$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer File: b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer (raw, json) Hash identifier: mJNHitINDo1/LEvHu6ReClH2dzfEYDDuSeqQH6GVIeE= Subject key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584888CE4517DFAF6474E9FB8480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jan 2025 20:12:26 +0000 Certificate not after: Sun 19 Jul 2026 19:10:10 +0000 Subordinate resources: AS: 400928 IP: 23.173.24.0/24 IP: 76.164.204.0/24 IP: 104.128.68.0/23 IP: 204.89.181.0/24 IP: 2602:f961::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jan 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:88:ce:45:17:df:af:64:74:e9:fb:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jan 13 20:12:26 2025 GMT Not After : Jul 19 19:10:10 2026 GMT Subject: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:40:1c:70:48:51:18:36:d0:a2:81:f7:7c: 7c:74:22:63:62:19:a0:d4:a8:0c:3d:1f:a6:ae:2e: cc:3a:66:2d:bd:e5:1e:8b:f8:97:cf:be:ac:fc:47: 0b:82:a6:38:a5:45:da:49:ac:33:bb:a9:58:14:7c: 5e:5d:05:f4:b8:d1:a0:88:0a:16:01:c0:4e:c9:3d: 1d:9d:be:9a:02:e6:ed:ee:d7:cf:bf:cb:03:cb:61: f4:2d:73:3f:3b:25:dc:d6:2c:dc:28:d5:01:8a:23: 61:ed:04:bb:cb:47:71:ed:97:8f:f0:5e:36:16:fd: 6f:88:09:11:35:0e:bd:ee:d3:6d:a8:9e:23:a1:03: 2c:27:ae:e2:96:95:0e:c5:1f:31:c2:49:66:a4:f9: 6a:cc:3c:1a:83:dc:95:22:1d:26:aa:4b:89:33:61: 0b:13:dc:df:96:92:92:cb:6a:d3:56:4a:91:51:25: 76:7c:ec:5f:df:cf:ee:96:d7:8a:0b:57:73:79:b8: d6:af:29:39:d5:56:c1:d7:3d:3c:19:2e:5c:1e:75: 20:c2:fd:f4:6a:89:7d:41:f2:0a:41:88:a6:53:0a: 85:24:d3:48:3f:46:3d:23:cb:45:3f:2e:27:9a:d6: 57:fe:45:f8:11:28:1b:b7:44:c8:02:6c:4f:4f:eb: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.24.0/24 76.164.204.0/24 104.128.68.0/23 204.89.181.0/24 IPv6: 2602:f961::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400928 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a6:26:5b:25:0b:2b:e2:5d:71:e9:cf:d4:3c:28:18:a5:9d: c7:26:d0:3c:68:dd:f3:a7:5b:89:50:5e:7b:21:88:c1:e3:cb: 2d:30:5f:43:14:78:de:b4:d1:7f:7e:2b:8e:ee:d5:c0:c9:86: 2c:e7:da:51:03:8f:be:7e:5c:2c:b1:2e:0f:2f:c6:15:e2:f1: 45:23:fb:f6:e6:35:16:fa:a6:8b:e1:46:52:88:37:72:a5:0a: 95:05:40:9e:d8:cd:cf:d8:00:ec:2b:6a:6c:da:e9:0a:17:73: 3b:4f:b6:f9:9e:e5:31:bf:84:be:1d:79:a7:ae:72:4c:fe:66: c2:2a:5c:01:bd:bb:fd:dc:62:1e:63:f5:08:c6:6a:4b:5a:dd: 17:99:c6:28:87:65:2f:01:f8:fa:da:ae:88:8e:b1:26:54:6d: 77:a1:4e:74:ac:46:be:2d:87:0e:65:8d:c5:31:66:43:70:c0: d8:f3:85:81:db:05:25:a9:fd:18:51:7f:44:15:6d:37:94:2b: 3b:7d:6a:02:4f:4e:b4:fb:d4:c8:66:50:4f:bc:49:a3:89:8a: 64:d9:02:d8:f6:ea:aa:ae:79:54:53:05:ce:bd:5f:16:c7:f6: 87:99:10:7d:1c:76:92:0a:cc:8f:7d:a5:4f:ed:05:c2:28:f6: c8:d6:35:dd -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEiIzkUX369kdOn7hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI1MDExMzIwMTIyNloXDTI2MDcxOTE5MTAxMFowLzEtMCsGA1UEAxMk YjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNiZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIpAHHBIURg20KKB93x8dCJjYhmg1KgMPR+m ri7MOmYtveUei/iXz76s/EcLgqY4pUXaSawzu6lYFHxeXQX0uNGgiAoWAcBOyT0d nb6aAubt7tfPv8sDy2H0LXM/OyXc1izcKNUBiiNh7QS7y0dx7ZeP8F42Fv1viAkR NQ697tNtqJ4joQMsJ67ilpUOxR8xwklmpPlqzDwag9yVIh0mqkuJM2ELE9zflpKS y2rTVkqRUSV2fOxf38/ulteKC1dzebjWryk51VbB1z08GS5cHnUgwv30aol9QfIK QYimUwqFJNNIP0Y9I8tFPy4nmtZX/kX4ESgbt0TIAmxPT+tz7QIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFJJ913AftPrufmZdZo8MCYuyk6RgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i NWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2I1ZGI0NWRiLThjOTItNGI2MS1h M2Q1LWY1YmJiOTkzYmRjMy9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5 M2JkYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBAAXrRgDBABMpMwDBAFogEQDBADMWbUwDgQCAAIw CAMGACYC+WEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYeIDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBy piZbJQsr4l1x6c/UPCgYpZ3HJtA8aN3zp1uJUF57IYjB48stMF9DFHjetNF/fiuO 7tXAyYYs59pRA4++flwssS4PL8YV4vFFI/v25jUW+qaL4UZSiDdypQqVBUCe2M3P 2ADsK2ps2ukKF3M7T7b5nuUxv4S+HXmnrnJM/mbCKlwBvbv93GIeY/UIxmpLWt0X mcYoh2UvAfj62q6IjrEmVG13oU50rEa+LYcOZY3FMWZDcMDY84WB2wUlqf0YUX9E FW03lCs7fWoCT060+9TIZlBPvEmjiYpk2QLY9uqqrnlUUwXOvV8Wx/aHmRB9HHaS CsyPfaVP7QXCKPbI1jXd -----END CERTIFICATE-----Generated at Sun Jan 19 19:09:30 2025 by rpki-client on console-ams.rpki-client.org