$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer File: 7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer (raw, json) Hash identifier: dD1Ev4QvMKrawAsFyU5FRgc3b6FmOQaKfQTEhbg/WuQ= Subject key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285845408BACB67D34720042548280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Mar 2024 20:39:14 +0000 Certificate not after: Sun 07 Jun 2026 18:25:07 +0000 Subordinate resources: AS: 27317 IP: 23.174.40.0/24 IP: 2607:9f40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:8b:ac:b6:7d:34:72:00:42:54:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 18 20:39:14 2024 GMT Not After : Jun 7 18:25:07 2026 GMT Subject: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cf:94:e0:56:54:67:48:bc:bf:68:42:0c:c3: 61:bc:3d:d9:f6:2c:84:06:5e:ea:fd:6c:ab:9e:90: 7a:7a:05:99:ee:88:9b:5a:14:72:46:63:c0:20:e8: a3:de:6e:4d:8a:8c:e6:1c:37:00:ea:2a:b3:e0:a3: 39:25:75:27:46:1c:10:71:90:c3:3a:fc:48:28:56: a5:b6:5d:a9:a7:e5:13:3a:b3:a5:48:44:b5:aa:b5: fa:6c:cd:89:18:21:9c:97:04:e2:31:93:2e:e8:fd: 93:3a:58:c0:fd:27:a8:54:b4:d0:b6:65:c8:37:d4: 01:4d:de:d5:05:19:66:9b:96:13:69:3b:b0:30:06: 55:66:ad:1c:63:ec:db:a5:ee:5f:9b:56:f9:ee:7e: 48:18:70:f1:d8:6b:eb:bb:c3:a6:2e:b0:43:55:08: 12:0d:8f:af:ca:36:97:4f:9e:bf:1a:c5:60:bc:ee: 62:84:81:3e:bf:f0:28:0a:9a:c6:79:78:6f:4e:b0: 66:73:9a:d2:d1:ac:36:50:42:0a:aa:9e:69:9d:01: e7:8e:5a:6b:8a:96:a4:c2:54:c7:15:29:f8:41:87: e4:b0:f6:28:af:76:b5:d8:82:7f:49:56:35:25:9b: ec:af:e4:14:f9:74:83:92:39:a7:d7:cd:96:07:61: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.174.40.0/24 IPv6: 2607:9f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27317 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c9:28:d5:c0:ba:83:e4:e1:72:77:af:88:ee:ef:9b:c3:5e: b5:67:c0:ee:62:e5:00:21:68:e2:49:c0:45:84:2d:ce:f0:18: 08:a8:8a:6d:53:4a:2c:ab:56:c3:b7:77:4f:4c:5f:9f:e5:44: 0f:50:df:df:99:72:ac:8d:36:f0:54:3a:ac:08:7f:3a:41:19: ae:4e:aa:50:94:89:a4:8f:87:1b:38:a0:19:f1:2d:da:14:12: 76:95:72:a9:08:df:60:51:39:40:51:f3:f4:09:08:a3:51:8e: 3b:c3:d6:ef:dc:81:9d:5b:3b:00:c4:4e:05:4a:01:c4:dc:fa: 0e:ca:cf:70:b1:59:0d:d4:e2:f4:da:d7:fc:71:6a:7e:7d:29: c3:58:05:93:5b:a9:e3:61:f6:5e:16:a5:9d:9c:9e:43:f6:5f: ce:69:a4:f3:ed:bd:59:dd:e5:0e:df:0d:a2:77:fc:0d:59:2a: 77:09:c9:75:d4:2a:41:94:ff:33:69:0f:8f:74:14:06:0f:22: f2:aa:08:c0:e1:5b:2f:7c:e7:4e:87:94:75:51:22:93:46:70: 52:eb:14:36:e1:e4:5a:76:ec:cb:01:6f:1d:f1:23:71:3f:0f: 5f:75:03:b9:83:6b:94:5c:5a:2b:0d:3e:2b:6c:7c:15:0b:3c: 32:70:a3:fb -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEVAi6y2fTRyAEJUgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMxODIwMzkxNFoXDTI2MDYwNzE4MjUwN1owLzEtMCsGA1UEAxMk N2JiZWU5YjEtMWIzMy00OTUxLWE2MTctZWNiODBkOWJhZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c+U4FZUZ0i8v2hCDMNhvD3Z9iyEBl7q/Wyr npB6egWZ7oibWhRyRmPAIOij3m5NiozmHDcA6iqz4KM5JXUnRhwQcZDDOvxIKFal tl2pp+UTOrOlSES1qrX6bM2JGCGclwTiMZMu6P2TOljA/SeoVLTQtmXIN9QBTd7V BRlmm5YTaTuwMAZVZq0cY+zbpe5fm1b57n5IGHDx2Gvru8OmLrBDVQgSDY+vyjaX T56/GsVgvO5ihIE+v/AoCprGeXhvTrBmc5rS0aw2UEIKqp5pnQHnjlpripakwlTH FSn4QYfksPYor3a12IJ/SVY1JZvsr+QU+XSDkjmn182WB2GYlwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFCki9+LydJMrX8ykA7P8UmXnhsKaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 YmJlZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4MGQ5YmFkOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzdiYmVlOWIxLTFiMzMtNDk1MS1h NjE3LWVjYjgwZDliYWQ5OS83YmJlZTliMS0xYjMzLTQ5NTEtYTYxNy1lY2I4MGQ5 YmFkOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXrigwDQQCAAIwBwMFACYHn0AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICarUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK8ko1cC6g+ThcneviO7vm8NetWfA 7mLlACFo4knARYQtzvAYCKiKbVNKLKtWw7d3T0xfn+VED1Df35lyrI028FQ6rAh/ OkEZrk6qUJSJpI+HGzigGfEt2hQSdpVyqQjfYFE5QFHz9AkIo1GOO8PW79yBnVs7 AMROBUoBxNz6DsrPcLFZDdTi9NrX/HFqfn0pw1gFk1up42H2XhalnZyeQ/Zfzmmk 8+29Wd3lDt8Nonf8DVkqdwnJddQqQZT/M2kPj3QUBg8i8qoIwOFbL3znToeUdVEi k0ZwUusUNuHkWnbsywFvHfEjcT8PX3UDuYNrlFxaKw0+K2x8FQs8MnCj+w== -----END CERTIFICATE-----Generated at Sat May 11 18:14:53 2024 by rpki-client on console-fra.rpki-client.org