$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer File: 6dabfd0c-f982-470b-a430-b95c3c76868d.cer (raw, json) Hash identifier: BwEf/5bcvqmpbyZ+eBIXxGiPHyW03TwNIRTncfikcDA= Subject key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842AD42EF2861A86FC85138B940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Jul 2023 16:54:58 +0000 Certificate not after: Tue 28 Oct 2025 16:54:58 +0000 Subordinate resources: AS: 20101 IP: 199.192.180.0/22 IP: 216.18.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ad:42:ef:28:61:a8:6f:c8:51:38:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 26 16:54:58 2023 GMT Not After : Oct 28 16:54:58 2025 GMT Subject: CN=6dabfd0c-f982-470b-a430-b95c3c76868d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a1:8e:7d:b3:d8:34:ca:e5:03:7d:43:df:b2: 8a:11:0b:2c:d1:3c:2c:47:83:7e:13:05:62:97:d0: 0b:4d:5c:1c:88:a9:8e:82:e5:18:eb:70:19:1f:f3: 09:a4:46:9a:11:5e:da:88:1e:e9:fc:f0:23:4b:8c: b9:80:ef:35:d5:69:83:d1:db:01:02:80:60:e7:1a: 4a:a6:48:54:d7:19:b7:bb:92:be:b7:6f:2a:dc:1c: ca:07:81:58:d3:5c:63:f2:09:5a:63:a2:3b:08:1e: e3:91:2e:51:56:03:a4:63:a3:18:d9:87:2d:57:80: 9f:5c:84:9d:b4:64:db:2f:2a:ef:ed:03:b3:35:4a: e1:ab:9c:b6:90:0f:93:6e:3d:97:86:af:2a:5f:61: ae:96:96:14:10:80:0c:b9:0d:23:a5:98:9e:be:04: 4c:79:3c:a0:37:a5:7e:f1:50:1f:dd:99:11:9e:3d: 64:06:b2:d0:22:85:5e:57:27:0a:14:7e:d1:ed:04: 5a:f4:fb:4c:4a:8b:28:1a:9d:43:a1:48:ce:ec:d6: e4:24:28:97:de:26:f4:4f:62:71:8e:7c:48:be:a9: cf:42:a7:bd:cd:2f:0b:2f:a8:5c:58:ea:af:91:c8: 2f:eb:f9:92:e4:fe:c3:f6:85:f1:39:c4:82:00:aa: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.192.180.0/22 216.18.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20101 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bd:ca:4b:65:f6:8f:08:ed:63:60:22:7e:cc:78:86:96:b3: 10:49:81:9a:fd:bb:66:af:75:a4:00:dc:a1:99:c4:2f:a2:13: b7:ba:e1:fc:06:2c:5b:b8:ce:8f:99:9d:53:0c:bb:9b:82:c5: 32:39:38:ed:e9:d6:d5:25:f8:56:4b:06:e6:d4:4f:ff:fe:da: 1f:c3:aa:e0:2d:78:4f:dd:af:7a:eb:21:a2:7d:dd:bc:28:6b: d3:64:69:38:62:9a:58:67:da:af:74:be:87:94:d1:7a:2a:9e: 5a:58:02:b4:52:09:b0:6d:a8:cf:65:f2:43:27:74:20:41:fa: 23:62:7c:c4:88:f4:71:ad:11:9e:2c:94:d0:7c:51:36:b7:7a: 8c:b9:ce:bd:e8:b1:90:c0:3e:c2:16:d8:b2:14:a0:1f:99:6b: 90:32:b8:fb:cd:0e:de:63:16:ca:60:ef:48:83:25:16:57:b2: b4:4c:36:7b:e3:66:55:09:be:1c:a3:1f:a2:e9:d5:e1:ee:ac: a9:41:bc:2e:c6:b8:61:82:87:3c:01:fb:43:39:c0:6c:ed:e1: 55:a4:e9:4c:08:ff:f5:7d:da:37:0e:82:80:5c:7f:02:76:51: c0:d6:e9:c1:ec:e4:09:09:38:9d:42:31:07:af:61:48:b1:55: 35:6e:62:ad -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEKtQu8oYahvyFE4uUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcyNjE2NTQ1OFoXDTI1MTAyODE2NTQ1OFowLzEtMCsGA1UEAxMk NmRhYmZkMGMtZjk4Mi00NzBiLWE0MzAtYjk1YzNjNzY4NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKGOfbPYNMrlA31D37KKEQss0TwsR4N+EwVi l9ALTVwciKmOguUY63AZH/MJpEaaEV7aiB7p/PAjS4y5gO811WmD0dsBAoBg5xpK pkhU1xm3u5K+t28q3BzKB4FY01xj8glaY6I7CB7jkS5RVgOkY6MY2YctV4CfXISd tGTbLyrv7QOzNUrhq5y2kA+Tbj2Xhq8qX2GulpYUEIAMuQ0jpZievgRMeTygN6V+ 8VAf3ZkRnj1kBrLQIoVeVycKFH7R7QRa9PtMSosoGp1DoUjO7NbkJCiX3ib0T2Jx jnxIvqnPQqe9zS8LL6hcWOqvkcgv6/mS5P7D9oXxOcSCAKoITQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFHD8fW+1PaeA0pXTS5k5lsmKY9ZuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82 ZGFiZmQwYy1mOTgyLTQ3MGItYTQzMC1iOTVjM2M3Njg2OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzZkYWJmZDBjLWY5ODItNDcwYi1h NDMwLWI5NWMzYzc2ODY4ZC82ZGFiZmQwYy1mOTgyLTQ3MGItYTQzMC1iOTVjM2M3 Njg2OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHwLQDBATYEvAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICToUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAjL3KS2X2jwjtY2Aifsx4hpazEEmBmv27Zq91pADc oZnEL6ITt7rh/AYsW7jOj5mdUwy7m4LFMjk47enW1SX4VksG5tRP//7aH8Oq4C14 T92veushon3dvChr02RpOGKaWGfar3S+h5TReiqeWlgCtFIJsG2oz2XyQyd0IEH6 I2J8xIj0ca0RniyU0HxRNrd6jLnOveixkMA+whbYshSgH5lrkDK4+80O3mMWymDv SIMlFleytEw2e+NmVQm+HKMfounV4e6sqUG8Lsa4YYKHPAH7QznAbO3hVaTpTAj/ 9X3aNw6CgFx/AnZRwNbpwezkCQk4nUIxB69hSLFVNW5irQ== -----END CERTIFICATE-----Generated at Thu May 9 21:06:18 2024 by rpki-client on console-fra.rpki-client.org