$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323134.roa File: 323630343a653034303a3a2f33322d3438203d3e2033323134.roa (raw, json) Hash identifier: nzNVThmV+ceGECjICim+MJg5R5goEPo052Tdxalg878= Subject key identifier: 01:A1:2C:F9:F3:83:24:B4:03:B0:EF:8F:54:32:05:66:B0:68:55:57 Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Certificate serial: 6689F7F0A7AFD974C124EC909D7361E193F9FA43 Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323134.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 3214 IP address blocks: 2604:e040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:89:f7:f0:a7:af:d9:74:c1:24:ec:90:9d:73:61:e1:93:f9:fa:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=01A12CF9F38324B403B0EF8F54320566B0685557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:31:81:a2:4d:5d:ec:17:7b:d4:75:25:02: df:fe:de:08:29:df:fa:d9:68:7a:83:0a:e5:cd:8e: 35:fe:cf:3c:6a:77:ee:1a:ed:7f:54:8f:5c:07:bf: 78:0b:8f:24:0d:ef:87:79:4d:5f:ca:f3:2c:80:86: df:af:5f:72:a2:61:ef:4f:71:fc:20:96:63:31:29: e6:9d:ab:bb:5c:dc:2e:96:0f:70:dd:ed:8c:ee:7a: de:cb:93:36:78:b5:2a:22:3a:8a:c0:22:11:ec:e6: 19:70:3e:8e:f0:b8:15:d2:0c:3a:3b:b6:be:dc:28: 69:37:72:a3:65:4f:48:c0:e0:64:ee:1e:fe:0c:6d: 43:8a:14:03:23:c2:a1:21:6e:04:a8:c8:d8:5d:5b: 91:26:a7:af:71:95:b5:64:c8:f3:0d:2c:ee:bc:25: 8c:b7:99:75:f9:ad:8c:0d:3b:c9:78:d3:e9:16:f7: 64:d2:2d:d7:68:4e:ca:9c:ed:f6:b2:02:8a:ef:30: 11:74:89:36:f6:f0:f1:87:76:a6:65:2d:2d:1b:28: 37:18:25:eb:ca:8f:94:3a:4d:e7:37:4c:ee:a8:e0: aa:ec:a3:1b:09:9e:64:60:4e:89:ab:c1:15:bd:e5: f3:f7:42:7f:16:7f:68:34:7c:41:bc:26:81:4e:7e: 4a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A1:2C:F9:F3:83:24:B4:03:B0:EF:8F:54:32:05:66:B0:68:55:57 X509v3 Authority Key Identifier: keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e040::/32 Signature Algorithm: sha256WithRSAEncryption 85:f6:26:7f:bc:9e:b9:3e:80:08:63:4b:35:c9:53:d1:77:9d: c3:a1:a9:6a:34:c4:e4:70:27:53:56:4a:51:82:38:6a:63:bb: 9e:84:1a:1a:e6:bc:85:3d:ec:d4:a8:f4:f5:38:fb:a8:98:68: b5:13:b5:8e:62:64:39:f2:c1:76:19:95:ff:70:db:a4:79:50: 7e:5e:6d:85:d8:ae:ea:0a:35:18:12:66:ff:07:0f:70:1c:90: 4b:79:af:35:79:98:6e:6a:da:51:66:a3:97:46:a6:c1:19:68: db:c1:a4:e6:ee:a9:39:08:5a:0d:9e:38:cb:54:fd:40:23:66: e4:4f:cb:59:59:12:77:75:e7:fe:26:8a:63:d8:c9:2e:5d:5d: fb:39:01:4f:6a:e4:f0:2d:e5:16:a8:19:6d:06:77:51:31:ba: ef:ff:93:63:de:04:e2:cb:df:1d:65:bb:7c:2b:83:69:05:12: 86:08:6e:1d:32:a9:81:93:2b:58:4c:37:2b:ac:b0:f1:ee:65: d5:ca:35:70:2f:98:81:c2:b4:5d:e8:ee:fe:1d:f5:21:58:2f: b8:15:15:80:27:4d:2f:a4:c1:8c:52:23:b8:66:e1:6c:17:aa: 4f:8b:2a:c3:49:6a:8a:fe:21:de:c1:da:60:ca:c8:e0:07:e0: 12:4b:2c:2d -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUZon38Kev2XTBJOyQnXNh4ZP5+kMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjYwNzAyMTAzMDQ3WhcNMjcwNzAxMTAzNTQ3 WjAzMTEwLwYDVQQDEygwMUExMkNGOUYzODMyNEI0MDNCMEVGOEY1NDMyMDU2NkIw Njg1NTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3cxgaJNXewX e9R1JQLf/t4IKd/62Wh6gwrlzY41/s88anfuGu1/VI9cB794C48kDe+HeU1fyvMs gIbfr19yomHvT3H8IJZjMSnmnau7XNwulg9w3e2M7nrey5M2eLUqIjqKwCIR7OYZ cD6O8LgV0gw6O7a+3ChpN3KjZU9IwOBk7h7+DG1DihQDI8KhIW4EqMjYXVuRJqev cZW1ZMjzDSzuvCWMt5l1+a2MDTvJeNPpFvdk0i3XaE7KnO32sgKK7zARdIk29vDx h3amZS0tGyg3GCXryo+UOk3nN0zuqOCq7KMbCZ5kYE6Jq8EVveXz90J/Fn9oNHxB vCaBTn5KMwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFAGhLPnzgyS0A7Dvj1QyBWaw aFVXMB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5 NzUxMmM0Mi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMzIzNjMwMzQzYTY1MzAzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjMxMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOBAMA0G CSqGSIb3DQEBCwUAA4IBAQCF9iZ/vJ65PoAIY0s1yVPRd53DoalqNMTkcCdTVkpR gjhqY7uehBoa5ryFPezUqPT1OPuomGi1E7WOYmQ58sF2GZX/cNukeVB+Xm2F2K7q CjUYEmb/Bw9wHJBLea81eZhuatpRZqOXRqbBGWjbwaTm7qk5CFoNnjjLVP1AI2bk T8tZWRJ3def+Jopj2MkuXV37OQFPauTwLeUWqBltBndRMbrv/5Nj3gTiy98dZbt8 K4NpBRKGCG4dMqmBkytYTDcrrLDx7mXVyjVwL5iBwrRd6O7+HfUhWC+4FRWAJ00v pMGMUiO4ZuFsF6pPiyrDSWqK/iHewdpgysjgB+ASSywt -----END CERTIFICATE-----Generated at Sun Jul 12 08:31:20 2026 by rpki-client