$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0fea19e9-8155-4254-af3b-1b522a124b4c.cer File: 0fea19e9-8155-4254-af3b-1b522a124b4c.cer (raw, json) Hash identifier: PgFfPFp54iTjRjNBroAmClhOwjXwv1+IXfYr+2I1WGw= Subject key identifier: D4:52:E3:00:5A:5D:22:69:5B:92:65:D0:5E:D9:B1:D8:D4:73:5A:DB Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842BE2821098FD24837AF48F9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0fea19e9-8155-4254-af3b-1b522a124b4c/0fea19e9-8155-4254-af3b-1b522a124b4c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0fea19e9-8155-4254-af3b-1b522a124b4c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Aug 2023 18:09:42 +0000 Certificate not after: Mon 03 Nov 2025 19:09:42 +0000 Subordinate resources: AS: 19233 IP: 104.128.96.0/20 IP: 192.154.160.0/20 IP: 192.225.192.0/20 IP: 199.68.252.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:be:28:21:09:8f:d2:48:37:af:48:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 1 18:09:42 2023 GMT Not After : Nov 3 19:09:42 2025 GMT Subject: CN=0fea19e9-8155-4254-af3b-1b522a124b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:8a:8b:36:94:0f:16:ac:22:f0:a1:93:ac: 19:dd:db:d1:40:4b:23:bf:ee:06:64:30:d4:c9:d2: 07:b1:6b:c0:65:06:92:b0:fb:d6:38:14:3b:13:94: db:44:09:cd:c8:3a:a8:c8:75:21:77:d8:24:06:b3: 39:cd:3e:71:24:2a:cd:fb:b1:19:46:43:2d:21:7f: c2:88:25:bb:3a:dc:f6:2a:fc:87:94:ce:b0:ea:81: 28:18:43:28:57:80:6b:d2:1e:40:73:6a:30:c8:b3: 4b:ea:c7:2d:67:87:4f:85:59:83:fd:da:56:ff:03: ee:9e:34:35:9c:12:46:bc:39:1c:da:19:a9:ff:97: e3:68:93:5b:e8:fe:75:fd:e9:91:48:ad:51:8d:8d: d5:3b:da:20:e2:68:6f:66:49:46:17:f7:e3:d7:5c: 42:57:d6:1b:98:bf:35:88:d2:96:e5:3e:f2:15:f7: 49:f8:fd:8a:3d:9a:0f:46:65:83:1c:ef:c0:66:5b: de:f6:08:9e:7e:19:fe:e2:66:f3:d8:39:04:81:4f: 02:35:39:ce:78:23:86:f4:0f:36:e4:cf:e4:7a:6a: 33:48:de:1a:29:5a:72:18:e0:79:c5:7a:c7:2f:cd: 7b:4f:52:48:8b:df:8c:7a:86:b4:9f:bd:54:e6:06: de:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:52:E3:00:5A:5D:22:69:5B:92:65:D0:5E:D9:B1:D8:D4:73:5A:DB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0fea19e9-8155-4254-af3b-1b522a124b4c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0fea19e9-8155-4254-af3b-1b522a124b4c/0fea19e9-8155-4254-af3b-1b522a124b4c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 104.128.96.0/20 192.154.160.0/20 192.225.192.0/20 199.68.252.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19233 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ae:4c:58:db:f4:90:08:79:78:b2:01:21:97:26:f3:d3:8b: e1:c5:f1:1c:77:bc:70:61:bd:29:c6:89:19:60:fa:8f:4f:11: d9:07:2a:3e:b0:50:d4:8e:4c:02:3b:a9:18:ab:41:a7:25:1c: 0d:82:e2:64:07:08:1e:ca:d4:7f:01:42:9f:49:fa:34:37:54: c6:30:3c:6d:3b:1b:e7:42:1b:cf:17:05:a2:49:1d:6d:75:2c: 57:e7:92:10:c4:39:3f:7c:f5:d1:81:cd:df:84:23:fc:54:71: e9:b7:c3:21:ab:69:e9:23:87:ca:96:f0:9a:fe:f7:61:66:59: f7:f0:e5:77:d9:18:05:b8:bc:de:64:b3:55:d3:7d:78:7b:ee: 2a:5c:ef:29:64:54:ba:d6:8c:a7:e7:0e:61:4f:da:3b:fd:0f: 16:90:a4:59:51:dd:25:d2:22:09:8f:32:63:70:40:6b:f0:fc: 0d:10:9c:e1:7c:ae:62:46:5d:63:b5:38:fc:9c:66:09:6f:2e: 6b:a1:78:dc:ca:ba:f3:85:06:60:e7:c6:6d:7d:ae:01:57:e2: b7:51:72:7e:20:2e:2f:f5:66:d3:79:8e:11:5c:29:0a:ce:36: 84:52:cc:71:0e:b7:0f:b8:c4:1e:f4:65:a6:b5:5f:77:f0:91: 09:ae:0c:09 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEK+KCEJj9JIN69I+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgwMTE4MDk0MloXDTI1MTEwMzE5MDk0MlowLzEtMCsGA1UEAxMk MGZlYTE5ZTktODE1NS00MjU0LWFmM2ItMWI1MjJhMTI0YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaSKizaUDxasIvChk6wZ3dvRQEsjv+4GZDDU ydIHsWvAZQaSsPvWOBQ7E5TbRAnNyDqoyHUhd9gkBrM5zT5xJCrN+7EZRkMtIX/C iCW7Otz2KvyHlM6w6oEoGEMoV4Br0h5Ac2owyLNL6sctZ4dPhVmD/dpW/wPunjQ1 nBJGvDkc2hmp/5fjaJNb6P51/emRSK1RjY3VO9og4mhvZklGF/fj11xCV9YbmL81 iNKW5T7yFfdJ+P2KPZoPRmWDHO/AZlve9giefhn+4mbz2DkEgU8CNTnOeCOG9A82 5M/kemozSN4aKVpyGOB5xXrHL817T1JIi9+Meoa0n71U5gbeSwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFNRS4wBaXSJpW5Jl0F7ZsdjUc1rbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w ZmVhMTllOS04MTU1LTQyNTQtYWYzYi0xYjUyMmExMjRiNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzBmZWExOWU5LTgxNTUtNDI1NC1h ZjNiLTFiNTIyYTEyNGI0Yy8wZmVhMTllOS04MTU1LTQyNTQtYWYzYi0xYjUyMmEx MjRiNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBARogGADBATAmqADBATA4cADBALHRPwwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICSyEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKa5MWNv0kAh5eLIBIZcm89OL 4cXxHHe8cGG9KcaJGWD6j08R2QcqPrBQ1I5MAjupGKtBpyUcDYLiZAcIHsrUfwFC n0n6NDdUxjA8bTsb50IbzxcFokkdbXUsV+eSEMQ5P3z10YHN34Qj/FRx6bfDIatp 6SOHypbwmv73YWZZ9/Dld9kYBbi83mSzVdN9eHvuKlzvKWRUutaMp+cOYU/aO/0P FpCkWVHdJdIiCY8yY3BAa/D8DRCc4XyuYkZdY7U4/JxmCW8ua6F43Mq684UGYOfG bX2uAVfit1FyfiAuL/Vm03mOEVwpCs42hFLMcQ63D7jEHvRlprVfd/CRCa4MCQ== -----END CERTIFICATE-----Generated at Thu May 9 21:06:14 2024 by rpki-client on console-fra.rpki-client.org