
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/32332e3134312e33322e302f32342d3234203d3e203131393330.roa
File: 32332e3134312e33322e302f32342d3234203d3e203131393330.roa (raw, json)
Hash identifier: jPrKSdXxBBPj+iE7U4Bq2l2Kah5T9CEu+L30wPL22aU=
Subject key identifier: 30:71:4B:F8:31:ED:BD:47:1C:F8:C2:1B:24:9C:DF:D3:40:4E:A1:F0
Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial: 580A449B3C242F05B0D199A60DDBA831F1DE88E1
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/32332e3134312e33322e302f32342d3234203d3e203131393330.roa
Signing time: Thu 09 Jul 2026 17:56:14 +0000
ROA not before: Thu 09 Jul 2026 17:51:14 +0000
ROA not after: Thu 08 Jul 2027 17:56:14 +0000
asID: 11930
IP address blocks: 23.141.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Jul 2026 00:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:0a:44:9b:3c:24:2f:05:b0:d1:99:a6:0d:db:a8:31:f1:de:88:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Validity
Not Before: Jul 9 17:51:14 2026 GMT
Not After : Jul 8 17:56:14 2027 GMT
Subject: CN=30714BF831EDBD471CF8C21B249CDFD3404EA1F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:56:34:20:82:34:04:cf:65:aa:92:f6:60:
4e:43:60:8b:73:2f:7e:06:3e:25:07:6c:40:d7:e5:
8a:f7:83:60:cf:d4:3d:e2:17:fb:5f:37:43:48:5e:
09:7d:f8:0a:da:d5:be:a2:a0:71:ce:9d:bc:48:79:
28:79:23:e9:2d:74:8d:ec:01:af:61:a3:93:29:1f:
cf:b4:90:fa:17:15:df:d4:01:85:7d:51:61:04:b1:
58:fc:3c:a4:f7:a4:09:a8:cf:09:57:5c:7b:59:a9:
60:3e:8e:bd:48:18:1b:61:cd:50:da:62:03:11:37:
8d:b9:d4:40:ba:52:24:c8:eb:fc:63:73:a9:e3:74:
f2:bf:8b:22:bf:33:b4:37:52:5f:5e:25:94:7e:18:
1f:13:96:c6:54:10:a3:a1:cd:63:bb:f1:86:38:97:
dc:48:0a:77:82:33:9a:cb:6e:77:6c:e7:09:95:9f:
11:57:ec:f2:61:a5:8f:f5:b6:ca:39:f3:b2:84:95:
94:41:e7:df:60:31:ad:49:99:76:a5:bf:60:7c:e8:
c4:f1:6e:16:e9:7d:5d:0a:fc:77:5a:6e:ac:3b:0e:
e3:cd:33:5e:90:9b:ce:cf:f7:ed:ba:c5:97:d2:2a:
b2:ec:db:9e:be:d4:e9:80:25:b6:25:63:34:f0:80:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:71:4B:F8:31:ED:BD:47:1C:F8:C2:1B:24:9C:DF:D3:40:4E:A1:F0
X509v3 Authority Key Identifier:
keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/32332e3134312e33322e302f32342d3234203d3e203131393330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.141.32.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:67:03:22:5c:6b:9f:0a:29:d1:ee:84:48:0a:5a:fe:fa:c8:
5b:7b:71:aa:5f:94:ac:e9:a5:ee:41:42:d6:ea:bf:5c:e9:de:
0b:cd:3f:ce:9b:1c:30:ad:e7:18:52:d2:79:e0:03:90:4a:c3:
f7:c9:bb:b4:d8:3b:b6:ff:1d:2f:1c:e5:19:12:14:0e:a1:2a:
04:7e:0d:63:ed:e2:69:85:2b:ec:74:9e:23:ca:2d:ed:1a:6e:
d0:35:b2:7a:c4:96:e3:e3:af:2c:51:b4:06:ff:0a:4a:03:95:
bd:01:b4:68:41:74:2a:8f:e0:8a:bd:49:17:a9:ff:11:c8:f5:
54:99:f5:43:18:13:f6:a9:9e:90:07:45:be:9c:68:0b:1d:48:
bc:63:f7:8c:d8:73:fc:f5:61:58:e0:d8:1c:72:de:6f:a6:57:
7b:ff:b4:f5:5d:6d:42:97:da:3e:f3:be:a3:ef:d8:cd:5b:8b:
4a:85:3d:ad:08:00:f6:aa:62:67:4e:e6:66:61:5d:39:ef:a7:
15:6e:b7:cf:69:e5:92:d7:e3:d9:6f:4c:b8:cf:e8:31:26:5a:
79:30:59:ed:5c:fd:97:cf:c2:a5:14:28:a5:6c:cc:5e:49:73:
87:04:85:fd:93:b0:d3:cf:30:e6:2d:0d:01:c0:20:55:d4:93:
e3:f7:1a:39
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUWApEmzwkLwWw0ZmmDduoMfHeiOEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh
N2NmZjE3MzliMDI3YzY0MGIwHhcNMjYwNzA5MTc1MTE0WhcNMjcwNzA4MTc1NjE0
WjAzMTEwLwYDVQQDEygzMDcxNEJGODMxRURCRDQ3MUNGOEMyMUIyNDlDREZEMzQw
NEVBMUYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPFWNCCCNATP
ZaqS9mBOQ2CLcy9+Bj4lB2xA1+WK94Ngz9Q94hf7XzdDSF4JffgK2tW+oqBxzp28
SHkoeSPpLXSN7AGvYaOTKR/PtJD6FxXf1AGFfVFhBLFY/Dyk96QJqM8JV1x7Walg
Po69SBgbYc1Q2mIDETeNudRAulIkyOv8Y3Op43Tyv4sivzO0N1JfXiWUfhgfE5bG
VBCjoc1ju/GGOJfcSAp3gjOay253bOcJlZ8RV+zyYaWP9bbKOfOyhJWUQeffYDGt
SZl2pb9gfOjE8W4W6X1dCvx3Wm6sOw7jzTNekJvOz/ftusWX0iqy7NuevtTpgCW2
JWM08ICBXwIDAQABo4ICXjCCAlowHQYDVR0OBBYEFDBxS/gx7b1HHPjCGySc39NA
TqHwMB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4
MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw
MjdjNjQwYi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvMzIzMzJlMzEzNDMxMmUzMzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMTM5MzMzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeNIDAN
BgkqhkiG9w0BAQsFAAOCAQEAP2cDIlxrnwop0e6ESApa/vrIW3txql+UrOml7kFC
1uq/XOneC80/zpscMK3nGFLSeeADkErD98m7tNg7tv8dLxzlGRIUDqEqBH4NY+3i
aYUr7HSeI8ot7Rpu0DWyesSW4+OvLFG0Bv8KSgOVvQG0aEF0Ko/gir1JF6n/Ecj1
VJn1QxgT9qmekAdFvpxoCx1IvGP3jNhz/PVhWODYHHLeb6ZXe/+09V1tQpfaPvO+
o+/YzVuLSoU9rQgA9qpiZ07mZmFdOe+nFW63z2nlktfj2W9MuM/oMSZaeTBZ7Vz9
l8/CpRQopWzMXklzhwSF/ZOw088w5i0NAcAgVdST4/caOQ==
-----END CERTIFICATE-----
Generated at Sun Jul 12 08:35:04 2026 by rpki-client