$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer File: 56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer (raw, json) Hash identifier: RT260KdHkDtCg5zZPqrCi0mm5mh+mJtCbMLks4u+uOg= Subject key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842B085BF56B6C520F1A492E700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Jul 2023 20:57:01 +0000 Certificate not after: Wed 29 Oct 2025 20:57:01 +0000 Subordinate resources: AS: 32327 IP: 68.170.192.0/20 IP: 72.20.192.0/18 IP: 209.183.176.0/20 IP: 2604:2f00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:b0:85:bf:56:b6:c5:20:f1:a4:92:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 27 20:57:01 2023 GMT Not After : Oct 29 20:57:01 2025 GMT Subject: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:ef:2a:36:4d:01:45:b6:56:c0:77:b4:14: d2:83:21:29:4a:56:07:e9:64:5b:43:93:05:6b:71: 89:cb:2b:3d:af:5d:bf:5a:f3:5b:95:2c:ec:a8:bd: 49:b1:be:6e:0e:fc:56:87:36:f9:99:8e:04:ca:7b: 42:b2:28:c9:22:35:3e:4b:40:c9:fa:71:c2:63:45: f3:5f:77:8c:93:80:30:56:f7:26:30:33:72:da:0f: ec:11:e2:32:a6:3b:55:a7:d5:08:a5:f3:4c:ba:b3: 74:80:3a:8b:57:7a:95:32:e4:42:b6:9d:e1:cc:ff: 2b:29:90:fa:d8:46:b8:f6:40:3c:a1:b2:16:2b:0e: f6:f3:33:ca:3e:b2:77:08:b8:05:e6:04:50:13:17: 18:0a:8f:eb:ee:bd:40:bf:7f:d5:87:0f:29:7d:30: 5d:ea:7f:c0:15:df:3d:6b:81:be:56:70:9a:22:7b: be:ae:28:7e:b5:47:d0:08:46:4c:5b:bb:6c:c0:63: 34:2f:1c:94:92:63:17:9e:7b:3c:cb:00:ed:8c:9c: 49:18:90:2d:47:e3:dc:61:d1:36:1b:ed:01:2d:29: 8f:56:fc:df:48:68:4a:c1:fd:1b:cf:d6:24:23:c4: ed:42:c4:94:4f:1e:84:f0:e9:ff:e6:e8:51:a9:60: 34:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 68.170.192.0/20 72.20.192.0/18 209.183.176.0/20 IPv6: 2604:2f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32327 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3b:57:26:30:01:77:0d:cc:26:d3:52:1d:19:b2:f0:53:c1: 5f:91:11:e5:8e:8b:4e:9d:fa:d4:ea:db:7f:fd:73:f1:6e:ea: 6e:6c:51:9f:7a:32:42:09:0c:f2:86:19:de:61:c0:db:01:76: 9c:10:10:d2:ee:82:15:b8:6d:73:77:d7:60:f7:e6:39:d7:44: df:2a:3d:4c:81:32:61:75:fd:79:0f:aa:f3:2b:dd:54:96:91: 4e:bf:6b:3c:63:c1:16:85:57:0f:75:c6:6a:70:29:c2:58:3d: 68:ed:55:f8:4f:0c:a7:49:e9:4f:5f:b4:ca:9c:a6:5c:f6:1e: ac:c6:4a:e1:c3:0b:2d:62:5a:3a:2d:90:dd:8e:bc:72:41:a4: d7:2a:7a:a4:0f:ca:db:85:2b:07:79:ff:52:5a:06:c0:ca:25: 57:35:91:4b:36:ee:6a:f5:fb:d8:cf:2a:d9:b8:f5:f8:b2:23: a6:ff:d8:f3:65:35:7e:16:52:42:f5:40:9d:6f:29:d1:0f:2c: 15:cf:7d:32:3f:a6:3a:eb:88:d6:40:2b:02:99:ce:ff:40:b3: e0:7b:a8:b0:04:b8:d4:40:37:2a:30:0f:56:f2:ed:79:9f:cc: 24:09:eb:f6:7c:10:1d:5c:c9:34:6b:da:e9:3f:e7:d6:96:cd: 9d:96:f8:c2 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEKwhb9WtsUg8aSS5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcyNzIwNTcwMVoXDTI1MTAyOTIwNTcwMVowLzEtMCsGA1UEAxMk NTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBjZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkbvKjZNAUW2VsB3tBTSgyEpSlYH6WRbQ5MF a3GJyys9r12/WvNblSzsqL1Jsb5uDvxWhzb5mY4EyntCsijJIjU+S0DJ+nHCY0Xz X3eMk4AwVvcmMDNy2g/sEeIypjtVp9UIpfNMurN0gDqLV3qVMuRCtp3hzP8rKZD6 2Ea49kA8obIWKw728zPKPrJ3CLgF5gRQExcYCo/r7r1Av3/Vhw8pfTBd6n/AFd89 a4G+VnCaInu+rih+tUfQCEZMW7tswGM0LxyUkmMXnns8ywDtjJxJGJAtR+PcYdE2 G+0BLSmPVvzfSGhKwf0bz9YkI8TtQsSUTx6E8On/5uhRqWA07QIDAQABo4IENTCC BDEwHQYDVR0OBBYEFL8gMuV714HHwLApmLMzVdFiM+iZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzU2YTIzMzQ2LTVhMGUtNDk3Ni05 YjMzLTNiNGQxZDkwY2ZhMy81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5 MGNmYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAREqsADBAZIFMADBATRt7AwDQQCAAIwBwMFACYE LwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICfkcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgztXJjABdw3M JtNSHRmy8FPBX5ER5Y6LTp361Orbf/1z8W7qbmxRn3oyQgkM8oYZ3mHA2wF2nBAQ 0u6CFbhtc3fXYPfmOddE3yo9TIEyYXX9eQ+q8yvdVJaRTr9rPGPBFoVXD3XGanAp wlg9aO1V+E8Mp0npT1+0ypymXPYerMZK4cMLLWJaOi2Q3Y68ckGk1yp6pA/K24Ur B3n/UloGwMolVzWRSzbuavX72M8q2bj1+LIjpv/Y82U1fhZSQvVAnW8p0Q8sFc99 Mj+mOuuI1kArApnO/0Cz4HuosAS41EA3KjAPVvLteZ/MJAnr9nwQHVzJNGva6T/n 1pbNnZb4wg== -----END CERTIFICATE-----Generated at Thu May 9 20:34:16 2024 by rpki-client on console-ams.rpki-client.org