
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa
File: 32332e3134352e34382e302f32342d3234203d3e203530313331.roa (raw, json)
Hash identifier: ta3bBWXxY4qLWB10THmdI9XwgmXKENQbgYikvtaJzH0=
Subject key identifier: 36:81:BD:85:70:74:EA:9A:2F:49:84:7C:20:16:74:CE:E7:91:B6:E4
Certificate issuer: /CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Certificate serial: 60504C86F5641CE65BD8E15F9910017214C7E8C8
Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa
Signing time: Wed 02 Jul 2025 16:24:23 +0000
ROA not before: Wed 02 Jul 2025 16:19:23 +0000
ROA not after: Wed 01 Jul 2026 16:24:23 +0000
asID: 50131
IP address blocks: 23.145.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Oct 2025 03:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:50:4c:86:f5:64:1c:e6:5b:d8:e1:5f:99:10:01:72:14:c7:e8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731
Validity
Not Before: Jul 2 16:19:23 2025 GMT
Not After : Jul 1 16:24:23 2026 GMT
Subject: CN=3681BD857074EA9A2F49847C201674CEE791B6E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:8b:f8:74:8f:a0:a0:d3:a9:f7:9a:14:36:
73:5a:27:60:f9:f9:e0:b4:d0:6f:32:ba:62:ef:8f:
79:27:f3:fd:87:ba:ba:43:04:cf:bb:01:98:5c:b8:
3e:bf:4a:61:28:26:85:34:32:43:cd:0f:a6:ca:f5:
ce:28:fc:07:e8:8c:0d:59:c3:69:ad:08:b2:69:bc:
74:cd:b8:6f:5e:14:b1:b1:5c:7f:ba:3f:83:81:94:
2a:b4:e7:eb:1b:bd:bb:a0:d9:d2:04:30:e3:c8:4e:
0c:34:4d:9a:1e:0a:b6:de:ff:0f:5d:48:f6:34:1c:
ce:67:c9:3c:0b:9c:ae:d4:82:b8:ef:6e:45:2a:64:
7d:ef:f3:48:db:e1:7b:7d:aa:a1:6a:a1:55:f2:d1:
c9:6b:91:bd:c0:6e:2a:fd:e1:f0:9b:18:a2:8f:32:
dd:eb:5b:61:75:7a:ae:58:08:b8:94:80:73:12:32:
e9:8a:4a:73:f6:f0:39:26:cb:f1:5e:f2:f4:a5:ea:
c3:9f:38:31:95:1c:39:04:12:69:bf:b4:4f:d8:da:
c3:83:75:d7:60:a7:23:e7:39:c5:15:5f:c1:29:57:
6d:91:b3:2c:24:4e:eb:ae:0e:c4:c3:63:81:f7:45:
fb:13:2b:26:4e:c1:36:d8:34:4f:cd:03:05:be:dd:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:81:BD:85:70:74:EA:9A:2F:49:84:7C:20:16:74:CE:E7:91:B6:E4
X509v3 Authority Key Identifier:
keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/32332e3134352e34382e302f32342d3234203d3e203530313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.145.48.0/24
Signature Algorithm: sha256WithRSAEncryption
06:f9:3e:22:aa:3a:22:b6:8e:53:52:c2:aa:83:da:02:5a:6c:
05:4a:7b:f7:8f:4f:5e:58:02:c4:e0:b9:d7:5e:55:f7:54:fe:
39:dd:ed:70:35:95:fc:b6:a3:22:56:fe:ce:b6:ac:42:6b:77:
e3:76:e3:2a:34:b2:f3:e5:63:8a:c4:a3:4a:34:e5:92:2f:51:
0d:ab:8c:03:89:c3:4f:9b:93:f9:77:c9:96:f3:9c:8e:93:9b:
87:93:01:21:32:d1:b6:10:7e:c8:36:a2:31:f2:e7:5a:53:c0:
13:4c:48:2f:16:08:db:bc:db:a3:1a:ee:a1:f3:17:8e:46:6b:
12:6f:7b:1d:5f:10:ca:97:6d:8b:c0:44:a6:d9:4f:ae:54:f1:
8a:13:53:39:57:0a:3c:80:64:b4:8c:83:28:53:63:eb:15:45:
19:aa:d4:da:23:e9:e1:1c:cb:20:ef:4b:f6:f9:db:26:51:d6:
3d:ce:d8:ec:73:d0:0d:44:63:1a:ce:a6:12:53:2e:5f:4c:df:
ae:8f:b1:78:3b:40:78:66:0c:15:86:3b:97:10:14:3a:3e:9f:
81:01:98:db:06:5a:2b:49:ef:ba:dd:03:72:bb:04:c7:4f:dd:
1a:0a:10:17:53:6a:19:9a:31:e3:26:4a:a6:ec:4e:db:14:3b:
8e:b5:cb:54
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYFBMhvVkHOZb2OFfmRABchTH6MgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0
YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjUwNzAyMTYxOTIzWhcNMjYwNzAxMTYyNDIz
WjAzMTEwLwYDVQQDEygzNjgxQkQ4NTcwNzRFQTlBMkY0OTg0N0MyMDE2NzRDRUU3
OTFCNkU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7eL+HSPoKDT
qfeaFDZzWidg+fngtNBvMrpi7495J/P9h7q6QwTPuwGYXLg+v0phKCaFNDJDzQ+m
yvXOKPwH6IwNWcNprQiyabx0zbhvXhSxsVx/uj+DgZQqtOfrG727oNnSBDDjyE4M
NE2aHgq23v8PXUj2NBzOZ8k8C5yu1IK4725FKmR97/NI2+F7faqhaqFV8tHJa5G9
wG4q/eHwmxiijzLd61thdXquWAi4lIBzEjLpikpz9vA5JsvxXvL0perDnzgxlRw5
BBJpv7RP2NrDg3XXYKcj5znFFV/BKVdtkbMsJE7rrg7Ew2OB90X7EysmTsE22DRP
zQMFvt1kqQIDAQABo4ICXjCCAlowHQYDVR0OBBYEFDaBvYVwdOqaL0mEfCAWdM7n
kbbkMB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw
L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG
Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3
NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi
YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz
N2YzNzczMS5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov
L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzMzJlMzEzNDM1MmUzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMDMxMzMzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeRMDAN
BgkqhkiG9w0BAQsFAAOCAQEABvk+Iqo6IraOU1LCqoPaAlpsBUp7949PXlgCxOC5
115V91T+Od3tcDWV/LajIlb+zrasQmt343bjKjSy8+VjisSjSjTlki9RDauMA4nD
T5uT+XfJlvOcjpObh5MBITLRthB+yDaiMfLnWlPAE0xILxYI27zboxruofMXjkZr
Em97HV8Qypdti8BEptlPrlTxihNTOVcKPIBktIyDKFNj6xVFGarU2iPp4RzLIO9L
9vnbJlHWPc7Y7HPQDURjGs6mElMuX0zfro+xeDtAeGYMFYY7lxAUOj6fgQGY2wZa
K0nvut0DcrsEx0/dGgoQF1NqGZox4yZKpuxO2xQ7jrXLVA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 08:02:53 2025 by rpki-client