
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323134.roa
File: 323630343a653463303a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier: ahUMMv4wKzPDojrVxUQNmD0GnTqW7TZBE0UMexj8kxs=
Subject key identifier: 5D:7A:0C:10:68:11:56:0A:6C:5A:A1:E7:B6:F9:39:70:D9:0C:A5:1E
Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial: 307F815347B40B8A61D1FF3B81A85CB2C94B2676
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323134.roa
Signing time: Thu 02 Jul 2026 10:35:49 +0000
ROA not before: Thu 02 Jul 2026 10:30:49 +0000
ROA not after: Thu 01 Jul 2027 10:35:49 +0000
asID: 3214
IP address blocks: 2604:e4c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Jul 2026 00:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:7f:81:53:47:b4:0b:8a:61:d1:ff:3b:81:a8:5c:b2:c9:4b:26:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Validity
Not Before: Jul 2 10:30:49 2026 GMT
Not After : Jul 1 10:35:49 2027 GMT
Subject: CN=5D7A0C106811560A6C5AA1E7B6F93970D90CA51E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d1:76:e4:95:88:3b:9e:9f:ae:a6:c5:04:5b:
9d:33:3a:f6:cc:c9:d0:7e:cd:fa:7f:42:df:58:cf:
b4:ec:6f:4f:a4:ab:6a:b9:68:9b:5f:f4:fe:24:b5:
9d:04:4d:43:c7:5d:a5:db:ac:16:17:8c:27:d2:fa:
d7:90:e3:02:d6:04:59:4b:7c:89:c8:9b:8a:87:c6:
c3:b6:27:61:15:82:ca:19:cf:cc:99:c3:a7:04:50:
c6:8b:27:6b:3a:63:bf:69:bd:98:da:61:f7:b7:ef:
d0:5a:07:bd:b2:38:3e:8a:34:81:11:c2:bb:12:ae:
44:e7:61:26:83:6d:0d:3a:0a:0a:b9:3f:b3:b6:ee:
69:50:fa:5d:63:53:69:c5:1f:b4:ed:4d:8b:e1:3a:
77:79:88:6b:b2:f2:f6:62:49:61:a9:be:72:5d:8e:
20:17:ff:cc:d9:84:df:4c:3e:31:8a:75:82:0a:59:
50:30:5f:95:5f:51:dd:f0:b2:f1:80:08:2b:b0:0c:
17:ba:dd:4e:4a:59:95:c6:fe:11:08:a1:31:6d:4a:
bc:11:b4:d4:e1:de:8c:1f:a2:de:b1:ea:65:22:48:
d2:78:61:40:87:c1:05:e5:6e:40:8f:12:d4:1f:ef:
49:54:e2:f5:c2:50:1d:f8:5c:a4:a4:14:d0:43:99:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7A:0C:10:68:11:56:0A:6C:5A:A1:E7:B6:F9:39:70:D9:0C:A5:1E
X509v3 Authority Key Identifier:
keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:e4c0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:6c:93:45:46:38:5d:00:1b:40:0f:48:f0:35:a9:5e:fc:21:
4a:8d:1a:96:67:78:52:bd:73:3d:9d:cc:e9:cb:a3:07:1b:79:
8d:f8:93:66:d1:a3:2c:c0:77:35:04:72:4e:1c:8d:0f:e1:de:
9a:1e:bd:8d:1d:73:5b:50:84:11:99:a6:70:2d:fd:53:da:d7:
cd:d5:9a:94:1a:2a:4e:b9:e7:04:c0:f7:59:dd:43:5f:bd:3f:
96:b9:04:e3:74:e7:2d:d7:50:4b:9b:fa:37:76:43:c7:78:e0:
af:30:b7:9b:e4:06:96:df:2c:8b:eb:32:77:c8:dd:e2:3d:72:
d6:8b:9b:64:ef:56:11:a2:ca:84:61:1c:9d:8a:f8:08:df:2e:
55:ba:bc:f2:d7:86:5b:a7:13:fd:5e:4a:5e:28:8d:9f:58:ad:
fe:9f:c3:fa:21:e1:df:0d:9f:08:b6:4a:fd:9d:75:f5:ab:65:
4c:52:da:8f:53:85:78:6a:e8:10:bd:97:e4:bb:18:f5:d8:29:
e4:0a:bc:b9:c6:7c:65:c8:2a:71:e8:50:df:13:b5:4b:2a:f4:
28:30:92:0a:4d:2c:5f:98:c5:3c:73:b1:e1:a4:2f:66:47:ca:
4c:8d:82:83:cf:e2:7b:77:05:c9:9e:95:49:7d:fe:eb:42:8d:
4e:2d:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:31:15 2026 by rpki-client