$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer File: cba86acd-9af7-450a-ac5c-6c872671a7a3.cer (raw, json) Hash identifier: WFI+obfqXcuK9BVtDybk2DEkzlL2/IR3dAyMdUFNAyU= Subject key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842B05AE9959B8FEAC65B81E300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Jul 2023 19:30:43 +0000 Certificate not after: Wed 29 Oct 2025 19:30:43 +0000 Subordinate resources: AS: 62534 IP: 23.138.96.0/24 IP: 2604:d9c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:b0:5a:e9:95:9b:8f:ea:c6:5b:81:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 27 19:30:43 2023 GMT Not After : Oct 29 19:30:43 2025 GMT Subject: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:45:d2:0a:14:e3:ef:e3:15:db:08:48:8f: a3:26:1c:2e:c1:b2:92:26:c6:c1:5d:8c:a2:3f:70: 07:a9:77:1e:2c:4a:28:da:ff:ab:37:32:96:e2:30: 68:c5:3e:09:f2:d7:a9:31:5c:05:c2:de:5c:a9:33: 6f:71:f4:5d:54:bd:5e:de:2d:cc:b7:e0:63:8d:cf: 00:5d:f3:61:0b:1a:ac:fe:c5:cf:d6:f4:66:c3:5b: a7:5a:32:90:ef:e7:c9:e0:57:20:80:da:da:37:e4: 7d:5a:0e:50:65:28:6f:1e:64:a7:95:d4:b0:83:e2: ac:08:6c:d8:46:5a:fe:57:8b:f1:d2:7f:fe:6c:88: 78:5a:33:f7:18:56:20:5c:02:93:76:5e:0e:88:b1: 00:52:60:8a:2e:12:36:0a:ca:bd:c9:6a:8b:39:a8: 47:1a:dc:52:1c:3c:22:f7:54:e0:c1:1f:1f:ed:bb: 97:e0:2a:ed:e7:9d:2d:ba:f3:2f:7c:3a:5e:8f:dd: eb:84:9c:f6:d2:05:6e:61:e0:42:9a:90:fe:d8:e5: 0e:0d:a3:8e:e4:e0:fb:cc:97:6b:1b:27:2e:df:65: e3:1b:c9:ec:cb:f6:8e:0b:3c:a8:fe:1f:12:23:33: e8:3e:7e:b6:80:48:b8:63:33:2c:7b:d8:c2:cb:a9: 08:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.138.96.0/24 IPv6: 2604:d9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62534 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9b:c1:50:19:28:c4:4c:7d:0a:65:1d:c6:c3:52:c1:17:ee: fe:6e:a6:67:e0:bb:7d:47:89:5b:55:0a:48:93:20:cf:c6:cf: 2f:2e:fe:bf:c8:69:a7:45:97:28:31:54:39:59:89:c5:3a:69: 79:ae:09:65:e8:ee:f6:78:50:5f:be:23:45:3e:08:9e:e4:4b: 36:ca:ae:41:f8:20:88:43:4e:6d:69:27:0c:38:37:7e:67:c0: 1f:a8:44:92:c1:a6:1c:a1:5e:6a:e0:2a:cb:f3:7b:5a:2b:dd: fc:44:f1:a1:45:0a:73:d1:8b:f7:78:de:0d:96:77:d0:6a:c1: cc:91:2e:00:29:08:b2:a0:19:2e:9d:af:72:88:ae:b8:8d:7a: c5:79:a3:a9:9e:43:63:96:13:92:c4:b5:ad:bf:e0:da:ba:58: e1:33:54:ae:42:03:d6:92:bd:9d:8a:1d:72:05:5b:d1:04:8f: bb:e5:99:e5:68:04:b9:24:23:c2:16:b1:8f:ef:ce:0e:27:60: 3a:ec:8d:08:c1:9c:08:2f:ec:af:7b:b4:0b:48:48:42:23:79: 35:80:c1:ff:68:1e:dd:63:56:66:7c:10:4f:6b:93:22:a2:aa: ba:9d:53:62:3c:14:f4:77:5f:02:23:d3:9b:3b:91:ba:b7:28: aa:96:02:d0 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEKwWumVm4/qxluB4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcyNzE5MzA0M1oXDTI1MTAyOTE5MzA0M1owLzEtMCsGA1UEAxMk Y2JhODZhY2QtOWFmNy00NTBhLWFjNWMtNmM4NzI2NzFhN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWdF0goU4+/jFdsISI+jJhwuwbKSJsbBXYyi P3AHqXceLEoo2v+rNzKW4jBoxT4J8tepMVwFwt5cqTNvcfRdVL1e3i3Mt+Bjjc8A XfNhCxqs/sXP1vRmw1unWjKQ7+fJ4FcggNraN+R9Wg5QZShvHmSnldSwg+KsCGzY Rlr+V4vx0n/+bIh4WjP3GFYgXAKTdl4OiLEAUmCKLhI2Csq9yWqLOahHGtxSHDwi 91TgwR8f7buX4Crt550tuvMvfDpej93rhJz20gVuYeBCmpD+2OUODaOO5OD7zJdr Gycu32XjG8nsy/aOCzyo/h8SIzPoPn62gEi4YzMse9jCy6kIMQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFK40jNr2l7ofY41rtmetJ6Mlbx4iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j YmE4NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3MjY3MWE3YTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NiYTg2YWNkLTlhZjctNDUwYS1h YzVjLTZjODcyNjcxYTdhMy9jYmE4NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3MjY3 MWE3YTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXimAwDQQCAAIwBwMFACYE2cAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPRGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACybwVAZKMRMfQplHcbDUsEX7v5u pmfgu31HiVtVCkiTIM/Gzy8u/r/IaadFlygxVDlZicU6aXmuCWXo7vZ4UF++I0U+ CJ7kSzbKrkH4IIhDTm1pJww4N35nwB+oRJLBphyhXmrgKsvze1or3fxE8aFFCnPR i/d43g2Wd9BqwcyRLgApCLKgGS6dr3KIrriNesV5o6meQ2OWE5LEta2/4Nq6WOEz VK5CA9aSvZ2KHXIFW9EEj7vlmeVoBLkkI8IWsY/vzg4nYDrsjQjBnAgv7K97tAtI SEIjeTWAwf9oHt1jVmZ8EE9rkyKiqrqdU2I8FPR3XwIj05s7kbq3KKqWAtA= -----END CERTIFICATE-----Generated at Fri May 31 21:09:49 2024 by rpki-client on console-ams.rpki-client.org