$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2036323333.roa File: 323630353a336134303a3a2f33322d3438203d3e2036323333.roa (raw, json) Hash identifier: LZXlT8+qbhWLB4R7aL0iOQkfC3yXb7evUztfr+PQAWE= Subject key identifier: DF:4C:12:17:F9:7C:12:90:00:05:71:BE:41:F7:2D:8F:96:C7:1E:07 Certificate issuer: /CN=73516995116535a22de5a23000d3e7814baad6490837f37731 Certificate serial: 704F6F56CFB6239693DB4E40E10EF2A22A432D22 Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2036323333.roa Signing time: Sat 16 Aug 2025 01:48:18 +0000 ROA not before: Sat 16 Aug 2025 01:43:18 +0000 ROA not after: Sat 15 Aug 2026 01:48:18 +0000 asID: 6233 IP address blocks: 2605:3a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4f:6f:56:cf:b6:23:96:93:db:4e:40:e1:0e:f2:a2:2a:43:2d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731 Validity Not Before: Aug 16 01:43:18 2025 GMT Not After : Aug 15 01:48:18 2026 GMT Subject: CN=DF4C1217F97C1290000571BE41F72D8F96C71E07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:eb:18:26:ac:84:9d:51:8d:df:f1:1a:fe: 9e:9e:ca:de:64:fd:19:fe:e0:a8:a7:b5:3b:ce:70: 57:de:db:f3:0e:10:dd:05:94:b4:74:bc:ef:11:3f: 46:17:ea:99:f8:a6:2f:85:c8:c9:b2:c2:cd:da:82: 34:82:87:fe:36:be:c9:39:8f:b2:b6:f8:29:2b:96: 1d:bf:6f:15:4e:8e:3d:53:bf:9c:8e:c2:df:3b:de: 0e:57:96:fa:81:a0:3e:c5:38:e4:9e:83:b4:b9:77: d3:12:4e:03:f8:63:aa:95:78:76:b9:2a:86:a8:08: e7:64:ce:93:ef:13:52:3c:26:c8:4f:e6:8b:9a:4e: 94:a2:c8:74:61:b6:b7:84:b9:ff:e4:89:f4:e4:9f: c8:a1:80:a5:43:4d:ad:7d:5a:8c:36:ae:3b:34:78: c8:5f:72:30:e3:76:86:77:24:00:08:ea:4f:fd:0d: c5:14:de:aa:63:a3:ab:d3:95:0d:20:4d:68:cd:4e: 45:dd:e6:77:c9:38:85:5f:0a:81:e5:14:20:92:b8: 19:ea:dc:42:d2:29:e6:f7:7a:64:c1:fd:55:df:3a: a4:25:e9:d3:f9:b7:8d:f4:f0:27:a2:ce:07:9f:7a: ee:47:c6:71:5e:e5:f6:ce:8e:d8:c0:31:2d:a9:5b: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4C:12:17:F9:7C:12:90:00:05:71:BE:41:F7:2D:8F:96:C7:1E:07 X509v3 Authority Key Identifier: keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:3a40::/32 Signature Algorithm: sha256WithRSAEncryption 1e:1b:b6:47:cf:b6:88:f1:58:6f:7a:b4:9f:fc:71:fc:b5:69: 02:27:95:19:0f:7d:fc:07:d6:98:66:5f:84:cc:2a:96:61:71: 1e:bc:73:0a:f6:06:ac:9b:23:68:45:35:04:2e:3a:64:66:f6: a4:a8:12:bb:2b:8e:57:09:b9:98:55:5b:08:2e:04:bf:4c:19: b1:be:83:28:b8:db:68:23:e5:97:89:42:ae:3a:34:f1:1e:4e: cb:bf:27:58:ac:40:24:0c:58:f0:5e:1c:23:99:21:e9:06:27: ce:d2:14:92:e8:6d:a5:6c:69:96:ee:37:cc:34:b4:39:b6:64: 58:8c:16:13:20:de:f4:3e:34:3b:74:e5:db:65:da:c4:86:48: bf:21:26:88:c6:36:10:82:c2:6d:c5:00:fe:14:01:0d:26:57: d3:6c:84:e7:cc:98:0d:d5:e7:d0:e1:9c:6f:3f:3d:ee:0a:80: 3c:dc:57:b2:cc:52:4b:5d:b1:68:dc:2f:09:4f:be:9a:fa:6c: 10:d2:dc:51:bb:fd:28:1c:e9:6a:70:29:72:c5:ab:b7:3d:9b: ea:67:7f:30:b5:1a:62:5c:62:94:a3:ec:5a:d9:7b:8a:da:4b: 05:57:c8:dd:c2:72:32:fc:20:91:05:e7:ef:9f:89:ca:53:31: 74:fa:f8:8a -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUcE9vVs+2I5aT205A4Q7yoipDLSIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0 YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjUwODE2MDE0MzE4WhcNMjYwODE1MDE0ODE4 WjAzMTEwLwYDVQQDEyhERjRDMTIxN0Y5N0MxMjkwMDAwNTcxQkU0MUY3MkQ4Rjk2 QzcxRTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1LrGCashJ1R jd/xGv6ensreZP0Z/uCop7U7znBX3tvzDhDdBZS0dLzvET9GF+qZ+KYvhcjJssLN 2oI0gof+Nr7JOY+ytvgpK5Ydv28VTo49U7+cjsLfO94OV5b6gaA+xTjknoO0uXfT Ek4D+GOqlXh2uSqGqAjnZM6T7xNSPCbIT+aLmk6Uosh0Yba3hLn/5In05J/IoYCl Q02tfVqMNq47NHjIX3Iw43aGdyQACOpP/Q3FFN6qY6Or05UNIE1ozU5F3eZ3yTiF XwqB5RQgkrgZ6txC0inm93pkwf1V3zqkJenT+beN9PAnos4Hn3ruR8ZxXuX2zo7Y wDEtqVvhzQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFN9MEhf5fBKQAAVxvkH3LY+W xx4HMB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3 NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz N2YzNzczMS5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzNjMwMzUzYTMzNjEzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzYzMjMzMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBTpAMA0G CSqGSIb3DQEBCwUAA4IBAQAeG7ZHz7aI8VhverSf/HH8tWkCJ5UZD338B9aYZl+E zCqWYXEevHMK9gasmyNoRTUELjpkZvakqBK7K45XCbmYVVsILgS/TBmxvoMouNto I+WXiUKuOjTxHk7LvydYrEAkDFjwXhwjmSHpBifO0hSS6G2lbGmW7jfMNLQ5tmRY jBYTIN70PjQ7dOXbZdrEhki/ISaIxjYQgsJtxQD+FAENJlfTbITnzJgN1efQ4Zxv Pz3uCoA83FeyzFJLXbFo3C8JT76a+mwQ0txRu/0oHOlqcClyxau3PZvqZ38wtRpi XGKUo+xa2XuK2ksFV8jdwnIy/CCRBefvn4nKUzF0+viK -----END CERTIFICATE-----Generated at Sun Oct 26 04:35:17 2025 by rpki-client