$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer File: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer (raw, json) Hash identifier: lWzQxpVdv2noi5Tp+MAh6HuvkCpvPtXzRreS9AU1Th0= Subject key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842C17D201226FC8EE0F841C380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Aug 2023 22:48:23 +0000 Certificate not after: Tue 04 Nov 2025 23:48:23 +0000 Subordinate resources: AS: 393524 IP: 23.134.16.0/23 IP: 23.135.18.0/24 IP: 104.192.96.0/22 IP: 104.245.136.0/22 IP: 2602:ff44::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:c1:7d:20:12:26:fc:8e:e0:f8:41:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 2 22:48:23 2023 GMT Not After : Nov 4 23:48:23 2025 GMT Subject: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ae:f9:55:10:36:73:aa:a4:c6:53:8b:b4:2e: be:ae:fa:d2:0f:a3:4f:c4:eb:95:10:bc:90:48:32: 9a:ee:fa:44:62:fe:96:a7:aa:26:87:3e:e6:4f:bb: ef:90:c5:f2:9f:35:31:61:31:6f:d6:e5:6d:f3:28: 6a:c5:8e:48:53:fe:dd:5e:e9:3e:0c:85:01:dc:07: 22:60:26:f3:16:2c:f9:70:37:55:c6:e7:f9:6d:28: 9a:9e:0a:6d:a8:23:71:74:7d:da:92:f5:a7:24:1e: 97:77:61:55:3f:38:90:d7:19:7c:32:6b:0f:85:31: cc:80:92:4e:3a:f8:09:77:ac:62:90:05:37:92:83: 12:d3:ce:08:3a:bf:10:4a:f4:41:2b:d0:5f:05:45: dd:1a:c8:4c:89:dc:c1:fc:e9:c5:66:9d:d7:ed:a2: 99:f5:cf:09:1d:ec:ad:cc:28:e8:7d:a3:22:1b:02: 4e:da:39:71:ef:23:56:6d:b8:42:bd:18:27:0c:6a: b5:25:4b:33:aa:2e:e4:03:5c:49:d7:3c:0f:e7:d7: 3d:8c:ab:53:c8:b8:e9:c4:bd:11:dc:77:98:50:dd: e7:5f:ea:83:c1:dd:4e:16:e4:7f:e7:d1:91:7e:d6: 3d:8c:11:5d:74:49:ca:13:56:eb:de:11:22:4c:f3: 70:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.134.16.0/23 23.135.18.0/24 104.192.96.0/22 104.245.136.0/22 IPv6: 2602:ff44::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393524 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:11:af:d6:dd:38:c3:20:a7:dc:35:d6:4a:2d:4e:20:94:74: 13:b0:87:b6:12:58:e4:cd:5c:da:e7:2f:6d:7e:a1:48:1d:09: df:6f:e4:a3:cd:be:fd:d4:9e:54:2e:1d:fd:a9:dc:25:08:44: f1:69:85:c0:33:47:50:e9:da:b8:42:07:fd:6f:9d:2f:cc:6b: 18:de:f7:af:78:21:09:e7:dc:b8:1c:ca:be:1a:9a:23:b0:1d: 89:a1:93:5f:a4:2f:69:a4:7a:16:f4:45:d9:6c:d1:29:4f:5e: 09:7d:3c:36:b3:0a:b4:b3:df:5f:9e:73:e6:8c:d2:60:c7:cb: a3:59:f5:e9:49:4a:22:d1:01:ac:60:a6:2e:14:95:6c:8e:56: 7a:81:1b:5b:2e:49:7d:19:fc:bf:38:3f:d3:5b:e1:f6:90:dd: 3e:3a:e6:cd:03:22:27:5e:92:27:8e:6b:da:67:02:2f:33:9c: 9e:6c:ba:36:81:c2:43:5c:b9:dc:3a:cd:fd:f3:bb:fe:64:2e: b6:c5:a9:9f:2e:0a:23:57:52:91:f0:e7:c2:0a:b0:f2:78:3b: e6:86:9d:1c:b8:61:21:3b:23:31:ab:27:1d:b7:c8:a4:05:09: 97:41:a2:ee:ff:62:1b:7e:6a:09:79:ff:ac:ce:de:04:5a:a0: d2:38:11:a5 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWELBfSASJvyO4PhBw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgwMjIyNDgyM1oXDTI1MTEwNDIzNDgyM1owLzEtMCsGA1UEAxMk MmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkwZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh675VRA2c6qkxlOLtC6+rvrSD6NPxOuVELyQ SDKa7vpEYv6Wp6omhz7mT7vvkMXynzUxYTFv1uVt8yhqxY5IU/7dXuk+DIUB3Aci YCbzFiz5cDdVxuf5bSiangptqCNxdH3akvWnJB6Xd2FVPziQ1xl8MmsPhTHMgJJO OvgJd6xikAU3koMS084IOr8QSvRBK9BfBUXdGshMidzB/OnFZp3X7aKZ9c8JHeyt zCjofaMiGwJO2jlx7yNWbbhCvRgnDGq1JUszqi7kA1xJ1zwP59c9jKtTyLjpxL0R 3HeYUN3nX+qDwd1OFuR/59GRftY9jBFddEnKE1br3hEiTPNw1wIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFM/4LqqnGVsPAYrd2tCfUbo9SdVqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y YTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzJhNTM4NDljLTZmNzctNGU2OS04 YjM5LWJjYjg1ZGE5MGY0Yi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRh OTBmNGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBAEXhhADBAAXhxIDBAJowGADBAJo9YgwDgQCAAIw CAMGBCYC/0QAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYBNDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAC Ea/W3TjDIKfcNdZKLU4glHQTsIe2EljkzVza5y9tfqFIHQnfb+Sjzb791J5ULh39 qdwlCETxaYXAM0dQ6dq4Qgf9b50vzGsY3veveCEJ59y4HMq+GpojsB2JoZNfpC9p pHoW9EXZbNEpT14JfTw2swq0s99fnnPmjNJgx8ujWfXpSUoi0QGsYKYuFJVsjlZ6 gRtbLkl9Gfy/OD/TW+H2kN0+OubNAyInXpInjmvaZwIvM5yebLo2gcJDXLncOs39 87v+ZC62xamfLgojV1KR8OfCCrDyeDvmhp0cuGEhOyMxqycdt8ikBQmXQaLu/2Ib fmoJef+szt4EWqDSOBGl -----END CERTIFICATE-----Generated at Thu May 9 21:06:14 2024 by rpki-client on console-fra.rpki-client.org