$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer File: 5d7ff891-1048-4688-a1ac-b43aa5b13e9e.cer (raw, json) Hash identifier: qAb/w5faGCHa7Leo5TABK8jXYz6Kk96PE/hfnAEOa0E= Subject key identifier: 58:8A:75:8F:51:01:FF:44:0B:35:73:29:0E:D0:70:BD:4D:CA:02:A7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285841E48348039794035F0A66A380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Mon 12 May 2025 19:06:39 +0000 Subordinate resources: AS: 394669 IP: 52.124.57.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:48:03:97:94:03:5f:0a:66:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 12 19:06:39 2025 GMT Subject: CN=5d7ff891-1048-4688-a1ac-b43aa5b13e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:b2:8f:36:49:66:7c:23:45:d9:26:c4:c8: 90:2d:f6:59:55:37:93:90:f8:61:bd:36:bb:59:dc: 6d:75:45:f6:c4:b4:97:4d:5d:76:2d:28:24:00:76: b5:35:ff:98:36:4d:91:d9:6a:8e:4a:f1:e7:4f:b8: ef:63:36:cd:ae:06:e8:85:ed:a0:ab:dd:3b:3b:3d: 38:64:f5:8e:a9:53:70:ac:41:19:41:31:43:6d:af: 01:92:73:fd:0e:6b:fd:8f:4c:9c:3d:15:4a:04:95: 5d:44:be:9e:00:61:48:c6:e6:da:61:e1:1a:a9:d4: 5a:5e:8e:dd:19:31:c6:6b:87:d6:89:9b:7a:15:25: c8:4b:8b:04:84:d1:68:b0:3b:ae:9e:f7:ab:68:fb: eb:b6:ed:11:e5:44:dc:c8:8e:56:e3:03:2a:71:8a: 3c:a1:86:ed:a8:78:f8:40:de:f4:60:87:87:52:33: 3e:22:8a:f0:60:88:84:d5:9d:79:7c:8b:ed:21:8f: cf:87:2d:a8:05:02:57:5d:7c:17:6a:08:b1:81:25: 96:fd:d2:20:2f:15:8c:8b:5f:5a:37:5c:12:ff:ab: 51:b4:d4:8c:f8:a4:10:1a:a8:da:9c:87:c1:0c:84: 9b:1a:11:37:40:39:7c:4b:03:1e:05:eb:0e:85:5c: 63:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8A:75:8F:51:01:FF:44:0B:35:73:29:0E:D0:70:BD:4D:CA:02:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5d7ff891-1048-4688-a1ac-b43aa5b13e9e/5d7ff891-1048-4688-a1ac-b43aa5b13e9e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 52.124.57.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394669 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e8:ab:37:f2:93:7c:77:57:9e:b3:5c:fc:b1:9f:5f:52:09: c7:ef:3c:36:36:cd:67:ff:1c:5c:1c:3a:41:51:a9:c4:5a:3c: 32:14:6d:02:e0:4c:a8:9f:0b:d5:33:62:79:55:db:f4:7c:5f: 75:b1:1f:5b:91:fc:60:c1:4e:74:8a:7e:39:ac:bc:ae:d4:37: 72:5e:74:5c:67:f5:91:30:d5:22:a0:31:a6:97:51:52:ae:2f: f2:b2:e9:41:0f:a8:95:98:5b:37:d1:f0:4d:49:83:7d:9b:06: 66:01:f9:5a:fa:13:c8:52:98:c8:91:67:8f:30:1c:c7:19:ef: 0e:1d:96:76:67:63:d4:60:d6:6c:76:df:55:3a:3d:7f:dd:af: 8c:c7:d3:c5:63:2c:8b:0a:89:bc:58:2a:a0:01:c2:3f:9a:dd: 09:40:c7:08:b4:b4:96:4f:54:43:9e:94:d3:39:44:2f:bc:6f: 57:4d:19:e0:2d:79:20:7c:72:b6:3b:c5:6d:81:67:3f:13:f8: 0a:1f:05:5c:b8:9c:c7:07:6e:57:da:d6:f1:7c:21:9a:a0:3b: 6d:45:e3:a0:94:72:ff:1b:87:27:4c:90:ea:e4:52:3b:df:b4: d2:fe:ba:1b:78:11:d7:07:ff:1b:f9:6c:71:2b:24:66:0d:80: 55:6c:1a:1e -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEHkg0gDl5QDXwpmo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUxMjE5MDYzOVowLzEtMCsGA1UEAxMk NWQ3ZmY4OTEtMTA0OC00Njg4LWExYWMtYjQzYWE1YjEzZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8GyjzZJZnwjRdkmxMiQLfZZVTeTkPhhvTa7 WdxtdUX2xLSXTV12LSgkAHa1Nf+YNk2R2WqOSvHnT7jvYzbNrgbohe2gq907Oz04 ZPWOqVNwrEEZQTFDba8BknP9Dmv9j0ycPRVKBJVdRL6eAGFIxubaYeEaqdRaXo7d GTHGa4fWiZt6FSXIS4sEhNFosDuunveraPvrtu0R5UTcyI5W4wMqcYo8oYbtqHj4 QN70YIeHUjM+IorwYIiE1Z15fIvtIY/Phy2oBQJXXXwXagixgSWW/dIgLxWMi19a N1wS/6tRtNSM+KQQGqjanIfBDISbGhE3QDl8SwMeBesOhVxj5QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFFiKdY9RAf9ECzVzKQ7QcL1NygKnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81 ZDdmZjg5MS0xMDQ4LTQ2ODgtYTFhYy1iNDNhYTViMTNlOWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzVkN2ZmODkxLTEwNDgtNDY4OC1h MWFjLWI0M2FhNWIxM2U5ZS81ZDdmZjg5MS0xMDQ4LTQ2ODgtYTFhYy1iNDNhYTVi MTNlOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAA0fDkwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgWtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHLoqzfyk3x3V56zXPyxn19SCcfvPDY2zWf/HFwcOkFRqcRa PDIUbQLgTKifC9UzYnlV2/R8X3WxH1uR/GDBTnSKfjmsvK7UN3JedFxn9ZEw1SKg MaaXUVKuL/Ky6UEPqJWYWzfR8E1Jg32bBmYB+Vr6E8hSmMiRZ48wHMcZ7w4dlnZn Y9Rg1mx231U6PX/dr4zH08VjLIsKibxYKqABwj+a3QlAxwi0tJZPVEOelNM5RC+8 b1dNGeAteSB8crY7xW2BZz8T+AofBVy4nMcHblfa1vF8IZqgO21F46CUcv8bhydM kOrkUjvftNL+uht4EdcH/xv5bHErJGYNgFVsGh4= -----END CERTIFICATE-----Generated at Fri Mar 29 02:28:00 2024 by rpki-client on console-ams.rpki-client.org