$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3130342e3234352e392e302f32342d3234203d3e2034373835.roa File: 3130342e3234352e392e302f32342d3234203d3e2034373835.roa (raw, json) Hash identifier: T2q8wJwPf4cMls6vSWX0jqx4wnpebQb81abaHTbA238= Subject key identifier: F8:C6:DB:1A:3D:B3:55:DC:4D:3C:A5:20:FF:2E:57:31:BA:7E:46:A8 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 43DA4702425DD2107780A709807C70B8F5D73D78 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e392e302f32342d3234203d3e2034373835.roa Signing time: Thu 12 Oct 2023 16:10:38 +0000 ROA not before: Thu 12 Oct 2023 16:05:38 +0000 ROA not after: Thu 10 Oct 2024 16:10:38 +0000 asID: 4785 IP address blocks: 104.245.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 02:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:da:47:02:42:5d:d2:10:77:80:a7:09:80:7c:70:b8:f5:d7:3d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Oct 12 16:05:38 2023 GMT Not After : Oct 10 16:10:38 2024 GMT Subject: CN=F8C6DB1A3DB355DC4D3CA520FF2E5731BA7E46A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:dc:32:c4:13:7c:c5:50:9a:f0:3b:aa:b1: 51:54:f2:ab:26:e9:a6:09:71:bd:5f:73:41:dc:8f: da:c6:68:a8:d7:65:3f:52:e7:86:27:e0:08:00:6a: f9:73:5f:39:e0:72:f8:22:6d:a3:f8:fe:18:8e:bd: 24:a9:9f:f3:4b:47:ba:c2:7d:d3:ca:46:8e:6a:fc: ad:5f:73:e6:87:0e:98:a2:4b:fe:1c:ff:9f:5f:bf: 95:b3:45:06:1c:39:49:2e:47:00:7e:d5:e9:fc:c0: d2:a1:7f:41:a0:c3:17:bd:c2:27:0d:53:ab:71:0d: 02:1c:8f:d3:48:7d:3f:8b:71:f9:47:18:8a:3c:96: 59:10:94:bf:8e:ac:c7:28:f7:9e:77:34:b4:e9:62: e3:35:3d:ca:b2:14:fa:da:6b:de:9d:61:3a:06:1b: 5d:06:df:87:0a:c4:23:58:d0:e6:a5:3d:9a:e0:ba: 0a:cc:91:4d:58:36:ee:0e:6e:11:0c:68:52:73:65: 72:c6:0a:ab:2f:9c:92:0d:8c:6e:32:f4:2d:59:d5: 87:85:d8:ce:0a:5a:05:81:19:e1:75:0e:af:69:dd: c2:b3:01:31:82:87:ce:21:c2:53:59:89:4d:be:28: 79:51:ed:d9:9c:96:45:49:c4:b4:ba:c6:94:15:68: 5c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C6:DB:1A:3D:B3:55:DC:4D:3C:A5:20:FF:2E:57:31:BA:7E:46:A8 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3130342e3234352e392e302f32342d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.245.9.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:ae:03:9a:b2:9f:30:62:5c:80:dc:d0:44:6e:0f:04:26:14: 61:47:92:ec:99:91:e9:54:fa:14:95:d1:3e:c9:85:2a:23:a4: 1f:ca:79:75:79:75:75:01:46:4c:94:04:30:cb:1c:64:94:86: 13:e9:1a:3d:cb:e6:5b:38:98:fb:6a:c8:ba:84:99:03:67:49: 5d:5b:8a:6c:ae:52:60:8d:61:b4:40:16:23:63:c4:15:1c:d9: e9:86:c4:de:29:f4:2d:fc:7b:f2:ad:92:97:be:c3:44:4f:94: d4:19:ec:af:83:1a:1a:cf:6d:f8:1a:e0:91:20:a8:2f:94:5c: f7:cd:dd:16:4c:2d:6d:db:b4:72:9e:93:00:6e:af:e0:19:94: 9b:6e:9c:45:69:49:51:62:9a:dc:3b:a5:50:ce:d6:32:d1:a2: 22:71:f8:4a:6b:7c:50:13:83:12:08:4b:73:46:67:dc:b0:f4: d7:57:10:e8:3e:2c:3e:4e:0e:1e:1c:70:a1:8e:f5:67:9a:ca: b4:81:a0:3f:90:33:fa:2c:cc:31:dc:f7:2e:79:05:76:11:83: 98:cb:7c:7c:0c:d4:47:91:fa:d3:d4:6d:d0:33:b2:b2:d3:02: ed:0b:df:af:9f:ff:91:1d:a6:f9:75:78:6b:9e:21:a6:08:4b: 91:e6:28:40 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUQ9pHAkJd0hB3gKcJgHxwuPXXPXgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjMxMDEyMTYwNTM4WhcNMjQxMDEwMTYxMDM4 WjAzMTEwLwYDVQQDEyhGOEM2REIxQTNEQjM1NURDNEQzQ0E1MjBGRjJFNTczMUJB N0U0NkE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVzcMsQTfMVQ mvA7qrFRVPKrJummCXG9X3NB3I/axmio12U/UueGJ+AIAGr5c1854HL4Im2j+P4Y jr0kqZ/zS0e6wn3TykaOavytX3Pmhw6Yokv+HP+fX7+Vs0UGHDlJLkcAftXp/MDS oX9BoMMXvcInDVOrcQ0CHI/TSH0/i3H5RxiKPJZZEJS/jqzHKPeedzS06WLjNT3K shT62mvenWE6BhtdBt+HCsQjWNDmpT2a4LoKzJFNWDbuDm4RDGhSc2VyxgqrL5yS DYxuMvQtWdWHhdjOCloFgRnhdQ6vad3CswExgofOIcJTWYlNvih5Ue3ZnJZFScS0 usaUFWhc1wIDAQABo4ICXDCCAlgwHQYDVR0OBBYEFPjG2xo9s1XcTTylIP8uVzG6 fkaoMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzMDM0MmUzMjM0MzUyZTM5MmUz MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABo9QkwDQYJ KoZIhvcNAQELBQADggEBAC6uA5qynzBiXIDc0ERuDwQmFGFHkuyZkelU+hSV0T7J hSojpB/KeXV5dXUBRkyUBDDLHGSUhhPpGj3L5ls4mPtqyLqEmQNnSV1bimyuUmCN YbRAFiNjxBUc2emGxN4p9C38e/Ktkpe+w0RPlNQZ7K+DGhrPbfga4JEgqC+UXPfN 3RZMLW3btHKekwBur+AZlJtunEVpSVFimtw7pVDO1jLRoiJx+EprfFATgxIIS3NG Z9yw9NdXEOg+LD5ODh4ccKGO9WeayrSBoD+QM/oszDHc9y55BXYRg5jLfHwM1EeR +tPUbdAzsrLTAu0L36+f/5Edpvl1eGueIaYIS5HmKEA= -----END CERTIFICATE-----Generated at Mon May 6 00:10:56 2024 by rpki-client on console-fra.rpki-client.org