mvkxhmzMlGJtTFhgjdTE/6HD2yzvu+vDSBHdQoVVbz+B -----END CERTIFICATE-----Generated at Sun Jul 12 08:30:11 2026 by rpki-client