$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer File: 5dc12714-5247-41c5-b244-d0edceb32982.cer (raw, json) Hash identifier: dVBvBKfOwn3hha6d7EfQIkzo9rALL+ZT63KuSQHMwFQ= Subject key identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584548F815C816C91718F0532700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Mar 2024 21:04:08 +0000 Certificate not after: Wed 24 Jun 2026 21:04:08 +0000 Subordinate resources: AS: 18619 AS: 22856 AS: 40763 AS: 394851 AS: 398725 IP: 162.212.244.0/22 IP: 192.12.128.0/24 IP: 204.124.15.0/24 IP: 205.207.95.0/24 IP: 206.166.213.0/24 IP: 209.237.153.0/24 IP: 2605:2b40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:48:f8:15:c8:16:c9:17:18:f0:53:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 21 21:04:08 2024 GMT Not After : Jun 24 21:04:08 2026 GMT Subject: CN=5dc12714-5247-41c5-b244-d0edceb32982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:c9:ba:32:94:68:ee:64:ce:10:f3:13:ec: 7b:23:eb:15:d3:42:b6:86:1f:54:68:f7:fc:80:57: bc:c6:f0:10:4b:27:56:a1:0a:5a:76:25:13:32:77: 85:01:d8:bf:70:0a:07:f8:98:49:54:3e:08:94:1a: 57:30:63:13:f0:37:e7:3a:1a:44:95:af:6c:9c:f5: 3f:52:6c:d4:e2:3b:9b:f3:1d:1c:62:66:91:0e:59: ac:7a:90:d0:ab:59:ff:1d:57:d7:80:32:63:3b:27: c5:f7:97:f0:a7:bc:db:2b:9f:5e:67:23:66:a7:81: 72:dc:19:a0:fb:36:e6:8d:07:69:2d:5b:57:f1:52: e5:98:9e:3b:98:dc:3c:6f:d9:c4:a0:97:fa:14:73: 62:18:70:99:b9:5a:45:1c:83:b3:ca:81:42:8b:1b: 19:12:1c:16:56:1d:46:72:b0:fc:41:d5:5f:1c:98: 25:65:34:51:30:1c:a4:4e:33:06:11:48:85:f9:6d: ae:54:e3:83:37:86:f9:77:04:38:9c:7c:40:ff:02: d3:66:f1:3f:88:4f:04:9a:5c:48:74:81:7d:26:2d: 30:f9:d0:77:3b:d4:67:8d:45:63:81:16:48:22:40: 2b:88:b1:c0:a6:a3:89:ac:2a:a5:3b:0e:b1:66:f6: 72:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 162.212.244.0/22 192.12.128.0/24 204.124.15.0/24 205.207.95.0/24 206.166.213.0/24 209.237.153.0/24 IPv6: 2605:2b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18619 22856 40763 394851 398725 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:29:94:9e:a5:ad:65:49:a7:aa:ee:01:12:8a:32:ff:cc:51: 5a:88:6f:aa:6f:33:c6:c4:b1:ee:4c:4e:87:59:02:6b:8d:a2: c7:e1:2f:ac:ef:d4:59:82:b6:88:d5:7c:29:3c:2c:d3:d7:a8: 9a:b9:4b:a5:0f:1e:81:70:57:ba:f3:1d:b4:5a:d0:40:ed:46: dd:59:18:8a:4a:f8:8b:6f:9d:cf:95:e2:60:e8:19:52:14:7c: 47:3f:34:cc:2b:f1:20:84:d4:ee:81:d7:51:62:4b:bb:61:30: 17:fe:0a:ef:22:c0:aa:ae:f6:cb:6e:b4:b6:f0:3d:4f:6e:5e: e9:b6:a4:63:53:e6:93:6d:d8:11:e3:d9:a8:54:78:99:7c:e2: a7:90:2b:50:db:d3:91:cb:01:eb:48:cb:a7:8b:ed:a3:48:48: 09:ba:45:1d:4d:9b:81:0f:26:84:86:61:84:d3:fe:4f:75:73: 3e:cd:4e:28:a2:44:64:b1:55:af:32:b2:46:90:0b:e7:6f:6f: 40:75:36:03:d5:c5:38:cb:f3:75:7a:af:eb:33:da:dc:4f:2d: f5:c1:14:f3:a3:b1:fd:21:f0:fd:4b:d8:77:fd:90:9d:88:3d: b4:75:47:c0:49:ff:89:2f:cd:65:66:36:16:a7:3c:1c:1d:f5: a9:30:fa:4f -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWEVI+BXIFskXGPBTJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMyMTIxMDQwOFoXDTI2MDYyNDIxMDQwOFowLzEtMCsGA1UEAxMk NWRjMTI3MTQtNTI0Ny00MWM1LWIyNDQtZDBlZGNlYjMyOTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2rJujKUaO5kzhDzE+x7I+sV00K2hh9UaPf8 gFe8xvAQSydWoQpadiUTMneFAdi/cAoH+JhJVD4IlBpXMGMT8DfnOhpEla9snPU/ UmzU4jub8x0cYmaRDlmsepDQq1n/HVfXgDJjOyfF95fwp7zbK59eZyNmp4Fy3Bmg +zbmjQdpLVtX8VLlmJ47mNw8b9nEoJf6FHNiGHCZuVpFHIOzyoFCixsZEhwWVh1G crD8QdVfHJglZTRRMBykTjMGEUiF+W2uVOODN4b5dwQ4nHxA/wLTZvE/iE8EmlxI dIF9Ji0w+dB3O9RnjUVjgRZIIkAriLHApqOJrCqlOw6xZvZybwIDAQABo4IEWjCC BFYwHQYDVR0OBBYEFB3yZV36ppTi+F8C/UMdrtdTlxpVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 ZGMxMjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVkY2ViMzI5ODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzVkYzEyNzE0LTUyNDctNDFjNS1i MjQ0LWQwZWRjZWIzMjk4Mi81ZGMxMjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVkY2Vi MzI5ODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAKi1PQDBADADIADBADMfA8DBADNz18DBADOptUD BADR7ZkwDQQCAAIwBwMFACYFK0AwLAYIKwYBBQUHAQgBAf8EHTAboBkwFwICSLsC AllIAgMAnzsCAwYGYwIDBhWFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAUplJ6lrWVJp6ruARKKMv/MUVqI b6pvM8bEse5MTodZAmuNosfhL6zv1FmCtojVfCk8LNPXqJq5S6UPHoFwV7rzHbRa 0EDtRt1ZGIpK+Itvnc+V4mDoGVIUfEc/NMwr8SCE1O6B11FiS7thMBf+Cu8iwKqu 9stutLbwPU9uXum2pGNT5pNt2BHj2ahUeJl84qeQK1Db05HLAetIy6eL7aNISAm6 RR1Nm4EPJoSGYYTT/k91cz7NTiiiRGSxVa8yskaQC+dvb0B1NgPVxTjL83V6r+sz 2txPLfXBFPOjsf0h8P1L2Hf9kJ2IPbR1R8BJ/4kvzWVmNhanPBwd9akw+k8= -----END CERTIFICATE-----Generated at Sat May 11 17:57:12 2024 by rpki-client on console-ams.rpki-client.org