$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2038383838.roa File: 323630343a656234303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: vuzbdbY36pIgRieVEFYVXU+9Dax4qL1N8+yQwZEEPLE= Subject key identifier: BA:CE:DF:6D:BB:81:9D:E6:8F:15:94:0D:A1:BA:F7:70:5C:20:43:B8 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 75B5DBE34217017A52F7B8B7C25A84E1A1F02DA2 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 8888 IP address blocks: 2604:eb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 01:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b5:db:e3:42:17:01:7a:52:f7:b8:b7:c2:5a:84:e1:a1:f0:2d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=BACEDF6DBB819DE68F15940DA1BAF7705C2043B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:fa:ea:06:60:46:b2:76:f9:ed:6c:4b:c2: 57:52:08:90:e5:31:0f:a0:a9:ee:41:6f:c0:30:03: 6f:64:9e:9d:0c:40:c0:d0:62:c9:cf:bf:72:58:3f: 3b:a8:ba:be:c6:fc:8d:b9:78:03:db:a2:a1:41:67: af:75:0c:88:91:b3:e5:67:06:02:12:b2:d4:e1:1e: b7:af:02:08:ad:8c:cd:4c:4d:1e:01:ff:ee:1f:e9: c5:28:54:dd:8b:a8:cc:7c:c2:a8:a6:80:b1:4e:6b: 0a:cf:49:6e:94:13:9a:2d:98:08:60:3f:ae:de:88: 77:9c:94:1e:05:38:23:ff:33:4a:66:9b:5f:9a:22: 3a:ba:c8:3b:e2:7f:0f:6c:d8:81:a0:d5:70:2a:82: 67:c3:67:f5:3f:aa:8c:27:be:6b:7c:83:ee:50:2f: 1a:91:8a:73:a5:3c:2a:94:2c:53:45:e0:70:f7:1c: 4f:1a:94:d2:33:80:49:4a:c3:f5:02:ca:a7:6b:27: 64:27:d0:3b:e0:5d:dc:1d:1e:b4:05:9d:fb:7a:d6: be:78:fe:d1:36:39:d9:fb:5c:aa:3b:a0:a6:cb:5a: b0:c6:87:00:27:a3:8b:ad:61:a4:67:77:cf:22:f4: a8:44:d1:a6:ca:93:2a:8c:6a:19:86:e8:2a:53:e6: d9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CE:DF:6D:BB:81:9D:E6:8F:15:94:0D:A1:BA:F7:70:5C:20:43:B8 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:eb40::/32 Signature Algorithm: sha256WithRSAEncryption ac:31:bc:c4:41:57:2f:02:23:5f:a7:c4:94:8a:aa:44:22:51: cb:4a:f7:ab:4a:9f:c2:e7:61:a0:8e:c8:7f:96:1c:c7:cf:26: 71:a3:4f:a2:67:6f:5e:1b:9d:c0:5e:3f:56:d4:ae:7d:a0:7a: 19:1b:a6:f1:d2:a2:b9:23:f6:5f:10:7c:4a:20:77:bc:9b:7d: 2b:5b:8a:a4:ec:10:b0:d2:3e:a3:47:04:d8:be:be:85:e0:7e: c0:be:7d:0c:a6:77:c8:67:63:be:77:15:aa:89:4e:94:88:1a: 02:e0:5a:a2:b9:d6:df:43:e1:73:c1:aa:f6:50:37:9f:3e:14: 49:cf:85:bd:86:32:6e:3e:82:27:55:ca:a9:cd:10:04:08:c2: be:77:dd:fa:8e:09:0a:74:a8:08:0c:db:1c:2c:75:5f:95:74: f5:a4:c7:98:ae:ec:7b:e1:83:d2:e4:ba:61:62:e2:c9:5b:2a: c2:15:3d:c5:7f:8d:7f:a9:a0:a9:19:5d:3e:37:74:26:2d:f9: 4f:1c:79:11:52:57:64:62:e1:bf:9d:79:ae:cf:50:fe:b1:31: 55:15:5a:b9:04:80:c2:80:5c:66:0d:7f:a5:60:25:f7:2a:d3: 8b:62:87:bc:5c:d5:f0:96:61:6e:59:a2:21:af:3f:7a:46:f1: 25:3a:89:bc -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUdbXb40IXAXpS97i3wlqE4aHwLaIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNzAyMTAzMDQ4WhcNMjcwNzAxMTAzNTQ4 WjAzMTEwLwYDVQQDEyhCQUNFREY2REJCODE5REU2OEYxNTk0MERBMUJBRjc3MDVD MjA0M0I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9366gZgRrJ2 +e1sS8JXUgiQ5TEPoKnuQW/AMANvZJ6dDEDA0GLJz79yWD87qLq+xvyNuXgD26Kh QWevdQyIkbPlZwYCErLU4R63rwIIrYzNTE0eAf/uH+nFKFTdi6jMfMKopoCxTmsK z0lulBOaLZgIYD+u3oh3nJQeBTgj/zNKZptfmiI6usg74n8PbNiBoNVwKoJnw2f1 P6qMJ75rfIPuUC8akYpzpTwqlCxTReBw9xxPGpTSM4BJSsP1AsqnaydkJ9A74F3c HR60BZ37eta+eP7RNjnZ+1yqO6Cmy1qwxocAJ6OLrWGkZ3fPIvSoRNGmypMqjGoZ hugqU+bZRwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFLrO3227gZ3mjxWUDaG693Bc IEO4MB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOtAMA0G CSqGSIb3DQEBCwUAA4IBAQCsMbzEQVcvAiNfp8SUiqpEIlHLSverSp/C52Ggjsh/ lhzHzyZxo0+iZ29eG53AXj9W1K59oHoZG6bx0qK5I/ZfEHxKIHe8m30rW4qk7BCw 0j6jRwTYvr6F4H7Avn0MpnfIZ2O+dxWqiU6UiBoC4FqiudbfQ+Fzwar2UDefPhRJ z4W9hjJuPoInVcqpzRAECMK+d936jgkKdKgIDNscLHVflXT1pMeYrux74YPS5Lph YuLJWyrCFT3Ff41/qaCpGV0+N3QmLflPHHkRUldkYuG/nXmuz1D+sTFVFVq5BIDC gFxmDX+lYCX3KtOLYoe8XNXwlmFuWaIhrz96RvElOom8 -----END CERTIFICATE-----Generated at Sun Jul 12 08:30:10 2026 by rpki-client