$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer File: 0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (raw, json) Hash identifier: Aiw9eyrHj8+wsA+/Ic8trn8yeX6UWePoQkxm9wFwn/U= Subject key identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F Certificate issuer: /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Certificate serial: 010D0C9F432858435F07BC7F6C881A996F41CA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer Manifest: rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft caRepository: rsync://rpki.roa.net/rrdp/xTom/52/ Notify URL: https://rpki.roa.net/rrdp/notification.xml Certificate not before: Thu 28 Sep 2023 09:09:35 +0000 Certificate not after: Wed 31 Dec 2025 10:09:35 +0000 Subordinate resources: AS: 32727 IP: 23.144.160.0/24 IP: 2604:eb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:5f:07:bc:7f:6c:88:1a:99:6f:41:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Validity Not Before: Sep 28 09:09:35 2023 GMT Not After : Dec 31 10:09:35 2025 GMT Subject: CN=0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e9:14:75:7f:4c:90:50:67:3b:c2:91:ca:c2: 81:c2:8f:f1:70:07:32:2a:3c:9a:58:60:9c:47:5c: 5d:dc:d3:0c:5e:73:26:7e:3d:5e:4a:a2:e3:73:64: 03:1a:a6:1e:bc:f8:18:8b:e0:66:a0:c8:56:f4:b9: 55:98:82:6c:81:3d:b2:d6:30:26:a0:cd:2c:84:51: 2d:56:b2:49:26:1e:2a:da:58:c4:6c:67:f2:1e:52: fb:1e:22:79:87:26:68:1e:7a:08:a7:c5:da:a1:23: b3:6f:78:3d:94:0b:21:10:a8:4a:1b:b5:9d:5d:25: 97:7a:df:39:b9:e6:d5:d3:2c:9c:80:33:7d:d1:ee: 18:cf:8f:6f:e0:85:f5:9f:e6:3b:28:ea:8c:53:f5: cd:89:cc:71:9a:05:ac:5f:e1:f4:f6:66:c2:53:c7: ec:12:c0:30:40:74:80:bc:ee:10:ab:10:a3:18:11: b0:4e:19:22:d6:45:0e:f1:e3:1c:68:b3:60:4f:ec: 99:6a:05:a9:2a:4a:fd:52:02:06:1d:ca:c2:d7:76: 76:75:4d:08:70:f9:08:99:c2:84:8d:31:ce:fd:88: 01:ee:61:f7:45:d6:a5:07:1f:bf:78:8d:cb:67:bf: 66:4d:ea:a4:03:8e:80:fb:c7:04:33:b8:6e:4b:95: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D2:A9:DA:8F:06:5F:99:59:AE:9C:CB:05:DF:D5:0B:23:A8:BE:F9 Subject Information Access: CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/52/ RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/52/09D2A9DA8F065F9959AE9CCB05DFD50B23A8BEF9.mft RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl X509v3 Authority Key Identifier: keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer sbgp-ipAddrBlock: critical IPv4: 23.144.160.0/24 IPv6: 2604:eb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32727 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ef:5c:d6:da:e9:26:a0:5b:0b:ad:ad:03:42:f9:d2:47:bd: 1a:c3:38:2a:64:15:5f:5b:bd:34:1f:b8:33:ea:6d:bd:ae:3b: 79:af:61:5c:aa:f7:f2:17:0a:09:e1:bf:eb:94:ac:88:aa:62: e0:13:f5:56:0e:e3:6e:83:a4:f4:f5:b3:df:2c:82:5b:c7:d7: 22:f3:24:5b:88:f2:10:50:87:6c:f8:12:09:7c:35:e0:bf:83: 73:ef:33:96:7c:4a:50:42:fc:0c:13:c0:fc:3b:da:84:02:b4: a0:13:f6:5a:bf:40:29:fa:ff:49:9d:fb:81:2f:23:e2:9a:5a: 93:af:f9:4a:7c:44:54:74:0d:e3:c7:5e:f3:7b:10:c6:fa:d8: 37:35:ca:67:c6:00:ea:80:44:bd:4d:bf:41:d1:6d:ea:ea:69: 73:e0:69:16:ef:66:91:12:67:9a:0e:c8:49:98:08:d1:57:fb: b3:42:d9:24:dd:d5:67:93:ad:fb:a8:c8:1b:bc:cf:f3:69:0d: ef:44:d7:b4:88:0c:a2:2c:61:4d:1b:bc:2c:e3:30:73:6d:5f: 12:01:eb:10:02:63:0d:0b:11:45:97:27:40:d4:9d:23:ce:97: 56:c3:1a:65:66:8b:f5:cb:e7:00:3c:d4:d0:90:5a:4e:36:32: 8b:3d:ff:c2 -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWENfB7x/bIgamW9BykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5Yzg0MGQtNTQwNi00NWJkLWFjMWQtZDc3YjNjNWMz NzgwMB4XDTIzMDkyODA5MDkzNVoXDTI1MTIzMTEwMDkzNVowPTE7MDkGA1UEAxMy MGRhNjVlZjBlYjYzYzg3ODlkYWJkYTM5OTUxYWYxMDA3NzFkOWVlMTMwNDU1OGZk YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6RR1f0yQUGc7wpHK woHCj/FwBzIqPJpYYJxHXF3c0wxecyZ+PV5KouNzZAMaph68+BiL4GagyFb0uVWY gmyBPbLWMCagzSyEUS1WskkmHiraWMRsZ/IeUvseInmHJmgeeginxdqhI7NveD2U CyEQqEobtZ1dJZd63zm55tXTLJyAM33R7hjPj2/ghfWf5jso6oxT9c2JzHGaBaxf 4fT2ZsJTx+wSwDBAdIC87hCrEKMYEbBOGSLWRQ7x4xxos2BP7JlqBakqSv1SAgYd ysLXdnZ1TQhw+QiZwoSNMc79iAHuYfdF1qUHH794jctnv2ZN6qQDjoD7xwQzuG5L lbYFAgMBAAGjggN/MIIDezAdBgNVHQ4EFgQUCdKp2o8GX5lZrpzLBd/VCyOovvkw gdQGCCsGAQUFBwELBIHHMIHEMC4GCCsGAQUFBzAFhiJyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTIvMFoGCCsGAQUFBzAKhk5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTIvMDlEMkE5REE4RjA2NUY5OTU5QUU5Q0NCMDVERkQ1 MEIyM0E4QkVGOS5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnBraS5yb2EubmV0 L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIHcBgNVHR8E gdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9y eS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1 N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODljODQw ZC01NDA2LTQ1YmQtYWMxZC1kNzdiM2M1YzM3ODAvNTg5Yzg0MGQtNTQwNi00NWJk LWFjMWQtZDc3YjNjNWMzNzgwLmNybDAfBgNVHSMEGDAWgBS8FXviubcOrWgGpbao nwPU4uBGTzAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEBBIGzMIGwMIGtBggr BgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIx ZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzU4OWM4NDBkLTU0MDYt NDViZC1hYzFkLWQ3N2IzYzVjMzc4MC5jZXIwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAAXkKAwDQQCAAIwBwMFACYE60AwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICf9cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEABu9c1trpJqBbC62tA0L50ke9GsM4KmQVX1u9NB+4M+pt va47ea9hXKr38hcKCeG/65SsiKpi4BP1Vg7jboOk9PWz3yyCW8fXIvMkW4jyEFCH bPgSCXw14L+Dc+8zlnxKUEL8DBPA/DvahAK0oBP2Wr9AKfr/SZ37gS8j4ppak6/5 SnxEVHQN48de83sQxvrYNzXKZ8YA6oBEvU2/QdFt6uppc+BpFu9mkRJnmg7ISZgI 0Vf7s0LZJN3VZ5Ot+6jIG7zP82kN70TXtIgMoixhTRu8LOMwc21fEgHrEAJjDQsR RZcnQNSdI86XVsMaZWaL9cvnADzU0JBaTjYyiz3/wg== -----END CERTIFICATE-----Generated at Fri May 24 14:56:24 2024 by rpki-client on console-ams.rpki-client.org