$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2034373835.roa File: 323630343a653034303a3a2f33322d3438203d3e2034373835.roa (raw, json) Hash identifier: hlbHHFx7FS6IJ6tylH6GCXiJB1mRomsxs62gh6dcva0= Subject key identifier: D6:01:82:F2:87:23:A7:AD:A6:17:D4:1F:9B:BB:42:6B:14:C2:A7:83 Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Certificate serial: 1AB0E39FF10A5A88A1F04FF6BF75327F84765486 Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2034373835.roa Signing time: Thu 02 Jul 2026 11:29:53 +0000 ROA not before: Thu 02 Jul 2026 11:24:53 +0000 ROA not after: Thu 01 Jul 2027 11:29:53 +0000 asID: 4785 IP address blocks: 2604:e040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b0:e3:9f:f1:0a:5a:88:a1:f0:4f:f6:bf:75:32:7f:84:76:54:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Validity Not Before: Jul 2 11:24:53 2026 GMT Not After : Jul 1 11:29:53 2027 GMT Subject: CN=D60182F28723A7ADA617D41F9BBB426B14C2A783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:da:12:98:28:5f:dd:32:55:ee:58:89:4b: 71:0f:f8:09:23:f3:9b:72:fb:8a:b7:12:fc:d8:45: 53:11:19:c3:d9:3a:3c:31:c7:90:9f:9e:89:e7:65: be:3d:7c:74:46:32:e2:fc:6e:bb:cb:97:bb:98:4c: f5:9b:ab:d5:7f:5f:5c:01:d4:b9:68:59:75:bc:2c: 8c:1a:cb:76:c6:30:91:93:85:8a:03:6a:29:81:20: 6c:10:cd:0c:f8:66:a8:01:23:8d:a8:2e:cc:2b:9b: 99:70:69:4d:ca:2d:75:5e:f4:03:f2:ad:e8:78:51: 7e:aa:a0:9e:6a:0f:5c:4a:02:c7:95:db:6f:f1:2b: 70:b2:4e:88:a9:f5:e0:62:9d:37:3d:df:45:4f:c4: 55:15:19:e3:c0:99:d4:be:e7:e2:62:d6:f8:8a:e0: 8a:25:90:4a:59:77:aa:38:f2:ca:60:30:26:f9:c4: bd:c7:de:aa:17:63:f7:6a:63:a2:f8:4f:f4:30:00: 38:e0:1d:a7:63:dd:62:81:5b:f9:ff:6e:bf:80:9b: 06:1c:53:26:a3:3b:7d:91:e0:78:fe:39:0f:97:5a: 1a:bf:c2:5e:6d:8c:86:d0:c0:10:7c:81:24:0c:9b: 8a:f5:f5:30:91:4f:20:87:0e:55:cd:b4:51:5f:30: 72:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:82:F2:87:23:A7:AD:A6:17:D4:1F:9B:BB:42:6B:14:C2:A7:83 X509v3 Authority Key Identifier: keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e040::/32 Signature Algorithm: sha256WithRSAEncryption 44:86:d0:ef:2a:b7:e9:04:56:06:03:0b:c4:93:1f:01:25:e2: d7:10:47:34:10:96:2a:bd:dc:72:da:2a:c0:ba:63:10:26:39: d3:db:e2:a1:51:b0:75:b5:43:a3:3c:a0:5c:79:53:26:56:5f: 90:40:d1:60:96:7e:8a:d5:bc:aa:6f:5f:9a:49:50:fb:7c:16: 6b:ec:15:1b:46:d3:3c:00:5c:96:3d:24:25:a5:e6:5d:df:9f: 3d:62:5d:6f:ac:f0:c2:35:21:82:06:60:fb:e1:5d:6a:d4:41: 0d:9d:80:bf:08:45:39:11:fe:89:4b:e9:e4:b0:9d:0b:25:a8: 15:27:0a:84:00:54:e5:e0:d0:e7:40:e0:fb:0b:6b:f1:41:01: 77:a7:41:f7:b7:5b:39:fa:ae:0b:d8:9b:4a:08:0b:92:24:3d: 5c:87:8b:4e:f6:d9:cf:83:f5:50:b3:74:1a:7a:73:ca:85:68: 9a:87:d4:c2:66:da:dd:0a:2f:0b:1b:1e:be:2c:3f:aa:6e:66: 41:ca:b4:4a:ff:ad:b3:2c:45:a0:22:44:9d:b9:2f:0b:df:4f: 46:3c:b0:f3:36:f1:9c:78:69:e2:e8:ac:2b:71:5f:94:2a:5d: e5:88:df:b8:f4:a3:6f:b6:39:e1:2e:1f:6f:26:c1:4c:2e:83: 91:f8:17:44 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUGrDjn/EKWoih8E/2v3Uyf4R2VIYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjYwNzAyMTEyNDUzWhcNMjcwNzAxMTEyOTUz WjAzMTEwLwYDVQQDEyhENjAxODJGMjg3MjNBN0FEQTYxN0Q0MUY5QkJCNDI2QjE0 QzJBNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV7aEpgoX90y Ve5YiUtxD/gJI/ObcvuKtxL82EVTERnD2To8MceQn56J52W+PXx0RjLi/G67y5e7 mEz1m6vVf19cAdS5aFl1vCyMGst2xjCRk4WKA2opgSBsEM0M+GaoASONqC7MK5uZ cGlNyi11XvQD8q3oeFF+qqCeag9cSgLHldtv8Stwsk6IqfXgYp03Pd9FT8RVFRnj wJnUvufiYtb4iuCKJZBKWXeqOPLKYDAm+cS9x96qF2P3amOi+E/0MAA44B2nY91i gVv5/26/gJsGHFMmozt9keB4/jkPl1oav8JebYyG0MAQfIEkDJuK9fUwkU8ghw5V zbRRXzByDQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFNYBgvKHI6etphfUH5u7QmsU wqeDMB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5 NzUxMmM0Mi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMzIzNjMwMzQzYTY1MzAzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOBAMA0G CSqGSIb3DQEBCwUAA4IBAQBEhtDvKrfpBFYGAwvEkx8BJeLXEEc0EJYqvdxy2irA umMQJjnT2+KhUbB1tUOjPKBceVMmVl+QQNFgln6K1byqb1+aSVD7fBZr7BUbRtM8 AFyWPSQlpeZd3589Yl1vrPDCNSGCBmD74V1q1EENnYC/CEU5Ef6JS+nksJ0LJagV JwqEAFTl4NDnQOD7C2vxQQF3p0H3t1s5+q4L2JtKCAuSJD1ch4tO9tnPg/VQs3Qa enPKhWiah9TCZtrdCi8LGx6+LD+qbmZByrRK/62zLEWgIkSduS8L309GPLDzNvGc eGni6KwrcV+UKl3liN+49KNvtjnhLh9vJsFMLoOR+BdE -----END CERTIFICATE-----Generated at Sun Jul 12 08:30:09 2026 by rpki-client