$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer File: 2b666ba7-a215-4f08-8204-c5b168b3360c.cer (raw, json) Hash identifier: 9H4OY4YjUKs3dqPPG7WvAm06Io+2HofyD9Z6GvkAB+k= Subject key identifier: AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858475E9E932FD09DF4A9B3CA4600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Sep 2024 00:45:26 +0000 Certificate not after: Sat 02 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 25661 AS: 400255 IP: 199.119.140.0/22 IP: 207.167.124.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5e:9e:93:2f:d0:9d:f4:a9:b3:ca:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 29 00:45:26 2024 GMT Not After : Jan 2 01:45:26 2027 GMT Subject: CN=2b666ba7-a215-4f08-8204-c5b168b3360c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:c2:b5:6f:46:1f:d5:5e:ef:0f:26:fc:9c: 2c:10:c6:94:6d:04:44:a2:7d:11:08:0e:93:a2:4f: 55:48:70:bc:e9:18:bb:4e:76:5b:dd:c0:0b:00:cb: 2f:99:05:58:ed:eb:b8:b7:1b:a9:5d:1b:11:bd:13: 91:3e:72:00:7a:40:78:96:53:8a:19:29:f5:be:03: 4a:e3:2d:5c:6a:56:44:cf:62:aa:b2:67:0f:18:aa: b7:83:be:c0:31:5c:36:ef:12:fc:e6:e3:05:88:d6: d3:a5:b1:ba:2e:35:99:78:6e:57:78:a5:a8:0c:05: af:dc:da:1d:bd:92:96:95:32:4c:5d:f3:57:a2:0b: f5:d1:14:0a:28:97:d3:9b:64:52:4f:8b:c8:0d:48: ff:e2:41:ee:4e:6f:4a:e7:31:20:d0:b8:8a:c1:fc: 55:e7:94:ff:bd:70:5e:33:61:e7:75:76:96:6b:6e: d5:5b:1d:60:58:99:fb:34:07:4c:18:bd:8f:17:91: 74:9e:04:44:e2:e7:c1:30:50:11:49:dc:aa:64:df: eb:fc:3c:12:5f:64:74:58:6d:a8:f6:17:78:4a:c1: 73:2a:6e:32:53:6a:7b:40:04:18:be:26:89:7a:1f: d4:90:f5:9a:af:bb:2b:2f:08:1b:64:32:28:c1:84: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.119.140.0/22 207.167.124.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25661 400255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b9:c1:09:9a:14:1b:af:b5:80:85:ff:97:56:dc:b8:f3:64: f3:dd:f2:9c:69:3e:53:87:0c:be:33:70:29:12:82:9d:b4:f0: 0d:7c:0e:35:07:ff:c8:df:67:58:a4:45:73:5b:54:fa:3d:3b: e7:d9:14:b3:0f:2a:cd:46:bf:2a:bb:53:42:15:19:a1:b7:e4: d9:79:3c:8d:b7:d4:6a:1b:90:65:9a:b2:89:54:c7:cf:db:4f: 81:f1:f2:7a:c9:f7:47:9b:78:09:d7:2d:71:62:60:99:a1:af: bc:88:8b:9e:e0:47:88:2b:26:53:48:13:eb:9d:52:44:f1:1e: c7:66:2f:cc:da:18:38:f0:cd:23:3b:eb:b9:60:74:48:99:98: 0a:84:3b:4d:9f:f9:a9:8d:29:41:77:7f:23:19:5f:41:66:94: d8:cf:a7:69:59:1f:73:f3:60:67:26:59:5c:0b:fe:83:b2:33: af:1f:53:bc:4c:c5:e7:b5:0f:4e:6d:38:08:fc:1a:68:9d:e0: 14:19:64:e9:ca:56:02:ce:83:2f:1c:ab:0f:6b:4d:99:e2:2c: 4b:47:c3:6e:dd:c2:76:38:9d:08:c4:e3:dc:11:ff:a7:b9:ce: 96:b4:b1:aa:08:66:03:7b:13:3c:93:86:3e:da:0f:63:38:9d: 65:3d:0f:de -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEdenpMv0J30qbPKRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkyOTAwNDUyNloXDTI3MDEwMjAxNDUyNlowLzEtMCsGA1UEAxMk MmI2NjZiYTctYTIxNS00ZjA4LTgyMDQtYzViMTY4YjMzNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7HCtW9GH9Ve7w8m/JwsEMaUbQREon0RCA6T ok9VSHC86Ri7TnZb3cALAMsvmQVY7eu4txupXRsRvRORPnIAekB4llOKGSn1vgNK 4y1calZEz2KqsmcPGKq3g77AMVw27xL85uMFiNbTpbG6LjWZeG5XeKWoDAWv3Nod vZKWlTJMXfNXogv10RQKKJfTm2RST4vIDUj/4kHuTm9K5zEg0LiKwfxV55T/vXBe M2HndXaWa27VWx1gWJn7NAdMGL2PF5F0ngRE4ufBMFARSdyqZN/r/DwSX2R0WG2o 9hd4SsFzKm4yU2p7QAQYviaJeh/UkPWar7srLwgbZDIowYQMfQIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFKzDoU/sfSYGi4rkk40rxkXrcH9AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y YjY2NmJhNy1hMjE1LTRmMDgtODIwNC1jNWIxNjhiMzM2MGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzJiNjY2YmE3LWEyMTUtNGYwOC04 MjA0LWM1YjE2OGIzMzYwYy8yYjY2NmJhNy1hMjE1LTRmMDgtODIwNC1jNWIxNjhi MzM2MGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHd4wDBADPp3wwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICZD0CAwYbfzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGucEJmhQbr7WAhf+XVty482Tz3fKcaT5T hwy+M3ApEoKdtPANfA41B//I32dYpEVzW1T6PTvn2RSzDyrNRr8qu1NCFRmht+TZ eTyNt9RqG5BlmrKJVMfP20+B8fJ6yfdHm3gJ1y1xYmCZoa+8iIue4EeIKyZTSBPr nVJE8R7HZi/M2hg48M0jO+u5YHRImZgKhDtNn/mpjSlBd38jGV9BZpTYz6dpWR9z 82BnJllcC/6DsjOvH1O8TMXntQ9ObTgI/BponeAUGWTpylYCzoMvHKsPa02Z4ixL R8Nu3cJ2OJ0IxOPcEf+nuc6WtLGqCGYDexM8k4Y+2g9jOJ1lPQ/e -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:15 2024 by rpki-client on console-fra.rpki-client.org