$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.cer File: 1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.cer (raw, json) Hash identifier: 1GrZLQwmYT8KwUpzsknCa2Vb/PXQDf+CKkiMGqgf8as= Subject key identifier: 2D:D0:17:61:94:A0:D6:A1:48:A1:96:00:47:6D:B4:3F:9E:A7:B6:4D Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842CE8743393DD5C561EDC79FA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:54:19 +0000 Certificate not after: Mon 20 Oct 2025 12:29:54 +0000 Subordinate resources: AS: 14700 IP: 2620:bb:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:87:43:39:3d:d5:c5:61:ed:c7:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 7 14:54:19 2023 GMT Not After : Oct 20 12:29:54 2025 GMT Subject: CN=1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:13:76:fe:85:7d:1c:4e:c6:38:ac:21:a8:11: a9:a2:dc:fe:25:c0:7e:2d:c2:78:ef:db:0d:2d:e3: 43:61:bb:27:9a:77:f2:15:d8:34:16:a4:b1:f3:e5: 44:74:80:c3:9c:9f:f7:62:b5:91:ba:63:94:43:4a: e8:73:11:60:9c:5f:64:25:16:f1:2e:8b:98:ca:c7: c2:c1:a0:0d:eb:c2:bf:fd:8c:5c:8a:e4:4b:1c:e5: 7e:3c:11:78:e3:e6:51:ae:a6:83:34:3a:c1:9f:f3: 09:31:9b:d3:1e:53:84:17:76:af:b5:60:09:bc:14: 9f:fe:26:9a:ad:88:bd:34:78:39:d5:ae:da:0e:54: 5b:07:28:03:da:d7:4c:fe:90:81:91:4d:d4:82:ca: 6d:ae:c1:d2:a2:b5:ca:13:07:76:79:cc:74:2c:bd: cd:0f:da:6e:e0:f9:42:e5:95:20:61:f3:db:f2:22: 6e:bf:66:df:2b:c8:f7:0b:21:ff:89:9d:82:3f:dc: 16:98:ca:b8:4f:a7:69:9f:cb:8c:23:04:5b:48:0a: ff:78:a5:8f:24:97:f8:1d:a5:c1:91:04:3f:a3:aa: a3:91:53:f7:fa:4d:ea:45:ca:dc:4f:cd:33:3a:23: 1a:83:7a:48:7a:79:25:9c:ae:de:23:e7:a5:4d:34: 0c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D0:17:61:94:A0:D6:A1:48:A1:96:00:47:6D:B4:3F:9E:A7:B6:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd/1f0242d9-a9c2-48ca-a68c-5d2c153e1fbd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2620:bb:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14700 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:1c:07:84:e9:d9:5a:f2:38:8d:de:5c:c0:da:72:3e:50:63: 93:12:6a:14:bf:d7:13:de:ce:e4:80:93:d3:a9:56:64:40:58: bd:5a:eb:3c:02:46:ea:8f:27:8f:a1:27:54:d7:cf:0d:85:8c: 16:83:4e:0d:87:e2:16:d8:ac:83:9d:cb:aa:d8:27:8a:87:7e: f2:6c:0d:d0:ab:8d:74:30:65:6e:6f:bc:23:ee:bf:65:55:19: 01:a8:01:9c:6e:a1:cb:66:38:83:fc:61:0f:2a:b9:31:4a:fe: ce:6a:ea:11:f9:ef:a5:a5:d9:5a:cd:84:ba:58:01:36:64:0b: bb:a0:97:e7:22:e3:8b:80:91:9f:13:ac:27:9d:85:09:44:ce: d2:31:34:ca:53:98:69:ca:93:29:de:31:65:5f:d8:fe:8f:71: 1d:5a:29:d9:63:cf:0d:1d:ec:3e:6d:76:d6:3f:30:a1:fc:2a: e0:20:f4:35:3f:16:2d:46:db:43:dc:1d:fc:ac:8f:1e:db:cd: c7:28:62:72:3d:b7:a5:c4:c9:0e:6d:02:40:c6:e1:cd:43:fd: 4c:07:6e:69:84:e5:b3:9c:5b:fb:7e:1d:d6:84:b9:77:40:31: 98:64:a1:c8:dd:0c:b7:20:03:d7:5e:ae:9c:91:04:29:c8:ed: ee:e2:22:85 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWELOh0M5PdXFYe3Hn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgwNzE0NTQxOVoXDTI1MTAyMDEyMjk1NFowLzEtMCsGA1UEAxMk MWYwMjQyZDktYTljMi00OGNhLWE2OGMtNWQyYzE1M2UxZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RN2/oV9HE7GOKwhqBGpotz+JcB+LcJ479sN LeNDYbsnmnfyFdg0FqSx8+VEdIDDnJ/3YrWRumOUQ0rocxFgnF9kJRbxLouYysfC waAN68K//YxciuRLHOV+PBF44+ZRrqaDNDrBn/MJMZvTHlOEF3avtWAJvBSf/iaa rYi9NHg51a7aDlRbBygD2tdM/pCBkU3UgsptrsHSorXKEwd2ecx0LL3ND9pu4PlC 5ZUgYfPb8iJuv2bfK8j3CyH/iZ2CP9wWmMq4T6dpn8uMIwRbSAr/eKWPJJf4HaXB kQQ/o6qjkVP3+k3qRcrcT80zOiMag3pIenklnK7eI+elTTQMkwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFC3QF2GUoNahSKGWAEdttD+ep7ZNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x ZjAyNDJkOS1hOWMyLTQ4Y2EtYTY4Yy01ZDJjMTUzZTFmYmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFmMDI0MmQ5LWE5YzItNDhjYS1h NjhjLTVkMmMxNTNlMWZiZC8xZjAyNDJkOS1hOWMyLTQ4Y2EtYTY4Yy01ZDJjMTUz ZTFmYmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIAC7oAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICOWwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAnRwHhOnZWvI4jd5cwNpyPlBjkxJqFL/XE97O5ICT06lW ZEBYvVrrPAJG6o8nj6EnVNfPDYWMFoNODYfiFtisg53Lqtgniod+8mwN0KuNdDBl bm+8I+6/ZVUZAagBnG6hy2Y4g/xhDyq5MUr+zmrqEfnvpaXZWs2EulgBNmQLu6CX 5yLji4CRnxOsJ52FCUTO0jE0ylOYacqTKd4xZV/Y/o9xHVop2WPPDR3sPm121j8w ofwq4CD0NT8WLUbbQ9wd/KyPHtvNxyhicj23pcTJDm0CQMbhzUP9TAduaYTls5xb +34d1oS5d0AxmGShyN0MtyAD116unJEEKcjt7uIihQ== -----END CERTIFICATE-----Generated at Thu May 9 20:34:14 2024 by rpki-client on console-ams.rpki-client.org