$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2036323333.roa File: 323630343a653463303a3a2f33322d3438203d3e2036323333.roa (raw, json) Hash identifier: I8AqPW3g6LLubA6mpnyrY4XaoXd5ciTjj2jTQlicl3I= Subject key identifier: 64:30:EB:5D:2C:17:C3:F3:76:B0:43:89:A1:DF:23:59:4D:36:DB:4E Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Certificate serial: 5769B42606C50DE7545327F476A084E2A41CC8AC Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2036323333.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 6233 IP address blocks: 2604:e4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 00:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:69:b4:26:06:c5:0d:e7:54:53:27:f4:76:a0:84:e2:a4:1c:c8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=6430EB5D2C17C3F376B04389A1DF23594D36DB4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:12:45:8c:13:a3:e4:da:14:76:fe:7e:6d:33: 2c:ce:1e:00:ac:a0:d5:80:ae:9a:d3:0e:6e:78:da: 44:33:28:96:48:3a:31:c6:c7:38:60:f4:a7:4b:39: 1b:16:56:ab:31:d0:f2:17:72:17:c0:dd:ff:02:27: 14:a0:74:9f:4c:6d:5c:f3:34:bf:65:3f:c2:10:ed: 8c:55:9b:f8:5e:4e:c3:49:00:e1:78:44:7a:bc:de: 1f:13:f9:7b:a1:85:d1:6a:f5:04:b8:2d:39:5b:55: e0:51:03:56:94:98:19:5c:6f:91:f6:c3:1e:c6:52: 70:9e:9f:17:76:52:03:f0:60:ab:e5:53:25:1f:08: fe:85:6e:24:80:99:9e:87:3f:30:6c:34:79:6a:71: ae:2e:fb:22:eb:f6:d5:bc:92:ed:e4:8a:95:bd:d9: 2f:a4:7d:86:d5:d4:ac:b7:d2:3c:a2:cc:53:3e:50: fc:7a:00:73:2b:75:1f:7a:f2:ec:57:35:b2:fa:b3: 0d:eb:20:ea:9e:7a:59:ca:44:9e:cf:86:f1:46:e1: 23:43:4a:a1:7d:e6:9d:96:5a:3b:4a:4c:39:35:d2: 38:62:e2:23:e9:0a:dc:56:ec:d7:bc:13:9f:ca:52: bf:43:95:81:f7:0a:fb:03:f2:12:f5:38:0a:e9:54: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:30:EB:5D:2C:17:C3:F3:76:B0:43:89:A1:DF:23:59:4D:36:DB:4E X509v3 Authority Key Identifier: keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e4c0::/32 Signature Algorithm: sha256WithRSAEncryption 20:47:81:64:82:5d:66:63:58:5c:76:01:dd:b0:22:5d:c5:55: 6b:72:de:13:6f:1a:a1:88:22:7f:d2:9b:cf:0a:0c:4c:c0:ef: 8d:f5:a1:81:06:60:ee:79:ef:47:6e:d9:15:3b:02:e2:41:e7: f2:5d:28:c6:6c:65:4e:72:b6:df:6c:15:99:d6:0d:3d:d0:4d: 4f:fe:21:54:c0:b3:41:f1:eb:96:e0:fd:74:ad:ac:da:34:3d: ca:da:15:99:99:b7:ef:94:33:6b:a6:dd:6a:a3:fd:c2:3e:0e: e0:a3:45:7e:88:9f:35:93:1c:98:29:2c:2c:fe:fb:fe:77:d7: e4:ec:c9:fe:7c:f4:da:cd:7e:fa:74:a6:5e:bb:94:29:be:c8: b3:32:8d:8a:b3:03:07:3c:87:1d:35:36:cc:b6:5b:7d:d0:c3: 0f:62:96:49:2d:77:7a:c3:83:c3:53:47:ce:e6:f9:ad:be:81: fd:be:2b:61:c8:36:7a:e9:c7:a2:b7:e3:6b:93:eb:ab:45:99: 1d:dd:25:ec:1c:7b:5d:eb:22:3b:c1:3b:91:a4:eb:2a:85:11: 98:53:5a:23:e0:ad:01:9f:b9:91:b6:e2:71:7c:5c:51:1e:c3: 8c:68:59:02:aa:44:b1:fd:44:61:6b:ac:e6:08:da:5c:43:7f: 89:db:09:40 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUV2m0JgbFDedUUyf0dqCE4qQcyKwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh N2NmZjE3MzliMDI3YzY0MGIwHhcNMjYwNzAyMTAzMDQ5WhcNMjcwNzAxMTAzNTQ5 WjAzMTEwLwYDVQQDEyg2NDMwRUI1RDJDMTdDM0YzNzZCMDQzODlBMURGMjM1OTRE MzZEQjRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RJFjBOj5NoU dv5+bTMszh4ArKDVgK6a0w5ueNpEMyiWSDoxxsc4YPSnSzkbFlarMdDyF3IXwN3/ AicUoHSfTG1c8zS/ZT/CEO2MVZv4Xk7DSQDheER6vN4fE/l7oYXRavUEuC05W1Xg UQNWlJgZXG+R9sMexlJwnp8XdlID8GCr5VMlHwj+hW4kgJmehz8wbDR5anGuLvsi 6/bVvJLt5IqVvdkvpH2G1dSst9I8osxTPlD8egBzK3UfevLsVzWy+rMN6yDqnnpZ ykSez4bxRuEjQ0qhfeadllo7Skw5NdI4YuIj6QrcVuzXvBOfylK/Q5WB9wr7A/IS 9TgK6VTxkQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFGQw610sF8PzdrBDiaHfI1lN NttOMB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2 Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4 MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw MjdjNjQwYi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvMzIzNjMwMzQzYTY1MzQ2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOTAMA0G CSqGSIb3DQEBCwUAA4IBAQAgR4Fkgl1mY1hcdgHdsCJdxVVrct4TbxqhiCJ/0pvP CgxMwO+N9aGBBmDuee9HbtkVOwLiQefyXSjGbGVOcrbfbBWZ1g090E1P/iFUwLNB 8euW4P10razaND3K2hWZmbfvlDNrpt1qo/3CPg7go0V+iJ81kxyYKSws/vv+d9fk 7Mn+fPTazX76dKZeu5QpvsizMo2KswMHPIcdNTbMtlt90MMPYpZJLXd6w4PDU0fO 5vmtvoH9vithyDZ66ceit+Nrk+urRZkd3SXsHHtd6yI7wTuRpOsqhRGYU1oj4K0B n7mRtuJxfFxRHsOMaFkCqkSx/URha6zmCNpcQ3+J2wlA -----END CERTIFICATE-----Generated at Sun Jul 12 06:21:06 2026 by rpki-client