$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6e5e77e-0420-4e23-80ae-ea9df3567588.cer File: c6e5e77e-0420-4e23-80ae-ea9df3567588.cer (raw, json) Hash identifier: PNMj0xXyc34R0hBfIvmjtdWJwimC4NrQ5tjIuBC7wEI= Subject key identifier: A3:AB:D8:85:5F:CF:01:B0:79:EA:3F:99:A7:CA:8A:F5:80:03:0B:98 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844D11566DDAE18BD506394CC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6e5e77e-0420-4e23-80ae-ea9df3567588/c6e5e77e-0420-4e23-80ae-ea9df3567588.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6e5e77e-0420-4e23-80ae-ea9df3567588/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Feb 2024 22:26:12 +0000 Certificate not after: Tue 12 May 2026 21:26:12 +0000 Subordinate resources: AS: 394805 IP: 23.136.192.0/24 IP: 2620:1b:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d1:15:66:dd:ae:18:bd:50:63:94:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 7 22:26:12 2024 GMT Not After : May 12 21:26:12 2026 GMT Subject: CN=c6e5e77e-0420-4e23-80ae-ea9df3567588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:15:69:4d:d1:6e:dc:b8:86:a0:b0:0b:d8:0b: 82:db:c7:e5:36:2c:b0:04:cc:b8:8c:d2:0e:55:3d: 97:58:a1:a5:c0:86:af:36:a0:38:5f:28:92:3e:0e: 7f:24:2a:49:1b:3f:c5:58:1a:f8:cd:04:40:6a:d0: 43:68:e8:10:ce:23:1a:06:72:a9:ff:a4:8b:da:f0: 31:69:a7:2b:ee:03:a9:78:f4:8f:86:ff:e0:ed:5b: c1:18:1c:c0:83:cc:46:42:5f:f7:0b:bb:05:88:ab: 26:2c:e6:56:15:15:d9:3c:bb:12:02:93:78:91:d2: 90:d1:ae:8e:ff:a5:42:27:ff:2f:40:96:92:d9:a6: 60:7f:9c:bc:a3:a1:fa:ad:99:92:34:d6:c1:41:fc: 1e:e5:3e:8c:f0:59:07:a1:4d:57:86:38:e0:95:34: 30:0f:3d:25:91:72:d6:e8:cd:d6:a3:35:28:95:35: 41:e2:8d:df:92:35:4f:c6:88:e3:9b:8e:91:76:61: 9d:43:94:88:98:aa:17:83:20:f8:a6:e9:16:46:dd: 24:a6:dc:1b:d1:96:33:54:cd:31:f7:a1:c3:35:d9: 16:e3:9a:ea:22:84:1d:3c:8d:46:06:b4:bb:7b:9c: dc:30:3e:7e:52:81:e4:7e:47:f8:b0:2c:02:c0:d5: 41:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AB:D8:85:5F:CF:01:B0:79:EA:3F:99:A7:CA:8A:F5:80:03:0B:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6e5e77e-0420-4e23-80ae-ea9df3567588/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c6e5e77e-0420-4e23-80ae-ea9df3567588/c6e5e77e-0420-4e23-80ae-ea9df3567588.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.192.0/24 IPv6: 2620:1b:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394805 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ad:b7:44:68:45:c4:2e:3e:95:9c:6c:f0:2b:f9:10:33:6d: 05:3a:e2:90:3b:02:e8:a6:6f:7a:69:90:29:c6:9b:e6:44:88: c4:05:d3:b9:b7:8e:6e:54:ef:ed:43:21:75:84:4a:9a:e5:c4: d0:5d:3c:f8:1e:e4:b7:51:c6:39:e7:6b:18:9f:1d:31:6e:d7: 65:dc:a2:03:ad:aa:71:b9:8e:8c:62:e9:f2:dc:ba:7f:5f:97: 91:d5:1f:ec:de:96:5c:6b:d9:87:dc:85:a1:04:1a:ad:13:23: c1:0f:2c:0a:4f:4b:50:1f:6c:7e:98:38:60:2b:f4:63:17:b1: 82:61:51:3a:81:45:6b:45:86:93:e9:72:1a:dd:86:10:0e:78: fc:a4:10:9e:b2:17:b4:55:61:b9:68:51:ba:28:b9:a7:99:2c: 2c:eb:bd:0a:df:1c:4c:bf:54:61:25:ce:31:42:5a:b0:4f:a5: b6:59:8f:60:9e:7b:cc:8e:2d:26:87:81:72:34:77:d5:7d:ef: 30:99:6b:15:11:52:b4:57:c0:c8:36:01:82:a9:4f:25:20:90: 6b:92:71:fa:7e:4b:e3:bf:10:78:78:52:41:dd:33:78:60:b6: d5:7e:6e:88:09:74:d7:87:7f:71:57:81:33:5b:6e:d5:71:cc: f2:54:a3:1e -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWETRFWbdrhi9UGOUzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIwNzIyMjYxMloXDTI2MDUxMjIxMjYxMlowLzEtMCsGA1UEAxMk YzZlNWU3N2UtMDQyMC00ZTIzLTgwYWUtZWE5ZGYzNTY3NTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihVpTdFu3LiGoLAL2AuC28flNiywBMy4jNIO VT2XWKGlwIavNqA4XyiSPg5/JCpJGz/FWBr4zQRAatBDaOgQziMaBnKp/6SL2vAx aacr7gOpePSPhv/g7VvBGBzAg8xGQl/3C7sFiKsmLOZWFRXZPLsSApN4kdKQ0a6O /6VCJ/8vQJaS2aZgf5y8o6H6rZmSNNbBQfwe5T6M8FkHoU1XhjjglTQwDz0lkXLW 6M3WozUolTVB4o3fkjVPxojjm46RdmGdQ5SImKoXgyD4pukWRt0kptwb0ZYzVM0x 96HDNdkW45rqIoQdPI1GBrS7e5zcMD5+UoHkfkf4sCwCwNVBbwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFKOr2IVfzwGweeo/mafKivWAAwuYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j NmU1ZTc3ZS0wNDIwLTRlMjMtODBhZS1lYTlkZjM1Njc1ODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2M2ZTVlNzdlLTA0MjAtNGUyMy04 MGFlLWVhOWRmMzU2NzU4OC9jNmU1ZTc3ZS0wNDIwLTRlMjMtODBhZS1lYTlkZjM1 Njc1ODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXiMAwDwQCAAIwCQMHACYgABvgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGBjUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATK23RGhFxC4+lZxs8Cv5EDNt BTrikDsC6KZvemmQKcab5kSIxAXTubeOblTv7UMhdYRKmuXE0F08+B7kt1HGOedr GJ8dMW7XZdyiA62qcbmOjGLp8ty6f1+XkdUf7N6WXGvZh9yFoQQarRMjwQ8sCk9L UB9sfpg4YCv0YxexgmFROoFFa0WGk+lyGt2GEA54/KQQnrIXtFVhuWhRuii5p5ks LOu9Ct8cTL9UYSXOMUJasE+ltlmPYJ57zI4tJoeBcjR31X3vMJlrFRFStFfAyDYB gqlPJSCQa5Jx+n5L478QeHhSQd0zeGC21X5uiAl014d/cVeBM1tu1XHM8lSjHg== -----END CERTIFICATE-----Generated at Sat May 11 18:14:57 2024 by rpki-client on console-fra.rpki-client.org