$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer File: 593f93b4-eea3-4f8b-a272-fca95f2691d2.cer (raw, json) Hash identifier: f8Y9EV60E0DnUeGTZZrKeuNSFT1Wpon53QkqbWSYOuw= Subject key identifier: 97:0B:8C:B5:7E:12:DB:A2:F1:49:9A:0D:13:91:5C:1B:B6:3B:C0:DD Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842C443F098EB16FFC6C0054B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Aug 2023 22:40:35 +0000 Certificate not after: Wed 05 Nov 2025 23:40:35 +0000 Subordinate resources: IP: 2001:400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:c4:43:f0:98:eb:16:ff:c6:c0:05:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 3 22:40:35 2023 GMT Not After : Nov 5 23:40:35 2025 GMT Subject: CN=593f93b4-eea3-4f8b-a272-fca95f2691d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:35:7a:e1:6e:bc:45:ca:9d:13:9d:04:d7:62: b5:2b:00:c8:cd:aa:90:ec:41:a0:1e:bb:c3:9b:97: 16:2a:79:90:ec:b1:75:c5:d8:05:f7:2b:2a:9e:94: 45:82:ff:49:a5:ba:2d:d5:a8:8c:d9:28:21:ad:80: 24:9f:30:64:98:13:7d:1a:bc:90:34:29:82:e7:06: d3:ca:e1:39:2f:1b:5e:75:89:89:e3:ab:82:ed:03: 1b:d2:07:18:bb:5c:97:02:c7:90:f5:6a:cd:8c:d1: 83:5c:ee:7d:52:e4:71:32:24:b7:22:31:e0:0d:80: 61:08:2f:f9:e6:7a:42:58:ae:99:a6:88:c5:1c:a0: 56:d3:d0:06:84:18:62:ab:ab:50:44:a9:92:e8:10: 70:80:4c:3f:c2:c6:49:e1:eb:9d:39:d6:7f:71:c7: f8:7b:3b:3f:9d:78:60:02:5b:ee:9c:05:79:f4:e2: 7a:af:5b:4f:0c:75:64:19:af:41:33:0d:87:b6:cb: d3:1a:7b:87:20:1e:5a:18:af:79:23:20:72:4e:c6: 85:18:b2:26:e4:c1:00:2d:e8:ab:8f:f4:1d:3c:f9: 7b:28:53:53:ae:b8:9f:fd:9d:08:80:35:97:a1:18: d3:2f:1d:28:df:b9:52:a8:76:a0:b3:5b:96:f4:30: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0B:8C:B5:7E:12:DB:A2:F1:49:9A:0D:13:91:5C:1B:B6:3B:C0:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2001:400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:15:91:cc:2e:2d:7c:c1:8e:ba:70:57:bf:56:87:0a:94:aa: 05:40:ba:52:0c:f6:df:4b:04:4b:af:2a:be:4d:a9:66:e2:14: 2b:4c:1a:20:73:36:69:ae:62:2b:5d:e4:85:91:22:63:d9:c8: 26:c9:c6:1e:41:e0:02:07:39:e8:0d:6e:1f:e8:72:cc:11:a3: 4b:12:1a:28:05:52:5a:fc:61:bf:54:b4:6d:11:09:cd:c6:c4: ea:96:36:df:1c:24:f7:1e:98:9d:65:f5:c4:76:b5:7e:4b:4a: 90:aa:f5:4f:75:5e:d0:0d:03:5c:25:0a:3a:23:a2:06:22:5a: 57:7e:67:bd:17:ec:92:76:a0:a0:09:22:0b:87:5a:94:07:c0: e4:2f:57:f9:47:4a:52:b5:06:71:8d:ff:1c:1f:40:ff:8b:c9: 7f:36:6d:4c:09:7f:9d:11:5e:b8:ee:76:af:c6:34:2c:96:d4: 3d:69:29:61:b7:ae:4a:cc:9f:f3:10:52:11:70:69:82:39:b8: c5:41:9f:c0:97:b5:75:4d:4e:ee:6e:06:b4:fa:0b:cc:80:54: 33:fe:88:c1:d9:89:f6:6d:46:f3:f4:24:0b:01:c9:8d:62:78: 0c:c8:d3:ff:00:7f:5c:98:db:fb:04:d3:c5:98:82:c9:f9:0c: e1:3d:f0:1e -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWELEQ/CY6xb/xsAFSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgwMzIyNDAzNVoXDTI1MTEwNTIzNDAzNVowLzEtMCsGA1UEAxMk NTkzZjkzYjQtZWVhMy00ZjhiLWEyNzItZmNhOTVmMjY5MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzV64W68RcqdE50E12K1KwDIzaqQ7EGgHrvD m5cWKnmQ7LF1xdgF9ysqnpRFgv9Jpbot1aiM2SghrYAknzBkmBN9GryQNCmC5wbT yuE5LxtedYmJ46uC7QMb0gcYu1yXAseQ9WrNjNGDXO59UuRxMiS3IjHgDYBhCC/5 5npCWK6ZpojFHKBW09AGhBhiq6tQRKmS6BBwgEw/wsZJ4eudOdZ/ccf4ezs/nXhg AlvunAV59OJ6r1tPDHVkGa9BMw2HtsvTGnuHIB5aGK95IyByTsaFGLIm5MEALeir j/QdPPl7KFNTrrif/Z0IgDWXoRjTLx0o37lSqHags1uW9DDqDQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFJcLjLV+Etui8UmaDRORXBu2O8DdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 OTNmOTNiNC1lZWEzLTRmOGItYTI3Mi1mY2E5NWYyNjkxZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzU5M2Y5M2I0LWVlYTMtNGY4Yi1h MjcyLWZjYTk1ZjI2OTFkMi81OTNmOTNiNC1lZWEzLTRmOGItYTI3Mi1mY2E5NWYy NjkxZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAgAQQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGMVkcwuLXzBjrpwV79W hwqUqgVAulIM9t9LBEuvKr5NqWbiFCtMGiBzNmmuYitd5IWRImPZyCbJxh5B4AIH OegNbh/ocswRo0sSGigFUlr8Yb9UtG0RCc3GxOqWNt8cJPcemJ1l9cR2tX5LSpCq 9U91XtANA1wlCjojogYiWld+Z70X7JJ2oKAJIguHWpQHwOQvV/lHSlK1BnGN/xwf QP+LyX82bUwJf50RXrjudq/GNCyW1D1pKWG3rkrMn/MQUhFwaYI5uMVBn8CXtXVN Tu5uBrT6C8yAVDP+iMHZifZtRvP0JAsByY1ieAzI0/8Af1yY2/sE08WYgsn5DOE9 8B4= -----END CERTIFICATE-----Generated at Thu May 9 20:34:17 2024 by rpki-client on console-ams.rpki-client.org