$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323538.roa File: 323630343a653034303a3a2f33322d3438203d3e2033323538.roa (raw, json) Hash identifier: F8dwHy6ynx3mTaVrATb5AnsqUTkdj2En9zxHQ32gpuo= Subject key identifier: 3C:A4:DC:94:B6:FC:9A:CC:0D:C2:3E:61:38:54:96:81:34:05:AD:10 Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Certificate serial: 463AD80BDFA9DCA4E5E1C7BD7DD551678E1D5DAC Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323538.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 3258 IP address blocks: 2604:e040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3a:d8:0b:df:a9:dc:a4:e5:e1:c7:bd:7d:d5:51:67:8e:1d:5d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=3CA4DC94B6FC9ACC0DC23E61385496813405AD10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:01:95:8a:c9:d3:54:d7:e0:e6:fd:9a:28: 77:7d:71:ff:c8:f4:cb:53:e0:d5:64:6d:ca:30:d4: 64:12:59:45:b3:96:6e:5b:7d:5e:7b:b0:78:97:a0: 2e:52:22:40:e6:90:72:ce:c2:ca:95:e0:26:80:7f: c5:e9:1d:9b:7d:17:0f:52:85:2e:d5:63:79:e4:b3: 65:66:12:44:92:ca:e0:a7:e9:9e:00:cc:00:9c:1d: f5:02:59:d8:b0:e6:08:87:c6:bf:1f:42:3f:4f:be: 9e:45:7b:d1:df:1c:8b:03:e2:87:b8:43:48:39:8a: 9a:67:4f:37:54:dc:0e:e6:e8:b7:54:71:05:c9:b1: 28:4e:60:5e:07:59:70:9e:52:5e:5d:d6:af:c9:9f: 9f:b2:a7:ed:41:aa:0a:7f:26:6b:d8:d7:bf:11:df: ff:f5:1b:76:0b:85:43:aa:55:7d:14:3a:f1:82:3f: ee:9e:8c:c3:a7:15:c0:25:e3:ee:a1:31:35:d2:66: 63:4b:7b:ba:4f:47:98:fc:5f:80:af:cc:f0:2c:6b: f2:31:98:3c:6d:2f:03:0d:d8:50:f1:3e:1c:ba:8a: d2:52:36:fa:1d:ff:34:53:64:36:0d:c3:37:04:6f: 2b:fa:c9:c2:17:f4:08:66:9e:b7:43:fa:af:cd:76: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A4:DC:94:B6:FC:9A:CC:0D:C2:3E:61:38:54:96:81:34:05:AD:10 X509v3 Authority Key Identifier: keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e040::/32 Signature Algorithm: sha256WithRSAEncryption 3b:49:52:40:fb:64:c4:31:94:7d:e7:03:a9:a5:5b:ca:75:03: 43:6f:03:cb:15:3a:26:d3:68:6e:5a:e4:7d:88:2d:83:4f:36: d8:1a:7e:07:49:ef:a9:39:66:16:78:35:9f:56:e1:88:b3:9c: 54:2b:23:d4:2c:00:84:82:44:f2:03:ae:c5:76:16:1c:e4:4b: 3d:6a:3b:27:0a:4f:f5:fc:d0:2b:a9:f4:f7:5e:d6:59:c5:87: 70:c4:c0:5a:35:5c:a4:70:b7:21:7d:fa:a3:f6:5c:31:c2:19: fa:85:4d:dd:e2:6d:48:8f:dd:af:b3:b3:a5:cb:01:d9:e0:76: 54:37:ed:6f:72:5a:48:96:04:8a:09:24:8e:79:9a:c0:ea:cc: df:8d:41:7c:64:72:a3:54:16:31:07:19:83:04:2f:9a:73:c5: 15:ff:20:6b:bc:e7:1e:f5:7f:53:60:46:20:e0:87:81:ac:8b: e0:e1:0c:c1:e5:f7:b5:77:0a:e4:ab:a7:4b:12:b3:8e:5e:77: 4f:5e:40:62:67:ed:6d:29:e0:04:f1:74:50:cf:0a:6d:d9:8e: b6:64:b2:a3:03:87:62:92:d3:32:8e:bf:57:a1:33:76:3e:27: 8f:29:62:01:4c:e6:b3:df:8f:96:b5:69:83:b8:41:1f:3a:53: ec:9f:f9:af -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIURjrYC9+p3KTl4ce9fdVRZ44dXawwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjYwNzAyMTAzMDQ3WhcNMjcwNzAxMTAzNTQ3 WjAzMTEwLwYDVQQDEygzQ0E0REM5NEI2RkM5QUNDMERDMjNFNjEzODU0OTY4MTM0 MDVBRDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F0BlYrJ01TX 4Ob9mih3fXH/yPTLU+DVZG3KMNRkEllFs5ZuW31ee7B4l6AuUiJA5pByzsLKleAm gH/F6R2bfRcPUoUu1WN55LNlZhJEksrgp+meAMwAnB31AlnYsOYIh8a/H0I/T76e RXvR3xyLA+KHuENIOYqaZ083VNwO5ui3VHEFybEoTmBeB1lwnlJeXdavyZ+fsqft QaoKfyZr2Ne/Ed//9Rt2C4VDqlV9FDrxgj/unozDpxXAJePuoTE10mZjS3u6T0eY /F+Ar8zwLGvyMZg8bS8DDdhQ8T4cuorSUjb6Hf80U2Q2DcM3BG8r+snCF/QIZp63 Q/qvzXaS/QIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFDyk3JS2/JrMDcI+YThUloE0 Ba0QMB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5 NzUxMmM0Mi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMzIzNjMwMzQzYTY1MzAzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOBAMA0G CSqGSIb3DQEBCwUAA4IBAQA7SVJA+2TEMZR95wOppVvKdQNDbwPLFTom02huWuR9 iC2DTzbYGn4HSe+pOWYWeDWfVuGIs5xUKyPULACEgkTyA67FdhYc5Es9ajsnCk/1 /NArqfT3XtZZxYdwxMBaNVykcLchffqj9lwxwhn6hU3d4m1Ij92vs7OlywHZ4HZU N+1vclpIlgSKCSSOeZrA6szfjUF8ZHKjVBYxBxmDBC+ac8UV/yBrvOce9X9TYEYg 4IeBrIvg4QzB5fe1dwrkq6dLErOOXndPXkBiZ+1tKeAE8XRQzwpt2Y62ZLKjA4di ktMyjr9XoTN2PiePKWIBTOaz34+WtWmDuEEfOlPsn/mv -----END CERTIFICATE-----Generated at Sun Jul 12 08:31:21 2026 by rpki-client