$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7.cer File: 447fba4c-60a0-499e-8d5b-087545c981b7.cer (raw, json) Hash identifier: CxGRTGl6StzKnto6tmy/W7jW0WDx47Wx5y7WjAc8ykU= Subject key identifier: EE:19:B8:5F:E1:49:1F:BB:27:E1:4B:09:95:0F:35:36:91:30:16:8F Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584656FAFDD71E7CF548F799FF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Jun 2024 14:18:15 +0000 Certificate not after: Thu 04 Dec 2025 22:13:10 +0000 Subordinate resources: AS: 394510 IP: 64.49.4.0/22 IP: 206.168.2.0/23 IP: 2602:fa32::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:56:fa:fd:d7:1e:7c:f5:48:f7:99:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 26 14:18:15 2024 GMT Not After : Dec 4 22:13:10 2025 GMT Subject: CN=447fba4c-60a0-499e-8d5b-087545c981b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fd:c4:30:1f:53:11:2b:14:ff:bd:2e:17:0e: cb:12:aa:e3:e0:20:3c:b1:a9:08:d8:33:0d:05:5b: 54:ef:dd:c1:54:5a:be:91:d5:d5:93:a5:63:dc:e6: 3c:40:bc:98:78:ef:af:11:e5:a6:b6:e9:9b:b4:14: 1d:30:60:ee:f8:20:fa:63:9c:30:5c:b6:d2:17:a9: 76:6f:c4:16:79:f4:49:a7:fc:b2:2b:ba:5e:40:1c: e7:b1:95:09:7a:de:64:62:ea:23:ae:2c:b6:42:ec: d9:84:28:e0:fb:94:a9:00:1b:f3:ea:05:1e:19:2d: 83:05:5b:d9:c4:71:74:77:cb:2e:5c:61:19:c6:7e: f8:3f:50:c3:78:7e:29:c8:d8:8c:33:7e:2e:eb:6e: 64:21:f8:e9:b5:ad:7c:16:91:f0:e1:47:bb:1c:07: 2b:76:a6:4e:45:11:32:dc:af:fd:26:2e:43:f2:97: 7a:9c:c0:af:de:a0:34:0d:4f:00:ea:53:79:37:70: 00:12:cf:4d:c5:ab:42:b2:dd:e5:ed:b6:88:9f:77: 81:d8:09:1c:e7:36:29:4c:12:0e:9b:cf:ce:db:63: d3:ce:73:f0:6c:5d:f9:12:c7:f2:59:5b:56:0d:e6: e0:4d:88:c2:68:e2:f0:27:8f:3f:43:59:38:21:52: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:19:B8:5F:E1:49:1F:BB:27:E1:4B:09:95:0F:35:36:91:30:16:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.49.4.0/22 206.168.2.0/23 IPv6: 2602:fa32::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394510 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cb:79:60:a6:3b:09:55:3e:29:de:a3:5c:07:8d:17:61:45: 23:f4:dd:43:93:84:9c:f3:25:87:51:40:7c:32:81:61:89:ee: 8f:ca:48:d9:a9:ef:f5:a5:cd:79:ae:6a:52:4a:c0:62:98:d9: 65:de:7f:05:84:47:66:91:5e:ce:6c:de:a1:b1:5a:69:b5:e2: f6:0d:40:04:97:c9:ec:c6:1a:75:3e:d6:19:6c:74:18:7c:3c: f2:e6:10:cd:66:0b:ae:5b:b9:fa:db:7d:59:fa:f3:33:3a:a2: 98:35:b2:98:b6:b3:2d:3b:52:1f:6d:3a:8f:6d:23:eb:4d:0b: 17:70:f7:5f:8b:33:4f:41:e2:a7:5a:2f:53:9b:09:36:54:0f: 64:57:8a:1e:1c:21:f9:33:d8:a4:27:83:e5:d1:d9:cf:7f:03: aa:35:cd:1e:ff:a6:17:b6:be:53:cd:26:d2:d3:f1:b1:37:8d: 30:79:5f:cf:68:c0:88:cc:1e:84:a6:c5:94:55:ee:98:c5:d1: 15:ca:2b:7d:3c:f8:b9:5e:d8:25:32:49:d6:bf:63:f4:c7:6e: f7:60:13:20:e1:68:ec:aa:21:65:28:10:09:a5:c9:1e:00:c4: 52:af:a2:d0:0b:8e:51:67:d9:4d:40:69:b1:83:26:12:c6:65: 48:f3:61:52 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEZW+v3XHnz1SPeZ/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDYyNjE0MTgxNVoXDTI1MTIwNDIyMTMxMFowLzEtMCsGA1UEAxMk NDQ3ZmJhNGMtNjBhMC00OTllLThkNWItMDg3NTQ1Yzk4MWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv3EMB9TESsU/70uFw7LEqrj4CA8sakI2DMN BVtU793BVFq+kdXVk6Vj3OY8QLyYeO+vEeWmtumbtBQdMGDu+CD6Y5wwXLbSF6l2 b8QWefRJp/yyK7peQBznsZUJet5kYuojriy2QuzZhCjg+5SpABvz6gUeGS2DBVvZ xHF0d8suXGEZxn74P1DDeH4pyNiMM34u625kIfjpta18FpHw4Ue7HAcrdqZORREy 3K/9Ji5D8pd6nMCv3qA0DU8A6lN5N3AAEs9NxatCst3l7baIn3eB2Akc5zYpTBIO m8/O22PTznPwbF35EsfyWVtWDebgTYjCaOLwJ48/Q1k4IVJHWwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFO4ZuF/hSR+7J+FLCZUPNTaRMBaPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 NDdmYmE0Yy02MGEwLTQ5OWUtOGQ1Yi0wODc1NDVjOTgxYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzQ0N2ZiYTRjLTYwYTAtNDk5ZS04 ZDViLTA4NzU0NWM5ODFiNy80NDdmYmE0Yy02MGEwLTQ5OWUtOGQ1Yi0wODc1NDVj OTgxYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAJAMQQDBAHOqAIwDgQCAAIwCAMGBCYC+jIAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYFDjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBay3lgpjsJVT4p3qNc B40XYUUj9N1Dk4Sc8yWHUUB8MoFhie6PykjZqe/1pc15rmpSSsBimNll3n8FhEdm kV7ObN6hsVppteL2DUAEl8nsxhp1PtYZbHQYfDzy5hDNZguuW7n6231Z+vMzOqKY NbKYtrMtO1IfbTqPbSPrTQsXcPdfizNPQeKnWi9Tmwk2VA9kV4oeHCH5M9ikJ4Pl 0dnPfwOqNc0e/6YXtr5TzSbS0/GxN40weV/PaMCIzB6EpsWUVe6YxdEVyit9PPi5 XtglMknWv2P0x273YBMg4WjsqiFlKBAJpckeAMRSr6LQC45RZ9lNQGmxgyYSxmVI 82FS -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:45 2024 by rpki-client on console-ams.rpki-client.org