$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer File: 56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer (raw, json) Hash identifier: GVu1ptnZ1RyOWpOTBJDPqCel8BMWYqhjFhKzH4wKUV4= Subject key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847B529C7648A57F68AE40D5C28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Oct 2024 00:45:26 +0000 Certificate not after: Tue 02 Feb 2027 01:45:26 +0000 Subordinate resources: AS: 32327 IP: 68.170.192.0/20 IP: 72.20.192.0/18 IP: 209.183.176.0/20 IP: 2604:2f00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b5:29:c7:64:8a:57:f6:8a:e4:0d:5c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 30 00:45:26 2024 GMT Not After : Feb 2 01:45:26 2027 GMT Subject: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:ef:2a:36:4d:01:45:b6:56:c0:77:b4:14: d2:83:21:29:4a:56:07:e9:64:5b:43:93:05:6b:71: 89:cb:2b:3d:af:5d:bf:5a:f3:5b:95:2c:ec:a8:bd: 49:b1:be:6e:0e:fc:56:87:36:f9:99:8e:04:ca:7b: 42:b2:28:c9:22:35:3e:4b:40:c9:fa:71:c2:63:45: f3:5f:77:8c:93:80:30:56:f7:26:30:33:72:da:0f: ec:11:e2:32:a6:3b:55:a7:d5:08:a5:f3:4c:ba:b3: 74:80:3a:8b:57:7a:95:32:e4:42:b6:9d:e1:cc:ff: 2b:29:90:fa:d8:46:b8:f6:40:3c:a1:b2:16:2b:0e: f6:f3:33:ca:3e:b2:77:08:b8:05:e6:04:50:13:17: 18:0a:8f:eb:ee:bd:40:bf:7f:d5:87:0f:29:7d:30: 5d:ea:7f:c0:15:df:3d:6b:81:be:56:70:9a:22:7b: be:ae:28:7e:b5:47:d0:08:46:4c:5b:bb:6c:c0:63: 34:2f:1c:94:92:63:17:9e:7b:3c:cb:00:ed:8c:9c: 49:18:90:2d:47:e3:dc:61:d1:36:1b:ed:01:2d:29: 8f:56:fc:df:48:68:4a:c1:fd:1b:cf:d6:24:23:c4: ed:42:c4:94:4f:1e:84:f0:e9:ff:e6:e8:51:a9:60: 34:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 68.170.192.0/20 72.20.192.0/18 209.183.176.0/20 IPv6: 2604:2f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32327 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:73:50:17:d8:f7:32:f1:2d:e5:b0:c3:19:0a:5e:96:fa:8d: 30:9d:92:ee:46:8a:b4:1c:0f:c9:6f:05:f8:e3:ff:85:b0:50: e0:d9:81:2a:e2:c2:05:56:70:5f:f0:7c:73:03:42:20:dc:a7: d3:d1:0e:76:6a:a4:1d:0f:7a:a4:f6:5f:f2:ed:81:c9:1a:8c: 3b:7f:89:b5:1f:b5:b6:b1:01:0d:31:19:9a:d4:aa:f0:bf:f4: ec:ba:c9:a4:3c:a8:4a:3f:4b:fc:56:14:1e:91:f6:fd:57:ef: 33:0c:02:f8:45:2e:a6:a2:dc:1a:49:f4:c2:95:dc:f0:44:cd: b9:7e:70:7f:23:48:85:88:c6:e3:ff:5e:b9:98:64:91:49:94: 32:f5:60:29:15:bc:48:96:11:86:a3:35:94:84:6a:1f:3e:43: f6:26:6d:ad:a5:f7:0c:84:30:2f:1f:66:a1:ef:5d:bd:61:3d: ea:73:b6:0a:78:03:5f:d8:f2:06:e5:ea:ca:14:27:34:c1:0f: a1:60:bc:50:95:6d:42:b9:70:ae:d2:00:f5:fe:d5:17:de:9d: 2f:95:a5:09:aa:13:56:4c:b5:69:bb:09:50:6b:47:36:c7:8e: 68:01:cc:bb:89:36:c8:a9:49:be:13:87:d5:64:4f:4f:35:e0: 19:00:3d:d5 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEe1Kcdkilf2iuQNXCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAzMDAwNDUyNloXDTI3MDIwMjAxNDUyNlowLzEtMCsGA1UEAxMk NTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBjZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkbvKjZNAUW2VsB3tBTSgyEpSlYH6WRbQ5MF a3GJyys9r12/WvNblSzsqL1Jsb5uDvxWhzb5mY4EyntCsijJIjU+S0DJ+nHCY0Xz X3eMk4AwVvcmMDNy2g/sEeIypjtVp9UIpfNMurN0gDqLV3qVMuRCtp3hzP8rKZD6 2Ea49kA8obIWKw728zPKPrJ3CLgF5gRQExcYCo/r7r1Av3/Vhw8pfTBd6n/AFd89 a4G+VnCaInu+rih+tUfQCEZMW7tswGM0LxyUkmMXnns8ywDtjJxJGJAtR+PcYdE2 G+0BLSmPVvzfSGhKwf0bz9YkI8TtQsSUTx6E8On/5uhRqWA07QIDAQABo4IENTCC BDEwHQYDVR0OBBYEFL8gMuV714HHwLApmLMzVdFiM+iZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzU2YTIzMzQ2LTVhMGUtNDk3Ni05 YjMzLTNiNGQxZDkwY2ZhMy81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5 MGNmYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAREqsADBAZIFMADBATRt7AwDQQCAAIwBwMFACYE LwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICfkcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFnNQF9j3MvEt 5bDDGQpelvqNMJ2S7kaKtBwPyW8F+OP/hbBQ4NmBKuLCBVZwX/B8cwNCINyn09EO dmqkHQ96pPZf8u2ByRqMO3+JtR+1trEBDTEZmtSq8L/07LrJpDyoSj9L/FYUHpH2 /VfvMwwC+EUupqLcGkn0wpXc8ETNuX5wfyNIhYjG4/9euZhkkUmUMvVgKRW8SJYR hqM1lIRqHz5D9iZtraX3DIQwLx9moe9dvWE96nO2CngDX9jyBuXqyhQnNMEPoWC8 UJVtQrlwrtIA9f7VF96dL5WlCaoTVky1absJUGtHNseOaAHMu4k2yKlJvhOH1WRP TzXgGQA91Q== -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:47 2024 by rpki-client on console-ams.rpki-client.org