$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer File: 464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer (raw, json) Hash identifier: 22xfXNPpm4d+yiin5Nod3ShCF5Iohk7JuDO2caLf6Gs= Subject key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842D40EFF34F2D2B07892809D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Aug 2023 14:26:51 +0000 Certificate not after: Tue 11 Nov 2025 15:26:51 +0000 Subordinate resources: AS: 27539 IP: 64.68.0.0/20 IP: 69.26.0.0/19 IP: 113.30.240.0/20 IP: 2604:a900::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:d4:0e:ff:34:f2:d2:b0:78:92:80:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 9 14:26:51 2023 GMT Not After : Nov 11 15:26:51 2025 GMT Subject: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:c3:f8:5c:37:f1:16:e0:58:51:6c:ac:f1: dc:3e:cf:70:dd:b2:6f:ab:0d:16:74:d7:ce:79:da: 85:99:a7:a5:8b:66:f9:61:6c:cd:98:e7:cf:9b:ce: 7b:3e:88:26:29:73:2c:52:91:c6:11:66:87:a3:ad: 43:ba:cd:9e:87:53:5e:ba:b8:9c:d9:de:4a:d3:ec: 6a:24:77:60:3d:d2:88:f0:3d:1e:d6:fe:53:db:65: 4d:0c:94:53:33:71:00:c8:b2:28:08:f7:16:9e:52: e1:a6:b6:a4:7f:03:01:e6:1d:94:6a:73:ad:0e:69: 53:41:93:e3:1f:39:f4:c1:58:2f:2f:7c:09:a1:55: 27:cb:a3:8d:f9:78:8a:52:25:09:fd:66:bc:68:8e: 40:e1:83:2e:51:96:d3:ed:f0:2a:80:c1:d9:2f:69: 23:5d:10:e4:42:36:70:29:52:5c:47:c1:14:48:a2: 99:ba:bb:3e:d9:b0:bc:af:e0:e5:9b:a5:a1:e1:0c: 38:b3:eb:47:89:56:fe:91:4b:b9:9d:dd:1b:30:f9: 74:78:70:dc:96:52:b8:a3:a4:9a:c6:5a:f9:7b:e8: ac:6d:12:3b:f9:89:d5:70:77:77:8b:0b:54:a0:09: 92:6d:d2:18:85:8d:04:c0:38:88:68:1e:85:dd:c0: b7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.68.0.0/20 69.26.0.0/19 113.30.240.0/20 IPv6: 2604:a900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27539 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:04:d6:87:80:04:ee:07:51:5e:16:6d:ea:37:91:d1:f7:64: eb:34:a5:67:46:58:a6:e7:5c:da:19:bf:4f:a5:e1:e3:9c:fd: 3f:6a:a1:85:f9:81:c9:0b:22:93:64:3f:fa:56:0c:e7:77:29: 86:9d:e1:f7:ab:6c:b4:ce:c6:6f:0a:df:f8:e5:e7:54:f8:34: e6:77:8f:64:cc:0e:dd:02:8b:4d:c6:6b:bb:c5:41:8c:6e:40: 63:43:de:25:a2:55:e2:2f:fa:c8:80:b5:45:54:7e:0b:87:77: 92:2e:19:53:30:7a:5e:3b:c4:8e:cf:22:d8:9f:bc:23:66:9c: 5f:96:f4:bd:04:5d:c2:ab:64:6d:db:ef:7d:2d:b4:61:05:d3: f7:4f:85:4d:48:5b:59:7b:0d:9f:de:61:1f:fe:a0:e5:23:d2: aa:e7:72:d0:1d:f4:50:37:71:97:e4:f8:9f:c9:cd:36:33:dd: c7:4a:d1:b3:8e:1a:dc:1d:6b:19:5a:f8:11:29:b1:e0:b4:96: e1:54:bc:35:8b:50:61:57:61:12:65:51:81:cd:4e:d0:96:f5: 1a:ba:2c:72:77:c1:03:41:26:34:74:d2:0f:27:3a:e0:2d:b8: 27:d4:91:f9:08:f5:aa:36:1e:38:f8:70:00:d3:53:00:8c:77: 06:09:63:f1 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWELUDv808tKweJKAnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgwOTE0MjY1MVoXDTI1MTExMTE1MjY1MVowLzEtMCsGA1UEAxMk NDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzliOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ/D+Fw38RbgWFFsrPHcPs9w3bJvqw0WdNfO edqFmaeli2b5YWzNmOfPm857PogmKXMsUpHGEWaHo61Dus2eh1Neuric2d5K0+xq JHdgPdKI8D0e1v5T22VNDJRTM3EAyLIoCPcWnlLhprakfwMB5h2UanOtDmlTQZPj Hzn0wVgvL3wJoVUny6ON+XiKUiUJ/Wa8aI5A4YMuUZbT7fAqgMHZL2kjXRDkQjZw KVJcR8EUSKKZurs+2bC8r+Dlm6Wh4Qw4s+tHiVb+kUu5nd0bMPl0eHDcllK4o6Sa xlr5e+isbRI7+YnVcHd3iwtUoAmSbdIYhY0EwDiIaB6F3cC3gQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFHIHphD8MyV1IRZIL6RPbdbVdzDVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzQ2NGE1MzA0LTk3NGQtNGM4Ni05 ODI5LTJmNGQ4ZGM5YjliNi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRj OWI5YjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARARAADBAVFGgADBARxHvAwDQQCAAIwBwMFACYE qQAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICa5MwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOATWh4AE7gdR XhZt6jeR0fdk6zSlZ0ZYpudc2hm/T6Xh45z9P2qhhfmByQsik2Q/+lYM53cphp3h 96tstM7Gbwrf+OXnVPg05nePZMwO3QKLTcZru8VBjG5AY0PeJaJV4i/6yIC1RVR+ C4d3ki4ZUzB6XjvEjs8i2J+8I2acX5b0vQRdwqtkbdvvfS20YQXT90+FTUhbWXsN n95hH/6g5SPSqudy0B30UDdxl+T4n8nNNjPdx0rRs44a3B1rGVr4ESmx4LSW4VS8 NYtQYVdhEmVRgc1O0Jb1GroscnfBA0EmNHTSDyc64C24J9SR+Qj1qjYeOPhwANNT AIx3Bglj8Q== -----END CERTIFICATE-----Generated at Thu May 9 21:06:16 2024 by rpki-client on console-fra.rpki-client.org