
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323034.roa
File: 323630343a653463303a3a2f33322d3438203d3e2033323034.roa (raw, json)
Hash identifier: 2U9hb4vkyW/PCbAtxmj/wAH3/850rscEwgLpd27FI8E=
Subject key identifier: 8F:D6:3F:C9:8D:8A:FA:93:88:12:9F:E1:04:75:60:09:E3:8B:76:6E
Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial: 7F4D9F1CED4D1C9690EB0800A60AB36E82657637
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323034.roa
Signing time: Thu 02 Jul 2026 10:35:49 +0000
ROA not before: Thu 02 Jul 2026 10:30:49 +0000
ROA not after: Thu 01 Jul 2027 10:35:49 +0000
asID: 3204
IP address blocks: 2604:e4c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Jul 2026 00:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:4d:9f:1c:ed:4d:1c:96:90:eb:08:00:a6:0a:b3:6e:82:65:76:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Validity
Not Before: Jul 2 10:30:49 2026 GMT
Not After : Jul 1 10:35:49 2027 GMT
Subject: CN=8FD63FC98D8AFA9388129FE104756009E38B766E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:af:d8:2f:74:d9:7c:c8:a0:51:40:5d:51:
33:dc:12:5a:c8:26:c8:f7:aa:1c:c2:a8:c0:5f:32:
5a:00:a7:0a:f0:61:b0:19:71:a1:20:b6:f2:35:b5:
6c:e6:30:0f:82:b3:b1:da:a2:1a:d2:7d:d6:bd:6f:
5a:28:ac:f4:09:df:55:29:ab:30:c9:a2:76:3e:38:
91:0e:bc:da:44:05:13:f7:15:40:9f:39:36:2c:41:
f5:5f:0e:54:23:bb:17:0d:31:9f:3f:94:a8:fb:cb:
be:24:84:f8:65:a5:df:c8:46:69:fb:f1:d0:3d:1b:
d1:c6:bb:20:ba:53:c7:e1:a4:92:6e:d2:cd:0a:1d:
15:b3:bb:fa:54:7f:0d:a6:a5:79:39:a9:57:e4:4f:
63:8f:38:df:cc:1c:74:75:b9:8e:64:21:ba:6c:1c:
7c:b1:18:02:bb:c8:36:3b:b0:fc:3a:ec:40:27:5e:
25:02:a9:54:cf:a6:5a:96:bd:96:11:fa:13:6c:c2:
52:29:56:f0:b3:98:07:9f:7b:19:84:10:0b:5c:8e:
af:a1:fc:56:fd:d3:f8:9e:f4:49:d5:da:47:72:2e:
25:4a:18:dc:d9:74:82:f4:fd:65:96:03:20:84:3e:
63:9d:f8:c8:b3:a5:04:93:bf:31:d1:02:b2:55:e3:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D6:3F:C9:8D:8A:FA:93:88:12:9F:E1:04:75:60:09:E3:8B:76:6E
X509v3 Authority Key Identifier:
keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:e4c0::/32
Signature Algorithm: sha256WithRSAEncryption
07:dc:19:65:4d:2c:14:79:69:b4:ca:2b:d9:03:14:f9:69:f0:
1e:47:8f:85:07:6b:87:25:7d:51:6e:07:0c:de:35:3e:da:5d:
c9:db:60:13:87:d7:4d:f6:c9:72:01:ff:61:c6:42:ce:d0:a3:
45:b6:00:a0:6c:61:96:01:9a:d7:cd:38:5d:1b:a8:bc:55:61:
56:0b:0f:ec:7f:25:92:9b:ce:16:d7:00:a3:9c:b9:d6:2b:b0:
0c:1c:84:43:12:85:bc:19:e0:0d:0d:a9:ce:8e:b5:eb:fe:7b:
31:d5:c8:83:04:39:25:e3:1e:a7:73:cf:e2:f4:34:cd:48:58:
86:54:6c:04:90:d9:03:be:27:5b:3f:c7:58:af:80:eb:4e:7e:
03:30:a7:df:a8:95:a4:ee:86:a8:f4:87:37:e9:8a:ea:9d:e5:
9c:0d:40:fd:3a:52:98:99:61:9c:8b:29:23:c4:d7:e7:ba:47:
62:b9:51:a7:44:d4:02:a8:c8:bf:aa:31:ba:78:8a:37:e9:a3:
7d:b5:b3:e1:a0:f3:d0:be:f2:c4:c2:32:06:f9:12:53:d0:22:
87:1d:52:43:63:c4:8d:ca:80:24:71:e5:55:e8:d4:cf:bb:70:
89:47:a0:3a:23:3c:ed:40:19:a3:57:bb:cd:86:5e:37:d6:4d:
80:c9:44:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:31:40 2026 by rpki-client