$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39302e302f32342d3234203d3e2036323333.roa File: 3134322e3134372e39302e302f32342d3234203d3e2036323333.roa (raw, json) Hash identifier: J2KqAEgEY3NPoq76uN/b3hGzatbGYhM3NPozvwNZlH4= Subject key identifier: B5:74:FE:76:AF:24:AE:31:0B:15:02:C8:2E:56:C0:2C:93:55:E6:31 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 36F80E42A61BED1ECEACF4E8BAF0EB3FBF2BDDAC Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39302e302f32342d3234203d3e2036323333.roa Signing time: Sat 16 Aug 2025 01:48:19 +0000 ROA not before: Sat 16 Aug 2025 01:43:19 +0000 ROA not after: Sat 15 Aug 2026 01:48:19 +0000 asID: 6233 IP address blocks: 142.147.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f8:0e:42:a6:1b:ed:1e:ce:ac:f4:e8:ba:f0:eb:3f:bf:2b:dd:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Aug 16 01:43:19 2025 GMT Not After : Aug 15 01:48:19 2026 GMT Subject: CN=B574FE76AF24AE310B1502C82E56C02C9355E631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0e:83:de:c9:91:24:89:a6:5f:6a:b3:28:fe: 9c:94:81:91:38:6a:57:5f:90:cd:38:dc:43:48:ce: 83:ed:0f:9c:d2:e8:b8:b4:09:12:81:20:5b:c6:14: 61:6c:da:ea:54:0d:ab:87:30:c3:3e:ec:08:0c:f4: aa:f3:c1:b3:81:30:0d:89:30:ba:d5:a8:c1:17:87: 02:6a:12:5d:91:9e:32:ea:95:af:4c:1e:f5:1d:68: 0e:87:4b:c9:9f:51:1e:54:2b:db:8c:33:9d:8f:6f: e6:cc:0d:4a:63:17:94:17:9f:21:6b:b1:1d:4c:34: 57:33:3c:74:4f:5d:dd:e1:21:c6:d0:3e:3c:e0:e2: ba:88:86:5d:50:4d:70:ab:22:1e:68:fb:60:aa:08: 02:15:96:15:67:d2:5d:88:58:9d:8c:a7:5b:63:fc: c7:97:c7:92:5e:f6:e3:20:01:3d:b4:a7:61:50:85: ce:45:d4:16:03:1f:5e:13:43:0e:fd:b8:ce:5b:a7: 82:b2:78:82:62:25:d1:ab:c5:fc:47:78:3f:12:c9: bd:bf:2a:45:69:3b:96:6f:9b:c1:2f:ce:25:7a:25: 79:b4:56:b7:f1:90:88:b3:b5:db:da:6b:55:53:3f: 26:14:ad:3c:1d:5b:04:3a:11:d4:b4:65:46:c5:24: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:74:FE:76:AF:24:AE:31:0B:15:02:C8:2E:56:C0:2C:93:55:E6:31 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39302e302f32342d3234203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.147.90.0/24 Signature Algorithm: sha256WithRSAEncryption 86:b6:68:99:96:ea:1e:94:03:ab:0a:f0:8b:7f:28:22:fa:9e: 5a:e4:f0:6c:be:f7:0a:6a:da:23:fc:32:e0:86:cb:ef:02:21: 95:5c:d1:b4:f0:5c:65:f3:06:80:20:66:30:ba:b8:47:ac:30: e6:16:9f:5c:98:d5:d8:d1:8e:66:21:51:91:08:9f:e2:3e:13: 47:9b:44:12:1e:0c:66:95:bb:6d:76:f9:d0:6c:16:28:64:94: 6a:a2:eb:83:a8:0d:05:22:4f:1d:f6:ef:04:89:e5:19:49:4d: da:bc:e0:5a:fa:50:07:f7:42:b6:89:3f:a8:14:ee:67:4d:cf: a9:9b:5e:96:51:e5:d2:3c:be:02:50:df:77:e1:ff:1f:75:78: bb:7b:80:0b:03:49:1c:17:cf:18:d6:cb:f0:9b:95:4d:50:bf: 41:22:4a:45:93:da:32:6f:ca:0c:5c:f1:bf:52:12:d1:8b:ae: e1:fb:69:99:c3:86:4f:00:25:d0:63:b8:20:8e:e9:b7:d9:26: eb:56:e3:46:a8:aa:47:cb:18:f3:cf:23:62:00:a2:6b:39:ce: 99:e4:a7:9d:00:3d:c2:f9:57:05:a6:d7:1f:24:df:93:71:a0: b0:7b:21:92:8d:c2:2d:51:49:2c:b7:68:64:4a:cd:cc:d1:fc: df:d7:24:a2 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUNvgOQqYb7R7OrPTouvDrP78r3awwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjUwODE2MDE0MzE5WhcNMjYwODE1MDE0ODE5 WjAzMTEwLwYDVQQDEyhCNTc0RkU3NkFGMjRBRTMxMEIxNTAyQzgyRTU2QzAyQzkz NTVFNjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A6D3smRJImm X2qzKP6clIGROGpXX5DNONxDSM6D7Q+c0ui4tAkSgSBbxhRhbNrqVA2rhzDDPuwI DPSq88GzgTANiTC61ajBF4cCahJdkZ4y6pWvTB71HWgOh0vJn1EeVCvbjDOdj2/m zA1KYxeUF58ha7EdTDRXMzx0T13d4SHG0D484OK6iIZdUE1wqyIeaPtgqggCFZYV Z9JdiFidjKdbY/zHl8eSXvbjIAE9tKdhUIXORdQWAx9eE0MO/bjOW6eCsniCYiXR q8X8R3g/Esm9vypFaTuWb5vBL84leiV5tFa38ZCIs7Xb2mtVUz8mFK08HVsEOhHU tGVGxSTuSwIDAQABo4ICXjCCAlowHQYDVR0OBBYEFLV0/navJK4xCxUCyC5WwCyT VeYxMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzNDMyMmUzMTM0MzcyZTM5MzAy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI6TWjAN BgkqhkiG9w0BAQsFAAOCAQEAhrZomZbqHpQDqwrwi38oIvqeWuTwbL73CmraI/wy 4IbL7wIhlVzRtPBcZfMGgCBmMLq4R6ww5hafXJjV2NGOZiFRkQif4j4TR5tEEh4M ZpW7bXb50GwWKGSUaqLrg6gNBSJPHfbvBInlGUlN2rzgWvpQB/dCtok/qBTuZ03P qZtellHl0jy+AlDfd+H/H3V4u3uACwNJHBfPGNbL8JuVTVC/QSJKRZPaMm/KDFzx v1IS0Yuu4ftpmcOGTwAl0GO4II7pt9km61bjRqiqR8sY888jYgCiaznOmeSnnQA9 wvlXBabXHyTfk3GgsHshko3CLVFJLLdoZErNzNH839ckog== -----END CERTIFICATE-----Generated at Wed Nov 5 05:11:25 2025 by rpki-client