$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2038383838.roa File: 323630343a653463303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: 6o1pG0MDBAXpDxhpP4aTx8mOWRVQOhLwz74MvLF3SHQ= Subject key identifier: BB:68:D4:9E:39:35:07:D2:C5:15:C6:FE:D7:D9:11:0B:48:98:D1:6A Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Certificate serial: 48C00FA5A963ACFC45F8A52ED2B12140AC982538 Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 8888 IP address blocks: 2604:e4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 00:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c0:0f:a5:a9:63:ac:fc:45:f8:a5:2e:d2:b1:21:40:ac:98:25:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=BB68D49E393507D2C515C6FED7D9110B4898D16A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b5:98:e3:31:22:1c:19:cc:f5:f6:79:ff:04: 46:74:e4:78:19:f5:8e:b8:7d:b3:bb:ee:6d:f6:32: eb:54:51:2b:d0:8b:35:45:6e:38:07:8f:5a:1b:b5: 0a:17:04:16:04:b2:73:b5:76:73:c7:67:57:59:f8: 87:1e:5a:d1:0c:d5:cd:9f:1c:8a:d8:b7:ae:76:9d: 01:a2:eb:a5:13:f3:b3:06:10:95:c3:14:61:1b:cc: ee:fe:fc:77:e1:d9:9f:25:1e:a4:1f:2d:5d:fb:b4: 68:e5:39:9d:b4:da:3f:9f:54:04:ce:48:b4:2f:aa: af:66:ef:12:97:fe:a9:9a:86:fe:fb:28:b1:8f:9d: 74:7a:e4:a1:7d:82:e6:61:66:0a:51:7a:11:c1:ad: eb:2c:ce:dd:c8:d6:d1:b7:4b:bb:9f:68:9c:4f:9b: 66:63:8c:2b:c8:55:7d:d4:f7:fe:89:c7:67:e3:78: 88:ed:7d:f2:9c:b5:ea:91:cc:6a:b1:90:59:d6:d1: 6b:43:7c:23:d5:03:14:14:a2:15:29:e7:23:46:90: 06:09:03:f1:a8:b7:17:18:24:6d:60:a9:4d:1e:c4: ab:6e:9e:29:6f:9c:68:24:51:19:67:b4:e7:49:84: 88:91:a1:a8:4c:e4:73:c6:a4:06:41:cf:e3:b4:d0: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:68:D4:9E:39:35:07:D2:C5:15:C6:FE:D7:D9:11:0B:48:98:D1:6A X509v3 Authority Key Identifier: keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e4c0::/32 Signature Algorithm: sha256WithRSAEncryption 6e:28:be:1e:62:a7:7f:68:bd:ab:7a:d4:55:6c:51:8e:c1:b5: a3:37:cd:ad:3c:c6:f4:89:41:7e:b0:23:c4:bc:5d:b8:6e:a3: 34:32:58:e7:ec:f3:21:13:e8:45:37:f6:98:c7:7a:cf:0b:5f: d3:33:78:9e:99:68:dd:a6:5c:c4:02:42:78:f5:36:27:be:82: 6f:25:28:74:ea:ef:c5:a2:a4:41:a6:9c:cf:0f:49:c7:65:cc: 4b:d5:58:02:78:45:43:ef:25:33:9d:95:bb:57:ed:94:0e:b4: 23:27:a2:25:b2:3d:cc:48:43:80:8d:7f:71:e9:50:05:ce:5e: 3b:f4:9a:b1:c5:71:ea:a1:7f:35:ad:a9:17:cd:9f:6e:74:8e: 96:87:ab:79:a1:f8:30:9f:da:51:c0:37:a6:fc:8f:92:ef:19: 3b:c3:f1:59:6c:34:06:f6:76:fa:4f:3d:f9:fb:ce:72:4c:53: cd:c7:6d:7f:31:14:3f:2a:c1:b6:66:9a:6c:94:d5:1a:bb:cc: f6:f0:c8:f1:d1:78:de:78:95:fb:67:c7:6e:59:e6:98:64:bf: 42:cf:bb:86:1a:96:63:2f:bc:e9:a2:f0:b0:24:2e:53:7e:cb: 3c:79:8e:59:8a:08:f3:ed:25:02:08:d0:e7:2c:9d:52:41:80: 4d:d1:e3:1b -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUSMAPpaljrPxF+KUu0rEhQKyYJTgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh N2NmZjE3MzliMDI3YzY0MGIwHhcNMjYwNzAyMTAzMDQ5WhcNMjcwNzAxMTAzNTQ5 WjAzMTEwLwYDVQQDEyhCQjY4RDQ5RTM5MzUwN0QyQzUxNUM2RkVEN0Q5MTEwQjQ4 OThEMTZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LWY4zEiHBnM 9fZ5/wRGdOR4GfWOuH2zu+5t9jLrVFEr0Is1RW44B49aG7UKFwQWBLJztXZzx2dX WfiHHlrRDNXNnxyK2Leudp0BouulE/OzBhCVwxRhG8zu/vx34dmfJR6kHy1d+7Ro 5TmdtNo/n1QEzki0L6qvZu8Sl/6pmob++yixj510euShfYLmYWYKUXoRwa3rLM7d yNbRt0u7n2icT5tmY4wryFV91Pf+icdn43iI7X3ynLXqkcxqsZBZ1tFrQ3wj1QMU FKIVKecjRpAGCQPxqLcXGCRtYKlNHsSrbp4pb5xoJFEZZ7TnSYSIkaGoTORzxqQG Qc/jtNCY1QIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFLto1J45NQfSxRXG/tfZEQtI mNFqMB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2 Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4 MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw MjdjNjQwYi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvMzIzNjMwMzQzYTY1MzQ2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOTAMA0G CSqGSIb3DQEBCwUAA4IBAQBuKL4eYqd/aL2retRVbFGOwbWjN82tPMb0iUF+sCPE vF24bqM0Mljn7PMhE+hFN/aYx3rPC1/TM3iemWjdplzEAkJ49TYnvoJvJSh06u/F oqRBppzPD0nHZcxL1VgCeEVD7yUznZW7V+2UDrQjJ6Ilsj3MSEOAjX9x6VAFzl47 9JqxxXHqoX81rakXzZ9udI6Wh6t5ofgwn9pRwDem/I+S7xk7w/FZbDQG9nb6Tz35 +85yTFPNx21/MRQ/KsG2ZppslNUau8z28Mjx0XjeeJX7Z8duWeaYZL9Cz7uGGpZj L7zpovCwJC5Tfss8eY5Zigjz7SUCCNDnLJ1SQYBN0eMb -----END CERTIFICATE-----Generated at Sun Jul 12 08:30:30 2026 by rpki-client