$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa File: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (raw, json) Hash identifier: RAI9FS6byyypE5CDEjaCjAf5XKGjonVoUspbx35JdNY= Subject key identifier: C9:2A:AA:9D:76:D8:67:68:85:53:C8:EA:18:A4:A4:86:03:0F:C3:75 Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Certificate serial: 46BD09E54A3A18A27480B1134DD95380B8663475 Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa Signing time: Sat 16 Aug 2025 01:48:26 +0000 ROA not before: Sat 16 Aug 2025 01:43:26 +0000 ROA not after: Sat 15 Aug 2026 01:48:26 +0000 asID: 11930 IP address blocks: 2604:e4c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 23:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:bd:09:e5:4a:3a:18:a2:74:80:b1:13:4d:d9:53:80:b8:66:34:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Validity Not Before: Aug 16 01:43:26 2025 GMT Not After : Aug 15 01:48:26 2026 GMT Subject: CN=C92AAA9D76D867688553C8EA18A4A486030FC375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:f1:b9:82:c7:2b:4a:43:fb:be:9c:c1:43: be:dd:58:46:f5:cd:91:da:95:ed:ac:9a:8a:ed:67: dd:8c:b2:b0:80:56:41:d2:b6:fa:48:66:3d:5c:dd: 53:81:a5:0b:d8:95:80:b4:1b:d6:57:b0:c6:b0:1d: ab:f6:5f:4f:3d:14:ee:5d:7f:99:52:b2:a8:51:e0: e2:c1:0c:40:63:dc:78:30:33:3d:04:4b:d0:b6:58: 52:6a:9c:c8:e6:ac:d7:54:eb:63:3d:f4:46:57:fe: 72:1d:53:28:c3:37:d0:b1:10:d4:21:ed:60:5f:45: 91:04:32:84:6d:63:b2:12:10:29:61:70:a3:98:de: 1f:d0:6f:05:fb:6d:c5:02:35:ae:91:8d:44:92:2e: 92:ce:99:88:10:13:36:fe:b0:2a:9e:4f:d6:ff:5f: 1c:4b:89:dc:e7:ed:13:99:11:d6:ac:f1:82:de:cf: 36:ae:fc:a5:da:18:1b:6d:ec:72:b3:f6:88:d4:2a: d6:43:9c:b2:5e:63:27:60:6c:d8:d3:3d:7e:22:2a: 17:c4:61:38:91:26:c0:af:3f:ac:57:b1:ce:2b:d9: 67:c8:ce:76:72:ab:d7:be:56:89:5a:38:f1:bd:3b: 7b:ac:b2:34:17:ed:c6:e5:8f:70:5f:8c:71:8e:52: c2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2A:AA:9D:76:D8:67:68:85:53:C8:EA:18:A4:A4:86:03:0F:C3:75 X509v3 Authority Key Identifier: keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3a2f33322d3438203d3e203131393330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e4c0::/32 Signature Algorithm: sha256WithRSAEncryption 2d:25:58:2d:16:e7:c3:88:3b:65:5d:7e:44:11:a9:55:cc:a3: 16:e3:df:68:d2:6b:c5:3c:87:57:fd:e4:93:e8:f2:79:63:f0: 0c:e2:f9:bd:01:ed:e7:04:41:a6:82:28:a4:27:45:4f:6b:ea: dd:f0:65:e7:be:c1:b3:30:52:83:d0:ff:ef:02:f0:d3:69:f6: 20:18:5c:04:49:d7:10:ff:74:4f:06:17:5f:10:ea:6c:39:50: 4b:f0:fb:b4:b6:b8:87:e8:be:22:db:ab:5b:14:e9:da:ed:14: 2c:53:56:9e:cd:60:9b:37:34:53:57:aa:a6:8a:bd:93:9c:6b: 02:52:ff:e0:1d:da:89:91:68:47:34:77:da:9a:84:f9:6d:42: 13:a0:f8:eb:5c:36:73:e8:9f:76:1d:e1:1b:41:46:e8:00:96: e6:8c:a6:0d:4b:32:e8:56:cd:a4:92:13:a2:27:5f:5d:bb:fe: 43:da:53:13:0c:47:24:3a:16:7f:4c:75:6a:e8:22:9e:e2:c8: ce:b0:82:5e:39:69:1f:23:99:22:44:05:28:93:56:4c:01:4b: 72:f2:1b:cc:4e:35:28:c4:75:c4:6b:45:67:40:91:60:d8:90: e5:27:62:0e:ed:74:f9:3b:b6:f4:41:f0:e9:8b:55:ae:3a:98: bd:b3:6b:3e -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIURr0J5Uo6GKJ0gLETTdlTgLhmNHUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh N2NmZjE3MzliMDI3YzY0MGIwHhcNMjUwODE2MDE0MzI2WhcNMjYwODE1MDE0ODI2 WjAzMTEwLwYDVQQDEyhDOTJBQUE5RDc2RDg2NzY4ODU1M0M4RUExOEE0QTQ4NjAz MEZDMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwXxuYLHK0pD +76cwUO+3VhG9c2R2pXtrJqK7WfdjLKwgFZB0rb6SGY9XN1TgaUL2JWAtBvWV7DG sB2r9l9PPRTuXX+ZUrKoUeDiwQxAY9x4MDM9BEvQtlhSapzI5qzXVOtjPfRGV/5y HVMowzfQsRDUIe1gX0WRBDKEbWOyEhApYXCjmN4f0G8F+23FAjWukY1Eki6SzpmI EBM2/rAqnk/W/18cS4nc5+0TmRHWrPGC3s82rvyl2hgbbexys/aI1CrWQ5yyXmMn YGzY0z1+IioXxGE4kSbArz+sV7HOK9lnyM52cqvXvlaJWjjxvTt7rLI0F+3G5Y9w X4xxjlLCEwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFMkqqp122GdohVPI6hikpIYD D8N1MB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2 Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4 MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw MjdjNjQwYi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvMzIzNjMwMzQzYTY1MzQ2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzEzMTM5MzMzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACYE5MAw DQYJKoZIhvcNAQELBQADggEBAC0lWC0W58OIO2VdfkQRqVXMoxbj32jSa8U8h1f9 5JPo8nlj8Azi+b0B7ecEQaaCKKQnRU9r6t3wZee+wbMwUoPQ/+8C8NNp9iAYXARJ 1xD/dE8GF18Q6mw5UEvw+7S2uIfoviLbq1sU6drtFCxTVp7NYJs3NFNXqqaKvZOc awJS/+Ad2omRaEc0d9qahPltQhOg+OtcNnPon3Yd4RtBRugAluaMpg1LMuhWzaSS E6InX127/kPaUxMMRyQ6Fn9MdWroIp7iyM6wgl45aR8jmSJEBSiTVkwBS3LyG8xO NSjEdcRrRWdAkWDYkOUnYg7tdPk7tvRB8OmLVa46mL2zaz4= -----END CERTIFICATE-----Generated at Wed Oct 29 09:58:53 2025 by rpki-client