$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer File: 370b86f5-0ae7-4e6c-a32e-08310156df3f.cer (raw, json) Hash identifier: y6fqUM1bCxxf2Rb8OBC96KK9OolvR75wxFmZKADrl0M= Subject key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858434C375A78DD59D860857521C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Sep 2023 15:25:10 +0000 Certificate not after: Wed 24 Dec 2025 16:25:10 +0000 Subordinate resources: AS: 4317 IP: 50.20.196.0/22 IP: 64.237.104.0/22 IP: 148.64.62.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:4c:37:5a:78:dd:59:d8:60:85:75:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 21 15:25:10 2023 GMT Not After : Dec 24 16:25:10 2025 GMT Subject: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:97:5f:f9:ac:64:92:88:5b:b7:e3:8f:fd:c0: 64:a9:d0:73:d8:11:63:c7:84:13:1e:52:d1:90:41: ac:e7:73:ed:6b:99:b3:9c:63:a6:60:ed:f8:8f:19: e9:24:77:e2:35:91:6d:12:2b:40:e0:70:88:84:f3: ed:8c:46:c5:80:5a:d3:09:af:49:93:3d:67:ac:c6: 82:93:00:39:ba:a2:3b:ca:8e:eb:77:c1:dd:e6:49: 62:e0:f7:62:26:01:74:b9:0d:49:38:66:37:c2:08: 0a:76:c0:9b:4a:2e:5b:db:d3:1a:0f:62:55:11:dc: af:4e:0d:8d:f7:ed:b0:fa:9f:d5:83:0a:53:55:67: dc:fd:59:4c:cc:e3:7d:8c:28:5c:7c:f9:f4:0a:b6: 98:71:77:79:ac:60:83:d2:93:4a:f7:e3:00:28:96: 13:1a:bd:73:c6:bd:95:10:46:16:cc:d5:0d:3a:4d: a9:e1:41:3e:88:47:3c:38:a6:52:b0:22:0a:bf:9e: 3c:e1:80:c5:82:6f:21:20:24:0c:95:1e:c4:41:82: 28:f4:88:a6:74:03:f1:03:86:7e:bc:7e:23:7a:b0: af:ff:2c:af:90:1f:e2:24:f2:96:03:43:52:d4:78: a2:3a:f6:f1:d2:af:94:0b:51:ea:19:ec:23:e3:6d: 8c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 50.20.196.0/22 64.237.104.0/22 148.64.62.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4317 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:81:20:0e:cf:6f:e4:2c:2e:ed:59:d3:ac:eb:37:5f:d0:0f: 8a:06:a9:9f:c2:4b:68:49:49:36:3e:3f:54:4a:6f:e2:95:d5: 52:83:1e:2b:5f:26:a2:89:e5:23:67:dd:3a:b9:bc:23:73:e9: 41:65:d1:6d:62:7a:6f:1a:c3:17:96:28:33:7b:bb:cb:a5:c4: 0d:69:b7:9e:84:fb:f0:99:0d:b7:ec:a7:42:be:39:be:78:9c: c6:1d:3e:51:01:af:21:56:55:50:44:63:3d:6b:88:7a:99:07: bb:9f:75:2e:53:9a:09:0c:6a:20:5d:a1:66:c4:5e:7e:c5:a7: a5:9e:5d:88:0a:a0:21:f0:ed:50:f5:ef:df:8f:83:3e:80:c2: bf:57:11:2b:75:e9:6d:b8:86:29:10:51:e2:fd:ac:7e:3a:8e: 2a:ad:6c:a7:d5:8a:14:a7:27:30:b9:f2:79:b5:b5:11:01:bc: 5a:6f:32:e7:06:37:b3:f8:97:f6:8b:b4:26:27:c7:fd:ed:d6: 29:97:95:7a:39:1d:92:1e:34:3c:ae:1c:f1:18:2a:bd:c2:18: 86:da:01:50:98:e8:b0:ee:0c:e9:75:5f:58:28:25:96:a8:ef: 12:91:b2:97:79:bc:69:81:38:3b:05:d7:e9:87:e7:ca:58:67: 2e:4e:fc:66 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWENMN1p43VnYYIV1IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDkyMTE1MjUxMFoXDTI1MTIyNDE2MjUxMFowLzEtMCsGA1UEAxMk MzcwYjg2ZjUtMGFlNy00ZTZjLWEzMmUtMDgzMTAxNTZkZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZdf+axkkohbt+OP/cBkqdBz2BFjx4QTHlLR kEGs53Pta5mznGOmYO34jxnpJHfiNZFtEitA4HCIhPPtjEbFgFrTCa9Jkz1nrMaC kwA5uqI7yo7rd8Hd5kli4PdiJgF0uQ1JOGY3wggKdsCbSi5b29MaD2JVEdyvTg2N 9+2w+p/VgwpTVWfc/VlMzON9jChcfPn0CraYcXd5rGCD0pNK9+MAKJYTGr1zxr2V EEYWzNUNOk2p4UE+iEc8OKZSsCIKv5484YDFgm8hICQMlR7EQYIo9IimdAPxA4Z+ vH4jerCv/yyvkB/iJPKWA0NS1HiiOvbx0q+UC1HqGewj422MgQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFCpwblWEY+PucmCQ6k0mzvKcLpjQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z NzBiODZmNS0wYWU3LTRlNmMtYTMyZS0wODMxMDE1NmRmM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzM3MGI4NmY1LTBhZTctNGU2Yy1h MzJlLTA4MzEwMTU2ZGYzZi8zNzBiODZmNS0wYWU3LTRlNmMtYTMyZS0wODMxMDE1 NmRmM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAIyFMQDBAJA7WgDBAGUQD4wGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICEN0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV4EgDs9v5Cwu7VnTrOs3X9APigapn8JL aElJNj4/VEpv4pXVUoMeK18moonlI2fdOrm8I3PpQWXRbWJ6bxrDF5YoM3u7y6XE DWm3noT78JkNt+ynQr45vnicxh0+UQGvIVZVUERjPWuIepkHu591LlOaCQxqIF2h ZsRefsWnpZ5diAqgIfDtUPXv34+DPoDCv1cRK3XpbbiGKRBR4v2sfjqOKq1sp9WK FKcnMLnyebW1EQG8Wm8y5wY3s/iX9ou0JifH/e3WKZeVejkdkh40PK4c8RgqvcIY htoBUJjosO4M6XVfWCgllqjvEpGyl3m8aYE4OwXX6YfnylhnLk78Zg== -----END CERTIFICATE-----Generated at Fri May 10 14:28:30 2024 by rpki-client on console-fra.rpki-client.org