$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be.cer File: 9eccbc7e-a4e8-4673-ba6f-4c67350003be.cer (raw, json) Hash identifier: Dv+7Jiq5aJeqXZCc7RDcx/8FLH+ldJi0PCP2YpQ+XXU= Subject key identifier: 0B:5D:70:E8:DD:9A:D5:D3:32:6B:18:4C:E3:E6:B2:42:FB:15:49:26 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844BF9CD665A2D977353B540F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/9eccbc7e-a4e8-4673-ba6f-4c67350003be.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Feb 2024 16:14:32 +0000 Certificate not after: Wed 06 May 2026 15:14:32 +0000 Subordinate resources: AS: 26824 IP: 208.79.182.0/23 IP: 2602:fc8c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:bf:9c:d6:65:a2:d9:77:35:3b:54:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 1 16:14:32 2024 GMT Not After : May 6 15:14:32 2026 GMT Subject: CN=9eccbc7e-a4e8-4673-ba6f-4c67350003be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c3:6f:b5:a7:0f:d3:9a:50:87:b1:4d:09:6f: 62:ab:4a:fa:41:5c:9e:4f:26:6e:11:1f:62:b1:7c: 1f:f0:ec:bb:ee:8e:2f:ef:a0:bc:a5:ad:03:dc:c1: 0c:fd:65:eb:13:64:0e:f0:18:df:46:a6:c5:2d:2d: 6e:ff:4e:56:09:49:81:76:20:98:48:ae:4d:2b:e3: 66:23:f6:c2:2a:2c:ca:ed:9f:33:90:74:56:2f:ea: db:06:7b:af:eb:6b:31:82:0b:3c:66:41:2c:78:f5: 2f:09:83:2d:27:56:07:ad:5f:c4:0b:57:29:cc:fb: 75:4a:ee:c6:a7:da:60:f1:64:19:d6:7b:ce:f8:75: 98:21:fe:fe:cf:8d:6f:af:64:ef:25:77:cb:c4:54: 7f:80:cb:04:34:d2:0e:e1:d8:98:1e:f9:72:5a:6d: db:67:90:87:0f:3d:4a:e6:b2:d3:38:9c:af:13:52: b0:99:60:f9:8b:f4:59:aa:fe:60:58:94:16:75:45: 59:32:f3:05:ff:6f:96:6c:04:a6:30:e7:79:e5:7d: 47:11:1c:ba:21:5e:54:a5:17:3d:9a:e9:dc:da:c5: a9:e9:e6:cb:ea:32:d8:72:d1:17:df:ba:3e:29:a0: 3e:de:b4:13:ae:e6:5e:23:ce:8d:55:e6:00:4f:2f: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5D:70:E8:DD:9A:D5:D3:32:6B:18:4C:E3:E6:B2:42:FB:15:49:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/9eccbc7e-a4e8-4673-ba6f-4c67350003be.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.182.0/23 IPv6: 2602:fc8c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26824 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a4:a5:91:29:27:c5:52:64:58:8b:ad:ef:ee:5f:d6:38:4d: 66:d2:a5:ca:9e:4d:a0:79:86:00:4c:de:cd:18:d8:87:cd:d2: 64:4a:9a:b9:d6:97:16:5e:f5:12:3d:4b:9d:99:c2:e1:0f:f5: 76:8e:4c:5c:c1:84:2c:ad:b0:05:ec:0e:82:e9:59:59:9c:58: e1:dc:5c:9c:ca:b7:52:12:5d:27:6e:82:52:6c:5d:c8:a1:4e: e0:d6:a8:2d:d5:95:9a:17:84:1e:ac:3d:e1:cd:ca:cb:57:09: db:b0:b8:6f:ce:de:28:14:a9:31:65:d0:ca:3c:9c:c8:a0:f5: e6:aa:7a:6f:cd:82:37:81:ac:7b:5f:99:c8:f0:08:6f:51:3d: 37:43:4f:75:63:ac:f0:73:05:d6:19:16:b1:ff:99:bb:97:2d: 33:bb:b6:95:15:e6:9f:b0:4c:78:3c:b1:22:62:3f:e1:af:86: 9b:17:16:7f:94:94:84:ef:a3:8c:9e:e6:bc:98:87:91:36:62: 97:16:9c:f1:d9:4f:78:13:dd:70:f7:4f:e1:24:9e:a3:f6:d7: b6:d3:78:dc:23:a8:43:00:0f:9b:ab:0b:12:61:ad:db:c3:f7: 2f:81:53:50:63:bc:a2:c7:e7:50:3d:05:55:d0:54:c0:b0:d1: 00:03:ef:74 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWES/nNZlotl3NTtUD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIwMTE2MTQzMloXDTI2MDUwNjE1MTQzMlowLzEtMCsGA1UEAxMk OWVjY2JjN2UtYTRlOC00NjczLWJhNmYtNGM2NzM1MDAwM2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8NvtacP05pQh7FNCW9iq0r6QVyeTyZuER9i sXwf8Oy77o4v76C8pa0D3MEM/WXrE2QO8BjfRqbFLS1u/05WCUmBdiCYSK5NK+Nm I/bCKizK7Z8zkHRWL+rbBnuv62sxggs8ZkEsePUvCYMtJ1YHrV/EC1cpzPt1Su7G p9pg8WQZ1nvO+HWYIf7+z41vr2TvJXfLxFR/gMsENNIO4diYHvlyWm3bZ5CHDz1K 5rLTOJyvE1KwmWD5i/RZqv5gWJQWdUVZMvMF/2+WbASmMOd55X1HERy6IV5UpRc9 munc2sWp6ebL6jLYctEX37o+KaA+3rQTruZeI86NVeYATy+iLwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAtdcOjdmtXTMmsYTOPmskL7FUkmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85 ZWNjYmM3ZS1hNGU4LTQ2NzMtYmE2Zi00YzY3MzUwMDAzYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzllY2NiYzdlLWE0ZTgtNDY3My1i YTZmLTRjNjczNTAwMDNiZS85ZWNjYmM3ZS1hNGU4LTQ2NzMtYmE2Zi00YzY3MzUw MDAzYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHQT7YwDgQCAAIwCAMGBCYC/IwAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmjIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFmkpZEpJ8VSZFiLre/uX9Y4TWbS pcqeTaB5hgBM3s0Y2IfN0mRKmrnWlxZe9RI9S52ZwuEP9XaOTFzBhCytsAXsDoLp WVmcWOHcXJzKt1ISXSduglJsXcihTuDWqC3VlZoXhB6sPeHNystXCduwuG/O3igU qTFl0Mo8nMig9eaqem/NgjeBrHtfmcjwCG9RPTdDT3VjrPBzBdYZFrH/mbuXLTO7 tpUV5p+wTHg8sSJiP+GvhpsXFn+UlITvo4ye5ryYh5E2YpcWnPHZT3gT3XD3T+Ek nqP217bTeNwjqEMAD5urCxJhrdvD9y+BU1BjvKLH51A9BVXQVMCw0QAD73Q= -----END CERTIFICATE-----Generated at Sat May 11 18:14:56 2024 by rpki-client on console-fra.rpki-client.org