$ rpki-client -vvf rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2039333132.roa File: 323630343a656234303a3a2f33322d3438203d3e2039333132.roa (raw, json) Hash identifier: hbaXbNwKUKcoTstYeyInYbBkywUVrefql58zEvu6hTc= Subject key identifier: C0:F2:DA:F7:31:96:5A:D7:28:D2:59:62:F4:EA:09:83:CC:C7:67:23 Certificate issuer: /CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Certificate serial: 3FCC89C47D4B3409B58B02E463AFF071BDECDB94 Authority key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2039333132.roa Signing time: Thu 02 Jul 2026 10:35:48 +0000 ROA not before: Thu 02 Jul 2026 10:30:48 +0000 ROA not after: Thu 01 Jul 2027 10:35:48 +0000 asID: 9312 IP address blocks: 2604:eb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 01:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:cc:89:c4:7d:4b:34:09:b5:8b:02:e4:63:af:f0:71:bd:ec:db:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Validity Not Before: Jul 2 10:30:48 2026 GMT Not After : Jul 1 10:35:48 2027 GMT Subject: CN=C0F2DAF731965AD728D25962F4EA0983CCC76723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:ab:59:cb:2c:eb:10:8b:67:7e:7e:d9:a2: d7:50:df:28:e6:89:5e:94:46:73:b3:6a:70:42:b5: d4:dc:2d:a3:b3:c7:1b:c2:60:8a:7c:38:3a:59:0b: ac:53:61:64:5d:57:0a:25:53:90:2d:7b:e4:39:58: 49:93:6c:f7:b9:50:c2:7c:96:6a:ec:cd:41:85:8e: 9e:86:53:b9:dc:b5:d3:eb:c9:63:4f:01:c0:4e:98: 4d:15:5c:75:6b:91:6f:df:2f:e3:47:d5:16:9b:ba: b7:00:a4:13:c0:97:e8:75:b5:55:bb:0c:30:f0:9e: 49:ce:83:a0:cf:0f:fe:f7:5e:f6:a7:12:10:ee:2d: 29:41:42:7e:9f:cd:ea:e9:7a:26:19:ce:22:39:57: d2:b1:45:f1:1d:21:3d:43:96:23:5c:91:3a:fa:59: c3:52:09:4f:cc:64:38:22:e0:18:31:9a:65:b8:a5: 8b:ce:73:30:84:ce:2f:a0:3b:9c:59:7e:61:1f:42: 39:51:5e:1f:4f:f7:06:e4:a8:dc:73:4f:a6:fe:ca: 34:18:85:a7:6a:53:19:b0:9e:cc:26:e5:af:d1:3d: 11:55:b7:a6:27:bd:81:52:eb:30:2b:b7:c5:99:55: 52:ff:0b:2e:3c:3c:c5:b7:1a:f9:cc:59:67:2d:95: dd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F2:DA:F7:31:96:5A:D7:28:D2:59:62:F4:EA:09:83:CC:C7:67:23 X509v3 Authority Key Identifier: keyid:09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/52/323630343a656234303a3a2f33322d3438203d3e2039333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:eb40::/32 Signature Algorithm: sha256WithRSAEncryption 1b:62:7b:92:b6:4f:1b:87:42:e7:c5:6a:f1:7e:41:27:8d:3c: 18:f5:e4:0f:ab:0e:12:72:2e:39:c0:cc:14:73:73:f0:e2:79: 49:7e:a7:88:de:84:1c:68:af:fe:dd:b2:68:0c:fb:c1:83:7b: 05:93:88:fe:2e:51:cf:01:eb:3b:9a:db:e4:7f:5b:4b:29:bc: e2:3d:c5:c7:e4:08:c5:65:2f:e1:86:31:65:a4:8d:9a:73:88: 7c:7b:35:ea:45:90:ad:df:ac:11:f8:de:12:2b:0e:74:e4:6d: ff:00:b1:1c:92:65:27:67:d5:a4:a8:6e:58:df:5f:9d:dd:35: e2:ac:94:1c:75:dc:25:98:a5:78:23:cf:a3:86:50:21:68:0b: 82:1f:59:81:63:4f:68:ae:b7:f8:35:a6:77:6c:92:d7:26:12: 44:a7:6e:b1:46:ef:9c:f9:0d:d0:35:a4:01:2f:19:c5:7a:5d: 40:d8:fd:74:b1:26:8c:c0:c6:2c:6a:29:16:32:d9:b3:de:3d: 57:3a:30:97:ba:cb:6f:c2:57:61:b4:be:ca:ca:17:9e:ba:c5: 92:54:90:9d:03:b3:e5:06:a5:7c:a4:2b:88:f5:5c:0c:78:f1: 1d:d0:ee:ac:f3:71:32:f8:00:11:c5:e2:70:98:83:43:96:19: a3:ea:87:78 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUP8yJxH1LNAm1iwLkY6/wcb3s25QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3 NzFkOWVlMTMwNDU1OGZkYmYwHhcNMjYwNzAyMTAzMDQ4WhcNMjcwNzAxMTAzNTQ4 WjAzMTEwLwYDVQQDEyhDMEYyREFGNzMxOTY1QUQ3MjhEMjU5NjJGNEVBMDk4M0ND Qzc2NzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOWrWcss6xCL Z35+2aLXUN8o5olelEZzs2pwQrXU3C2js8cbwmCKfDg6WQusU2FkXVcKJVOQLXvk OVhJk2z3uVDCfJZq7M1BhY6ehlO53LXT68ljTwHATphNFVx1a5Fv3y/jR9UWm7q3 AKQTwJfodbVVuwww8J5JzoOgzw/+9172pxIQ7i0pQUJ+n83q6XomGc4iOVfSsUXx HSE9Q5YjXJE6+lnDUglPzGQ4IuAYMZpluKWLznMwhM4voDucWX5hH0I5UV4fT/cG 5Kjcc0+m/so0GIWnalMZsJ7MJuWv0T0RVbemJ72BUuswK7fFmVVS/wsuPDzFtxr5 zFlnLZXd4wIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFMDy2vcxllrXKNJZYvTqCYPM x2cjMB8GA1UdIwQYMBaAFAnSqdqPBl+ZWa6cywXf1QsjqL75MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1MEIyM0E4QkVG OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC8wZGE2NWVmMGViNjNjODc4OWRhYmRhMzk5NTFhZjEwMDc3MWQ5ZWUxMzA0 NTU4ZmRiZi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTIvMzIzNjMwMzQzYTY1NjIzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOtAMA0G CSqGSIb3DQEBCwUAA4IBAQAbYnuStk8bh0LnxWrxfkEnjTwY9eQPqw4Sci45wMwU c3Pw4nlJfqeI3oQcaK/+3bJoDPvBg3sFk4j+LlHPAes7mtvkf1tLKbziPcXH5AjF ZS/hhjFlpI2ac4h8ezXqRZCt36wR+N4SKw505G3/ALEckmUnZ9WkqG5Y31+d3TXi rJQcddwlmKV4I8+jhlAhaAuCH1mBY09orrf4NaZ3bJLXJhJEp26xRu+c+Q3QNaQB LxnFel1A2P10sSaMwMYsaikWMtmz3j1XOjCXustvwldhtL7KyheeusWSVJCdA7Pl BqV8pCuI9VwMePEd0O6s83Ey+AARxeJwmINDlhmj6od4 -----END CERTIFICATE-----Generated at Sun Jul 12 08:31:00 2026 by rpki-client