$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer File: 1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.cer (raw, json) Hash identifier: HvnkzfDBEGATRFYlSoSTXelLiErY1zWi414E1v9MmUE= Subject key identifier: 9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584583C96C43244E92FF19BF6CD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Apr 2024 22:42:49 +0000 Certificate not after: Wed 15 Jul 2026 22:42:49 +0000 Subordinate resources: AS: 55082 IP: 162.249.44.0/24 IP: 162.252.236.0/24 IP: 198.135.249.0/24 IP: 2620:e3:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:83:c9:6c:43:24:4e:92:ff:19:bf:6c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 11 22:42:49 2024 GMT Not After : Jul 15 22:42:49 2026 GMT Subject: CN=1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:72:7f:fb:c6:42:90:da:05:1a:c2:23:cd: 9e:1d:51:b9:fe:dd:20:73:91:39:4d:eb:69:b4:8a: 9a:50:85:1e:e4:a3:3f:cf:2c:91:4b:76:ee:06:e2: 8d:77:af:bc:58:b8:28:02:72:03:40:e4:5d:67:76: fa:58:79:48:60:11:a2:6b:c1:8e:da:75:8e:19:f1: 34:8d:94:b8:ef:a7:ac:b5:f1:2e:5f:ee:5d:48:78: b9:64:d6:28:7a:19:da:0d:ba:b5:7c:c8:a8:a8:fb: 02:d7:ac:5c:09:69:c7:88:f3:d2:43:c4:f1:eb:b1: e3:71:cf:94:3c:8d:92:bf:ef:7c:d7:32:39:ef:45: 77:fe:70:fd:9b:90:2c:b2:45:29:82:92:4e:af:b1: be:7c:ea:81:c1:13:3f:02:7d:b7:48:95:69:50:ba: 2a:51:f1:93:98:52:5d:49:be:0d:e4:77:29:e5:f9: fc:6c:ac:49:63:30:28:a2:cf:44:73:05:57:8f:58: fd:6d:4b:96:86:0c:24:d2:80:cf:ac:51:0f:60:5e: 7d:fc:c9:91:b3:4b:e3:2e:97:5a:6f:c1:0e:44:d4: dd:95:1d:6f:5b:d5:99:52:ec:45:cf:bb:3a:71:f6: 12:2f:c0:c4:bc:11:2f:b8:c2:64:c4:13:d2:e3:a8: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:02:0B:0B:C3:8B:A6:0C:E1:38:7B:AC:CC:30:23:31:9C:D0:8D:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f/1f3ae211-1c6c-4e98-9caa-9e4a9a386b3f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 162.249.44.0/24 162.252.236.0/24 198.135.249.0/24 IPv6: 2620:e3:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55082 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e0:6e:10:4d:31:f9:26:77:79:ce:e0:24:98:63:c1:d1:b7: 8c:84:a0:1d:84:1d:ca:94:fe:76:fe:cb:ab:13:99:1b:4f:96: 50:74:e3:32:af:90:37:39:1b:e1:6f:4d:af:a5:52:b6:45:57: 77:aa:de:80:61:e3:47:d5:8a:af:6d:8f:ea:07:04:b7:4f:81: 96:5e:4c:1c:3d:de:05:01:ba:b5:dd:fe:df:9a:15:24:8d:bd: 85:56:1a:1b:97:3d:b0:27:8d:36:ae:a3:69:00:0e:5b:f9:04: 80:a4:75:ac:89:f7:f7:05:d4:19:90:39:fe:83:92:32:57:8f: dc:39:8e:7d:30:21:1d:59:20:a5:f5:82:0a:44:6d:92:54:96: e9:6d:d8:b8:81:f4:5e:6f:60:eb:4d:02:dd:d6:8b:09:7c:ce: 13:4c:cc:bb:f7:00:96:4f:94:ce:05:67:ee:24:03:76:b3:ad: f5:6b:53:64:00:2d:fb:2d:af:70:99:d8:32:36:c8:0f:a7:9d: b7:16:9a:98:52:a6:34:ad:41:64:40:01:e9:9a:d1:03:f4:2a: e8:39:fc:22:9e:9c:2f:a0:c5:bb:33:61:e7:25:76:2e:08:58: 12:b7:5a:7f:20:a5:fc:4e:d3:84:5b:45:82:07:82:c1:ce:a2: 04:cf:b5:7e -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWEWDyWxDJE6S/xm/bNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQxMTIyNDI0OVoXDTI2MDcxNTIyNDI0OVowLzEtMCsGA1UEAxMk MWYzYWUyMTEtMWM2Yy00ZTk4LTljYWEtOWU0YTlhMzg2YjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Jyf/vGQpDaBRrCI82eHVG5/t0gc5E5Tetp tIqaUIUe5KM/zyyRS3buBuKNd6+8WLgoAnIDQORdZ3b6WHlIYBGia8GO2nWOGfE0 jZS476estfEuX+5dSHi5ZNYoehnaDbq1fMioqPsC16xcCWnHiPPSQ8Tx67Hjcc+U PI2Sv+981zI570V3/nD9m5AsskUpgpJOr7G+fOqBwRM/An23SJVpULoqUfGTmFJd Sb4N5Hcp5fn8bKxJYzAoos9EcwVXj1j9bUuWhgwk0oDPrFEPYF59/MmRs0vjLpda b8EORNTdlR1vW9WZUuxFz7s6cfYSL8DEvBEvuMJkxBPS46iFUwIDAQABo4IEODCC BDQwHQYDVR0OBBYEFJ4CCwvDi6YM4Th7rMwwIzGc0I0hMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x ZjNhZTIxMS0xYzZjLTRlOTgtOWNhYS05ZTRhOWEzODZiM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzFmM2FlMjExLTFjNmMtNGU5OC05 Y2FhLTllNGE5YTM4NmIzZi8xZjNhZTIxMS0xYzZjLTRlOTgtOWNhYS05ZTRhOWEz ODZiM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBACi+SwDBACi/OwDBADGh/kwDwQCAAIwCQMHACYg AONAADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA1yowVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPeBuEE0x +SZ3ec7gJJhjwdG3jISgHYQdypT+dv7LqxOZG0+WUHTjMq+QNzkb4W9Nr6VStkVX d6regGHjR9WKr22P6gcEt0+Bll5MHD3eBQG6td3+35oVJI29hVYaG5c9sCeNNq6j aQAOW/kEgKR1rIn39wXUGZA5/oOSMleP3DmOfTAhHVkgpfWCCkRtklSW6W3YuIH0 Xm9g600C3daLCXzOE0zMu/cAlk+UzgVn7iQDdrOt9WtTZAAt+y2vcJnYMjbID6ed txaamFKmNK1BZEAB6ZrRA/Qq6Dn8Ip6cL6DFuzNh5yV2LghYErdafyCl/E7ThFtF ggeCwc6iBM+1fg== -----END CERTIFICATE-----Generated at Fri May 10 20:14:29 2024 by rpki-client on console-fra.rpki-client.org