$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer File: 2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer (raw, json) Hash identifier: VHY2QbaymzSn3Gz994vjdYg5Xft1GDe9O6bGbqhxX6Q= Subject key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858429F5D80B462039CE7EC5D5180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Jul 2023 17:27:11 +0000 Certificate not after: Wed 17 Sep 2025 16:16:07 +0000 Subordinate resources: AS: 30422 AS: 40542 AS: 63203 IP: 149.112.4.0/24 IP: 149.112.17.0/24 IP: 149.112.70.0/23 IP: 206.51.7.0/24 IP: 2001:504:1b::/48 IP: 2001:504:100::/48 IP: 2001:504:110::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:9f:5d:80:b4:62:03:9c:e7:ec:5d:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 21 17:27:11 2023 GMT Not After : Sep 17 16:16:07 2025 GMT Subject: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:04:94:04:97:41:02:7c:7b:ed:f6:6a:46: 48:f2:27:a0:e6:72:bb:92:5f:27:ec:c1:0a:97:28: b2:36:0f:6e:ba:b4:8b:c4:1e:1a:61:5c:62:cc:67: c4:a3:38:7b:fd:e8:a4:d2:ba:2e:7e:60:7f:fd:e2: ac:f6:0f:80:27:12:04:1b:e1:be:1d:4f:bd:5c:50: 88:cc:47:2f:a6:c3:a9:4f:73:90:cc:f2:35:3d:b2: 60:41:53:7f:c2:f3:a4:0c:62:0a:9a:4d:07:09:62: 27:8b:8e:99:d3:25:b5:2a:2d:2e:c4:c1:4a:67:f5: 51:25:6e:85:07:6a:db:2a:b9:01:f1:eb:ef:db:52: 7b:43:3c:d1:f2:a0:af:f6:7a:fe:b0:a0:f9:66:27: db:72:99:54:a8:aa:97:6b:dc:14:07:66:aa:82:40: 0c:47:a7:55:c2:5d:c6:05:60:d5:f6:51:c8:86:aa: dd:d2:55:31:6b:5b:59:40:f2:7e:1d:c0:6e:cb:34: bd:7c:dd:82:82:09:80:28:d8:ec:8f:38:90:3b:a2: ab:08:93:9d:f5:3f:67:c5:83:8b:83:61:65:7d:73: 94:5f:b3:a6:f3:cf:33:87:57:e3:2c:b2:53:d6:d3: 2f:df:6f:ef:4a:18:96:3b:39:90:76:73:60:93:49: cc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 149.112.4.0/24 149.112.17.0/24 149.112.70.0/23 206.51.7.0/24 IPv6: 2001:504:1b::/48 2001:504:100::/48 2001:504:110::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30422 40542 63203 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:96:66:ed:5c:71:29:5a:79:97:aa:08:91:56:e0:45:d1:d3: 29:42:73:b8:97:7e:69:87:87:59:05:c4:f5:ad:0b:fe:33:e1: 79:e2:d4:05:b5:e1:0d:7b:e9:1c:d5:52:1c:77:27:bc:50:b6: e5:81:9d:93:9d:e7:a5:d0:67:86:fa:30:6e:89:3d:ef:77:5f: 73:a5:65:8b:e4:b4:f4:6e:dc:b7:cb:9a:e0:07:f1:9d:b1:74: bf:08:d7:6a:11:7e:f2:84:a5:8f:b1:c0:1a:62:5d:91:60:75: 74:b6:03:4e:fd:7e:cb:ed:77:d2:92:47:0e:03:e4:60:9b:1c: ab:da:c3:67:db:32:e8:0d:8c:49:d8:2f:fb:ef:a5:34:e5:a6: 2a:a4:06:52:7f:08:e1:64:f7:d1:ae:67:45:e2:0f:51:8a:89: 59:d3:81:e0:f0:9f:0a:96:db:14:e3:0f:ca:33:ad:42:58:59: 32:2d:ed:fe:9f:76:aa:8f:33:59:80:21:1d:9f:71:37:a1:36: 0f:1d:49:c0:99:cf:be:e1:13:21:09:29:a1:bb:58:75:22:ba: 42:65:27:c9:bd:f1:70:8b:4b:43:68:71:48:16:87:d5:73:9c: 44:4a:3e:7c:d9:02:5a:a1:e3:88:52:6a:8e:70:59:21:58:cf: 54:9c:f8:8f -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWEKfXYC0YgOc5+xdUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcyMTE3MjcxMVoXDTI1MDkxNzE2MTYwN1owLzEtMCsGA1UEAxMk MmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4YzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv4ElASXQQJ8e+32akZI8ieg5nK7kl8n7MEK lyiyNg9uurSLxB4aYVxizGfEozh7/eik0roufmB//eKs9g+AJxIEG+G+HU+9XFCI zEcvpsOpT3OQzPI1PbJgQVN/wvOkDGIKmk0HCWIni46Z0yW1Ki0uxMFKZ/VRJW6F B2rbKrkB8evv21J7QzzR8qCv9nr+sKD5ZifbcplUqKqXa9wUB2aqgkAMR6dVwl3G BWDV9lHIhqrd0lUxa1tZQPJ+HcBuyzS9fN2CggmAKNjsjziQO6KrCJOd9T9nxYOL g2FlfXOUX7Om888zh1fjLLJT1tMv32/vShiWOzmQdnNgk0nMLwIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFOfDTZITvZDevphTtnVhl4ZbJ0ZNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y YTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzJhNjExZWYxLTE5NWUtNDk1OC1h NmFjLWY0YTFkMmNkOGM4Zi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJj ZDhjOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMB4EAgABMBgDBACVcAQDBACVcBEDBAGVcEYDBADOMwcwIQQCAAIw GwMHACABBQQAGwMHACABBQQBAAMHACABBQQBEDAjBggrBgEFBQcBCAEB/wQUMBKg EDAOAgJ21gIDAJ5eAgMA9uMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJpZm7VxxKVp5l6oIkVbgRdHTKUJz uJd+aYeHWQXE9a0L/jPheeLUBbXhDXvpHNVSHHcnvFC25YGdk53npdBnhvowbok9 73dfc6Vli+S09G7ct8ua4AfxnbF0vwjXahF+8oSlj7HAGmJdkWB1dLYDTv1+y+13 0pJHDgPkYJscq9rDZ9sy6A2MSdgv+++lNOWmKqQGUn8I4WT30a5nReIPUYqJWdOB 4PCfCpbbFOMPyjOtQlhZMi3t/p92qo8zWYAhHZ9xN6E2Dx1JwJnPvuETIQkpobtY dSK6QmUnyb3xcItLQ2hxSBaH1XOcREo+fNkCWqHjiFJqjnBZIVjPVJz4jw== -----END CERTIFICATE-----Generated at Wed May 8 15:30:00 2024 by rpki-client on console-fra.rpki-client.org