$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer File: 06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer (raw, json) Hash identifier: WXZE+8xEQ6ZzSnjpaCu9HhOU3jXY25aVD6pvHWkDqss= Subject key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285844FDAD7F2FD9648186A0AEDC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 Feb 2024 21:48:13 +0000 Certificate not after: Tue 02 Dec 2025 07:23:54 +0000 Subordinate resources: AS: 46109 IP: 23.156.248.0/23 IP: 2602:fa64::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fd:ad:7f:2f:d9:64:81:86:a0:ae:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 23 21:48:13 2024 GMT Not After : Dec 2 07:23:54 2025 GMT Subject: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:ce:e3:01:13:27:c8:d1:3c:24:46:0a:f0: 49:66:3d:c4:f1:b0:8a:bb:71:5a:10:e9:06:9f:69: de:ce:db:0b:d7:35:d2:3a:e3:a8:a5:b2:77:30:e6: df:a4:41:59:be:15:bf:8d:5b:b5:7c:87:8e:44:49: 79:fc:30:22:96:01:a3:4e:0f:c8:c9:54:b6:88:78: 85:03:d5:d7:bc:7a:c0:14:c9:65:33:82:5c:03:59: 39:ac:a7:5b:80:75:ee:bc:05:95:5d:e6:01:85:6f: d8:56:81:93:4c:6b:f0:0d:1a:ee:ea:bf:a3:df:90: ad:d1:f2:23:6f:e6:a5:53:bc:3a:92:b0:3e:b5:29: 53:c5:69:bc:ef:7f:20:c4:74:5c:b2:be:38:01:4a: f9:d5:c2:92:06:cb:87:2f:e1:5f:35:e7:98:2b:fe: e8:32:09:4e:66:fc:6e:8b:f4:8f:f3:2e:e2:c4:b1: 1f:e0:03:5d:fa:0c:c1:cb:44:14:24:ec:36:73:13: 4d:5a:25:5d:4b:3a:8f:db:a0:7f:19:d8:45:0e:0a: 37:31:d3:b0:f9:24:d9:2c:ad:b1:82:0a:18:bb:10: 90:68:97:59:74:e6:b5:54:d9:26:29:a6:e0:ba:8c: 08:7e:04:c1:08:73:eb:66:1c:6a:09:d9:fb:b5:cc: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.156.248.0/23 IPv6: 2602:fa64::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46109 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f0:1e:80:1d:4a:e1:8e:28:1a:25:1d:f3:b3:57:29:82:07: 14:71:92:c5:cf:d3:8a:93:50:64:07:c9:a8:bf:ad:ab:38:9b: 00:88:4a:18:83:50:3a:c9:62:98:7f:85:a5:bb:e7:39:d6:3f: 98:6c:2e:bb:94:0f:35:d8:63:be:16:70:46:dd:f3:65:21:ed: 2f:eb:d3:55:55:28:f6:25:ef:5e:1c:9a:46:78:19:af:0f:43: b7:4d:e8:14:84:44:13:c4:fa:03:5d:3a:c5:dc:a8:78:1b:7a: af:2b:f4:f4:75:b0:a2:d3:6d:9c:df:81:da:92:25:5e:d6:36: ae:e8:bb:4a:a8:74:6d:2e:cf:09:5a:3f:31:a8:0a:51:63:ab: c2:f7:8c:13:0f:3a:eb:61:61:56:6c:33:5a:7a:e2:eb:a3:90: 26:4f:68:85:e4:13:7f:ae:cf:fb:74:b5:af:87:38:f7:3e:5f: 09:fe:bf:27:eb:8b:af:30:81:fa:d3:c2:e4:5a:14:15:27:ce: 9b:96:23:c0:11:c1:86:ef:16:fd:5a:93:c1:8e:3a:63:be:57: d7:c3:e1:ea:9d:47:91:4b:17:85:72:d2:08:37:c3:a4:e1:36: 45:d4:4b:ef:ac:bd:8e:6d:36:bf:16:1e:ce:23:53:e3:e5:ce: d6:8c:6e:b0 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWET9rX8v2WSBhqCu3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDIyMzIxNDgxM1oXDTI1MTIwMjA3MjM1NFowLzEtMCsGA1UEAxMk MDZmNDM4ZDItNDcxNy00MmMwLWJjYTUtOWIzYTJjZGQwOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQrO4wETJ8jRPCRGCvBJZj3E8bCKu3FaEOkG n2neztsL1zXSOuOopbJ3MObfpEFZvhW/jVu1fIeOREl5/DAilgGjTg/IyVS2iHiF A9XXvHrAFMllM4JcA1k5rKdbgHXuvAWVXeYBhW/YVoGTTGvwDRru6r+j35Ct0fIj b+alU7w6krA+tSlTxWm8738gxHRcsr44AUr51cKSBsuHL+FfNeeYK/7oMglOZvxu i/SP8y7ixLEf4ANd+gzBy0QUJOw2cxNNWiVdSzqP26B/GdhFDgo3MdOw+STZLK2x ggoYuxCQaJdZdOa1VNkmKabguowIfgTBCHPrZhxqCdn7tcx1RQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAauNpuiIgxXBTY/oL3g5f3z8GjaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w NmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNkZDA5ZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzA2ZjQzOGQyLTQ3MTctNDJjMC1i Y2E1LTliM2EyY2RkMDllZC8wNmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNk ZDA5ZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAEXnPgwDgQCAAIwCAMGACYC+mQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC0HTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB28B6AHUrhjigaJR3zs1cpggcU cZLFz9OKk1BkB8mov62rOJsAiEoYg1A6yWKYf4Wlu+c51j+YbC67lA812GO+FnBG 3fNlIe0v69NVVSj2Je9eHJpGeBmvD0O3TegUhEQTxPoDXTrF3Kh4G3qvK/T0dbCi 022c34HakiVe1jau6LtKqHRtLs8JWj8xqApRY6vC94wTDzrrYWFWbDNaeuLro5Am T2iF5BN/rs/7dLWvhzj3Pl8J/r8n64uvMIH608LkWhQVJ86bliPAEcGG7xb9WpPB jjpjvlfXw+HqnUeRSxeFctIIN8Ok4TZF1EvvrL2ObTa/Fh7OI1Pj5c7WjG6w -----END CERTIFICATE-----Generated at Thu May 9 15:31:26 2024 by rpki-client on console-fra.rpki-client.org