$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5922a996-ea5a-4e8c-a465-3aeb6f4753b2.cer File: 5922a996-ea5a-4e8c-a465-3aeb6f4753b2.cer (raw, json) Hash identifier: bvd/dYc+52yiAZqa8hGMnZ2qrGt0AN2+pDvcd+EkEV0= Subject key identifier: 06:AB:41:8A:ED:9A:BD:2E:BC:C8:30:45:FB:B9:70:1A:80:50:27:6C Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285843AC3896A9A948C753FDC0F600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5922a996-ea5a-4e8c-a465-3aeb6f4753b2/5922a996-ea5a-4e8c-a465-3aeb6f4753b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5922a996-ea5a-4e8c-a465-3aeb6f4753b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Oct 2023 00:45:15 +0000 Certificate not after: Wed 28 Jan 2026 01:45:15 +0000 Subordinate resources: IP: 23.179.0.0/22 IP: 2602:ff22::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:ac:38:96:a9:a9:48:c7:53:fd:c0:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 26 00:45:15 2023 GMT Not After : Jan 28 01:45:15 2026 GMT Subject: CN=5922a996-ea5a-4e8c-a465-3aeb6f4753b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:0d:58:d0:31:57:96:74:f1:04:de:1e:ad: 4b:17:f0:15:a9:84:71:58:3d:8e:fe:3c:7a:96:29: ac:da:3f:80:a1:a8:f9:09:26:af:ec:e5:43:48:ae: d9:41:d4:b7:9b:1e:9b:dd:43:63:11:5c:76:49:e2: 49:4d:92:fe:26:13:b2:9f:12:40:02:95:d6:17:ac: 71:ed:e7:bc:a2:aa:a7:a7:86:fa:0e:be:09:b7:0f: 6c:bf:27:6b:2c:ee:15:7d:88:a8:d0:ed:ca:10:3d: 7d:98:5d:28:4b:92:fb:3d:f1:6d:3a:6b:97:fb:f1: 35:dd:7e:ab:4b:7b:15:ff:61:a7:75:22:3d:1c:af: 49:34:ae:cf:a7:6b:ab:14:9c:ae:df:b6:c9:88:b8: 07:d7:21:ec:3c:24:7f:3d:d6:36:2f:87:d9:f7:4c: a7:7f:a3:de:3e:57:ae:0e:7b:d9:99:c6:62:ef:20: e2:25:e0:82:7e:fd:2f:29:fb:4a:2d:19:ce:55:f5: 7e:5b:b5:a7:af:4e:4e:75:d0:a7:ca:1f:8d:8f:e7: 81:ab:2a:d1:45:fe:d7:f8:35:42:de:e5:21:a6:50: 71:39:80:1d:1a:30:14:fd:db:ec:72:90:2c:40:d3: f5:8b:05:ad:f6:80:37:b6:23:02:1a:8b:e5:b5:36: ce:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AB:41:8A:ED:9A:BD:2E:BC:C8:30:45:FB:B9:70:1A:80:50:27:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5922a996-ea5a-4e8c-a465-3aeb6f4753b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5922a996-ea5a-4e8c-a465-3aeb6f4753b2/5922a996-ea5a-4e8c-a465-3aeb6f4753b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.179.0.0/22 IPv6: 2602:ff22::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:cd:43:41:f3:ff:f4:35:fb:dd:67:af:65:41:b5:6c:7a:ec: 27:62:8f:8d:16:49:b9:c1:96:ac:bb:a2:f9:86:52:12:08:46: 4e:e9:fe:d2:dd:ef:66:73:16:ff:3e:e2:6f:a8:82:c9:ea:cd: b0:c7:11:f7:bb:7a:b5:d0:53:b5:3c:d6:40:17:54:ce:3c:30: f1:d4:fe:1a:9c:67:1e:3c:f5:ba:f7:6f:c8:9c:7e:19:86:df: 9c:93:34:a5:97:8b:25:63:b6:70:39:e9:4a:0b:0b:91:3d:6b: 4d:19:0b:d1:4b:6e:9e:5f:c1:d9:84:8c:73:25:1b:76:48:e2: 69:6e:af:00:e5:1a:7f:01:a4:53:e2:3c:c2:4f:58:cc:94:d6: c6:ff:dd:48:e2:c3:ef:9a:28:c9:c7:97:bb:9d:7e:8f:07:26: d3:1f:b9:17:24:2c:00:97:ed:6c:d8:c0:8f:59:dc:c0:ef:d1: 66:f3:b9:0d:0c:92:eb:40:f8:f6:06:ba:b4:a1:09:3e:11:fc: 37:78:b8:70:c7:94:0a:32:72:10:28:7e:b0:2d:b5:4a:64:5f: 60:20:f8:1d:06:ac:36:0f:be:16:22:b2:50:49:6c:da:0f:51: 1c:c5:a0:cf:0c:81:56:53:4e:a3:d3:df:7a:fc:fd:c2:96:4b: 71:7b:34:79 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEOsOJapqUjHU/3A9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMTAyNjAwNDUxNVoXDTI2MDEyODAxNDUxNVowLzEtMCsGA1UEAxMk NTkyMmE5OTYtZWE1YS00ZThjLWE0NjUtM2FlYjZmNDc1M2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsENWNAxV5Z08QTeHq1LF/AVqYRxWD2O/jx6 lims2j+Aoaj5CSav7OVDSK7ZQdS3mx6b3UNjEVx2SeJJTZL+JhOynxJAApXWF6xx 7ee8oqqnp4b6Dr4Jtw9svydrLO4VfYio0O3KED19mF0oS5L7PfFtOmuX+/E13X6r S3sV/2GndSI9HK9JNK7Pp2urFJyu37bJiLgH1yHsPCR/PdY2L4fZ90ynf6PePleu DnvZmcZi7yDiJeCCfv0vKftKLRnOVfV+W7Wnr05OddCnyh+Nj+eBqyrRRf7X+DVC 3uUhplBxOYAdGjAU/dvscpAsQNP1iwWt9oA3tiMCGovltTbOBQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFAarQYrtmr0uvMgwRfu5cBqAUCdsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81 OTIyYTk5Ni1lYTVhLTRlOGMtYTQ2NS0zYWViNmY0NzUzYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzU5MjJhOTk2LWVhNWEtNGU4Yy1h NDY1LTNhZWI2ZjQ3NTNiMi81OTIyYTk5Ni1lYTVhLTRlOGMtYTQ2NS0zYWViNmY0 NzUzYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAIXswAwDgQCAAIwCAMGBCYC/yIAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AK7NQ0Hz//Q1+91nr2VBtWx67Cdij40WSbnBlqy7ovmGUhIIRk7p/tLd72ZzFv8+ 4m+ogsnqzbDHEfe7erXQU7U81kAXVM48MPHU/hqcZx489br3b8icfhmG35yTNKWX iyVjtnA56UoLC5E9a00ZC9FLbp5fwdmEjHMlG3ZI4mlurwDlGn8BpFPiPMJPWMyU 1sb/3Ujiw++aKMnHl7udfo8HJtMfuRckLACX7WzYwI9Z3MDv0WbzuQ0MkutA+PYG urShCT4R/Dd4uHDHlAoychAofrAttUpkX2Ag+B0GrDYPvhYislBJbNoPURzFoM8M gVZTTqPT33r8/cKWS3F7NHk= -----END CERTIFICATE-----Generated at Wed Apr 24 14:32:35 2024 by rpki-client on console-fra.rpki-client.org