$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer File: 0cb0d156-0906-405d-9cea-d599952bae65.cer (raw, json) Hash identifier: 9R6lEqPzqgpJl85Gc3WsJj6DkIOH6ViEE/UVYxSwPtw= Subject key identifier: 61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842734772A2B5A7A00E097C8C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Jul 2023 22:27:11 +0000 Certificate not after: Tue 16 Sep 2025 21:24:14 +0000 Subordinate resources: AS: 20303 IP: 23.149.160.0/24 IP: 66.252.192.0/21 IP: 104.238.252.0/22 IP: 144.208.110.0/23 IP: 192.86.122.0/24 IP: 204.9.16.0/21 IP: 204.57.16.0/20 IP: 2605:ed80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:73:47:72:a2:b5:a7:a0:0e:09:7c:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 5 22:27:11 2023 GMT Not After : Sep 16 21:24:14 2025 GMT Subject: CN=0cb0d156-0906-405d-9cea-d599952bae65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:81:51:9d:5a:d0:de:d6:0c:87:f4:91:c5: bf:18:d3:7a:d9:94:3a:50:2d:ed:a2:09:27:60:d2: 11:28:81:81:19:13:82:86:59:9c:37:40:40:6f:83: ab:05:4d:d9:1e:d2:c2:37:7d:d2:2f:b5:4f:5a:82: 17:0b:52:4a:f1:e6:c8:76:6a:cb:2d:06:7b:7e:fc: c6:c5:fe:f5:d2:af:38:a3:d9:cd:75:57:a6:47:d2: da:c9:55:60:42:61:94:9f:e1:19:84:58:7a:68:eb: bf:12:da:46:51:9c:31:b1:3f:67:d2:2d:2d:dc:af: bb:63:06:ad:4f:d4:9e:93:bc:2b:16:03:32:cd:10: 0d:23:54:fa:d9:5e:86:d0:b3:34:a0:89:27:ea:21: 9e:80:fd:cc:75:7b:8c:af:30:35:9a:de:0a:b5:39: ff:57:a9:f8:9d:3a:6d:9e:3e:17:3c:a7:b2:cb:5d: 0b:4f:53:c3:c6:eb:11:40:96:33:b4:89:b1:bf:05: b1:f0:3e:cd:7f:62:d7:ee:94:1d:4e:b3:75:d4:76: 58:22:a0:dc:30:33:86:7e:3b:fe:01:f3:ee:22:07: 02:5c:0f:8f:51:9a:bf:47:4a:d3:1c:ae:2e:40:0a: db:e8:0a:59:34:4b:1f:2d:91:b2:32:dc:e8:fe:c1: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.149.160.0/24 66.252.192.0/21 104.238.252.0/22 144.208.110.0/23 192.86.122.0/24 204.9.16.0/21 204.57.16.0/20 IPv6: 2605:ed80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20303 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:11:b1:8e:cc:b6:04:83:1f:02:60:2b:b3:e3:fb:25:42:b2: c4:7a:d7:4c:77:85:97:c7:61:8e:5c:9e:5d:36:60:8b:94:bc: 49:2a:e7:50:b0:88:8c:98:6b:47:29:21:0d:ed:de:a8:5c:6d: 60:2a:1f:6f:a1:3e:9d:61:3a:45:dd:02:c6:f5:f9:0e:3c:60: f6:e3:30:a8:b6:c7:4b:91:eb:6b:c0:37:93:6c:d2:43:a6:7a: c0:6f:19:e0:b0:b1:38:0b:50:59:5a:e0:b3:19:cb:ce:ab:e3: 59:92:3a:b4:67:7a:80:33:43:f4:46:b0:f0:58:ea:07:2f:24: 09:24:32:c8:0c:69:3a:f5:8b:e3:9e:4d:84:0f:67:f9:19:30: 91:25:aa:eb:07:6a:50:86:b5:ba:2b:85:75:3c:18:4e:16:a7: 73:41:a6:a0:a5:7a:ad:a0:68:96:3d:25:35:d2:5b:89:73:9a: 89:72:c5:2b:04:6c:5a:84:72:a0:42:4b:ae:54:5a:b6:22:dc: f7:32:ec:a1:22:95:44:2a:29:01:5d:3a:ed:b1:9a:42:9d:92: 80:42:87:5a:8f:6d:da:4a:b2:7d:14:42:39:a2:c1:fb:0a:b6: 28:63:11:6f:8c:99:d6:67:97:17:1a:34:36:6e:01:82:d2:b7: 3d:7d:8b:5e -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEJzR3KitaegDgl8jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcwNTIyMjcxMVoXDTI1MDkxNjIxMjQxNFowLzEtMCsGA1UEAxMk MGNiMGQxNTYtMDkwNi00MDVkLTljZWEtZDU5OTk1MmJhZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEGBUZ1a0N7WDIf0kcW/GNN62ZQ6UC3togkn YNIRKIGBGROChlmcN0BAb4OrBU3ZHtLCN33SL7VPWoIXC1JK8ebIdmrLLQZ7fvzG xf710q84o9nNdVemR9LayVVgQmGUn+EZhFh6aOu/EtpGUZwxsT9n0i0t3K+7Ywat T9Sek7wrFgMyzRANI1T62V6G0LM0oIkn6iGegP3MdXuMrzA1mt4KtTn/V6n4nTpt nj4XPKeyy10LT1PDxusRQJYztImxvwWx8D7Nf2LX7pQdTrN11HZYIqDcMDOGfjv+ AfPuIgcCXA+PUZq/R0rTHK4uQArb6ApZNEsfLZGyMtzo/sF51QIDAQABo4IETTCC BEkwHQYDVR0OBBYEFGF1rWg2sJyjxdPSxwmXtbY6HqyyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w Y2IwZDE1Ni0wOTA2LTQwNWQtOWNlYS1kNTk5OTUyYmFlNjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzBjYjBkMTU2LTA5MDYtNDA1ZC05 Y2VhLWQ1OTk5NTJiYWU2NS8wY2IwZDE1Ni0wOTA2LTQwNWQtOWNlYS1kNTk5OTUy YmFlNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBAAXlaADBANC/MADBAJo7vwDBAGQ0G4DBADAVnoD BAPMCRADBATMORAwDQQCAAIwBwMFACYF7YAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICT08wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAXhGxjsy2BIMfAmArs+P7JUKyxHrXTHeFl8dhjlyeXTZg i5S8SSrnULCIjJhrRykhDe3eqFxtYCofb6E+nWE6Rd0CxvX5Djxg9uMwqLbHS5Hr a8A3k2zSQ6Z6wG8Z4LCxOAtQWVrgsxnLzqvjWZI6tGd6gDND9Eaw8FjqBy8kCSQy yAxpOvWL455NhA9n+RkwkSWq6wdqUIa1uiuFdTwYThanc0GmoKV6raBolj0lNdJb iXOaiXLFKwRsWoRyoEJLrlRatiLc9zLsoSKVRCopAV067bGaQp2SgEKHWo9t2kqy fRRCOaLB+wq2KGMRb4yZ1meXFxo0Nm4BgtK3PX2LXg== -----END CERTIFICATE-----Generated at Thu May 9 21:06:14 2024 by rpki-client on console-fra.rpki-client.org