$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2038383838.roa File: 323630343a653034303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: QTA9Z36vq+5gDU+HWk+vaKip1p5QAhdnceUU63R+ogA= Subject key identifier: E8:82:35:B3:FD:75:5F:43:7F:92:A2:E8:AA:21:39:E7:84:F5:2E:9A Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Certificate serial: 38E4FC67DC88C50895C01B4CE6A3A4E7455FBD77 Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:35:47 +0000 ROA not before: Thu 02 Jul 2026 10:30:47 +0000 ROA not after: Thu 01 Jul 2027 10:35:47 +0000 asID: 8888 IP address blocks: 2604:e040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 03:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e4:fc:67:dc:88:c5:08:95:c0:1b:4c:e6:a3:a4:e7:45:5f:bd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Validity Not Before: Jul 2 10:30:47 2026 GMT Not After : Jul 1 10:35:47 2027 GMT Subject: CN=E88235B3FD755F437F92A2E8AA2139E784F52E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:20:46:02:54:39:c1:34:f8:be:5c:66:b2:e2: ae:ae:e0:48:4b:8b:de:eb:f6:65:4b:6c:5d:0b:c1: 81:d5:5b:b5:8c:5d:1b:7c:b3:ae:a1:d2:1f:37:fc: 07:24:a0:6e:65:95:50:48:cc:d5:f3:ad:a5:c0:e5: 79:e0:97:4f:12:e7:00:4f:57:a4:cf:1f:b6:46:66: a1:cc:df:96:47:56:79:eb:45:fb:3f:dc:26:6e:f9: 5b:7c:43:77:08:17:3b:22:db:55:79:35:54:5b:37: 59:68:2b:ea:11:ca:2f:75:41:79:db:41:2c:aa:a5: 81:c9:a8:5d:23:97:55:20:3d:76:52:ed:ea:65:cd: 6a:b9:48:90:86:c5:86:97:56:aa:f8:fa:a7:85:e3: 5d:42:4d:ac:fa:d3:75:0e:39:6f:f2:13:6d:43:5c: d0:4c:2f:12:27:0b:71:33:4f:78:d4:ca:76:b4:3e: 14:c4:c1:c3:b8:bb:74:ed:74:f9:a1:de:a9:8b:ba: 0f:d8:43:dc:33:78:05:38:a8:b8:48:59:ae:48:83: 23:39:5d:cf:4b:c3:3b:bc:0a:7b:33:b4:f6:5e:61: c2:9a:76:e5:33:02:57:ac:c8:43:76:fd:f2:d2:fc: 05:29:b9:5c:89:a6:0f:04:09:17:b3:b3:dd:42:57: 93:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:82:35:B3:FD:75:5F:43:7F:92:A2:E8:AA:21:39:E7:84:F5:2E:9A X509v3 Authority Key Identifier: keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/323630343a653034303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e040::/32 Signature Algorithm: sha256WithRSAEncryption 29:c5:9c:77:86:70:54:4f:e9:60:35:d0:09:fa:73:3f:b9:5a: 46:89:a4:19:8a:22:33:23:07:ff:c8:42:0c:01:3c:d9:90:2f: 80:f1:cd:5b:29:57:35:a6:72:aa:a9:bc:bc:aa:60:eb:7b:0d: e5:fd:d5:af:1f:4b:00:d0:4c:8a:ce:30:b6:1a:cc:64:63:d4: 77:60:0e:f3:48:4e:72:cb:3d:bd:6f:33:72:7f:f7:2c:86:c7: 34:aa:11:c4:7d:00:aa:36:80:6c:59:6e:76:e9:4e:ca:7a:17: 27:2b:c6:e1:e5:b9:59:e1:00:3d:61:05:67:6d:4c:bb:c6:f6: 63:e6:fc:bc:24:9f:b2:5f:94:da:44:ab:99:20:d2:fa:99:00: 90:3a:6f:a9:4a:93:10:dc:ed:93:8f:98:b2:55:5b:7f:a1:c3: 3d:ed:a7:45:d0:63:7e:cd:d3:0d:c9:82:e5:db:2e:8d:1b:40: 13:d0:3b:d6:24:e3:34:6d:1f:31:1b:45:bc:0c:5c:3a:28:ba: 14:69:03:42:57:73:64:bb:5c:51:b6:81:2d:dc:d5:92:77:f2: 9d:ad:58:3b:4c:69:20:4e:a0:34:a4:61:6c:ff:c3:80:d9:06: f0:2c:ae:e8:03:bf:25:53:16:05:d3:a0:b0:dd:52:9e:4b:97: 71:73:0d:35 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUOOT8Z9yIxQiVwBtM5qOk50VfvXcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjYwNzAyMTAzMDQ3WhcNMjcwNzAxMTAzNTQ3 WjAzMTEwLwYDVQQDEyhFODgyMzVCM0ZENzU1RjQzN0Y5MkEyRThBQTIxMzlFNzg0 RjUyRTlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SBGAlQ5wTT4 vlxmsuKuruBIS4ve6/ZlS2xdC8GB1Vu1jF0bfLOuodIfN/wHJKBuZZVQSMzV862l wOV54JdPEucAT1ekzx+2RmahzN+WR1Z560X7P9wmbvlbfEN3CBc7IttVeTVUWzdZ aCvqEcovdUF520EsqqWByahdI5dVID12Uu3qZc1quUiQhsWGl1aq+PqnheNdQk2s +tN1Djlv8hNtQ1zQTC8SJwtxM0941Mp2tD4UxMHDuLt07XT5od6pi7oP2EPcM3gF OKi4SFmuSIMjOV3PS8M7vAp7M7T2XmHCmnblMwJXrMhDdv3y0vwFKblciaYPBAkX s7PdQleTWwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFOiCNbP9dV9Df5Ki6KohOeeE 9S6aMB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5 NzUxMmM0Mi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMzIzNjMwMzQzYTY1MzAzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBOBAMA0G CSqGSIb3DQEBCwUAA4IBAQApxZx3hnBUT+lgNdAJ+nM/uVpGiaQZiiIzIwf/yEIM ATzZkC+A8c1bKVc1pnKqqby8qmDrew3l/dWvH0sA0EyKzjC2GsxkY9R3YA7zSE5y yz29bzNyf/cshsc0qhHEfQCqNoBsWW526U7KehcnK8bh5blZ4QA9YQVnbUy7xvZj 5vy8JJ+yX5TaRKuZINL6mQCQOm+pSpMQ3O2Tj5iyVVt/ocM97adF0GN+zdMNyYLl 2y6NG0AT0DvWJOM0bR8xG0W8DFw6KLoUaQNCV3Nku1xRtoEt3NWSd/KdrVg7TGkg TqA0pGFs/8OA2QbwLK7oA78lUxYF06Cw3VKeS5dxcw01 -----END CERTIFICATE-----Generated at Sun Jul 12 08:30:29 2026 by rpki-client