$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e31322e302f32342d3234203d3e2036323333.roa File: 3130342e3234352e31322e302f32342d3234203d3e2036323333.roa (raw, json) Hash identifier: 2mm1m6Q1iZ3+kukwyxhPE/1ZIdE+eJ3Y1a97MNv75b4= Subject key identifier: C5:F6:E5:85:2D:80:56:76:41:F1:CA:37:13:70:7D:8F:62:05:98:33 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 031E5A935D061F46B394F54EA8D58670EBD1837C Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31322e302f32342d3234203d3e2036323333.roa Signing time: Sat 14 Sep 2024 01:22:25 +0000 ROA not before: Sat 14 Sep 2024 01:17:25 +0000 ROA not after: Sat 13 Sep 2025 01:22:25 +0000 asID: 6233 IP address blocks: 104.245.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:1e:5a:93:5d:06:1f:46:b3:94:f5:4e:a8:d5:86:70:eb:d1:83:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Sep 14 01:17:25 2024 GMT Not After : Sep 13 01:22:25 2025 GMT Subject: CN=C5F6E5852D80567641F1CA3713707D8F62059833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:ce:76:02:0d:59:94:dd:b1:9c:cd:b4:af: c8:71:fa:43:3e:1c:9b:f8:dc:b6:48:9a:c7:a7:a6: a2:1c:57:34:9e:45:0c:38:5a:9c:c4:24:e4:ee:16: 5e:3b:c9:c0:19:f6:f2:df:ef:18:f6:28:e0:3f:a7: 6b:12:d8:dd:57:52:b8:aa:aa:09:82:73:76:a9:d6: ca:cf:70:04:80:fb:04:99:f8:a7:a6:74:e5:b9:cf: ab:63:25:48:a6:2e:5d:b6:a1:06:4f:24:70:2d:53: 2a:bd:fc:bb:d7:30:4f:f8:8f:ee:b2:20:70:66:74: c6:de:7d:5c:bc:09:aa:e7:8b:be:58:71:80:6d:63: dd:ce:d4:ae:6c:ce:03:3d:0c:28:cd:60:62:0b:e3: 25:5f:a2:e4:58:f0:95:26:98:4e:f4:f2:f3:34:a2: e5:03:78:1f:11:08:04:c1:e0:69:c5:f1:51:69:29: e3:d3:bb:d1:49:f6:8a:9c:80:ae:3c:12:74:54:3f: 72:24:8f:7e:3d:9d:13:04:b2:95:0e:ec:e1:20:69: a7:20:b8:ac:ca:c5:47:3e:2f:42:74:65:88:4c:a3: 53:4f:25:7b:4f:ee:c9:f7:9a:04:1b:fd:14:91:32: a7:c8:88:fa:72:33:c9:3a:4b:2e:70:69:11:62:a1: b6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F6:E5:85:2D:80:56:76:41:F1:CA:37:13:70:7D:8F:62:05:98:33 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e31322e302f32342d3234203d3e2036323333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.245.12.0/24 Signature Algorithm: sha256WithRSAEncryption b4:7a:0c:f8:8f:f1:e0:9c:e2:7e:f9:a4:fb:8f:d9:e7:ff:3b: 17:a8:70:f1:cf:ab:b2:ba:30:0a:f3:da:15:aa:03:08:70:dd: 8e:11:15:cf:6e:20:0a:41:76:6e:48:30:3f:66:ff:82:76:5e: 2c:1d:f8:50:de:2a:db:5c:6c:20:ed:46:b9:38:ee:d7:ef:de: 03:fa:dd:05:54:3e:59:99:ce:2a:3b:ad:22:c5:aa:4f:93:ce: 8a:4e:81:55:14:14:7a:9f:4d:32:c3:88:ed:18:fc:64:53:3a: ad:43:f6:90:2b:f9:e1:1b:df:77:2d:c9:84:d8:a0:2b:9b:8a: 08:ff:ad:45:e6:81:eb:d0:d4:5f:bc:f8:c6:df:6f:36:2e:c5: cf:81:03:0b:80:76:95:7d:bd:06:2d:6e:17:53:76:47:39:40: 9f:32:9a:6d:da:fa:eb:a8:cc:e8:71:cc:c5:bd:ad:5d:a5:4b: b5:8a:00:a5:e2:85:e3:70:44:90:fd:42:67:54:4d:a9:74:00: c0:b2:fa:2e:16:63:e0:55:94:97:30:ca:a7:8a:cf:61:c0:e7: 08:17:7b:b7:9c:eb:7c:e3:d4:c5:9d:3e:e9:3c:30:17:0c:a9: 99:29:9d:38:20:89:c7:29:6c:22:92:9a:88:79:cd:f4:9b:12: bb:69:76:eb -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUAx5ak10GH0azlPVOqNWGcOvRg3wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjQwOTE0MDExNzI1WhcNMjUwOTEzMDEyMjI1 WjAzMTEwLwYDVQQDEyhDNUY2RTU4NTJEODA1Njc2NDFGMUNBMzcxMzcwN0Q4RjYy MDU5ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkHOdgINWZTd sZzNtK/IcfpDPhyb+Ny2SJrHp6aiHFc0nkUMOFqcxCTk7hZeO8nAGfby3+8Y9ijg P6drEtjdV1K4qqoJgnN2qdbKz3AEgPsEmfinpnTluc+rYyVIpi5dtqEGTyRwLVMq vfy71zBP+I/usiBwZnTG3n1cvAmq54u+WHGAbWPdztSubM4DPQwozWBiC+MlX6Lk WPCVJphO9PLzNKLlA3gfEQgEweBpxfFRaSnj07vRSfaKnICuPBJ0VD9yJI9+PZ0T BLKVDuzhIGmnILisysVHPi9CdGWITKNTTyV7T+7J95oEG/0UkTKnyIj6cjPJOksu cGkRYqG2/QIDAQABo4ICXjCCAlowHQYDVR0OBBYEFMX25YUtgFZ2QfHKNxNwfY9i BZgzMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzMDM0MmUzMjM0MzUyZTMxMzIy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGj1DDAN BgkqhkiG9w0BAQsFAAOCAQEAtHoM+I/x4Jzifvmk+4/Z5/87F6hw8c+rsrowCvPa FaoDCHDdjhEVz24gCkF2bkgwP2b/gnZeLB34UN4q21xsIO1GuTju1+/eA/rdBVQ+ WZnOKjutIsWqT5POik6BVRQUep9NMsOI7Rj8ZFM6rUP2kCv54Rvfdy3JhNigK5uK CP+tReaB69DUX7z4xt9vNi7Fz4EDC4B2lX29Bi1uF1N2RzlAnzKabdr666jM6HHM xb2tXaVLtYoApeKF43BEkP1CZ1RNqXQAwLL6LhZj4FWUlzDKp4rPYcDnCBd7t5zr fOPUxZ0+6TwwFwypmSmdOCCJxylsIpKaiHnN9JsSu2l26w== -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:22 2024 by rpki-client on console-fra.rpki-client.org