$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587.cer File: 7e2cde89-a04e-4423-9844-bcbd0aa96587.cer (raw, json) Hash identifier: iKCEiSG11puhthpyzMJIXmve1E/cxZ/z1raJm8u8bmQ= Subject key identifier: DE:1F:59:23:D5:10:37:E7:C6:EE:80:64:B9:C5:3C:D9:7D:65:F2:CE Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844E727ABFE81999D7C06BA40C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/7e2cde89-a04e-4423-9844-bcbd0aa96587.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 15 Feb 2024 20:10:48 +0000 Certificate not after: Wed 20 May 2026 19:10:48 +0000 Subordinate resources: AS: 20432 IP: 50.20.208.0/20 IP: 72.46.0.0/20 IP: 206.83.156.0/22 IP: 207.231.0.0/19 IP: 2605:ad40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e7:27:ab:fe:81:99:9d:7c:06:ba:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 15 20:10:48 2024 GMT Not After : May 20 19:10:48 2026 GMT Subject: CN=7e2cde89-a04e-4423-9844-bcbd0aa96587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:a0:12:f2:15:de:fa:e7:f6:69:06:cc:34: 92:e2:c2:e7:0d:7d:b6:6b:2a:0b:55:94:26:77:d9: 55:78:48:59:20:d8:58:43:a8:5a:09:e8:96:4d:a0: b7:3e:a0:3d:8f:94:16:76:7b:0e:c2:61:7f:08:10: c9:77:10:d1:8c:c4:e1:1d:bc:83:d8:92:5b:8a:0c: 38:31:f4:ba:5b:21:b1:d9:96:af:66:cf:76:bd:d4: 61:af:7a:d1:bb:63:7a:1f:cd:4c:ce:df:2b:a7:3f: f2:38:f7:08:7b:5f:66:60:e9:cb:05:57:8a:95:55: db:9a:26:82:fe:9e:84:4d:f0:34:97:bc:0f:04:b1: 0d:9f:9f:33:37:66:66:2d:bb:20:2c:8c:98:fb:49: 8f:ba:d5:a5:51:d2:56:d5:28:81:d1:be:d9:1e:5a: 9d:eb:a9:00:d5:39:9d:81:0f:6c:21:23:78:4d:8a: 0c:f3:95:d8:d7:04:91:67:b6:e9:98:89:65:ac:e1: e2:b9:31:1c:43:53:3c:3f:1d:01:b0:7b:c7:5c:c0: b4:5a:7c:36:6a:8e:da:7c:d1:8a:18:69:8d:93:6a: df:50:55:02:da:5d:8e:ea:17:28:e5:ec:d9:2b:45: 25:3a:64:4d:88:be:6f:44:46:05:b8:04:02:21:fb: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1F:59:23:D5:10:37:E7:C6:EE:80:64:B9:C5:3C:D9:7D:65:F2:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7e2cde89-a04e-4423-9844-bcbd0aa96587/7e2cde89-a04e-4423-9844-bcbd0aa96587.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 50.20.208.0/20 72.46.0.0/20 206.83.156.0/22 207.231.0.0/19 IPv6: 2605:ad40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20432 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:16:35:ae:c0:4d:8e:08:1d:84:5e:cc:ab:f2:b1:7d:b8:9a: 03:dc:d2:ca:ac:1a:27:22:3e:a5:27:4a:b4:c2:65:92:ba:d9: 40:98:94:84:82:67:d2:45:11:a7:6c:78:b3:4b:7c:fe:f6:fd: e7:b0:f2:2c:12:3a:a7:6d:e8:20:89:d1:33:b4:ec:a7:73:20: a9:81:c0:cb:f9:fd:61:c0:0d:05:b0:b3:a0:cd:f6:6e:51:14: 88:d4:63:5f:ce:f2:78:95:b2:1e:ce:2a:07:72:36:c1:0b:8f: d5:05:fa:b2:ac:2a:b6:60:f4:43:e0:dd:68:96:85:24:48:3b: 6b:3a:60:fd:e3:56:a7:a8:9d:d4:7b:d0:dc:4b:46:12:bf:d5: 36:8a:20:80:4e:0d:44:15:db:99:9e:e2:fc:6a:3c:3d:cf:f8: 61:47:dc:01:13:31:e4:6b:9d:4b:c5:b8:8b:3c:d4:a5:22:84: a8:e1:32:1e:0d:8a:a8:16:6e:cd:d9:63:b3:86:fa:ed:dd:2a: ef:97:42:89:ed:55:93:e6:2b:2a:3f:e5:a8:dc:ce:1d:6e:ad: 7a:7f:a4:36:7b:9e:8d:6b:2d:1e:5e:44:5e:a9:05:4c:f0:63: 0c:66:b2:5c:12:c2:6d:3f:e2:fb:67:0b:f0:69:3d:31:e1:cf: b2:77:ea:06 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWETnJ6v+gZmdfAa6QMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIxNTIwMTA0OFoXDTI2MDUyMDE5MTA0OFowLzEtMCsGA1UEAxMk N2UyY2RlODktYTA0ZS00NDIzLTk4NDQtYmNiZDBhYTk2NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorCgEvIV3vrn9mkGzDSS4sLnDX22ayoLVZQm d9lVeEhZINhYQ6haCeiWTaC3PqA9j5QWdnsOwmF/CBDJdxDRjMThHbyD2JJbigw4 MfS6WyGx2ZavZs92vdRhr3rRu2N6H81Mzt8rpz/yOPcIe19mYOnLBVeKlVXbmiaC /p6ETfA0l7wPBLENn58zN2ZmLbsgLIyY+0mPutWlUdJW1SiB0b7ZHlqd66kA1Tmd gQ9sISN4TYoM85XY1wSRZ7bpmIllrOHiuTEcQ1M8Px0BsHvHXMC0Wnw2ao7afNGK GGmNk2rfUFUC2l2O6hco5ezZK0UlOmRNiL5vREYFuAQCIfvYlwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFN4fWSPVEDfnxu6AZLnFPNl9ZfLOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 ZTJjZGU4OS1hMDRlLTQ0MjMtOTg0NC1iY2JkMGFhOTY1ODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzdlMmNkZTg5LWEwNGUtNDQyMy05 ODQ0LWJjYmQwYWE5NjU4Ny83ZTJjZGU4OS1hMDRlLTQ0MjMtOTg0NC1iY2JkMGFh OTY1ODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAQyFNADBARILgADBALOU5wDBAXP5wAwDQQCAAIw BwMFACYFrUAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICT9AwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAThY1 rsBNjggdhF7Mq/KxfbiaA9zSyqwaJyI+pSdKtMJlkrrZQJiUhIJn0kURp2x4s0t8 /vb957DyLBI6p23oIInRM7Tsp3MgqYHAy/n9YcANBbCzoM32blEUiNRjX87yeJWy Hs4qB3I2wQuP1QX6sqwqtmD0Q+DdaJaFJEg7azpg/eNWp6id1HvQ3EtGEr/VNoog gE4NRBXbmZ7i/Go8Pc/4YUfcARMx5GudS8W4izzUpSKEqOEyHg2KqBZuzdljs4b6 7d0q75dCie1Vk+YrKj/lqNzOHW6ten+kNnuejWstHl5EXqkFTPBjDGayXBLCbT/i +2cL8Gk9MeHPsnfqBg== -----END CERTIFICATE-----Generated at Fri May 10 20:14:42 2024 by rpki-client on console-fra.rpki-client.org