$ rpki-client -vvf rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3332203d3e2030.roa File: 32332e3133392e3232342e302f32342d3332203d3e2030.roa (raw, json) Hash identifier: u8xlzuzua4CN2Me550uGshzvJJVsIpxzXB5yA4k+kM0= Subject key identifier: 57:9B:FD:72:99:4A:FC:61:27:F8:9F:4C:55:FC:9D:36:A5:ED:36:E7 Certificate issuer: /CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Certificate serial: 287FE34C7AD69C24B2E3305CE7C86F0DF2614AFF Authority key identifier: 0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3332203d3e2030.roa Signing time: Thu 02 Jan 2025 15:44:54 +0000 ROA not before: Thu 02 Jan 2025 15:39:54 +0000 ROA not after: Thu 01 Jan 2026 15:44:54 +0000 asID: 0 IP address blocks: 23.139.224.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/71effefa-6381-4c3d-8487-95f07e37a7cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7f:e3:4c:7a:d6:9c:24:b2:e3:30:5c:e7:c8:6f:0d:f2:61:4a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42 Validity Not Before: Jan 2 15:39:54 2025 GMT Not After : Jan 1 15:44:54 2026 GMT Subject: CN=579BFD72994AFC6127F89F4C55FC9D36A5ED36E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:17:f5:60:dd:ca:f8:29:96:bc:5c:b8:2b: 3a:f0:5d:45:e3:71:29:26:fb:69:b9:91:97:d3:9d: 12:0a:14:6c:93:3d:5b:3f:58:c9:fe:04:f9:49:5a: c0:fc:0b:e5:3b:18:24:ed:e0:f9:41:60:d5:ab:da: b5:d0:0b:e6:e6:64:12:cc:34:87:e3:36:cf:f1:ec: 6f:db:12:c4:07:f3:ce:bf:b5:a9:61:d1:cc:5f:6a: b8:f8:52:f7:dd:f9:f0:81:cf:ff:30:a6:81:f1:d0: 03:76:a3:b6:85:7f:74:80:83:21:89:0c:e0:fa:36: c2:fe:63:4e:b6:10:45:46:d5:2b:67:3a:3c:e2:dc: 1c:99:fd:63:24:65:8d:87:fe:ac:56:6a:19:d6:14: e4:84:50:21:23:06:87:fe:87:01:d0:81:27:84:84: 44:53:8e:8a:75:3f:65:98:8d:1a:12:02:02:d6:32: 7a:b0:c3:a5:c2:35:a3:34:18:c0:78:91:09:44:3e: 20:05:99:fd:6d:be:8f:f9:63:6e:ff:fd:93:58:8e: 1a:21:cd:bc:a6:c5:ab:17:dd:b7:54:96:a7:48:0f: c0:79:6e:58:89:e8:0c:22:1c:ab:26:b7:ab:c7:44: f3:6c:4d:9a:47:50:9a:97:2d:cc:f7:3d:b2:11:84: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9B:FD:72:99:4A:FC:61:27:F8:9F:4C:55:FC:9D:36:A5:ED:36:E7 X509v3 Authority Key Identifier: keyid:0E:90:97:02:72:65:2A:8C:17:A1:AC:6D:8E:2C:F8:3A:D2:2A:C7:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/54/0E90970272652A8C17A1AC6D8E2CF83AD22AC706.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/71effefa-6381-4c3d-8487-95f07e37a7cf/d8fe564b26a7ed856ddf151dda0d94b5c8517b447f97512c42.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/54/32332e3133392e3232342e302f32342d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.139.224.0/24 Signature Algorithm: sha256WithRSAEncryption 22:42:d1:0a:07:5c:19:a8:c7:21:2e:40:12:26:f5:4e:89:2b: cd:db:7b:db:d6:2e:d2:6f:69:51:87:0c:ee:b8:53:c1:42:98: 09:79:15:94:76:74:d2:98:50:1c:9d:ad:19:bd:9d:88:53:3e: 95:01:12:bb:76:0a:2c:de:6a:7b:1e:08:f1:a8:89:e2:82:a3: cd:24:db:8f:d6:64:57:71:14:74:14:ec:20:35:a4:5f:7e:f3: 37:fc:e1:82:f9:0f:ea:c4:3d:97:a1:1c:b1:e4:2e:3b:f8:b3: 5a:2d:0a:0f:9d:f7:b4:20:4c:6e:7e:9e:b5:89:e8:3f:36:03: 78:a7:af:1b:80:f8:08:a5:da:53:0e:ef:5d:eb:11:96:59:20: a8:d5:69:57:99:00:f7:29:c2:e5:8b:ae:fd:92:cf:ce:b0:49: e6:1c:e7:e1:31:f5:d8:ca:4d:73:e8:44:78:af:5f:47:18:a0: 42:a5:fe:ec:f3:c5:f7:1e:96:00:a5:ab:77:9d:0e:2a:95:d2: eb:76:e0:63:bf:63:bb:eb:57:65:91:35:94:a5:2b:55:21:8b: 93:22:e1:c7:3b:75:bc:87:88:2a:c6:e7:c9:dd:cb:94:1c:ec: 08:ba:47:e8:4b:70:e3:56:37:65:23:ae:10:f7:8d:4e:b0:9a: 04:50:a4:97 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIUKH/jTHrWnCSy4zBc58hvDfJhSv8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDhmZTU2NGIyNmE3ZWQ4NTZkZGYxNTFkZGEwZDk0YjVj ODUxN2I0NDdmOTc1MTJjNDIwHhcNMjUwMTAyMTUzOTU0WhcNMjYwMTAxMTU0NDU0 WjAzMTEwLwYDVQQDEyg1NzlCRkQ3Mjk5NEFGQzYxMjdGODlGNEM1NUZDOUQzNkE1 RUQzNkU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv60X9WDdyvgp lrxcuCs68F1F43EpJvtpuZGX050SChRskz1bP1jJ/gT5SVrA/AvlOxgk7eD5QWDV q9q10Avm5mQSzDSH4zbP8exv2xLEB/POv7WpYdHMX2q4+FL33fnwgc//MKaB8dAD dqO2hX90gIMhiQzg+jbC/mNOthBFRtUrZzo84twcmf1jJGWNh/6sVmoZ1hTkhFAh IwaH/ocB0IEnhIREU46KdT9lmI0aEgIC1jJ6sMOlwjWjNBjAeJEJRD4gBZn9bb6P +WNu//2TWI4aIc28psWrF923VJanSA/AeW5YiegMIhyrJrerx0TzbE2aR1Caly3M 9z2yEYRPfQIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFFeb/XKZSvxhJ/ifTFX8nTal 7TbnMB8GA1UdIwQYMBaAFA6QlwJyZSqMF6GsbY4s+DrSKscGMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNTQvMEU5MDk3MDI3MjY1MkE4QzE3QTFBQzZEOEUyQ0Y4M0FEMjJBQzcw Ni5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj Y2UtMTM3MjI3ZTk3MWFjLzcxZWZmZWZhLTYzODEtNGMzZC04NDg3LTk1ZjA3ZTM3 YTdjZi9kOGZlNTY0YjI2YTdlZDg1NmRkZjE1MWRkYTBkOTRiNWM4NTE3YjQ0N2Y5 NzUxMmM0Mi5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNTQvMzIzMzJlMzEzMzM5MmUzMjMyMzQy ZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeL4DANBgkqhkiG 9w0BAQsFAAOCAQEAIkLRCgdcGajHIS5AEib1Tokrzdt729Yu0m9pUYcM7rhTwUKY CXkVlHZ00phQHJ2tGb2diFM+lQESu3YKLN5qex4I8aiJ4oKjzSTbj9ZkV3EUdBTs IDWkX37zN/zhgvkP6sQ9l6EcseQuO/izWi0KD533tCBMbn6etYnoPzYDeKevG4D4 CKXaUw7vXesRllkgqNVpV5kA9ynC5Yuu/ZLPzrBJ5hzn4TH12MpNc+hEeK9fRxig QqX+7PPF9x6WAKWrd50OKpXS63bgY79ju+tXZZE1lKUrVSGLkyLhxzt1vIeIKsbn yd3LlBzsCLpH6Etw41Y3ZSOuEPeNTrCaBFCklw== -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:30 2025 by rpki-client