$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer File: 3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer (raw, json) Hash identifier: XWKLALDcNAqhKQ8EaGQYUR45dPdrGSipH2K6d5aMMz0= Subject key identifier: 3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842FBF9AE74FCBE42EE34F7AF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Aug 2023 21:36:14 +0000 Certificate not after: Tue 25 Nov 2025 22:36:14 +0000 Subordinate resources: IP: 198.22.89.0/24 IP: 204.17.16.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:fb:f9:ae:74:fc:be:42:ee:34:f7:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 23 21:36:14 2023 GMT Not After : Nov 25 22:36:14 2025 GMT Subject: CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c7:cc:5a:3b:fe:39:b3:85:72:b6:73:fc:09: b4:17:f7:ad:5a:77:47:f9:fc:4d:2d:b9:89:f8:82: b2:60:5e:1d:cd:2e:bc:12:31:1b:f5:3d:4a:ba:dd: 7c:cb:81:5b:8c:4e:3e:e9:50:3e:e2:fe:3d:f8:8f: f8:fd:7f:aa:b5:79:1f:a9:cd:85:6b:a2:3e:8b:e1: f2:85:30:c0:48:b3:44:0a:93:a3:24:05:92:f3:be: 13:c9:94:00:de:a0:86:70:a7:d5:24:be:a3:25:c2: c3:35:70:d3:46:b5:95:a0:22:1b:d9:c8:93:63:87: a3:da:28:d9:b9:e4:f9:cb:89:06:4e:29:1d:4d:dc: 57:94:b0:26:c6:32:42:26:eb:2e:dc:27:1c:8a:e6: bc:23:9e:a4:74:ba:7a:ee:9c:0c:e2:72:c7:10:c9: 78:c9:ed:91:da:ba:ae:cb:07:a0:7d:f1:59:00:9c: 28:f5:05:a2:a5:e2:12:c1:22:ec:6f:16:c3:a8:b9: d5:5a:08:63:fb:ec:06:9f:7f:13:f8:1c:cb:52:94: 62:53:6e:3b:76:7b:88:a4:2b:13:06:6a:79:ac:a3: 90:9f:a1:af:33:6f:ed:4d:a3:33:91:b1:b4:3e:d8: 70:2b:f1:a2:1b:79:6b:fa:46:10:9f:54:df:d1:56: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 198.22.89.0/24 204.17.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b0:af:db:76:56:cb:bc:5f:28:64:c9:c7:38:ba:18:bc:ad: 1a:40:4f:8c:5f:93:93:23:85:0c:3e:5b:bf:f6:a4:94:a0:c2: ba:d1:71:c4:45:c5:5e:8a:6e:30:2d:a5:b8:08:25:fc:49:48: e5:be:72:6f:c6:4e:05:51:09:7a:43:b6:d3:dc:45:c9:5d:2a: de:59:74:b4:45:b6:aa:5f:b0:01:41:7c:dc:38:ee:ee:c9:98: 59:5e:a3:98:6c:0c:12:9e:a4:a1:8d:6c:e6:40:c7:2d:d2:9b: 5a:09:ae:92:8f:85:e5:ce:5d:9f:ec:88:02:5e:fa:bf:65:77: c1:7f:11:54:4a:b9:dd:03:99:78:cb:05:b2:68:08:ce:fc:77: 8e:7f:4d:2f:8c:05:66:17:3d:e6:72:fb:84:cb:f1:e8:15:ae: fc:ba:22:64:ec:2d:e4:a5:f8:81:d8:df:40:5d:03:b8:4d:8d: dd:30:d3:16:5b:9f:44:b5:d4:ec:10:c3:56:05:0e:94:76:99: 5d:9f:3d:a4:1f:23:89:ef:63:d1:31:3e:7d:dc:5e:f3:6f:a1: 9a:92:52:35:67:d5:e2:eb:b2:cf:10:41:76:34:02:0d:d6:4e: fe:0c:28:2b:24:26:80:09:8b:4d:d9:a7:3e:34:a8:26:ef:72: 94:07:5d:b6 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEL7+a50/L5C7jT3rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgyMzIxMzYxNFoXDTI1MTEyNTIyMzYxNFowLzEtMCsGA1UEAxMk M2Y4MTM5YmEtMDZhNy00YjMxLWJhZjctZDQwYWY3MGZkYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcfMWjv+ObOFcrZz/Am0F/etWndH+fxNLbmJ +IKyYF4dzS68EjEb9T1Kut18y4FbjE4+6VA+4v49+I/4/X+qtXkfqc2Fa6I+i+Hy hTDASLNECpOjJAWS874TyZQA3qCGcKfVJL6jJcLDNXDTRrWVoCIb2ciTY4ej2ijZ ueT5y4kGTikdTdxXlLAmxjJCJusu3Ccciua8I56kdLp67pwM4nLHEMl4ye2R2rqu ywegffFZAJwo9QWipeISwSLsbxbDqLnVWghj++wGn38T+BzLUpRiU247dnuIpCsT Bmp5rKOQn6GvM2/tTaMzkbG0PthwK/GiG3lr+kYQn1Tf0VacvwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFD2ZleP/oXo0b2EiPFDzEDPaHhFEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z ZjgxMzliYS0wNmE3LTRiMzEtYmFmNy1kNDBhZjcwZmRjNTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzNmODEzOWJhLTA2YTctNGIzMS1i YWY3LWQ0MGFmNzBmZGM1NS8zZjgxMzliYS0wNmE3LTRiMzEtYmFmNy1kNDBhZjcw ZmRjNTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGFlkDBATMERAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAobCv23ZWy7xf KGTJxzi6GLytGkBPjF+TkyOFDD5bv/aklKDCutFxxEXFXopuMC2luAgl/ElI5b5y b8ZOBVEJekO209xFyV0q3ll0tEW2ql+wAUF83Dju7smYWV6jmGwMEp6koY1s5kDH LdKbWgmuko+F5c5dn+yIAl76v2V3wX8RVEq53QOZeMsFsmgIzvx3jn9NL4wFZhc9 5nL7hMvx6BWu/LoiZOwt5KX4gdjfQF0DuE2N3TDTFlufRLXU7BDDVgUOlHaZXZ89 pB8jie9j0TE+fdxe82+hmpJSNWfV4uuyzxBBdjQCDdZO/gwoKyQmgAmLTdmnPjSo Ju9ylAddtg== -----END CERTIFICATE-----Generated at Thu May 9 21:06:15 2024 by rpki-client on console-fra.rpki-client.org