$ rpki-client -vvf rpki.roa.net/rrdp/xTom/44/323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa File: 323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa (raw, json) Hash identifier: FU3QDGTU1z2fLmqRJz2lIbEIs813pGvQhHnizCaVPmU= Subject key identifier: 91:41:B9:2D:99:EA:56:1A:04:8B:73:30:10:75:FD:9A:6F:B6:4A:79 Certificate issuer: /CN=73516995116535a22de5a23000d3e7814baad6490837f37731 Certificate serial: 64FFE9DE80BB11948C9B095593590CBBEF6DD951 Authority key identifier: 0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa Signing time: Wed 30 Aug 2023 14:58:48 +0000 ROA not before: Wed 30 Aug 2023 14:53:48 +0000 ROA not after: Wed 28 Aug 2024 14:58:48 +0000 asID: 47553 IP address blocks: 2605:3a40:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 09:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ff:e9:de:80:bb:11:94:8c:9b:09:55:93:59:0c:bb:ef:6d:d9:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73516995116535a22de5a23000d3e7814baad6490837f37731 Validity Not Before: Aug 30 14:53:48 2023 GMT Not After : Aug 28 14:58:48 2024 GMT Subject: CN=9141B92D99EA561A048B73301075FD9A6FB64A79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:b7:56:b9:52:d2:ec:27:c6:b6:ab:3f:59: 12:f3:06:ee:e6:87:c5:de:36:85:a7:6b:f7:aa:3a: 64:59:63:8d:95:91:8d:7c:01:50:50:02:fe:38:07: e9:b6:05:2c:c2:96:cb:e1:f8:48:69:7f:ff:1f:1a: ad:16:3d:a9:c9:46:d7:95:15:23:29:cb:45:02:32: bd:62:d0:f5:51:3b:0a:b3:61:65:cb:eb:af:ba:0a: 91:98:ec:2e:0d:1f:63:98:99:a7:80:55:b0:2b:b4: a0:cc:52:31:c6:82:ed:77:ba:de:32:95:b9:22:04: a7:9d:17:24:66:f6:0d:d5:85:90:73:6d:79:0b:d5: 18:40:23:a5:57:90:d0:1b:c2:28:8b:02:e6:24:ef: 72:c1:e0:2a:0b:fc:71:a5:d8:54:e0:fe:07:87:1d: 65:ea:b9:26:eb:61:5e:b0:7f:14:60:68:7d:3f:5b: 6f:80:c8:9c:33:d4:6f:c7:93:aa:28:6b:82:26:ee: 51:15:34:f8:c0:1a:0b:e4:ce:47:c0:38:4c:dc:db: 48:93:82:47:21:a9:92:9c:00:2d:50:c6:d4:48:d6: 3e:67:62:15:04:49:53:c5:7d:04:e4:2d:f1:cf:35: c6:8a:e2:24:24:b5:86:39:2a:df:00:1f:10:31:41: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:41:B9:2D:99:EA:56:1A:04:8B:73:30:10:75:FD:9A:6F:B6:4A:79 X509v3 Authority Key Identifier: keyid:0F:D3:45:FD:54:15:11:79:51:13:60:9B:A4:AF:5F:FF:60:04:1A:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/44/0FD345FD541511795113609BA4AF5FFF60041AFC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a18f1ddb-2d6e-491c-bf65-f32f98dbc569/73516995116535a22de5a23000d3e7814baad6490837f37731.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/44/323630353a336134303a353a3a2f34382d3438203d3e203437353533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:3a40:5::/48 Signature Algorithm: sha256WithRSAEncryption 39:dd:45:e5:52:18:57:a9:60:96:88:db:72:24:1e:83:fd:29: e1:df:ba:47:7b:79:e3:c4:d1:9b:b6:d4:b4:90:77:9c:c4:6b: 63:ad:f2:69:d5:92:95:8c:a0:aa:51:a4:c4:9b:07:d2:dc:60: 9a:79:7d:cd:d1:3e:31:49:db:f6:21:9f:e4:aa:d1:fd:f7:47: 68:6d:9c:bb:0b:06:7b:b6:c4:47:dd:e1:50:01:7f:40:50:90: 9f:40:4b:87:2f:52:81:54:4e:e0:2e:0f:13:96:86:d7:7b:6f: 11:d0:db:62:49:f1:a0:47:a5:62:76:c3:55:69:fe:42:2d:46: e9:07:79:29:4e:80:8e:52:c2:e0:1f:e8:28:3e:90:54:ae:55: b1:c3:85:10:3c:94:a3:75:49:66:9d:2f:c8:42:00:95:33:0c: c2:a4:cf:b5:8c:45:28:47:52:f1:fa:e7:79:17:a2:8e:cf:a2: f2:f6:fe:06:80:e9:cd:97:e3:77:11:f3:29:b7:08:e9:fb:26: b8:da:62:0a:89:14:48:16:1f:cc:1c:57:1d:8b:0c:0e:14:e6: ee:ee:91:9f:0f:55:82:16:72:ea:9c:58:1e:64:9b:9d:25:a1: 24:be:26:d7:6b:c0:4c:39:58:c4:a4:42:09:2b:bd:8c:48:8d: a9:e3:fb:41 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUZP/p3oC7EZSMmwlVk1kMu+9t2VEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzM1MTY5OTUxMTY1MzVhMjJkZTVhMjMwMDBkM2U3ODE0 YmFhZDY0OTA4MzdmMzc3MzEwHhcNMjMwODMwMTQ1MzQ4WhcNMjQwODI4MTQ1ODQ4 WjAzMTEwLwYDVQQDEyg5MTQxQjkyRDk5RUE1NjFBMDQ4QjczMzAxMDc1RkQ5QTZG QjY0QTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAK3VrlS0uwn xrarP1kS8wbu5ofF3jaFp2v3qjpkWWONlZGNfAFQUAL+OAfptgUswpbL4fhIaX// HxqtFj2pyUbXlRUjKctFAjK9YtD1UTsKs2Fly+uvugqRmOwuDR9jmJmngFWwK7Sg zFIxxoLtd7reMpW5IgSnnRckZvYN1YWQc215C9UYQCOlV5DQG8IoiwLmJO9yweAq C/xxpdhU4P4Hhx1l6rkm62FesH8UYGh9P1tvgMicM9Rvx5OqKGuCJu5RFTT4wBoL 5M5HwDhM3NtIk4JHIamSnAAtUMbUSNY+Z2IVBElTxX0E5C3xzzXGiuIkJLWGOSrf AB8QMUFj6QIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFJFBuS2Z6lYaBItzMBB1/Zpv tkp5MB8GA1UdIwQYMBaAFA/TRf1UFRF5URNgm6SvX/9gBBr8MA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDQvMEZEMzQ1RkQ1NDE1MTE3OTUxMTM2MDlCQTRBRjVGRkY2MDA0MUFG Qy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3 NzgtZDIwNGNmY2Q5OWE4L2ExOGYxZGRiLTJkNmUtNDkxYy1iZjY1LWYzMmY5OGRi YzU2OS83MzUxNjk5NTExNjUzNWEyMmRlNWEyMzAwMGQzZTc4MTRiYWFkNjQ5MDgz N2YzNzczMS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDQvMzIzNjMwMzUzYTMzNjEzNDMwM2Ez NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzczNTM1MzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm BTpAAAUwDQYJKoZIhvcNAQELBQADggEBADndReVSGFepYJaI23IkHoP9KeHfukd7 eePE0Zu21LSQd5zEa2Ot8mnVkpWMoKpRpMSbB9LcYJp5fc3RPjFJ2/Yhn+Sq0f33 R2htnLsLBnu2xEfd4VABf0BQkJ9AS4cvUoFUTuAuDxOWhtd7bxHQ22JJ8aBHpWJ2 w1Vp/kItRukHeSlOgI5SwuAf6Cg+kFSuVbHDhRA8lKN1SWadL8hCAJUzDMKkz7WM RShHUvH653kXoo7PovL2/gaA6c2X43cR8ym3COn7JrjaYgqJFEgWH8wcVx2LDA4U 5u7ukZ8PVYIWcuqcWB5km50loSS+JtdrwEw5WMSkQgkrvYxIjanj+0E= -----END CERTIFICATE-----Generated at Sat Jun 1 06:31:21 2024 by rpki-client on console-fra.rpki-client.org