$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a333a3a2f34382d3438203d3e203236353438.roa File: 323630353a336134303a333a3a2f34382d3438203d3e203236353438.roa (raw, json) Hash identifier: MFRzUf+b99Mn6VGzftNoO4J6XD8RKulkMHJhjz9O5S0= Subject key identifier: D1:03:55:90:5A:48:2D:4D:0F:E2:B7:A0:83:B8:CD:86:A9:CC:44:EA Certificate issuer: /CN=73516995116535a22de5a23000d3e7814baad6490837f37731 Certificate serial: 22B3E5C3D547A389FE961CDD27C6F86FC3FB4BFA Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a333a3a2f34382d3438203d3e203236353438.roa Signing time: Sat 16 Aug 2025 01:48:18 +0000 ROA not before: Sat 16 Aug 2025 01:43:18 +0000 ROA not after: Sat 15 Aug 2026 01:48:18 +0000 asID: 26548 IP address blocks: 2605:3a40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:b3:e5:c3:d5:47:a3:89:fe:96:1c:dd:27:c6:f8:6f:c3:fb:4b:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731 Validity Not Before: Aug 16 01:43:18 2025 GMT Not After : Aug 15 01:48:18 2026 GMT Subject: CN=D10355905A482D4D0FE2B7A083B8CD86A9CC44EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:03:09:15:f4:8a:aa:f6:ba:3f:4c:65:af: 6f:6d:56:07:0a:c3:cf:87:ce:e6:ce:a6:82:33:57: c2:77:c6:34:0b:30:9c:cd:b7:79:cc:88:29:07:e5: 5d:f0:da:f2:f2:33:15:22:39:2e:dd:94:ba:6e:86: 92:77:e5:bc:da:dc:c5:09:31:cc:25:73:d0:6f:50: 12:be:a4:a8:b5:40:69:80:13:a3:38:a0:80:a4:b8: b0:f0:d9:f1:6c:2c:eb:00:f2:30:af:34:ae:b6:6c: 17:76:66:02:8d:fe:07:21:38:e4:3b:08:f8:fe:42: cc:a4:6a:42:5d:d6:43:f6:36:99:9a:3b:0c:28:e0: 65:ac:6c:91:ab:77:81:5b:90:62:62:f9:95:66:52: c7:b3:ca:cd:7a:46:80:a8:61:dd:24:38:a0:66:72: 79:6c:2d:5b:f3:43:7e:e9:1d:cc:ff:d5:be:05:0b: 59:09:ed:49:7f:97:1f:2a:bc:b9:9b:c1:3b:27:b3: 0c:31:36:b0:7f:bc:3a:49:4c:60:31:3b:82:d4:5f: cd:ff:b7:03:a3:11:95:28:87:4e:b7:9a:8b:be:c5: 26:09:f8:ff:ed:26:65:a9:7e:1b:02:0b:9a:88:53: 1a:1f:11:5f:45:67:ed:79:df:66:8e:71:db:80:bf: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:03:55:90:5A:48:2D:4D:0F:E2:B7:A0:83:B8:CD:86:A9:CC:44:EA X509v3 Authority Key Identifier: keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a333a3a2f34382d3438203d3e203236353438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:3a40:3::/48 Signature Algorithm: sha256WithRSAEncryption 4a:a1:32:89:7a:2c:28:bf:b9:81:d2:b3:ba:81:64:7c:04:e5: bf:9a:e7:2f:5e:15:ff:fc:ae:35:c5:e9:6b:7d:67:ce:5a:68: 2d:fd:5f:c8:f9:35:16:11:ed:f4:b3:31:c3:ec:71:e3:50:2a: 1b:ef:88:8a:0f:43:ef:d9:ec:04:44:cf:86:96:78:f2:f1:2b: 39:32:62:92:26:d5:4f:08:8f:2b:c6:f6:39:73:0a:ea:6e:ce: 65:0d:93:dd:f5:0d:63:2d:56:eb:4d:f0:c0:4c:2f:cd:f9:47: 24:9a:03:e3:de:26:0a:e3:f3:42:4a:01:d4:56:b0:8f:b2:e9: 6d:50:5f:19:74:52:e4:d7:d1:44:53:9c:a6:a8:1f:45:80:76: 2f:35:7d:1f:f4:14:ac:12:fa:27:ab:15:84:09:d1:d3:d1:46: d5:86:d7:fe:07:d6:04:e0:cc:bf:a6:cb:98:83:71:41:1a:24: 3d:ba:16:bf:ba:ec:45:fb:8d:3c:4f:63:7b:f0:66:b8:4e:c6: f8:0c:a8:fd:1e:9f:f9:63:5d:a9:82:9d:29:6c:00:a9:d0:d7: 2b:b5:a2:43:d2:63:74:0d:4e:92:16:00:7e:41:55:40:99:2f: aa:33:99:58:15:50:53:11:e6:31:dd:a3:ad:6d:c0:00:a3:11: 47:27:5a:cb -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUIrPlw9VHo4n+lhzdJ8b4b8P7S/owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0 YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjUwODE2MDE0MzE4WhcNMjYwODE1MDE0ODE4 WjAzMTEwLwYDVQQDEyhEMTAzNTU5MDVBNDgyRDREMEZFMkI3QTA4M0I4Q0Q4NkE5 Q0M0NEVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskEDCRX0iqr2 uj9MZa9vbVYHCsPPh87mzqaCM1fCd8Y0CzCczbd5zIgpB+Vd8Nry8jMVIjku3ZS6 boaSd+W82tzFCTHMJXPQb1ASvqSotUBpgBOjOKCApLiw8NnxbCzrAPIwrzSutmwX dmYCjf4HITjkOwj4/kLMpGpCXdZD9jaZmjsMKOBlrGyRq3eBW5BiYvmVZlLHs8rN ekaAqGHdJDigZnJ5bC1b80N+6R3M/9W+BQtZCe1Jf5cfKry5m8E7J7MMMTawf7w6 SUxgMTuC1F/N/7cDoxGVKIdOt5qLvsUmCfj/7SZlqX4bAguaiFMaHxFfRWfted9m jnHbgL8zRQIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFNEDVZBaSC1ND+K3oIO4zYap zETqMB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3 NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz N2YzNzczMS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzNjMwMzUzYTMzNjEzNDMwM2Ez MzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNTM0Mzgucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm BTpAAAMwDQYJKoZIhvcNAQELBQADggEBAEqhMol6LCi/uYHSs7qBZHwE5b+a5y9e Ff/8rjXF6Wt9Z85aaC39X8j5NRYR7fSzMcPsceNQKhvviIoPQ+/Z7AREz4aWePLx KzkyYpIm1U8IjyvG9jlzCupuzmUNk931DWMtVutN8MBML835RySaA+PeJgrj80JK AdRWsI+y6W1QXxl0UuTX0URTnKaoH0WAdi81fR/0FKwS+ierFYQJ0dPRRtWG1/4H 1gTgzL+my5iDcUEaJD26Fr+67EX7jTxPY3vwZrhOxvgMqP0en/ljXamCnSlsAKnQ 1yu1okPSY3QNTpIWAH5BVUCZL6ozmVgVUFMR5jHdo61twACjEUcnWss= -----END CERTIFICATE-----Generated at Sun Oct 26 04:35:19 2025 by rpki-client