$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer File: 7905c321-789d-4866-a23f-9f01c7b24cf4.cer (raw, json) Hash identifier: 1VRgljQJmIMYgMsshEV54x9yaW02+YTNB05fyIjFA9o= Subject key identifier: 95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847F14D533871931AAA6F568580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Nov 2024 13:45:34 +0000 Certificate not after: Tue 23 Feb 2027 13:45:34 +0000 Subordinate resources: AS: 395886 IP: 23.170.48.0/23 IP: 64.112.28.0/24 IP: 104.167.247.0/24 IP: 2602:fce1::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f1:4d:53:38:71:93:1a:aa:6f:56:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 20 13:45:34 2024 GMT Not After : Feb 23 13:45:34 2027 GMT Subject: CN=7905c321-789d-4866-a23f-9f01c7b24cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e5:1b:a5:8a:1f:ef:b1:b3:96:ce:2c:9c:54: 8e:31:8f:ec:d6:44:44:10:f3:57:11:e3:b7:8d:22: be:32:70:4e:09:10:ed:00:40:0c:0c:e1:01:b8:1a: 3f:e1:cf:ea:68:d9:29:39:b8:f0:8a:cb:a6:f3:79: ad:3d:68:ed:b3:59:28:c3:3f:66:db:3f:75:0c:7f: 94:5e:92:da:03:53:5b:c6:c7:d0:2d:31:b6:36:0d: 84:57:ea:9b:ba:e9:f4:3d:0d:a5:d1:09:dc:95:9f: 88:f0:7a:c8:ae:b1:18:45:73:f7:22:0f:b5:ba:95: be:7e:c8:c2:82:2f:6b:82:28:cd:77:d8:8c:24:b1: 37:27:63:ec:db:c9:04:ea:5b:21:b1:13:64:8d:c8: df:15:c7:80:34:ea:4b:c0:a8:b1:ac:12:1f:d0:6b: ff:b9:57:ba:f1:85:c2:6e:cc:b4:a1:cf:c7:cf:90: 0d:7c:87:90:a8:f8:3a:a8:c1:5c:44:a8:80:f6:40: ac:7c:34:a8:36:50:51:7d:45:6d:8f:84:88:34:2b: 70:1d:84:39:22:18:84:b4:af:20:b0:a9:77:2a:86: df:33:85:b4:85:ea:67:95:4c:5d:ff:da:f6:69:66: 0f:f4:a8:1b:8c:5e:16:3f:80:7e:92:06:61:07:b0: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.170.48.0/23 64.112.28.0/24 104.167.247.0/24 IPv6: 2602:fce1::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395886 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:bf:0d:6a:62:e2:79:ab:b6:84:b3:72:df:05:68:76:cb:28: 43:a5:a5:a7:e1:65:bb:fe:51:97:da:40:ae:bf:b6:20:56:11: 9f:70:a5:3c:96:23:7c:44:29:23:2f:73:12:3e:ce:19:29:78: f9:a3:0b:24:a7:d9:b2:df:50:7d:4f:a0:d1:57:ca:1a:6d:e6: ee:52:83:cc:6f:a3:45:6b:5b:5b:ef:07:29:1b:c7:9a:e2:0e: e2:32:7b:f0:94:dd:38:2e:2f:cd:7e:c2:55:58:f6:e2:e9:e5: a7:c0:3a:8d:4e:4b:76:f2:93:f5:1f:22:4a:2f:8b:22:40:dd: 7e:f5:32:45:3b:49:58:76:5a:d8:49:f0:d6:66:94:00:af:f1: ef:15:a7:76:90:52:90:db:81:b1:77:cb:cb:da:74:0f:ca:d2: 76:7e:4d:14:9b:34:79:9b:64:aa:ce:06:d7:80:c6:9e:84:d7: 34:2a:17:71:08:a1:cf:bd:63:56:fd:e2:1d:fe:01:c5:ef:6e: 22:dd:75:2c:e9:47:7a:4c:f0:d9:77:9b:73:97:f7:ed:b3:5c: 60:96:29:83:e1:7c:40:8d:84:e8:1e:60:ec:36:48:fd:f1:13: 77:a2:6e:c2:0e:ba:05:12:53:4a:48:e3:eb:26:c3:60:dd:da: c2:f2:f2:7e -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEfxTVM4cZMaqm9WhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEyMDEzNDUzNFoXDTI3MDIyMzEzNDUzNFowLzEtMCsGA1UEAxMk NzkwNWMzMjEtNzg5ZC00ODY2LWEyM2YtOWYwMWM3YjI0Y2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+UbpYof77Gzls4snFSOMY/s1kREEPNXEeO3 jSK+MnBOCRDtAEAMDOEBuBo/4c/qaNkpObjwisum83mtPWjts1kowz9m2z91DH+U XpLaA1NbxsfQLTG2Ng2EV+qbuun0PQ2l0QnclZ+I8HrIrrEYRXP3Ig+1upW+fsjC gi9rgijNd9iMJLE3J2Ps28kE6lshsRNkjcjfFceANOpLwKixrBIf0Gv/uVe68YXC bsy0oc/Hz5ANfIeQqPg6qMFcRKiA9kCsfDSoNlBRfUVtj4SINCtwHYQ5IhiEtK8g sKl3KobfM4W0hepnlUxd/9r2aWYP9KgbjF4WP4B+kgZhB7DjqQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFJWty8PvVEp6uVLx7IeNeYgo5RTMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83 OTA1YzMyMS03ODlkLTQ4NjYtYTIzZi05ZjAxYzdiMjRjZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzc5MDVjMzIxLTc4OWQtNDg2Ni1h MjNmLTlmMDFjN2IyNGNmNC83OTA1YzMyMS03ODlkLTQ4NjYtYTIzZi05ZjAxYzdi MjRjZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAEXqjADBABAcBwDBABop/cwDgQCAAIwCAMGBCYC /OEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYKbjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHvw1qYuJ5 q7aEs3LfBWh2yyhDpaWn4WW7/lGX2kCuv7YgVhGfcKU8liN8RCkjL3MSPs4ZKXj5 owskp9my31B9T6DRV8oabebuUoPMb6NFa1tb7wcpG8ea4g7iMnvwlN04Li/NfsJV WPbi6eWnwDqNTkt28pP1HyJKL4siQN1+9TJFO0lYdlrYSfDWZpQAr/HvFad2kFKQ 24Gxd8vL2nQPytJ2fk0UmzR5m2SqzgbXgMaehNc0KhdxCKHPvWNW/eId/gHF724i 3XUs6Ud6TPDZd5tzl/fts1xglimD4XxAjYToHmDsNkj98RN3om7CDroFElNKSOPr JsNg3drC8vJ+ -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:53 2024 by rpki-client on console-ams.rpki-client.org