$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer File: 4ba03064-0288-4ec4-b73f-d6ba1d639961.cer (raw, json) Hash identifier: TCInAwhh2/KYX/mYO2Ir3rc7OYq++2QCkRDdcA6is1Y= Subject key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858454B571E546498064447620E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Mar 2024 17:27:14 +0000 Certificate not after: Sun 23 Nov 2025 08:26:58 +0000 Subordinate resources: AS: 36090 IP: 23.160.200.0/23 IP: 149.112.75.0 -- 149.112.76.255 IP: 2602:fa3d::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4b:57:1e:54:64:98:06:44:47:62:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 22 17:27:14 2024 GMT Not After : Nov 23 08:26:58 2025 GMT Subject: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:38:f6:f7:97:75:dd:03:f1:25:76:b0:e5: 11:87:13:5c:de:18:98:91:57:35:8a:8c:db:6e:bb: 48:54:5d:a9:f0:b2:08:7c:dc:89:cd:c7:32:31:02: d8:44:4b:f4:7b:1c:3e:a7:e4:99:9f:af:f6:7c:af: 61:b1:26:92:ee:41:9a:f2:43:43:de:e5:68:15:8b: 82:62:70:4c:75:7f:74:2a:b8:c1:b4:79:ad:6f:5b: 7a:b1:b0:a0:cc:dc:a2:11:52:19:0e:6f:6b:70:4d: 96:32:cf:ff:9b:0c:2b:f6:1c:d6:81:b2:bf:48:50: a6:04:d7:79:ae:d3:e6:8c:d2:22:c1:ca:ae:b0:36: 8b:c8:0c:f7:c2:12:bc:4b:13:4f:2c:a8:cc:dc:3b: 42:24:94:99:11:ac:d7:76:b0:eb:29:5e:65:18:4c: ad:50:65:de:fb:64:47:5f:2d:c8:da:f4:59:e1:b1: 5f:34:20:db:01:b3:c4:01:29:3a:32:fb:74:92:77: cd:a7:d4:2e:10:c7:89:26:7e:18:d7:33:01:7e:67: 69:82:f6:b9:bb:f0:9d:d8:23:32:34:ab:91:de:c6: 91:b3:fb:b0:af:1d:c5:90:9f:b8:41:bf:f9:6b:d6: d0:7d:97:c6:48:97:74:ce:53:09:cb:30:e1:c9:44: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.160.200.0/23 149.112.75.0-149.112.76.255 IPv6: 2602:fa3d::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36090 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d0:d2:1f:3d:2f:77:d8:d2:b3:6d:e4:c2:d2:5c:48:78:91: 21:17:80:d6:df:4b:bd:55:df:bf:66:9a:c6:20:4c:9b:8f:f8: ed:79:5a:a5:fc:f9:04:d7:08:71:49:34:68:8f:d0:b1:d1:b7: 78:87:c5:fd:d7:de:30:dc:76:23:47:03:1d:bb:c1:c5:b5:65: 2a:0e:e3:f5:87:a2:56:4d:6c:f4:73:02:1f:07:76:56:79:69: 09:91:29:42:97:54:e4:47:01:62:e7:ef:d7:cd:49:48:19:56: 8e:7c:9b:42:b1:73:57:e1:97:0a:69:30:89:17:33:1f:92:9b: 5b:2d:18:5d:29:45:6c:d6:36:1b:72:80:8f:2a:bd:df:c8:a4: 20:aa:cb:eb:d1:a8:00:f4:e6:65:8d:14:2b:0f:73:4f:b6:16: d2:ce:6b:00:bd:17:f6:72:57:92:64:11:cc:22:f1:8b:40:b9: 6a:53:aa:7a:51:90:c3:10:f0:50:e6:a9:5a:15:5e:cf:e8:86: 1d:f2:44:1a:ca:62:71:3e:dc:2f:b4:bb:b8:75:4c:b8:87:35: bc:4b:0f:bf:31:f3:49:8d:f9:1e:49:37:f6:98:22:85:10:b0: 5d:1c:63:81:45:14:90:fe:4f:02:d2:66:10:52:f4:c2:ad:29: 6d:c7:67:f6 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWEVLVx5UZJgGREdiDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDMyMjE3MjcxNFoXDTI1MTEyMzA4MjY1OFowLzEtMCsGA1UEAxMk NGJhMDMwNjQtMDI4OC00ZWM0LWI3M2YtZDZiYTFkNjM5OTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNE49veXdd0D8SV2sOURhxNc3hiYkVc1iozb brtIVF2p8LIIfNyJzccyMQLYREv0exw+p+SZn6/2fK9hsSaS7kGa8kND3uVoFYuC YnBMdX90KrjBtHmtb1t6sbCgzNyiEVIZDm9rcE2WMs//mwwr9hzWgbK/SFCmBNd5 rtPmjNIiwcqusDaLyAz3whK8SxNPLKjM3DtCJJSZEazXdrDrKV5lGEytUGXe+2RH Xy3I2vRZ4bFfNCDbAbPEASk6Mvt0knfNp9QuEMeJJn4Y1zMBfmdpgva5u/Cd2CMy NKuR3saRs/uwrx3FkJ+4Qb/5a9bQfZfGSJd0zlMJyzDhyUS5PQIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFNWwofboyAybDbhvPXggL3t51K3VMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 YmEwMzA2NC0wMjg4LTRlYzQtYjczZi1kNmJhMWQ2Mzk5NjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzRiYTAzMDY0LTAyODgtNGVjNC1i NzNmLWQ2YmExZDYzOTk2MS80YmEwMzA2NC0wMjg4LTRlYzQtYjczZi1kNmJhMWQ2 Mzk5NjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMBoEAgABMBQDBAEXoMgwDAMEAJVwSwMEAJVwTDAOBAIAAjAIAwYE JgL6PQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIz6MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHnQ0h89 L3fY0rNt5MLSXEh4kSEXgNbfS71V379mmsYgTJuP+O15WqX8+QTXCHFJNGiP0LHR t3iHxf3X3jDcdiNHAx27wcW1ZSoO4/WHolZNbPRzAh8HdlZ5aQmRKUKXVORHAWLn 79fNSUgZVo58m0Kxc1fhlwppMIkXMx+Sm1stGF0pRWzWNhtygI8qvd/IpCCqy+vR qAD05mWNFCsPc0+2FtLOawC9F/ZyV5JkEcwi8YtAuWpTqnpRkMMQ8FDmqVoVXs/o hh3yRBrKYnE+3C+0u7h1TLiHNbxLD78x80mN+R5JN/aYIoUQsF0cY4FFFJD+TwLS ZhBS9MKtKW3HZ/Y= -----END CERTIFICATE-----Generated at Thu May 9 20:34:16 2024 by rpki-client on console-ams.rpki-client.org