$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e20393439.roa File: 3134322e3134372e38382e302f32312d3234203d3e20393439.roa (raw, json) Hash identifier: FE6Rcv4/6kQKQCWXnyoMwtn/8ZR0ce5Qw6fyfDg8UE0= Subject key identifier: 1A:F9:26:93:8B:0F:1C:1E:C8:7F:A7:40:C2:C7:B7:B5:51:B6:9D:7A Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 4A5A3BDBA713D87CFFED45C8DF65E2B91A86391A Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e20393439.roa Signing time: Thu 12 Oct 2023 16:10:37 +0000 ROA not before: Thu 12 Oct 2023 16:05:37 +0000 ROA not after: Thu 10 Oct 2024 16:10:37 +0000 asID: 949 IP address blocks: 142.147.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 10:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5a:3b:db:a7:13:d8:7c:ff:ed:45:c8:df:65:e2:b9:1a:86:39:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Oct 12 16:05:37 2023 GMT Not After : Oct 10 16:10:37 2024 GMT Subject: CN=1AF926938B0F1C1EC87FA740C2C7B7B551B69D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:3d:47:e0:43:5b:45:b1:cd:eb:76:09:10: 48:06:92:c1:da:d5:ef:92:6b:67:92:90:1c:05:18: 59:d3:80:da:a8:e2:42:06:7c:5b:e7:1e:cf:a5:28: c2:1e:9a:d4:60:a3:0f:20:cf:44:e5:3b:ff:63:3d: 5e:1f:5a:63:51:fd:3c:33:d6:00:e1:44:74:6f:2c: a5:41:56:3d:07:51:04:b6:57:9e:3a:db:04:a3:03: 9f:69:a3:6c:03:2e:05:e4:8d:ab:31:5d:7e:4a:64: 27:d7:1c:e8:77:29:90:17:0c:11:8e:c7:ae:70:b6: 29:4b:c1:7f:3d:3c:40:8c:ec:de:19:41:5e:41:60: 6c:88:7b:d5:cb:0c:f8:fa:d6:f1:09:ba:cc:a8:b4: ee:e5:bc:99:09:d1:c6:a2:80:6a:4e:03:f8:39:46: d5:71:d5:f5:38:22:cd:85:df:35:19:66:50:6d:c5: 47:3e:2e:6b:a3:36:f7:4c:ed:30:29:33:6b:3e:67: c2:3d:f0:eb:e9:92:b0:d7:50:56:84:83:a1:ed:33: 9b:74:a4:cc:89:04:84:6f:bc:d6:b9:b7:3b:cc:6a: a7:22:06:61:de:04:c9:3b:71:75:3e:88:f4:03:16: 47:18:b1:7d:fa:b6:85:0b:e1:9d:bc:80:59:68:3e: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F9:26:93:8B:0F:1C:1E:C8:7F:A7:40:C2:C7:B7:B5:51:B6:9D:7A X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e38382e302f32312d3234203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.147.88.0/21 Signature Algorithm: sha256WithRSAEncryption a1:6a:50:0c:93:ec:dc:ad:2e:5d:be:d1:7a:6f:8b:ca:b1:db: ae:93:24:2c:e2:be:2c:e3:f0:f3:40:fe:6b:87:b0:ad:ee:d0: d8:18:d2:26:77:9b:9a:fd:61:81:78:35:93:af:2e:fe:65:ce: f1:c2:bd:76:e8:a1:bb:bb:02:a1:12:3d:1d:14:4f:87:90:8f: dd:60:53:55:da:e4:50:9b:2a:50:62:73:a9:b4:07:4a:b8:13: 73:44:3e:a7:61:f3:68:52:61:d4:b8:aa:36:78:03:f2:56:6e: a4:c0:c6:0b:48:2e:03:73:e3:de:59:a9:69:a4:ff:2b:13:03: fa:e0:d8:ac:23:cc:f2:47:8e:5c:e2:a0:be:71:12:b9:3b:c4: 7a:cb:3c:4c:73:fe:5c:3f:35:54:2a:f5:d2:96:33:cb:f5:a0: 0c:a7:69:77:b5:1c:27:d5:22:93:c6:de:4f:69:42:de:20:3d: ca:57:b7:05:34:92:81:21:6e:0d:13:80:2b:49:9a:e6:ea:64: 53:fc:94:4e:75:e0:e7:3d:6b:2f:85:9d:13:f5:fc:5c:22:5a: ae:dc:db:4e:d1:ff:7c:d3:0b:2d:e4:f5:99:db:ad:5f:e9:a4: cc:d2:35:05:48:44:30:59:30:4e:f7:c3:96:2f:b4:30:29:11: 69:a3:33:ea -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUSlo726cT2Hz/7UXI32XiuRqGORowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjMxMDEyMTYwNTM3WhcNMjQxMDEwMTYxMDM3 WjAzMTEwLwYDVQQDEygxQUY5MjY5MzhCMEYxQzFFQzg3RkE3NDBDMkM3QjdCNTUx QjY5RDdBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZU9R+BDW0Wx zet2CRBIBpLB2tXvkmtnkpAcBRhZ04DaqOJCBnxb5x7PpSjCHprUYKMPIM9E5Tv/ Yz1eH1pjUf08M9YA4UR0byylQVY9B1EEtleeOtsEowOfaaNsAy4F5I2rMV1+SmQn 1xzodymQFwwRjseucLYpS8F/PTxAjOzeGUFeQWBsiHvVywz4+tbxCbrMqLTu5byZ CdHGooBqTgP4OUbVcdX1OCLNhd81GWZQbcVHPi5rozb3TO0wKTNrPmfCPfDr6ZKw 11BWhIOh7TObdKTMiQSEb7zWubc7zGqnIgZh3gTJO3F1Poj0AxZHGLF9+raFC+Gd vIBZaD4TpwIDAQABo4ICXDCCAlgwHQYDVR0OBBYEFBr5JpOLDxweyH+nQMLHt7VR tp16MB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzNDMyMmUzMTM0MzcyZTM4Mzgy ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOOk1gwDQYJ KoZIhvcNAQELBQADggEBAKFqUAyT7NytLl2+0Xpvi8qx266TJCzivizj8PNA/muH sK3u0NgY0iZ3m5r9YYF4NZOvLv5lzvHCvXboobu7AqESPR0UT4eQj91gU1Xa5FCb KlBic6m0B0q4E3NEPqdh82hSYdS4qjZ4A/JWbqTAxgtILgNz495ZqWmk/ysTA/rg 2KwjzPJHjlzioL5xErk7xHrLPExz/lw/NVQq9dKWM8v1oAynaXe1HCfVIpPG3k9p Qt4gPcpXtwU0koEhbg0TgCtJmubqZFP8lE514Oc9ay+FnRP1/FwiWq7c207R/3zT Cy3k9ZnbrV/ppMzSNQVIRDBZME73w5YvtDApEWmjM+o= -----END CERTIFICATE-----Generated at Sun Jun 2 11:23:04 2024 by rpki-client on console-ams.rpki-client.org