$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac66182-56e2-4af0-834e-a02c46408615.cer File: 2ac66182-56e2-4af0-834e-a02c46408615.cer (raw, json) Hash identifier: fufA6WPfvpfojaVjFS9ulJPFFnxjUbJvHzjYZVNg7EQ= Subject key identifier: 89:46:2E:83:69:D0:EE:B6:6E:B0:85:ED:D5:E4:32:4A:73:2C:58:DA Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842CE87408E3A51DE9A4A4F7780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac66182-56e2-4af0-834e-a02c46408615/2ac66182-56e2-4af0-834e-a02c46408615.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac66182-56e2-4af0-834e-a02c46408615/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:54:18 +0000 Certificate not after: Thu 05 Jun 2025 19:06:39 +0000 Subordinate resources: AS: 63393 IP: 23.190.0.0/24 IP: 74.123.48.0/22 IP: 192.92.193.0/24 IP: 192.203.0.0/24 IP: 2606:3d80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:87:40:8e:3a:51:de:9a:4a:4f:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 7 14:54:18 2023 GMT Not After : Jun 5 19:06:39 2025 GMT Subject: CN=2ac66182-56e2-4af0-834e-a02c46408615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:94:98:e9:da:eb:0f:9b:20:d7:8a:61:3b: f7:95:8b:8b:03:4a:3e:3c:62:3b:be:66:63:7d:24: f7:b2:e4:4e:21:9d:d5:4c:36:2a:7b:7e:60:3d:fe: 44:6a:64:9d:aa:3a:4c:1c:15:84:7f:1d:f0:e3:d6: 74:43:1d:bd:0e:7e:29:52:50:63:94:3f:60:d3:da: 3c:24:4a:37:a4:f6:b5:0a:cc:1e:71:26:2b:f9:e8: ca:29:2f:38:e2:02:63:19:16:55:0c:f0:f8:7b:e7: 76:0f:67:50:a8:62:a2:2d:b3:13:ec:7f:51:c5:c5: 53:bd:4e:02:6e:8d:94:f4:d3:c7:e6:53:28:b7:2a: b3:5c:46:0b:a0:e7:0c:40:d2:72:a1:da:5d:6c:e8: ab:05:0a:50:11:ff:5a:b2:28:62:71:1f:56:74:a3: 9a:34:09:73:85:b9:14:85:5a:55:eb:b5:77:16:ef: 26:73:52:79:27:48:b0:ac:60:46:be:32:9f:a6:1d: f6:25:fe:3a:7b:3b:7b:63:9a:16:ac:2c:fc:53:ee: 62:03:0a:36:4a:23:32:c7:67:c4:0a:c1:f6:eb:e3: c4:f6:40:3e:b0:98:fb:5f:e0:41:54:bb:5f:b0:3d: 06:3a:ed:fd:81:f1:2b:54:62:4e:3a:df:cc:ea:1f: e6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:46:2E:83:69:D0:EE:B6:6E:B0:85:ED:D5:E4:32:4A:73:2C:58:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac66182-56e2-4af0-834e-a02c46408615/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ac66182-56e2-4af0-834e-a02c46408615/2ac66182-56e2-4af0-834e-a02c46408615.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.190.0.0/24 74.123.48.0/22 192.92.193.0/24 192.203.0.0/24 IPv6: 2606:3d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63393 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:81:5b:bd:a9:83:05:33:00:f2:ad:00:3a:37:27:62:45:de: 32:80:54:f2:d4:a4:ff:36:ce:f0:fd:d6:4c:2b:ca:05:bf:b1: cc:a8:06:11:95:2d:ce:dd:e5:11:fc:7b:a4:41:7b:72:5a:6b: 40:46:39:1c:f6:fd:58:23:db:34:b8:38:70:fd:5d:a0:3d:95: 3d:95:65:39:89:07:51:4f:8d:eb:33:11:44:9c:8f:bd:4d:cc: 3e:b9:5f:ce:cb:7d:eb:15:99:59:d6:9d:d3:66:03:c0:2a:51: 4f:ed:78:9c:c0:6f:72:c9:11:c5:04:d4:81:76:66:7f:eb:83: 9a:e7:14:cb:c5:47:fb:cb:3b:63:88:9e:9c:46:e9:7f:2f:46: 12:50:a7:06:c4:e7:05:9b:ea:bf:32:01:1e:87:6f:26:c8:51: c1:83:d2:57:72:92:2c:04:0d:1d:48:1e:1a:00:7a:3c:ce:e5: e3:cd:cd:7f:10:33:46:f5:97:c9:d8:e6:b2:cb:cd:50:b6:45: 21:e9:71:b9:83:52:7c:f5:97:bc:3b:9a:91:08:57:4b:69:52: 3b:74:2c:26:ef:24:fa:8a:6c:e4:75:66:a8:aa:62:93:43:11: a6:ba:e0:4e:a7:c7:16:d2:3f:f0:59:d8:bf:d0:8f:da:56:3a: 6c:06:ac:8e -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWELOh0COOlHemkpPd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDgwNzE0NTQxOFoXDTI1MDYwNTE5MDYzOVowLzEtMCsGA1UEAxMk MmFjNjYxODItNTZlMi00YWYwLTgzNGUtYTAyYzQ2NDA4NjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE+UmOna6w+bINeKYTv3lYuLA0o+PGI7vmZj fST3suROIZ3VTDYqe35gPf5EamSdqjpMHBWEfx3w49Z0Qx29Dn4pUlBjlD9g09o8 JEo3pPa1CswecSYr+ejKKS844gJjGRZVDPD4e+d2D2dQqGKiLbMT7H9RxcVTvU4C bo2U9NPH5lMotyqzXEYLoOcMQNJyodpdbOirBQpQEf9asihicR9WdKOaNAlzhbkU hVpV67V3Fu8mc1J5J0iwrGBGvjKfph32Jf46ezt7Y5oWrCz8U+5iAwo2SiMyx2fE CsH26+PE9kA+sJj7X+BBVLtfsD0GOu39gfErVGJOOt/M6h/mRQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFIlGLoNp0O62brCF7dXkMkpzLFjaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y YWM2NjE4Mi01NmUyLTRhZjAtODM0ZS1hMDJjNDY0MDg2MTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJhYzY2MTgyLTU2ZTItNGFmMC04 MzRlLWEwMmM0NjQwODYxNS8yYWM2NjE4Mi01NmUyLTRhZjAtODM0ZS1hMDJjNDY0 MDg2MTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAAXvgADBAJKezADBADAXMEDBADAywAwDQQCAAIw BwMFACYGPYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPehMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFyB W72pgwUzAPKtADo3J2JF3jKAVPLUpP82zvD91kwrygW/scyoBhGVLc7d5RH8e6RB e3Jaa0BGORz2/Vgj2zS4OHD9XaA9lT2VZTmJB1FPjeszEUScj71NzD65X87LfesV mVnWndNmA8AqUU/teJzAb3LJEcUE1IF2Zn/rg5rnFMvFR/vLO2OInpxG6X8vRhJQ pwbE5wWb6r8yAR6HbybIUcGD0ldykiwEDR1IHhoAejzO5ePNzX8QM0b1l8nY5rLL zVC2RSHpcbmDUnz1l7w7mpEIV0tpUjt0LCbvJPqKbOR1ZqiqYpNDEaa64E6nxxbS P/BZ2L/Qj9pWOmwGrI4= -----END CERTIFICATE-----Generated at Thu Apr 25 16:19:01 2024 by rpki-client on console-fra.rpki-client.org