$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3234203d3e203632353939.roa File: 32332e3133392e3232342e302f32342d3234203d3e203632353939.roa (raw, json) Hash identifier: hhf7+nBK3S0zd6BQ+LR3yhRe0DRrYODoXgqszQIfnik= Subject key identifier: 08:53:FE:06:68:43:90:6F:58:86:48:8F:3E:E2:22:34:C9:AA:59:75 Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Certificate serial: 08019EF3758116D610B2BE7470630A7133807864 Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3234203d3e203632353939.roa Signing time: Thu 09 Jul 2026 17:56:14 +0000 ROA not before: Thu 09 Jul 2026 17:51:14 +0000 ROA not after: Thu 08 Jul 2027 17:56:14 +0000 asID: 62599 IP address blocks: 23.139.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:01:9e:f3:75:81:16:d6:10:b2:be:74:70:63:0a:71:33:80:78:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Validity Not Before: Jul 9 17:51:14 2026 GMT Not After : Jul 8 17:56:14 2027 GMT Subject: CN=0853FE066843906F5886488F3EE22234C9AA5975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:96:09:84:92:af:2a:9f:2c:f1:81:e4:fa:b0: 0f:76:c3:bc:96:34:3e:a0:eb:15:c6:7d:df:94:dd: d6:51:2e:ab:69:0e:00:94:88:0d:30:8c:f3:bc:f2: 50:56:55:5c:57:ef:f7:70:25:c7:9e:98:e0:83:f5: 61:38:b9:14:25:05:c0:cf:31:09:61:b0:ba:cf:95: 03:0d:1b:b8:13:e5:be:8e:22:6d:17:17:9b:4f:d2: 3d:e0:67:23:ce:33:f5:fe:be:b4:7a:2b:c6:1f:e8: 88:a4:88:de:88:a1:3e:72:ae:ef:17:8c:b4:f0:41: d5:ad:19:23:20:fc:cd:07:20:6d:66:cd:cf:52:f4: ca:1d:61:3f:11:47:56:47:60:e7:22:16:91:3a:95: f3:e2:51:34:ff:5c:63:68:20:30:f4:56:72:25:e0: ec:b1:22:36:0e:7c:3b:e5:05:9f:5f:2d:e2:21:f8: ff:91:5d:53:54:67:46:7a:95:b8:b6:02:ca:88:a7: 3f:a0:3e:b1:1c:22:7a:cc:63:31:6b:5b:ec:b4:58: 06:5e:44:8c:dd:da:f4:aa:2e:36:57:4a:bd:f3:39: c5:05:bd:18:81:6c:90:d4:3c:52:ba:bc:d9:a0:37: 07:c1:4c:d4:c5:61:b0:e6:87:b1:d2:64:20:7c:9a: 4a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:53:FE:06:68:43:90:6F:58:86:48:8F:3E:E2:22:34:C9:AA:59:75 X509v3 Authority Key Identifier: keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3234203d3e203632353939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.139.224.0/24 Signature Algorithm: sha256WithRSAEncryption 85:5b:ab:20:c4:85:23:a2:4b:ba:d9:a6:34:c9:f9:89:f4:4e: 89:ec:8a:70:b4:72:1c:b9:60:16:e5:a1:8c:17:32:b2:22:87: 59:f0:51:55:39:f5:09:39:04:fe:f5:36:28:97:03:1f:bd:61: 30:34:75:6d:94:90:bc:1d:78:15:cb:6c:03:f8:f7:36:41:54: 8c:69:b4:5a:cc:a2:1b:17:52:38:fa:ad:5b:86:2f:2d:28:ea: 2b:e6:6c:2b:85:8b:81:c7:84:b6:0c:8a:23:7a:69:bb:dd:ae: 15:9e:f6:87:54:bc:3a:74:17:a0:47:b7:53:26:57:a1:84:44: 92:43:95:1a:38:e8:9f:95:f2:57:5d:a7:4f:49:c5:49:fd:75: 2d:c8:05:81:31:9c:b5:d9:52:63:c5:29:a5:6e:d9:b7:ec:e4: 52:dd:f2:26:1d:f2:77:da:1c:38:3d:29:22:86:88:bc:04:70: be:4b:51:89:90:ba:57:d0:48:e0:3c:33:04:b8:95:3d:b7:9c: 50:d6:aa:78:f6:df:25:f0:0a:6c:ba:e6:4b:d6:38:4c:72:5b: dd:0e:0b:16:dd:6b:b7:6c:04:49:8d:6e:01:92:32:bb:d2:7d: 2e:b7:dd:c8:43:5e:a1:7f:75:07:55:b9:50:12:89:ef:45:a4: dd:a8:5c:bb -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUCAGe83WBFtYQsr50cGMKcTOAeGQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjYwNzA5MTc1MTE0WhcNMjcwNzA4MTc1NjE0 WjAzMTEwLwYDVQQDEygwODUzRkUwNjY4NDM5MDZGNTg4NjQ4OEYzRUUyMjIzNEM5 QUE1OTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5YJhJKvKp8s 8YHk+rAPdsO8ljQ+oOsVxn3flN3WUS6raQ4AlIgNMIzzvPJQVlVcV+/3cCXHnpjg g/VhOLkUJQXAzzEJYbC6z5UDDRu4E+W+jiJtFxebT9I94GcjzjP1/r60eivGH+iI pIjeiKE+cq7vF4y08EHVrRkjIPzNByBtZs3PUvTKHWE/EUdWR2DnIhaROpXz4lE0 /1xjaCAw9FZyJeDssSI2Dnw75QWfXy3iIfj/kV1TVGdGepW4tgLKiKc/oD6xHCJ6 zGMxa1vstFgGXkSM3dr0qi42V0q98znFBb0YgWyQ1DxSurzZoDcHwUzUxWGw5oex 0mQgfJpKWQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAhT/gZoQ5BvWIZIjz7iIjTJ qll1MB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5 NzUxMmM0Mi5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMzIzMzJlMzEzMzM5MmUzMjMyMzQy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzUzOTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4vg MA0GCSqGSIb3DQEBCwUAA4IBAQCFW6sgxIUjoku62aY0yfmJ9E6J7IpwtHIcuWAW 5aGMFzKyIodZ8FFVOfUJOQT+9TYolwMfvWEwNHVtlJC8HXgVy2wD+Pc2QVSMabRa zKIbF1I4+q1bhi8tKOor5mwrhYuBx4S2DIojemm73a4VnvaHVLw6dBegR7dTJleh hESSQ5UaOOiflfJXXadPScVJ/XUtyAWBMZy12VJjxSmlbtm37ORS3fImHfJ32hw4 PSkihoi8BHC+S1GJkLpX0EjgPDMEuJU9t5xQ1qp49t8l8ApsuuZL1jhMclvdDgsW 3Wu3bARJjW4BkjK70n0ut93IQ16hf3UHVblQEonvRaTdqFy7 -----END CERTIFICATE-----Generated at Sun Jul 12 08:35:13 2026 by rpki-client