$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer File: 3eb60598-76ca-49b0-9a1f-01270603d8d9.cer (raw, json) Hash identifier: T0ucuw7CXwNStBH3Im6Bgm3CwFgkgYK64uTKbeeXUqY= Subject key identifier: 88:66:D5:0B:77:AD:DC:73:3D:B3:35:CD:C7:6A:E7:7F:E0:03:FB:7E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584738EE567CE79C1FE091616180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Sep 2024 12:45:26 +0000 Certificate not after: Sat 19 Dec 2026 13:45:26 +0000 Subordinate resources: AS: 399781 IP: 45.45.156.0/24 IP: 108.160.212.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:38:ee:56:7c:e7:9c:1f:e0:91:61:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 15 12:45:26 2024 GMT Not After : Dec 19 13:45:26 2026 GMT Subject: CN=3eb60598-76ca-49b0-9a1f-01270603d8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:d7:9e:88:e1:ae:e7:bd:25:60:12:2b:73: 1e:e6:fc:1e:67:b9:9d:19:08:57:e9:23:ee:a9:86: 13:e7:21:93:af:4b:5c:04:5d:68:29:33:bd:00:a6: ef:3c:be:31:a8:f7:d9:95:43:80:06:73:44:e6:61: 5e:1d:5e:4e:e4:a2:d3:10:bc:c1:5d:28:95:1b:d5: 71:7e:25:98:a9:5b:c3:fd:42:af:83:12:95:5e:7d: ff:1c:be:48:c9:10:a1:1e:7c:2f:e9:7b:76:04:d1: 6c:ba:4a:3a:f2:db:8d:71:91:7b:84:a7:76:71:7d: b3:ce:a6:b2:91:99:0d:68:95:c8:cd:84:b2:fb:7a: 3e:c3:9b:cf:a4:36:61:12:b7:89:14:ff:49:1e:7c: 0b:d7:b7:ed:b9:b3:f9:fb:c9:5d:30:e1:40:52:e7: 29:3a:68:75:07:72:de:b6:5c:0c:e6:77:a5:65:3e: 75:b2:ce:af:2f:46:e9:01:89:d8:c2:c1:1b:7e:23: 5a:c2:8c:e1:43:e8:0b:76:42:42:66:c4:bd:81:16: ee:3b:f1:b2:8f:14:51:59:19:0f:2a:a7:9a:d6:c7: 14:2d:03:63:20:59:25:51:6b:53:5f:ab:b8:0a:17: 61:2f:09:99:72:29:e2:7c:d3:6d:0a:f5:ed:ef:34: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:D5:0B:77:AD:DC:73:3D:B3:35:CD:C7:6A:E7:7F:E0:03:FB:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 45.45.156.0/24 108.160.212.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399781 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:cb:a5:2e:ae:cc:9b:37:f9:ca:ac:b4:67:ff:50:fd:49:5f: e9:44:5f:c6:1b:22:b5:ac:c3:a1:8a:d0:57:4c:63:51:42:6f: 6e:93:56:01:8f:c3:61:ad:5f:42:0f:38:37:26:49:a5:db:3e: c7:fc:b4:31:08:ce:f1:9f:c0:31:e5:c7:b8:77:c7:02:65:d6: ec:a1:19:0b:f8:a8:2a:b3:f2:59:80:f3:90:45:30:03:bc:b0: e6:b5:da:98:e9:82:f5:31:b6:c0:a9:16:2e:78:ce:42:63:54: 6b:ed:dd:cd:bc:2f:c6:d9:28:a0:41:ad:e7:9d:aa:cc:c3:2b: b0:68:5d:13:d6:f4:d4:20:95:66:47:ec:47:2e:49:ec:98:bc: 2c:75:fb:2f:98:64:16:51:1b:34:8b:01:58:3f:bf:fa:20:fa: eb:69:03:2d:88:4b:03:c0:d2:75:2d:ce:4e:c2:b4:30:2c:a4: 59:a7:da:73:12:8b:61:35:a6:75:f6:c5:da:de:d8:36:5f:f4: 2d:4f:60:95:c9:79:bb:10:00:6b:40:82:22:26:56:a3:88:36: bd:22:86:c5:0c:ba:1e:d8:e0:cd:53:fc:b7:81:8f:a3:ef:cd: 5f:25:4f:56:98:8f:e7:5b:87:0e:e3:7a:3b:19:d8:2d:ab:d2: 8e:44:77:58 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEc47lZ855wf4JFhYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkxNTEyNDUyNloXDTI2MTIxOTEzNDUyNlowLzEtMCsGA1UEAxMk M2ViNjA1OTgtNzZjYS00OWIwLTlhMWYtMDEyNzA2MDNkOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlDXnojhrue9JWASK3Me5vweZ7mdGQhX6SPu qYYT5yGTr0tcBF1oKTO9AKbvPL4xqPfZlUOABnNE5mFeHV5O5KLTELzBXSiVG9Vx fiWYqVvD/UKvgxKVXn3/HL5IyRChHnwv6Xt2BNFsuko68tuNcZF7hKd2cX2zzqay kZkNaJXIzYSy+3o+w5vPpDZhEreJFP9JHnwL17ftubP5+8ldMOFAUucpOmh1B3Le tlwM5nelZT51ss6vL0bpAYnYwsEbfiNawozhQ+gLdkJCZsS9gRbuO/GyjxRRWRkP Kqea1scULQNjIFklUWtTX6u4ChdhLwmZcinifNNtCvXt7zRG6wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFIhm1Qt3rdxzPbM1zcdq53/gA/t+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z ZWI2MDU5OC03NmNhLTQ5YjAtOWExZi0wMTI3MDYwM2Q4ZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzNlYjYwNTk4LTc2Y2EtNDliMC05 YTFmLTAxMjcwNjAzZDhkOS8zZWI2MDU5OC03NmNhLTQ5YjAtOWExZi0wMTI3MDYw M2Q4ZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAAtLZwDBAJsoNQwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhmlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAB7LpS6uzJs3+cqstGf/UP1JX+lEX8YbIrWsw6GK 0FdMY1FCb26TVgGPw2GtX0IPODcmSaXbPsf8tDEIzvGfwDHlx7h3xwJl1uyhGQv4 qCqz8lmA85BFMAO8sOa12pjpgvUxtsCpFi54zkJjVGvt3c28L8bZKKBBreedqszD K7BoXRPW9NQglWZH7EcuSeyYvCx1+y+YZBZRGzSLAVg/v/og+utpAy2ISwPA0nUt zk7CtDAspFmn2nMSi2E1pnX2xdre2DZf9C1PYJXJebsQAGtAgiImVqOINr0ihsUM uh7Y4M1T/LeBj6PvzV8lT1aYj+dbhw7jejsZ2C2r0o5Ed1g= -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:17 2024 by rpki-client on console-fra.rpki-client.org