
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa
File: 3130342e3234352e382e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier: ZLQ3W4hdQXbTX+1hp0+Zem+0zRboUSg2cjQnisu1kTA=
Subject key identifier: B1:5D:6B:3E:C8:04:18:A8:1F:8C:B0:99:40:FC:99:5F:32:69:C3:76
Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Certificate serial: 273F87ABA0B34DA7504D90556E71639E6E6853D5
Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa
Signing time: Sat 16 Aug 2025 01:48:20 +0000
ROA not before: Sat 16 Aug 2025 01:43:20 +0000
ROA not after: Sat 15 Aug 2026 01:48:20 +0000
asID: 36351
IP address blocks: 104.245.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Oct 2025 04:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:3f:87:ab:a0:b3:4d:a7:50:4d:90:55:6e:71:63:9e:6e:68:53:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524
Validity
Not Before: Aug 16 01:43:20 2025 GMT
Not After : Aug 15 01:48:20 2026 GMT
Subject: CN=B15D6B3EC80418A81F8CB09940FC995F3269C376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:5a:05:2c:6b:bd:00:e0:00:52:09:30:2e:
60:a3:c6:7b:1a:60:0c:c7:de:64:de:eb:94:b6:42:
11:90:f2:29:02:50:cf:88:9a:ab:8b:10:bc:19:2b:
f8:17:22:50:50:c1:38:da:0f:a3:a2:1b:0e:fb:87:
a2:79:a7:f9:e7:70:ca:f5:e6:72:9e:16:05:4f:08:
ff:97:04:3e:70:de:0b:0d:aa:4e:bb:3d:1c:07:e1:
15:48:7c:42:37:fb:ba:79:5e:dc:ef:31:99:11:df:
fe:44:c5:56:ba:2a:82:6e:f0:28:b3:15:49:6c:a6:
49:b9:93:da:56:35:2e:c1:31:b7:cb:12:db:be:55:
9a:6e:dd:ae:0d:b3:82:8c:37:02:53:ff:9f:a6:f8:
3b:99:73:e1:27:c8:bd:64:ca:4c:fd:19:56:56:53:
31:a9:5f:ca:af:45:2d:59:32:a9:14:6d:1f:21:1f:
ec:76:54:d0:4a:2b:b3:0d:fb:ba:ed:9c:3f:6b:82:
b2:de:3a:3f:11:1b:d2:ec:4e:23:92:d4:96:62:09:
cf:0c:fa:73:8d:bb:22:f0:1a:2d:f7:a4:d2:3b:95:
a1:4c:76:ab:64:ba:d5:e1:0a:72:29:20:c9:c2:fb:
09:39:8c:f2:73:eb:ea:c6:1c:45:aa:f2:51:ff:84:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:6B:3E:C8:04:18:A8:1F:8C:B0:99:40:FC:99:5F:32:69:C3:76
X509v3 Authority Key Identifier:
keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32342d3234203d3e203336333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.245.8.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a5:b3:57:43:9b:76:3e:2a:13:c5:6d:e4:29:ab:c9:81:50:
8f:22:e5:9a:7e:11:58:30:aa:c5:68:9b:92:27:19:19:13:ad:
45:0e:fa:da:5f:e5:bb:3a:c6:e3:ed:4b:ae:92:c6:50:c6:1b:
f5:6d:35:f2:d1:90:f4:63:95:8f:97:bd:14:6c:51:de:83:e6:
8f:dd:5e:4a:11:89:80:18:ea:b7:8f:ae:b3:9e:0c:e3:9b:fc:
68:77:67:d0:d6:11:b5:29:a5:db:24:a4:c8:31:74:b9:76:41:
49:ce:92:21:02:96:0e:6b:fc:6b:46:8d:51:b4:4e:32:37:91:
e5:ca:4a:25:c4:4e:c4:51:27:99:56:cf:28:ea:4b:93:2e:6b:
1e:e9:6e:d6:bd:dd:a6:77:35:ad:b2:1f:d2:cf:e9:14:b1:db:
3c:20:a1:c9:dc:5a:39:ad:21:de:93:b3:f2:e3:ba:63:5d:48:
57:9c:33:ab:f7:70:c3:0e:2d:c6:6b:1e:c6:e4:75:e7:e5:66:
20:bb:50:b8:f5:cf:bf:f1:e9:14:a2:13:65:fa:6b:bc:27:9a:
b7:eb:a2:5c:49:17:7c:6b:f0:c1:dd:77:49:73:27:d4:ea:60:
be:6b:08:6f:b6:14:1b:76:b7:ab:a4:c6:cd:d9:84:e9:00:cb:
7a:b5:27:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:46:24 2025 by rpki-client