$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer File: 6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer (raw, json) Hash identifier: CdLNuNQgFpLLj/lRp9JrZ/uwMQHDHwvVJlTD8L9OLTs= Subject key identifier: 13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858477A896A32BE1840F363E9AFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Oct 2024 00:45:26 +0000 Certificate not after: Tue 12 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 393796 IP: 63.245.180.0/23 IP: 104.128.32.0/20 IP: 130.51.32.0/23 IP: 2604:7640::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7a:89:6a:32:be:18:40:f3:63:e9:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 9 00:45:26 2024 GMT Not After : Jan 12 01:45:26 2027 GMT Subject: CN=6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0a:39:b0:3c:a3:50:ba:5e:cf:a5:40:40:c0: e6:16:38:0d:55:41:83:d0:69:10:e4:7b:25:b2:43: e1:aa:04:3a:dd:f8:32:78:1c:0e:06:68:f2:74:46: 7a:8b:02:cc:7b:2e:53:f9:5e:86:66:d9:4d:e8:98: 4e:82:4e:b4:b5:b6:06:68:10:5d:15:9e:50:ee:69: 55:94:88:62:2f:07:d6:c8:b9:50:b2:36:fa:fc:40: e8:5d:a4:bd:a7:04:01:2b:06:b7:fe:20:99:a8:5f: 5f:6d:66:6e:a7:87:73:45:6e:ab:63:66:3d:5a:6d: 59:fb:cd:1a:dd:cd:08:c4:5b:8d:8c:32:0c:19:10: 01:b3:d8:05:6e:cb:8d:88:a1:0a:c7:17:aa:d7:27: 84:f1:af:21:8c:21:94:ff:b6:22:75:fb:18:f9:3e: 8e:e4:4c:af:fa:e2:6b:66:9e:bd:ae:61:52:47:f5: e6:6f:ad:6f:2d:c6:2e:b9:09:bc:d3:7b:6a:47:83: 4c:86:88:70:c1:7b:97:05:44:42:bc:8e:4f:f9:33: 76:4d:50:6c:16:cc:27:06:23:06:96:8b:bf:96:fb: 87:3f:38:2d:79:00:20:9c:34:07:e3:9e:18:7f:86: ad:fb:97:3e:50:f6:8f:d9:e5:cd:52:ed:6c:af:00: 3b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 63.245.180.0/23 104.128.32.0/20 130.51.32.0/23 IPv6: 2604:7640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393796 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d1:8e:f0:c8:d5:50:d6:4d:f4:87:4e:58:d0:68:de:1c:5c: 0f:76:d9:39:45:bb:49:40:cf:9a:c4:c8:6b:84:ab:10:f2:b6: 0e:9c:cc:22:27:f0:74:72:d5:78:01:e1:4f:eb:10:01:22:36: 4d:53:f4:4f:dc:b1:6a:b9:9b:28:1e:76:18:c5:25:ed:25:cd: 1e:da:cd:9a:10:d5:32:8d:e9:ac:e6:d3:97:ca:26:cc:d0:d5: 17:b9:79:76:c0:83:8b:25:94:19:bf:dd:40:43:a5:33:28:99: cb:ec:86:96:6c:db:43:18:93:db:9c:de:89:ba:e6:61:86:2c: f5:a1:7b:76:e9:e7:8c:5f:ae:b7:a5:aa:56:74:7d:31:74:53: f2:9e:d9:07:d7:9c:e3:d1:f6:ca:e6:7c:79:1c:c3:cc:7b:5a: ab:eb:ac:d4:ae:ba:7c:0b:a6:73:04:4c:eb:ff:87:af:37:b6: a0:66:87:93:de:b9:fc:e7:61:fc:dd:b5:bf:8e:ec:ab:88:4c: 73:93:ba:ce:da:33:1a:60:9d:3b:2f:a8:aa:9e:03:72:00:fd: ce:d9:5d:31:aa:a5:f0:fc:3d:91:73:38:fe:40:35:ad:b9:4c: c3:ae:24:65:0f:8c:95:e8:97:17:ed:6b:4a:13:03:8f:53:c6: 2c:36:2d:c9 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEd6iWoyvhhA82Ppr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAwOTAwNDUyNloXDTI3MDExMjAxNDUyNlowLzEtMCsGA1UEAxMk NmQ0Y2ViMzgtYzI3YS00ZWJkLTlhZDctYTZjZWNlODcwZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwo5sDyjULpez6VAQMDmFjgNVUGD0GkQ5Hsl skPhqgQ63fgyeBwOBmjydEZ6iwLMey5T+V6GZtlN6JhOgk60tbYGaBBdFZ5Q7mlV lIhiLwfWyLlQsjb6/EDoXaS9pwQBKwa3/iCZqF9fbWZup4dzRW6rY2Y9Wm1Z+80a 3c0IxFuNjDIMGRABs9gFbsuNiKEKxxeq1yeE8a8hjCGU/7YidfsY+T6O5Eyv+uJr Zp69rmFSR/Xmb61vLcYuuQm803tqR4NMhohwwXuXBURCvI5P+TN2TVBsFswnBiMG lou/lvuHPzgteQAgnDQH454Yf4at+5c+UPaP2eXNUu1srwA7jQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFBOCfZSn/q3rYK2NFmuEYaSD3AKoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82 ZDRjZWIzOC1jMjdhLTRlYmQtOWFkNy1hNmNlY2U4NzBkM2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzZkNGNlYjM4LWMyN2EtNGViZC05 YWQ3LWE2Y2VjZTg3MGQzYy82ZDRjZWIzOC1jMjdhLTRlYmQtOWFkNy1hNmNlY2U4 NzBkM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAE/9bQDBARogCADBAGCMyAwDQQCAAIwBwMFACYE dkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgJEMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE/RjvDI1VDW TfSHTljQaN4cXA922TlFu0lAz5rEyGuEqxDytg6czCIn8HRy1XgB4U/rEAEiNk1T 9E/csWq5mygedhjFJe0lzR7azZoQ1TKN6azm05fKJszQ1Re5eXbAg4sllBm/3UBD pTMomcvshpZs20MYk9uc3om65mGGLPWhe3bp54xfrrelqlZ0fTF0U/Ke2QfXnOPR 9srmfHkcw8x7WqvrrNSuunwLpnMETOv/h683tqBmh5PeufznYfzdtb+O7KuITHOT us7aMxpgnTsvqKqeA3IA/c7ZXTGqpfD8PZFzOP5ANa25TMOuJGUPjJXolxfta0oT A49Txiw2Lck= -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:52 2024 by rpki-client on console-ams.rpki-client.org