$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2036323333.roa File: 323630343a653034303a3a2f33322d3438203d3e2036323333.roa (raw, json) Hash identifier: wz85yCxRWNBdsA/h0hHuPJ5dHbhCkaV80XPtjZS3ZNo= Subject key identifier: 31:A2:6B:73:3C:6C:9E:47:F0:05:09:8D:CD:5D:EE:B6:A4:CC:FB:13 Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Certificate serial: 0978BDA87FED4F906E54B4D3EC35FC3047F95804 Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2036323333.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 6233 IP address blocks: 2604:e040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:78:bd:a8:7f:ed:4f:90:6e:54:b4:d3:ec:35:fc:30:47:f9:58:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=31A26B733C6C9E47F005098DCD5DEEB6A4CCFB13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1a:03:e2:1a:9a:ca:c9:19:3d:3d:0a:0e:7a: 51:c6:29:a6:79:b1:29:60:d8:da:6a:7f:b8:92:7b: 71:18:9a:49:c0:d4:fb:db:ac:14:d0:6e:54:91:bc: 40:f7:47:8c:60:4f:0c:2d:42:07:52:93:64:83:2c: 96:a8:11:33:c1:a3:3e:dd:5e:f3:dc:88:58:f2:fa: 27:c6:c7:69:c8:17:50:cf:39:3b:c3:40:88:11:bf: e8:41:4b:fd:7e:c8:f9:c1:b7:83:45:ed:48:60:a8: d5:1b:31:f6:f3:d8:68:d8:98:bc:74:33:77:2c:03: 7a:66:50:e2:42:34:12:78:d7:ae:c0:97:93:39:63: 3f:75:f6:d9:07:c8:78:57:c3:39:03:8e:54:29:a5: 97:58:a4:31:bc:89:00:1d:d6:18:b8:07:b1:11:57: 7e:b5:7c:79:c4:52:3b:44:ac:72:ef:a4:f6:fb:bd: 38:de:12:52:d7:33:35:b6:54:4b:94:1f:b6:d1:44: 65:2b:9f:35:d3:21:8c:af:6c:8b:9f:1b:38:c9:3f: 2b:aa:34:5e:72:05:e0:e5:df:4e:25:71:48:8c:ed: cb:c8:d5:2f:a9:0c:5b:7f:6a:b3:67:c5:66:59:3d: 5a:b5:9e:4b:e4:39:bd:e9:c5:bf:21:1a:61:6d:99: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A2:6B:73:3C:6C:9E:47:F0:05:09:8D:CD:5D:EE:B6:A4:CC:FB:13 X509v3 Authority Key Identifier: keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e040::/32 Signature Algorithm: sha256WithRSAEncryption 00:59:40:2f:99:f9:07:29:55:2c:91:59:67:41:da:a1:ba:36: 71:c8:1f:2b:df:99:32:cd:34:a5:66:bc:a1:9f:aa:ba:0a:77: 91:56:d9:be:9c:af:78:56:d5:a7:9a:ac:4b:0d:68:2b:09:6b: a9:ed:09:22:d7:12:ab:1c:ad:14:29:4d:42:78:7b:c8:f5:b9: 55:c6:7f:db:6f:fd:f5:fa:43:ed:86:94:e8:24:6c:84:fc:20: 6d:bb:42:e6:a4:b8:05:87:82:ef:e6:61:6d:95:02:f3:a0:84: bd:24:cc:9b:0d:e3:83:a3:b4:ae:8e:62:16:d0:45:5e:68:77: 2a:75:e6:fe:8c:53:86:8d:ee:1a:b5:6a:86:0b:8d:1a:31:02: 80:b5:62:39:33:29:8b:aa:41:70:db:de:da:6b:7f:e8:c9:c9: ad:d1:11:60:d9:89:fc:c1:72:90:b0:c7:c7:e0:97:26:77:b2: 87:7d:61:93:f3:cc:f7:8f:c6:be:5d:9e:5a:e2:1a:71:34:d5: 98:06:f3:02:17:29:51:3e:5a:57:0a:9b:70:1a:6c:2c:66:97: 79:df:c9:25:df:08:da:5a:a4:f1:ff:48:0e:fc:35:9d:14:27: fe:0d:61:bc:a4:e5:cc:3f:0d:22:30:a2:62:84:66:ba:11:ce: dd:3c:f7:7b -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUCXi9qH/tT5BuVLTT7DX8MEf5WAQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjYwNzAyMTAzMDQ3WhcNMjcwNzAxMTAzNTQ3 WjAzMTEwLwYDVQQDEygzMUEyNkI3MzNDNkM5RTQ3RjAwNTA5OERDRDVERUVCNkE0 Q0NGQjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxoD4hqayskZ PT0KDnpRximmebEpYNjaan+4kntxGJpJwNT726wU0G5UkbxA90eMYE8MLUIHUpNk gyyWqBEzwaM+3V7z3IhY8vonxsdpyBdQzzk7w0CIEb/oQUv9fsj5wbeDRe1IYKjV GzH289ho2Ji8dDN3LAN6ZlDiQjQSeNeuwJeTOWM/dfbZB8h4V8M5A45UKaWXWKQx vIkAHdYYuAexEVd+tXx5xFI7RKxy76T2+7043hJS1zM1tlRLlB+20URlK5810yGM r2yLnxs4yT8rqjRecgXg5d9OJXFIjO3LyNUvqQxbf2qzZ8VmWT1atZ5L5Dm96cW/ IRphbZkGdwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFDGia3M8bJ5H8AUJjc1d7rak zPsTMB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5 NzUxMmM0Mi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMzIzNjMwMzQzYTY1MzAzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOBAMA0G CSqGSIb3DQEBCwUAA4IBAQAAWUAvmfkHKVUskVlnQdqhujZxyB8r35kyzTSlZryh n6q6CneRVtm+nK94VtWnmqxLDWgrCWup7Qki1xKrHK0UKU1CeHvI9blVxn/bb/31 +kPthpToJGyE/CBtu0LmpLgFh4Lv5mFtlQLzoIS9JMybDeODo7SujmIW0EVeaHcq deb+jFOGje4atWqGC40aMQKAtWI5MymLqkFw297aa3/oycmt0RFg2Yn8wXKQsMfH 4Jcmd7KHfWGT88z3j8a+XZ5a4hpxNNWYBvMCFylRPlpXCptwGmwsZpd538kl3wja WqTx/0gO/DWdFCf+DWG8pOXMPw0iMKJihGa6Ec7dPPd7 -----END CERTIFICATE-----Generated at Sun Jul 12 06:21:19 2026 by rpki-client