
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323034.roa
File: 323630343a653034303a3a2f33322d3438203d3e2033323034.roa (raw, json)
Hash identifier: nSVK20wcmpgNVFNxj748tJWHfPBtAkxrpSWqw8COHLo=
Subject key identifier: E2:6B:13:E5:77:62:F9:A3:F7:89:C1:F2:5C:34:AC:80:B6:A9:AB:9E
Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Certificate serial: 250EA1B7A5DCD7D044CFBFE5F0E2CB72D747B677
Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323034.roa
Signing time: Thu 02 Jul 2026 10:35:47 +0000
ROA not before: Thu 02 Jul 2026 10:30:47 +0000
ROA not after: Thu 01 Jul 2027 10:35:47 +0000
asID: 3204
IP address blocks: 2604:e040::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl
rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 13 Jul 2026 03:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0e:a1:b7:a5:dc:d7:d0:44:cf:bf:e5:f0:e2:cb:72:d7:47:b6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42
Validity
Not Before: Jul 2 10:30:47 2026 GMT
Not After : Jul 1 10:35:47 2027 GMT
Subject: CN=E26B13E57762F9A3F789C1F25C34AC80B6A9AB9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:b7:2c:cd:57:69:ab:8b:b5:1e:1d:4f:33:
cf:69:25:c6:43:27:fc:e1:31:d2:f9:f7:e3:66:ae:
ec:8c:10:df:f0:48:3b:0c:85:67:86:3d:7c:7a:fa:
38:d8:8c:dd:6a:2f:d8:c8:43:d8:ca:63:cf:fa:aa:
9b:be:bd:cd:35:72:ba:cf:5e:7c:a1:64:c5:86:2c:
82:9f:bc:68:70:ab:64:d7:bb:27:11:da:33:df:48:
4e:a6:40:76:4f:a5:14:c7:5f:9e:a1:37:34:d1:98:
d5:a0:2a:7b:40:1b:0f:64:ce:df:9c:da:ac:82:85:
67:76:d1:75:96:76:5a:b6:9d:a3:64:a8:c5:47:f6:
7b:93:2d:e4:33:f9:94:6d:3f:54:ac:0c:ed:60:18:
84:0e:b7:a3:06:0d:aa:8d:1d:59:a0:0b:5a:0c:de:
6b:b2:d7:aa:b3:77:ce:4c:c7:c5:20:f3:09:64:ec:
0d:22:93:a2:15:dd:82:e7:51:e8:42:3b:b3:2a:c3:
b5:69:6f:27:2f:9a:a2:46:d1:34:7b:78:4b:c9:a4:
76:c0:38:99:a4:2f:32:e2:04:88:35:95:49:72:db:
a9:34:1b:2b:d7:a7:4f:54:2b:ea:05:7f:56:09:29:
f8:80:50:94:6e:20:97:ce:72:97:b4:57:c4:8e:2b:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:13:E5:77:62:F9:A3:F7:89:C1:F2:5C:34:AC:80:B6:A9:AB:9E
X509v3 Authority Key Identifier:
keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2604:e040::/32
Signature Algorithm: sha256WithRSAEncryption
7a:dc:1e:c2:23:aa:22:60:68:0c:d4:1f:19:37:22:21:90:be:
72:b3:d4:78:96:65:13:67:18:93:4b:5f:2a:01:53:88:20:2a:
76:fd:33:bf:b4:09:31:7a:62:bc:b9:18:c0:1a:3b:c5:f1:9b:
e8:e8:08:67:af:bf:21:34:1a:fb:1c:6d:59:ec:26:7b:6b:f5:
bd:ac:bf:18:36:6e:af:c4:68:ec:8d:e2:42:f6:0f:d7:d6:5a:
4f:45:c1:21:ea:07:5e:71:d6:54:26:a3:d6:5d:ac:f9:1c:14:
3a:3a:51:67:6e:c0:69:74:62:1e:fe:5b:92:4d:8b:8f:c9:3b:
0a:7d:31:67:aa:3f:ba:d4:cc:ea:85:7f:8d:5a:9d:f4:6e:48:
63:71:59:40:94:f9:f1:28:4a:f7:c4:e4:9a:85:ba:e6:d6:a0:
c2:d9:d9:8f:bc:e6:f0:17:16:2b:0c:53:9c:8d:d7:84:38:02:
fe:ef:c7:69:9c:d1:b9:c4:c8:05:07:9c:79:b0:fb:58:36:41:
c8:c8:21:51:7b:4b:74:e5:8b:6c:e3:6a:90:41:0e:78:68:a8:
e3:dd:fd:28:8b:a8:5a:96:a0:07:ec:dc:ff:4f:c6:03:cb:bb:
a6:35:ce:4b:0a:37:ec:42:8f:a4:7d:4d:a3:cc:b6:5d:94:55:
1d:27:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:32:02 2026 by rpki-client