$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer File: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer (raw, json) Hash identifier: 9/UP1/fR7yCjWJblImWatZlyyOEh8EMrBZQoMibExQQ= Subject key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847C607B63C85909F2A92A34E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Nov 2024 01:45:32 +0000 Certificate not after: Mon 08 Feb 2027 01:45:32 +0000 Subordinate resources: AS: 393524 IP: 23.134.16.0/23 IP: 23.135.18.0/24 IP: 104.192.96.0/22 IP: 104.245.136.0/22 IP: 2602:ff44::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c6:07:b6:3c:85:90:9f:2a:92:a3:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 5 01:45:32 2024 GMT Not After : Feb 8 01:45:32 2027 GMT Subject: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ae:f9:55:10:36:73:aa:a4:c6:53:8b:b4:2e: be:ae:fa:d2:0f:a3:4f:c4:eb:95:10:bc:90:48:32: 9a:ee:fa:44:62:fe:96:a7:aa:26:87:3e:e6:4f:bb: ef:90:c5:f2:9f:35:31:61:31:6f:d6:e5:6d:f3:28: 6a:c5:8e:48:53:fe:dd:5e:e9:3e:0c:85:01:dc:07: 22:60:26:f3:16:2c:f9:70:37:55:c6:e7:f9:6d:28: 9a:9e:0a:6d:a8:23:71:74:7d:da:92:f5:a7:24:1e: 97:77:61:55:3f:38:90:d7:19:7c:32:6b:0f:85:31: cc:80:92:4e:3a:f8:09:77:ac:62:90:05:37:92:83: 12:d3:ce:08:3a:bf:10:4a:f4:41:2b:d0:5f:05:45: dd:1a:c8:4c:89:dc:c1:fc:e9:c5:66:9d:d7:ed:a2: 99:f5:cf:09:1d:ec:ad:cc:28:e8:7d:a3:22:1b:02: 4e:da:39:71:ef:23:56:6d:b8:42:bd:18:27:0c:6a: b5:25:4b:33:aa:2e:e4:03:5c:49:d7:3c:0f:e7:d7: 3d:8c:ab:53:c8:b8:e9:c4:bd:11:dc:77:98:50:dd: e7:5f:ea:83:c1:dd:4e:16:e4:7f:e7:d1:91:7e:d6: 3d:8c:11:5d:74:49:ca:13:56:eb:de:11:22:4c:f3: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.134.16.0/23 23.135.18.0/24 104.192.96.0/22 104.245.136.0/22 IPv6: 2602:ff44::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393524 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:29:8a:b8:ad:fd:5a:f0:11:41:84:f3:d2:23:95:fc:15:ba: c1:39:44:72:b8:7b:50:03:4f:13:a9:27:ce:b4:1b:8f:12:a9: d2:3c:b8:e3:0d:d7:a3:c2:ed:54:c8:c4:0a:46:60:b3:04:5f: 10:c3:ff:e5:1a:72:dd:79:c5:98:66:53:95:69:55:58:20:66: c8:a8:c6:3d:49:cc:cd:7a:d2:14:39:a5:d7:dd:c1:60:ee:46: 70:e4:55:e9:9e:d3:58:fe:ce:94:f1:71:6c:d5:1a:31:a5:d0: 09:6c:36:bf:c0:78:e3:1d:22:b9:a6:a0:12:c3:20:9b:ef:b0: 85:8e:f3:43:d9:e9:02:65:c7:8a:d2:2d:09:86:3c:ec:a5:b9: 88:3f:cd:3b:bb:1c:af:8c:c7:76:ba:c9:a5:e0:8f:9b:6f:4b: d0:f0:ed:6c:59:66:4a:fd:23:19:9d:35:c2:bb:76:41:7b:4a: 63:58:b3:8f:26:86:47:23:00:87:6e:8d:d0:96:92:3e:c4:1a: 44:e4:79:be:5b:f3:5b:09:89:49:65:17:e3:c0:47:e4:59:4e: 21:19:a5:37:29:95:90:54:e2:86:17:18:a9:40:78:12:1e:ef: 77:12:b8:a4:f9:d3:42:cd:bc:8c:ea:b5:2c:4d:15:d1:ca:50: c6:fd:8d:8b -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEfGB7Y8hZCfKpKjToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEwNTAxNDUzMloXDTI3MDIwODAxNDUzMlowLzEtMCsGA1UEAxMk MmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkwZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh675VRA2c6qkxlOLtC6+rvrSD6NPxOuVELyQ SDKa7vpEYv6Wp6omhz7mT7vvkMXynzUxYTFv1uVt8yhqxY5IU/7dXuk+DIUB3Aci YCbzFiz5cDdVxuf5bSiangptqCNxdH3akvWnJB6Xd2FVPziQ1xl8MmsPhTHMgJJO OvgJd6xikAU3koMS084IOr8QSvRBK9BfBUXdGshMidzB/OnFZp3X7aKZ9c8JHeyt zCjofaMiGwJO2jlx7yNWbbhCvRgnDGq1JUszqi7kA1xJ1zwP59c9jKtTyLjpxL0R 3HeYUN3nX+qDwd1OFuR/59GRftY9jBFddEnKE1br3hEiTPNw1wIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFM/4LqqnGVsPAYrd2tCfUbo9SdVqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y YTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzJhNTM4NDljLTZmNzctNGU2OS04 YjM5LWJjYjg1ZGE5MGY0Yi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRh OTBmNGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBAEXhhADBAAXhxIDBAJowGADBAJo9YgwDgQCAAIw CAMGBCYC/0QAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYBNDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBR KYq4rf1a8BFBhPPSI5X8FbrBOURyuHtQA08TqSfOtBuPEqnSPLjjDdejwu1UyMQK RmCzBF8Qw//lGnLdecWYZlOVaVVYIGbIqMY9SczNetIUOaXX3cFg7kZw5FXpntNY /s6U8XFs1RoxpdAJbDa/wHjjHSK5pqASwyCb77CFjvND2ekCZceK0i0JhjzspbmI P807uxyvjMd2usml4I+bb0vQ8O1sWWZK/SMZnTXCu3ZBe0pjWLOPJoZHIwCHbo3Q lpI+xBpE5Hm+W/NbCYlJZRfjwEfkWU4hGaU3KZWQVOKGFxipQHgSHu93Erik+dNC zbyM6rUsTRXRylDG/Y2L -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:15 2024 by rpki-client on console-fra.rpki-client.org