$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer File: 25283898-2dc3-4477-af3c-b64dd3c800ab.cer (raw, json) Hash identifier: XNs3ELZBksJR3+El0eBlKkPj4cdjpGM8TV9g7C7ufRA= Subject key identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858429C968C569415D40E2918A880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Jul 2023 17:34:42 +0000 Certificate not after: Wed 22 Oct 2025 17:34:42 +0000 Subordinate resources: AS: 13692 AS: 20328 IP: 67.219.224.0/20 IP: 100.42.160.0/20 IP: 108.174.176.0/20 IP: 192.86.0.0/24 IP: 192.175.50.0/23 IP: 198.100.136.0/21 IP: 208.77.176.0/21 IP: 2607:8600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:9c:96:8c:56:94:15:d4:0e:29:18:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 20 17:34:42 2023 GMT Not After : Oct 22 17:34:42 2025 GMT Subject: CN=25283898-2dc3-4477-af3c-b64dd3c800ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:89:32:1d:7d:14:e0:a2:49:e9:9f:d7:03: 0c:e0:1c:21:b1:17:fc:de:52:4d:bf:a8:80:d0:9e: 9c:1b:b4:48:e9:14:3b:e1:e0:fe:31:a8:1a:35:10: 00:8a:f5:21:9d:34:46:20:6f:2e:77:fa:1d:33:25: 8e:c0:48:7f:3f:30:d6:6b:73:22:7f:b1:d4:f8:ff: f4:61:f6:15:14:aa:b5:05:11:90:f7:3b:53:9d:a0: d2:e6:12:53:b7:15:40:1d:a8:40:c2:0a:d1:f7:38: 18:85:66:7d:b7:0e:22:a2:44:b4:20:cd:9e:e4:d3: 48:87:41:7b:06:b6:74:ce:dd:3c:40:08:4b:b5:ee: 32:48:fc:df:57:a3:b9:0c:d7:e1:49:3a:7e:c9:d9: 90:e2:09:e5:32:6a:8a:c1:f3:01:98:9c:ef:7e:7e: 44:fb:41:b3:8f:db:bf:9a:74:37:7b:a5:e8:26:85: 09:1e:d6:12:b4:74:75:33:87:8d:1f:bc:75:32:b4: 92:c8:97:38:45:bf:9e:b3:fd:fe:79:e2:ad:4e:5b: ff:6f:b0:89:17:ff:ff:3d:b7:3f:73:c5:56:7c:e2: 88:46:dd:68:c8:89:2c:db:5c:76:fe:c2:32:f8:16: d4:c9:cb:78:12:0e:a3:47:d9:ff:22:55:86:21:7a: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 67.219.224.0/20 100.42.160.0/20 108.174.176.0/20 192.86.0.0/24 192.175.50.0/23 198.100.136.0/21 208.77.176.0/21 IPv6: 2607:8600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13692 20328 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:a3:8d:5f:b3:79:12:17:d9:c0:45:81:d2:8d:e6:f8:6c:0d: 86:e2:dc:ba:28:65:b8:e9:2d:67:47:a0:b5:38:79:70:93:77: 70:8f:b5:92:db:cd:34:2b:be:be:b6:8f:73:e9:32:ab:c6:2e: 40:94:fb:b4:f0:36:aa:d0:f3:e6:25:8a:5c:7d:bd:d0:4f:d9: 73:4b:59:4d:bb:59:15:ba:83:0d:ab:0e:c9:df:3f:54:12:3c: 0f:4f:21:df:1e:06:05:8e:57:a2:c0:13:3a:a1:3c:db:cf:1a: a8:3e:84:b8:ce:bb:40:14:d1:57:f4:07:36:c2:75:d6:67:ab: 5e:36:5c:8e:8c:c2:b5:1d:a9:59:a0:2d:de:31:a0:e8:09:59: 65:36:88:d8:17:d9:94:ea:57:b7:d9:c1:a4:86:63:50:f3:21: 33:7c:40:ee:e0:4d:53:f2:9d:85:68:5d:14:a1:2b:bc:cb:e9: 1a:7e:76:50:f5:ed:15:b5:ca:02:f5:11:85:fd:08:f2:16:d5: 3f:34:b0:eb:27:33:02:da:29:f7:1f:00:a9:59:f4:2e:2e:93: 89:3a:41:07:0a:04:db:0b:3a:28:47:a9:6c:3f:d1:64:f7:82: 8c:3c:ba:62:3a:d2:55:3f:9e:0e:0e:00:69:e6:6b:0b:61:da: ac:74:6d:7a -----BEGIN CERTIFICATE----- MIIHPzCCBiegAwIBAgIUAQ0Mn0MoWEKcloxWlBXUDikYqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcyMDE3MzQ0MloXDTI1MTAyMjE3MzQ0MlowLzEtMCsGA1UEAxMk MjUyODM4OTgtMmRjMy00NDc3LWFmM2MtYjY0ZGQzYzgwMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj6JMh19FOCiSemf1wMM4BwhsRf83lJNv6iA 0J6cG7RI6RQ74eD+MagaNRAAivUhnTRGIG8ud/odMyWOwEh/PzDWa3Mif7HU+P/0 YfYVFKq1BRGQ9ztTnaDS5hJTtxVAHahAwgrR9zgYhWZ9tw4iokS0IM2e5NNIh0F7 BrZ0zt08QAhLte4ySPzfV6O5DNfhSTp+ydmQ4gnlMmqKwfMBmJzvfn5E+0Gzj9u/ mnQ3e6XoJoUJHtYStHR1M4eNH7x1MrSSyJc4Rb+es/3+eeKtTlv/b7CJF///Pbc/ c8VWfOKIRt1oyIks21x2/sIy+BbUyct4Eg6jR9n/IlWGIXqH7QIDAQABo4IEUTCC BE0wHQYDVR0OBBYEFB1+jZmLwELHlOvxUDk0qgxQYBPfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y NTI4Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRkZDNjODAwYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzI1MjgzODk4LTJkYzMtNDQ3Ny1h ZjNjLWI2NGRkM2M4MDBhYi8yNTI4Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRkZDNj ODAwYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBARD2+ADBARkKqADBARsrrADBADAVgADBAHArzID BAPGZIgDBAPQTbAwDQQCAAIwBwMFACYHhgAwHQYIKwYBBQUHAQgBAf8EDjAMoAow CAICNXwCAk9oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADOjjV+zeRIX2cBFgdKN5vhsDYbi3LooZbjpLWdH oLU4eXCTd3CPtZLbzTQrvr62j3PpMqvGLkCU+7TwNqrQ8+Ylilx9vdBP2XNLWU27 WRW6gw2rDsnfP1QSPA9PId8eBgWOV6LAEzqhPNvPGqg+hLjOu0AU0Vf0BzbCddZn q142XI6MwrUdqVmgLd4xoOgJWWU2iNgX2ZTqV7fZwaSGY1DzITN8QO7gTVPynYVo XRShK7zL6Rp+dlD17RW1ygL1EYX9CPIW1T80sOsnMwLaKfcfAKlZ9C4uk4k6QQcK BNsLOihHqWw/0WT3gow8umI60lU/ng4OAGnmawth2qx0bXo= -----END CERTIFICATE-----Generated at Fri May 10 14:12:39 2024 by rpki-client on console-ams.rpki-client.org