$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer File: 3a000633-c1ee-492c-b730-12e113ab8bd2.cer (raw, json) Hash identifier: J3GKvKetKDUxf4cI+vClh5aXQbshRW96EnfckQss0RI= Subject key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285845A4AE802D44F28A38DB569C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Apr 2024 17:30:14 +0000 Certificate not after: Thu 16 Jul 2026 14:43:05 +0000 Subordinate resources: AS: 11635 AS: 394710 IP: 23.128.224.0/24 IP: 85.131.160.0/19 IP: 134.195.48.0/22 IP: 161.199.18.0/24 IP: 209.216.96.0/19 IP: 2604:7a40::/32 IP: 2604:c4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:ae:80:2d:44:f2:8a:38:db:56:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 23 17:30:14 2024 GMT Not After : Jul 16 14:43:05 2026 GMT Subject: CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:34:48:0b:1b:69:9b:dc:7f:b9:b1:a6:d1: 72:7c:58:d6:76:a0:2f:17:63:c6:a0:e8:a6:84:9f: da:06:a8:2e:98:a4:76:93:d3:8e:b1:4b:cc:74:c6: f3:f2:d2:78:e0:90:6f:e9:68:e3:f3:bd:e0:89:e2: 9b:24:2b:59:4b:8b:0b:74:ed:a9:a5:0d:d8:d4:f7: fa:d0:21:4c:a1:01:64:dc:64:58:04:f7:77:0e:b5: a9:d2:d7:51:05:21:b1:5c:02:a0:a0:66:1b:53:4e: 58:74:25:c3:60:90:de:1b:93:fe:89:b4:37:b3:46: 29:80:2d:7c:a7:86:ec:80:bd:90:34:46:a9:21:8d: 65:8f:26:29:77:66:b3:73:78:74:15:92:0f:47:58: 13:1a:53:8d:1c:4e:58:c1:29:cd:12:8f:cf:1b:f6: 5f:45:4c:e1:fb:0e:52:e0:4d:d2:9a:ca:db:32:06: 98:7a:9a:9c:79:0c:c4:79:fb:ba:d2:31:ec:d2:5e: 2b:a4:36:55:c4:55:ad:74:43:98:68:d4:9e:bc:91: ab:54:30:70:25:20:50:b0:89:49:42:86:3d:5b:78: 35:bc:73:11:4f:bb:00:2a:f6:ee:de:49:66:ee:79: 63:25:1f:d0:93:65:94:96:26:bb:f3:50:74:ff:ac: c5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.128.224.0/24 85.131.160.0/19 134.195.48.0/22 161.199.18.0/24 209.216.96.0/19 IPv6: 2604:7a40::/32 2604:c4c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11635 394710 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:05:34:19:19:cc:fe:12:6f:ee:ab:7e:63:b8:ef:ed:59:fd: 86:96:e7:39:46:bf:8e:a4:3b:67:28:c9:b8:38:5b:b9:c6:17: f0:3d:8e:99:22:cc:dd:9d:c6:d5:d7:1a:73:a0:fd:4c:93:73: be:11:b4:e0:72:fe:dd:60:a8:9f:1a:00:1c:e6:04:46:52:da: ef:6b:3f:9e:17:5f:81:ec:1d:da:20:6f:fd:72:e3:25:1b:92: 4e:93:36:a2:0e:a1:16:4e:ac:ff:e6:2a:6b:68:b7:63:2f:86: 35:2a:4b:1a:a5:77:bc:fc:e9:e7:4e:21:22:a1:83:14:94:f5: b2:f5:c5:5b:f3:d5:db:b4:47:db:cc:bc:ec:f4:c1:69:3a:a1: 73:e3:13:02:7e:59:bc:4e:80:87:29:ef:0c:f3:6e:e2:37:13: da:31:5d:48:d7:46:1f:e9:a2:2f:86:ff:c1:7b:8f:45:c6:1a: 96:08:00:cf:5b:33:95:4d:4a:db:f0:e6:97:dc:4b:1d:ca:06: 75:70:f1:d8:97:91:1a:17:d1:85:45:7e:01:eb:f3:6e:a9:5d: c5:04:67:f6:6f:b0:39:6b:dc:0e:71:9d:28:de:2e:69:e9:ca: 29:29:04:42:5c:fb:b5:e3:3d:ac:d4:b7:8d:71:e9:5f:a1:87: 56:2a:94:82 -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEWkroAtRPKKONtWnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQyMzE3MzAxNFoXDTI2MDcxNjE0NDMwNVowLzEtMCsGA1UEAxMk M2EwMDA2MzMtYzFlZS00OTJjLWI3MzAtMTJlMTEzYWI4YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkw0SAsbaZvcf7mxptFyfFjWdqAvF2PGoOim hJ/aBqgumKR2k9OOsUvMdMbz8tJ44JBv6Wjj873gieKbJCtZS4sLdO2ppQ3Y1Pf6 0CFMoQFk3GRYBPd3DrWp0tdRBSGxXAKgoGYbU05YdCXDYJDeG5P+ibQ3s0YpgC18 p4bsgL2QNEapIY1ljyYpd2azc3h0FZIPR1gTGlONHE5YwSnNEo/PG/ZfRUzh+w5S 4E3SmsrbMgaYepqceQzEefu60jHs0l4rpDZVxFWtdEOYaNSevJGrVDBwJSBQsIlJ QoY9W3g1vHMRT7sAKvbu3klm7nljJR/Qk2WUlia781B0/6zFDQIDAQABo4IETTCC BEkwHQYDVR0OBBYEFBRlcQjFvjTuo8Yn9PZtBFLPzyMgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z YTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNhYjhiZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNhMDAwNjMzLWMxZWUtNDkyYy1i NzMwLTEyZTExM2FiOGJkMi8zYTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNh YjhiZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCQEAgABMB4DBAAXgOADBAVVg6ADBAKGwzADBAChxxIDBAXR2GAw FAQCAAIwDgMFACYEekADBQAmBMTAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAi1z AgMGBdYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEATgU0GRnM/hJv7qt+Y7jv7Vn9hpbnOUa/jqQ7ZyjJuDhb ucYX8D2OmSLM3Z3G1dcac6D9TJNzvhG04HL+3WConxoAHOYERlLa72s/nhdfgewd 2iBv/XLjJRuSTpM2og6hFk6s/+Yqa2i3Yy+GNSpLGqV3vPzp504hIqGDFJT1svXF W/PV27RH28y87PTBaTqhc+MTAn5ZvE6AhynvDPNu4jcT2jFdSNdGH+miL4b/wXuP RcYalggAz1szlU1K2/Dml9xLHcoGdXDx2JeRGhfRhUV+AevzbqldxQRn9m+wOWvc DnGdKN4uaenKKSkEQlz7teM9rNS3jXHpX6GHViqUgg== -----END CERTIFICATE-----Generated at Sat May 11 18:14:40 2024 by rpki-client on console-fra.rpki-client.org