$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa File: 3130342e3234352e382e302f32312d3234203d3e20393439.roa (raw, json) Hash identifier: MlAIwNvpU9pLqPm5GeqhwAydZcRl+n9fF0MyIYdunng= Subject key identifier: 21:6C:43:4C:FB:FC:2A:63:1E:FF:03:C7:62:D2:13:DA:3A:68:C2:61 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 11F60E6C5013715244B9ECE9B002FBD03C2B1A62 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa Signing time: Sat 14 Sep 2024 01:22:25 +0000 ROA not before: Sat 14 Sep 2024 01:17:25 +0000 ROA not after: Sat 13 Sep 2025 01:22:25 +0000 asID: 949 IP address blocks: 104.245.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 08:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f6:0e:6c:50:13:71:52:44:b9:ec:e9:b0:02:fb:d0:3c:2b:1a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Sep 14 01:17:25 2024 GMT Not After : Sep 13 01:22:25 2025 GMT Subject: CN=216C434CFBFC2A631EFF03C762D213DA3A68C261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:44:1d:12:7e:c0:c0:92:fa:76:c8:a6:c5: e6:3e:33:ef:68:e5:4e:1c:4a:c1:1e:27:2a:20:f9: 7d:76:96:62:61:0e:b5:f3:03:2b:a5:d6:af:5a:16: d8:90:53:57:7f:fb:5f:f5:c2:81:1d:d6:e0:ba:8c: 9a:d1:aa:48:63:59:3b:d8:d8:bc:3d:3f:ca:5b:88: 7a:13:35:ea:f3:d9:f0:66:33:6f:61:a6:f3:1e:85: 58:b5:dc:95:a5:fa:52:0d:7f:cf:19:68:08:1d:6f: 39:5c:a9:2e:50:89:7b:bf:be:fc:80:b2:27:4e:51: 32:29:6e:83:e2:3c:7c:5d:0a:19:e7:73:9d:82:e8: 9e:55:22:69:bc:b3:30:8a:d9:ee:d3:0d:fb:68:41: 7e:65:55:90:31:c7:71:b4:fd:54:01:b9:3a:f6:91: 9f:14:27:ca:78:f7:ba:f5:aa:eb:8f:c4:d2:55:48: 7f:c7:dc:8f:59:e7:9b:1d:c3:6d:48:32:d3:f3:82: 01:68:e4:80:b8:55:51:21:75:41:44:e9:20:e5:88: 50:9c:74:c4:81:86:65:4f:fa:04:67:2e:76:b3:07: 91:59:da:f2:47:aa:3c:56:a6:d8:b3:e7:02:b5:eb: dc:2a:89:c5:40:31:af:8d:4f:87:61:e2:bd:6b:32: 0f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6C:43:4C:FB:FC:2A:63:1E:FF:03:C7:62:D2:13:DA:3A:68:C2:61 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e382e302f32312d3234203d3e20393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.245.8.0/21 Signature Algorithm: sha256WithRSAEncryption 55:44:6a:96:c1:b2:cb:26:da:8c:c1:77:a3:fd:99:c3:29:04: 96:f4:9f:52:ea:58:54:44:4a:c9:36:bc:92:0d:ba:b1:d4:7b: a1:00:15:3d:17:49:a6:24:2a:50:5b:ea:16:96:45:47:8d:09: 9e:8b:b4:9e:a1:92:fd:cb:c2:c1:24:cd:02:ff:15:ee:bc:c8: b5:a4:00:36:88:76:48:ba:34:e6:98:9e:47:49:1f:d6:09:49: 54:8f:09:00:e8:79:7f:57:04:5a:c5:fe:57:60:1e:be:6d:c9: ff:08:3c:f5:3e:34:d6:c1:ab:93:3d:92:56:eb:22:d7:63:60: da:e1:9a:3e:5e:63:c3:48:c7:61:12:ff:5c:2c:f8:d3:cc:5c: 60:6d:d7:f2:35:82:54:84:5e:ef:17:21:d7:0c:f5:35:e1:86: 71:de:26:f1:36:52:4a:b4:18:51:50:fb:a6:51:64:cf:93:fa: 08:c2:67:a2:95:89:b5:68:c9:5e:52:1f:88:6f:96:3d:7b:f1: ca:ff:4a:81:64:49:84:48:8c:54:db:26:23:fa:67:3d:54:03: 22:b9:ac:6a:f7:cc:21:9e:d9:61:a2:69:bc:70:40:18:36:4f: 9c:af:97:cd:02:2a:e3:5d:48:c3:8d:21:ec:57:01:ba:f7:64: 1a:be:07:ca -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgIUEfYObFATcVJEuezpsAL70DwrGmIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjQwOTE0MDExNzI1WhcNMjUwOTEzMDEyMjI1 WjAzMTEwLwYDVQQDEygyMTZDNDM0Q0ZCRkMyQTYzMUVGRjAzQzc2MkQyMTNEQTNB NjhDMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00REHRJ+wMCS +nbIpsXmPjPvaOVOHErBHicqIPl9dpZiYQ618wMrpdavWhbYkFNXf/tf9cKBHdbg uoya0apIY1k72Ni8PT/KW4h6EzXq89nwZjNvYabzHoVYtdyVpfpSDX/PGWgIHW85 XKkuUIl7v778gLInTlEyKW6D4jx8XQoZ53OdguieVSJpvLMwitnu0w37aEF+ZVWQ McdxtP1UAbk69pGfFCfKePe69arrj8TSVUh/x9yPWeebHcNtSDLT84IBaOSAuFVR IXVBROkg5YhQnHTEgYZlT/oEZy52sweRWdryR6o8VqbYs+cCtevcKonFQDGvjU+H YeK9azIPAwIDAQABo4ICWjCCAlYwHQYDVR0OBBYEFCFsQ0z7/CpjHv8Dx2LSE9o6 aMJhMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzMDM0MmUzMjM0MzUyZTM4MmUz MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPUIMA0GCSqG SIb3DQEBCwUAA4IBAQBVRGqWwbLLJtqMwXej/ZnDKQSW9J9S6lhURErJNrySDbqx 1HuhABU9F0mmJCpQW+oWlkVHjQmei7SeoZL9y8LBJM0C/xXuvMi1pAA2iHZIujTm mJ5HSR/WCUlUjwkA6Hl/VwRaxf5XYB6+bcn/CDz1PjTWwauTPZJW6yLXY2Da4Zo+ XmPDSMdhEv9cLPjTzFxgbdfyNYJUhF7vFyHXDPU14YZx3ibxNlJKtBhRUPumUWTP k/oIwmeilYm1aMleUh+Ib5Y9e/HK/0qBZEmESIxU2yYj+mc9VAMiuaxq98whntlh omm8cEAYNk+cr5fNAirjXUjDjSHsVwG692QavgfK -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:23 2024 by rpki-client on console-ams.rpki-client.org