$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa File: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (raw, json) Hash identifier: VRnAyYIyO0DJ7S8MRdroz72Bc5rhbYuWEqmtCLDdcZ4= Subject key identifier: 16:94:DD:E6:4D:A2:E2:1D:A7:81:C0:53:42:B6:C9:01:9A:45:7B:6E Certificate issuer: /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Certificate serial: 0B38BFD3A4760808FC12FEA05BC1C84E74F91299 Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa Signing time: Thu 08 Jun 2023 11:06:27 +0000 ROA not before: Thu 08 Jun 2023 11:01:27 +0000 ROA not after: Thu 06 Jun 2024 11:06:27 +0000 asID: 20473 IP address blocks: 2604:e4c0:120::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/b5ae183e-a402-4c1a-b464-670472e82b72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 09:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:38:bf:d3:a4:76:08:08:fc:12:fe:a0:5b:c1:c8:4e:74:f9:12:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b Validity Not Before: Jun 8 11:01:27 2023 GMT Not After : Jun 6 11:06:27 2024 GMT Subject: CN=1694DDE64DA2E21DA781C05342B6C9019A457B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:bf:8e:ef:53:5b:9d:bf:08:5a:88:22:5f: 0d:27:bd:d5:a3:ec:99:75:e4:14:88:77:29:5b:cb: c9:ea:f2:0d:c6:a2:c8:f2:b9:14:4d:09:dc:33:52: 92:4d:1e:c7:4f:a2:9c:68:24:b1:0c:fd:a1:9b:73: a9:39:33:74:34:d5:f4:5f:8c:ff:50:5e:95:70:c7: cf:79:cb:54:f3:0d:f0:a2:17:60:fb:f4:df:06:3b: ec:fa:c1:92:e3:2d:a3:99:6e:59:32:c1:ab:c6:aa: cc:a2:9f:fc:5f:9c:a3:45:12:59:40:d5:ea:0b:cc: 00:10:94:2d:e7:b2:82:e6:19:7c:93:a2:24:5c:be: 0e:5a:4d:8a:82:86:d7:09:60:25:3d:d3:16:e3:5e: ef:8a:b7:34:25:28:4f:68:e7:31:a8:ee:7c:1a:5e: f7:b6:30:67:5c:8b:2c:af:13:6a:ef:5b:31:a0:11: b0:29:cb:99:00:9b:54:37:f4:7b:4b:83:a6:b9:00: 9c:25:18:05:86:a3:8d:05:1c:76:0b:4d:0f:bf:1c: 6d:f2:ba:73:6a:05:2e:1a:fb:ad:dc:94:5e:f2:32: 2a:a1:5f:f2:b1:c6:f9:23:54:90:74:4c:90:bd:4b: 4f:c7:0b:55:2d:e6:1a:7f:db:84:03:64:e1:de:e5: f3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:94:DD:E6:4D:A2:E2:1D:A7:81:C0:53:42:B6:C9:01:9A:45:7B:6E X509v3 Authority Key Identifier: keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e4c0:120::/44 Signature Algorithm: sha256WithRSAEncryption 18:f3:e5:0a:90:13:3b:02:f7:bb:dc:c3:d3:4f:de:85:7d:16: 28:85:ee:05:29:aa:87:84:39:72:fd:13:62:4c:c2:7a:1e:d5: 8b:2d:ad:6f:7c:5c:27:f6:c5:ac:e9:38:81:44:18:8f:39:36: 69:04:92:bd:d4:88:6f:2f:46:72:7e:2c:19:56:b2:08:02:8a: 7b:83:45:50:d5:ea:7f:3b:d4:25:c8:0a:75:82:e7:c7:85:2f: a1:b9:84:37:7b:41:86:4d:ca:e3:a9:62:aa:16:7b:7f:0b:3e: 8e:15:96:14:d9:d1:d5:01:b3:cf:9b:8f:01:f5:11:54:c7:c2: c4:9b:21:51:9f:10:a8:22:d9:a3:f2:0a:c0:d4:9f:37:40:56: 58:90:06:30:58:98:e0:fc:1a:bb:b6:89:f0:08:54:8d:86:f9: 42:2f:91:71:eb:34:5b:92:c2:7d:3d:38:65:78:9c:02:60:0c: 24:40:8f:eb:67:4c:46:90:54:e3:80:77:c0:b6:0b:64:3e:c6: 50:37:64:77:e1:88:8f:c5:02:f9:1c:da:0e:aa:34:c4:87:c2: f8:b7:da:f1:39:b5:f2:62:3a:ed:37:2e:d8:41:1f:75:df:75: df:67:d6:4b:2d:d2:f0:cb:09:3a:b6:b2:82:91:74:01:02:73: 32:98:38:c6 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIUCzi/06R2CAj8Ev6gW8HITnT5EpkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODFkYWRlNDdlZjU2NWE2N2MzMzQ5NGU2NjdkMDNkNGRh N2NmZjE3MzliMDI3YzY0MGIwHhcNMjMwNjA4MTEwMTI3WhcNMjQwNjA2MTEwNjI3 WjAzMTEwLwYDVQQDEygxNjk0RERFNjREQTJFMjFEQTc4MUMwNTM0MkI2QzkwMTlB NDU3QjZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdW/ju9TW52/ CFqIIl8NJ73Vo+yZdeQUiHcpW8vJ6vINxqLI8rkUTQncM1KSTR7HT6KcaCSxDP2h m3OpOTN0NNX0X4z/UF6VcMfPectU8w3wohdg+/TfBjvs+sGS4y2jmW5ZMsGrxqrM op/8X5yjRRJZQNXqC8wAEJQt57KC5hl8k6IkXL4OWk2KgobXCWAlPdMW417virc0 JShPaOcxqO58Gl73tjBnXIssrxNq71sxoBGwKcuZAJtUN/R7S4OmuQCcJRgFhqON BRx2C00Pvxxt8rpzagUuGvut3JRe8jIqoV/yscb5I1SQdEyQvUtPxwtVLeYaf9uE A2Th3uXzyQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFBaU3eZNouIdp4HAU0K2yQGa RXtuMB8GA1UdIwQYMBaAFHTjueFuksUaiXmttacx3eLV6ulsMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTMvNzRFM0I5RTE2RTkyQzUxQTg5NzlBREI1QTczMURERTJENUVBRTk2 Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjL2I1YWUxODNlLWE0MDItNGMxYS1iNDY0LTY3MDQ3MmU4 MmI3Mi84MWRhZGU0N2VmNTY1YTY3YzMzNDk0ZTY2N2QwM2Q0ZGE3Y2ZmMTczOWIw MjdjNjQwYi5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTMvMzIzNjMwMzQzYTY1MzQ2MzMwM2Ez MTMyMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcEJgTkwAEgMA0GCSqGSIb3DQEBCwUAA4IBAQAY8+UKkBM7Ave73MPTT96FfRYo he4FKaqHhDly/RNiTMJ6HtWLLa1vfFwn9sWs6TiBRBiPOTZpBJK91IhvL0ZyfiwZ VrIIAop7g0VQ1ep/O9QlyAp1gufHhS+huYQ3e0GGTcrjqWKqFnt/Cz6OFZYU2dHV AbPPm48B9RFUx8LEmyFRnxCoItmj8grA1J83QFZYkAYwWJjg/Bq7tonwCFSNhvlC L5Fx6zRbksJ9PThleJwCYAwkQI/rZ0xGkFTjgHfAtgtkPsZQN2R34YiPxQL5HNoO qjTEh8L4t9rxObXyYjrtNy7YQR9133XfZ9ZLLdLwywk6trKCkXQBAnMymDjG -----END CERTIFICATE-----Generated at Tue May 7 11:42:32 2024 by rpki-client on console-fra.rpki-client.org