$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960.cer File: 4d86c782-c9fe-4446-9e6e-7812e6590960.cer (raw, json) Hash identifier: 8o+W11dyO00blMwd/M/DsWGC3OsN9nZ60y1+e6FaeIo= Subject key identifier: E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842CE731E22B0782F943B86B120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:13:44 +0000 Certificate not after: Sun 09 Nov 2025 15:13:44 +0000 Subordinate resources: IP: 144.80.0.0/16 IP: 192.150.225.0/24 IP: 192.153.123.0/24 IP: 192.231.220.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:73:1e:22:b0:78:2f:94:3b:86:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 7 14:13:44 2023 GMT Not After : Nov 9 15:13:44 2025 GMT Subject: CN=4d86c782-c9fe-4446-9e6e-7812e6590960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:8f:0e:60:2b:7b:34:a5:92:90:45:97:41: dc:b6:8d:4a:39:44:90:9b:34:97:95:0f:f3:78:c8: d8:41:0e:68:73:47:7a:db:7d:7f:66:0c:bd:25:af: 4c:5d:2f:7e:7d:d2:7b:3f:f5:5c:08:9d:cb:5d:3a: 2e:40:56:30:fd:81:3b:a8:f7:bf:f2:6e:a4:7a:82: 40:16:9e:bf:f9:99:fd:1e:96:57:28:1e:2e:35:2b: da:67:d1:8e:41:54:64:7e:e6:13:9a:94:7b:02:0e: 28:08:e4:eb:a8:aa:72:1c:44:97:8e:71:a4:14:a1: e0:dc:76:c9:ef:fc:f7:29:b7:f5:9e:8a:18:84:88: 49:3a:bc:3d:d9:cd:3d:db:f1:8e:be:16:75:da:ce: 6e:65:24:86:0b:88:c0:22:c8:89:0d:65:2a:e2:2d: 54:84:e6:f2:b5:f7:ca:64:48:13:c7:11:18:97:64: 65:1e:5c:1d:25:6e:0b:90:2d:d5:10:42:56:ad:fa: a3:14:20:d1:1b:17:dc:07:eb:a1:14:bb:eb:f2:2f: fe:f3:0d:2e:50:24:7a:96:52:1c:53:13:23:ec:6f: 3d:20:45:46:60:76:a9:a8:fc:90:31:c2:5e:ae:93: d0:33:a5:5a:15:17:f2:ed:91:d8:32:62:b6:55:91: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 144.80.0.0/16 192.150.225.0/24 192.153.123.0/24 192.231.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:83:fb:25:d4:bb:15:66:55:65:bd:87:30:ef:4c:3c:ec:32: eb:d4:45:83:8f:aa:8d:bd:dd:d3:c1:07:25:68:12:ed:53:8f: 25:ae:47:53:f4:b0:49:be:b4:f1:36:48:88:be:d7:50:9f:8f: 60:4c:4a:c8:f8:85:c2:d6:47:f0:d3:8e:11:eb:d9:44:ea:16: 05:b9:23:63:95:74:96:99:3d:47:97:d8:21:41:23:0f:3c:ba: e5:03:ff:27:0a:5c:26:fa:7e:75:aa:3a:24:c2:61:2a:dc:48: 7c:37:db:73:5b:15:05:f4:a8:5b:9c:e8:c9:fe:73:fc:e2:05: 6c:02:21:44:17:9d:27:74:50:fd:25:83:85:4d:7f:9c:63:67: a3:89:b8:68:7b:9c:be:da:85:f0:5f:e5:b3:a5:5a:9d:9a:20: d5:46:63:a4:52:db:64:9c:c0:a7:4b:67:cf:c2:41:36:cc:df: 32:63:1a:78:6e:df:f1:8b:d2:11:05:e4:bc:f9:08:0b:62:f2: c3:06:fb:55:e6:ae:ac:63:bf:5a:7a:c9:6e:f2:14:6f:29:0b: d6:40:08:93:89:8b:16:f6:bf:27:b4:21:3b:f1:2b:30:d5:60: 86:85:20:b9:48:75:06:2e:32:a4:3f:d1:de:26:20:89:df:8f: 74:6f:bf:8e -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWELOcx4isHgvlDuGsSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgwNzE0MTM0NFoXDTI1MTEwOTE1MTM0NFowLzEtMCsGA1UEAxMk NGQ4NmM3ODItYzlmZS00NDQ2LTllNmUtNzgxMmU2NTkwOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxWPDmArezSlkpBFl0Hcto1KOUSQmzSXlQ/z eMjYQQ5oc0d6231/Zgy9Ja9MXS9+fdJ7P/VcCJ3LXTouQFYw/YE7qPe/8m6keoJA Fp6/+Zn9HpZXKB4uNSvaZ9GOQVRkfuYTmpR7Ag4oCOTrqKpyHESXjnGkFKHg3HbJ 7/z3Kbf1nooYhIhJOrw92c092/GOvhZ12s5uZSSGC4jAIsiJDWUq4i1UhObytffK ZEgTxxEYl2RlHlwdJW4LkC3VEEJWrfqjFCDRGxfcB+uhFLvr8i/+8w0uUCR6llIc UxMj7G89IEVGYHapqPyQMcJerpPQM6VaFRfy7ZHYMmK2VZGDnwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFOFjOZD8fqoeNHxTD/NWTC8bkQdIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 ZDg2Yzc4Mi1jOWZlLTQ0NDYtOWU2ZS03ODEyZTY1OTA5NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzRkODZjNzgyLWM5ZmUtNDQ0Ni05 ZTZlLTc4MTJlNjU5MDk2MC80ZDg2Yzc4Mi1jOWZlLTQ0NDYtOWU2ZS03ODEyZTY1 OTA5NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwCQUAMEAMCW4QMEAMCZewMEAMDn3DBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAmg/sl1LsVZlVlvYcw70w87DLr1EWDj6qNvd3TwQclaBLtU48lrkdT9LBJvrTx NkiIvtdQn49gTErI+IXC1kfw044R69lE6hYFuSNjlXSWmT1Hl9ghQSMPPLrlA/8n Clwm+n51qjokwmEq3Eh8N9tzWxUF9KhbnOjJ/nP84gVsAiFEF50ndFD9JYOFTX+c Y2ejibhoe5y+2oXwX+WzpVqdmiDVRmOkUttknMCnS2fPwkE2zN8yYxp4bt/xi9IR BeS8+QgLYvLDBvtV5q6sY79aeslu8hRvKQvWQAiTiYsW9r8ntCE78Ssw1WCGhSC5 SHUGLjKkP9HeJiCJ3490b7+O -----END CERTIFICATE-----Generated at Thu May 9 21:06:16 2024 by rpki-client on console-fra.rpki-client.org