$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e20393439.roa File: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (raw, json) Hash identifier: BrTOn5CCpbbtm6+nG/vCb/U8rwl6lozZlpUDk2/Y7+I= Subject key identifier: C4:8D:24:85:CD:5E:99:24:A2:04:77:FF:E9:9F:75:28:8D:3E:94:84 Certificate issuer: /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Certificate serial: 7B7BD3042E5E6FFDA29558D54FF9982BA6EF3BD6 Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e20393439.roa Signing time: Thu 12 Oct 2023 16:10:36 +0000 ROA not before: Thu 12 Oct 2023 16:05:36 +0000 ROA not after: Thu 10 Oct 2024 16:10:36 +0000 asID: 949 IP address blocks: 2604:e8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Jun 2024 23:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7b:d3:04:2e:5e:6f:fd:a2:95:58:d5:4f:f9:98:2b:a6:ef:3b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4 Validity Not Before: Oct 12 16:05:36 2023 GMT Not After : Oct 10 16:10:36 2024 GMT Subject: CN=C48D2485CD5E9924A20477FFE99F75288D3E9484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1b:a9:4c:5d:ff:4e:7c:b2:1f:8c:3c:f1:1c: 66:ff:4c:9c:8b:d1:2e:03:c0:45:ef:80:c4:b1:9c: 17:42:89:1c:06:70:64:9b:68:32:8d:7c:5c:30:47: 04:57:ce:67:80:99:fd:dd:7c:d1:98:12:3f:37:07: a2:8f:60:9a:c5:25:62:9f:a5:3e:55:b8:e4:77:a4: 82:34:9c:15:66:2d:29:2d:cf:53:83:c7:fb:87:b8: ce:67:7b:8f:e3:3f:2b:5f:4c:ca:64:7a:e1:77:e1: d4:aa:63:e9:20:1c:fa:dc:d8:72:02:db:31:2d:7d: 56:14:fb:81:f5:24:8e:f9:ee:ca:7d:be:ea:eb:4b: 40:dc:c8:9b:53:ab:75:73:03:63:4e:7a:e7:8c:30: fb:bd:6d:47:99:79:89:ec:8a:57:77:f8:50:ee:f6: 01:8e:d0:ff:aa:d7:ad:d5:65:a9:85:28:fe:5a:5d: 89:50:56:76:02:46:da:d6:62:68:14:76:e4:0a:53: 27:84:21:03:0e:4b:0d:3c:1b:d3:7e:41:5e:d5:9c: ba:4f:b6:38:2f:37:18:a7:fa:13:d1:80:38:24:1b: 05:da:30:47:c1:17:d4:22:b3:8e:54:f4:bc:fa:73: ed:11:b4:7c:cf:e5:b2:db:e6:5b:93:2a:cc:9d:1f: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8D:24:85:CD:5E:99:24:A2:04:77:FF:E9:9F:75:28:8D:3E:94:84 X509v3 Authority Key Identifier: keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/323630343a653863303a3a2f33322d3438203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2604:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:ba:21:01:ab:fe:77:a2:a8:8a:5d:2d:f1:b0:be:d7:b9:15: fb:3f:cc:69:4e:eb:04:54:62:d9:89:d2:2e:6d:84:4a:20:d4: 48:2a:12:f4:5c:d2:f2:e0:35:35:76:1f:3d:37:d7:4e:dd:b3: 77:ad:6e:2a:b2:44:f0:d2:66:86:8c:03:49:68:11:9f:c3:39: 3d:28:82:0f:ad:8e:4d:c2:75:42:99:7a:5f:3a:67:dc:76:04: 11:e7:0d:88:85:b5:17:9d:53:62:a5:44:7e:f4:62:7e:1c:12: a8:8d:c1:48:9e:f3:01:bf:89:b4:e9:45:77:ab:94:24:d7:6f: 45:01:2e:c8:7a:cb:fb:32:79:60:ef:a2:0c:f8:a5:81:61:77: d2:e2:2d:96:6a:32:fc:1e:48:b7:b7:f6:2b:18:dd:eb:f2:9c: f8:76:a1:0a:1f:ad:66:7c:08:99:ad:2a:27:d2:0d:55:46:37: e0:96:a9:19:b7:df:5e:2c:08:ae:8c:ed:2a:38:09:3a:af:89: 1a:b1:d6:04:9a:83:2d:ba:52:ba:25:f9:de:5b:a7:06:d9:cc: 8c:24:51:85:81:63:19:d8:64:fa:33:6b:8c:6d:58:86:18:66: d0:06:61:18:f5:c5:2a:59:01:3d:8b:2c:88:d6:37:8e:1a:db: 4f:ca:f7:81 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgIUe3vTBC5eb/2ilVjVT/mYK6bvO9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDI2M2EwOGI5YTA0NjNkNjBmZmI5MTQ0ZDFjMmNiOTU2 ZTM5YzZjNjhjODMzZDY0ZTQwHhcNMjMxMDEyMTYwNTM2WhcNMjQxMDEwMTYxMDM2 WjAzMTEwLwYDVQQDEyhDNDhEMjQ4NUNENUU5OTI0QTIwNDc3RkZFOTlGNzUyODhE M0U5NDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xupTF3/Tnyy H4w88Rxm/0yci9EuA8BF74DEsZwXQokcBnBkm2gyjXxcMEcEV85ngJn93XzRmBI/ Nweij2CaxSVin6U+Vbjkd6SCNJwVZi0pLc9Tg8f7h7jOZ3uP4z8rX0zKZHrhd+HU qmPpIBz63NhyAtsxLX1WFPuB9SSO+e7Kfb7q60tA3MibU6t1cwNjTnrnjDD7vW1H mXmJ7IpXd/hQ7vYBjtD/qtet1WWphSj+Wl2JUFZ2Akba1mJoFHbkClMnhCEDDksN PBvTfkFe1Zy6T7Y4LzcYp/oT0YA4JBsF2jBHwRfUIrOOVPS8+nPtEbR8z+Wy2+Zb kyrMnR8fewIDAQABo4ICWzCCAlcwHQYDVR0OBBYEFMSNJIXNXpkkogR3/+mfdSiN PpSEMB8GA1UdIwQYMBaAFIk4zfiuxiQInB2VMQ+sN0dMDokGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDUvODkzOENERjhBRUM2MjQwODlDMUQ5NTMxMEZBQzM3NDc0QzBFODkw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzQyYzllOTk3LTc0N2EtNDEwNy04OWZiLTdjYWI4OTAz YTU4Ni80MjYzYTA4YjlhMDQ2M2Q2MGZmYjkxNDRkMWMyY2I5NTZlMzljNmM2OGM4 MzNkNjRlNC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDUvMzIzNjMwMzQzYTY1Mzg2MzMwM2Ez YTJmMzMzMjJkMzQzODIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTowDANBgkq hkiG9w0BAQsFAAOCAQEAfbohAav+d6Koil0t8bC+17kV+z/MaU7rBFRi2YnSLm2E SiDUSCoS9FzS8uA1NXYfPTfXTt2zd61uKrJE8NJmhowDSWgRn8M5PSiCD62OTcJ1 Qpl6Xzpn3HYEEecNiIW1F51TYqVEfvRifhwSqI3BSJ7zAb+JtOlFd6uUJNdvRQEu yHrL+zJ5YO+iDPilgWF30uItlmoy/B5It7f2Kxjd6/Kc+HahCh+tZnwIma0qJ9IN VUY34JapGbffXiwIroztKjgJOq+JGrHWBJqDLbpSuiX53lunBtnMjCRRhYFjGdhk +jNrjG1Yhhhm0AZhGPXFKlkBPYssiNY3jhrbT8r3gQ== -----END CERTIFICATE-----Generated at Fri Jun 28 02:19:03 2024 by rpki-client on console-ams.rpki-client.org