$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2038383838.roa File: 323630353a336134303a3a2f33322d3438203d3e2038383838.roa (raw, json) Hash identifier: Q628/GYCPCMDTE/goNk1bpcitngp7N6z4XrmYD7Byyo= Subject key identifier: F0:A7:82:2C:6B:EA:FA:76:6B:C1:4D:0A:75:3F:E8:75:C1:64:21:27 Certificate issuer: /CN=73516995116535a22de5a23000d3e7814baad6490837f37731 Certificate serial: 209CA3520CE25AC13CC3BCA5E9ADDDF6FD630611 Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2038383838.roa Signing time: Thu 02 Jul 2026 10:35:49 +0000 ROA not before: Thu 02 Jul 2026 10:30:49 +0000 ROA not after: Thu 01 Jul 2027 10:35:49 +0000 asID: 8888 IP address blocks: 2605:3a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9c:a3:52:0c:e2:5a:c1:3c:c3:bc:a5:e9:ad:dd:f6:fd:63:06:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731 Validity Not Before: Jul 2 10:30:49 2026 GMT Not After : Jul 1 10:35:49 2027 GMT Subject: CN=F0A7822C6BEAFA766BC14D0A753FE875C1642127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:8f:b2:1f:d5:2b:98:3b:05:49:ef:9a:3f: 38:3a:ed:5f:9d:49:87:bc:c1:43:ab:8e:1c:d7:20: a4:72:e5:08:3d:67:da:63:c4:93:23:bb:31:43:b5: 8b:51:92:7c:ed:2d:e3:b7:e5:ca:0b:fc:48:a8:a9: e4:18:ed:2c:d9:48:f8:02:a5:49:a0:98:a8:4b:c8: c3:b5:25:fc:3f:76:62:a9:d1:3f:ad:9f:f0:45:84: 67:c3:cc:08:48:ea:c6:1c:23:72:7d:dc:08:89:ee: ed:8b:d1:dc:af:87:33:01:14:0b:a6:9d:7e:9d:fb: 7d:85:52:5c:89:79:fe:25:e0:25:c4:62:b7:81:7c: 3f:92:23:25:99:7a:5a:a4:ed:1e:14:d8:b8:f8:e7: 2e:d8:55:5d:af:b6:3a:b3:46:9a:35:6d:e5:10:e0: 82:b5:ca:21:aa:43:c6:c9:b7:df:20:3b:49:e3:8b: 6c:02:7f:f2:51:a5:34:61:ee:04:9f:74:63:87:b1: f5:cb:87:01:66:82:38:b3:83:c3:eb:65:43:14:82: 79:8e:6f:18:5c:e7:ea:89:f7:54:4b:54:fd:49:ac: 41:5e:c1:cc:28:66:4f:82:50:2d:df:12:40:a1:32: 14:d2:08:90:05:ce:53:d0:97:18:84:b2:3f:f6:42: 12:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A7:82:2C:6B:EA:FA:76:6B:C1:4D:0A:75:3F:E8:75:C1:64:21:27 X509v3 Authority Key Identifier: keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a3a2f33322d3438203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:3a40::/32 Signature Algorithm: sha256WithRSAEncryption 93:cc:8c:62:10:1b:e9:26:65:58:39:10:61:05:8d:27:f7:65: 56:28:70:7e:17:47:81:a0:ff:a0:c0:6c:df:7e:97:e2:d2:7a: 10:e7:db:2f:e5:93:c9:a9:88:4b:de:86:4b:ba:24:ad:bc:1a: ac:e7:8f:95:4f:53:c1:73:4d:c0:c9:2d:22:2d:f3:a7:2b:63: a3:2c:8d:e1:68:56:95:b2:ef:9a:df:5a:cd:c4:b1:bb:a7:28: 70:2d:a7:35:48:d8:72:2d:06:ef:eb:e9:63:67:bd:d8:0b:62: fb:88:cd:50:ef:2f:cb:9c:52:10:eb:96:eb:3b:04:b0:2c:95: 3e:d1:25:2b:97:d8:17:54:65:ed:92:d6:b6:74:8f:27:45:70: 9f:49:e9:c3:e6:89:6a:c1:8d:0e:6f:c7:2c:5e:85:2d:56:2a: ee:a6:68:12:91:99:f1:64:56:68:5b:1c:9d:d7:5d:1a:48:0b: 6a:7d:34:99:96:96:b8:5a:8a:f9:a7:bb:22:0d:fd:7b:8f:cc: 4a:e1:88:69:ce:5c:50:7b:e4:c0:cb:24:b1:1d:02:b3:40:76: 43:9c:85:bc:18:77:69:17:a2:8a:12:91:1d:4c:69:cb:92:ef: aa:d3:5e:4c:b0:c6:36:d2:bd:67:29:f3:e5:58:1b:42:cd:80: 18:86:33:26 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUIJyjUgziWsE8w7yl6a3d9v1jBhEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0 YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjYwNzAyMTAzMDQ5WhcNMjcwNzAxMTAzNTQ5 WjAzMTEwLwYDVQQDEyhGMEE3ODIyQzZCRUFGQTc2NkJDMTREMEE3NTNGRTg3NUMx NjQyMTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllOPsh/VK5g7 BUnvmj84Ou1fnUmHvMFDq44c1yCkcuUIPWfaY8STI7sxQ7WLUZJ87S3jt+XKC/xI qKnkGO0s2Uj4AqVJoJioS8jDtSX8P3ZiqdE/rZ/wRYRnw8wISOrGHCNyfdwIie7t i9Hcr4czARQLpp1+nft9hVJciXn+JeAlxGK3gXw/kiMlmXpapO0eFNi4+Ocu2FVd r7Y6s0aaNW3lEOCCtcohqkPGybffIDtJ44tsAn/yUaU0Ye4En3Rjh7H1y4cBZoI4 s4PD62VDFIJ5jm8YXOfqifdUS1T9SaxBXsHMKGZPglAt3xJAoTIU0giQBc5T0JcY hLI/9kISFwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFPCngixr6vp2a8FNCnU/6HXB ZCEnMB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3 NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz N2YzNzczMS5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzNjMwMzUzYTMzNjEzNDMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzgzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBTpAMA0G CSqGSIb3DQEBCwUAA4IBAQCTzIxiEBvpJmVYORBhBY0n92VWKHB+F0eBoP+gwGzf fpfi0noQ59sv5ZPJqYhL3oZLuiStvBqs54+VT1PBc03AyS0iLfOnK2OjLI3haFaV su+a31rNxLG7pyhwLac1SNhyLQbv6+ljZ73YC2L7iM1Q7y/LnFIQ65brOwSwLJU+ 0SUrl9gXVGXtkta2dI8nRXCfSenD5olqwY0Ob8csXoUtVirupmgSkZnxZFZoWxyd 110aSAtqfTSZlpa4Wor5p7siDf17j8xK4YhpzlxQe+TAyySxHQKzQHZDnIW8GHdp F6KKEpEdTGnLku+q015MsMY20r1nKfPlWBtCzYAYhjMm -----END CERTIFICATE-----Generated at Tue Jul 21 22:23:42 2026 by rpki-client