$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer File: 8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer (raw, json) Hash identifier: Vsvtg+0e4ZwyLebsGRB3opGlpyb4dQcXA0tF+9ztZrs= Subject key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842C34C15A26E1B43A018DC6C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Aug 2023 14:21:11 +0000 Certificate not after: Thu 30 Oct 2025 21:50:50 +0000 Subordinate resources: AS: 22597 IP: 23.159.120.0/24 IP: 2607:5fc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:c3:4c:15:a2:6e:1b:43:a0:18:dc:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 3 14:21:11 2023 GMT Not After : Oct 30 21:50:50 2025 GMT Subject: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:70:bb:58:21:76:0d:97:ce:12:2e:a0:3d: ec:c1:b3:e0:a6:32:54:09:be:71:a3:76:c3:ba:4a: 60:ec:d8:c1:0a:32:6e:1a:9d:e6:19:27:6c:05:c8: 4d:bb:8e:08:eb:2a:97:12:98:0a:ee:bd:20:df:e3: 64:e9:83:96:e1:7e:e5:c9:54:bb:60:18:73:35:79: 3e:3b:60:91:1b:29:32:82:f9:03:cd:c7:b3:e4:89: 45:2f:2c:4d:99:c5:17:82:56:5e:2f:57:5f:b1:e7: 54:c6:4c:75:15:14:f6:47:41:d7:db:83:3d:43:08: 20:32:e8:ea:8f:41:94:10:1d:b0:d4:9c:a2:77:fc: bd:67:71:93:f6:9a:58:45:db:09:82:ef:9b:7a:05: 10:14:e2:67:90:ad:ca:fb:e5:de:a6:05:38:6b:3e: 30:26:d6:4a:3a:c4:75:47:f7:53:f2:c4:67:c8:cf: 9f:27:62:b8:08:ab:2c:c6:2f:ab:03:02:4f:98:49: 54:28:f2:cd:59:28:3f:0d:d7:6c:17:4e:84:1c:af: b8:ca:9e:25:c7:cb:5f:1c:ed:8d:a1:0e:df:ea:06: cb:ec:a5:6b:0e:5f:2f:dd:74:13:7a:ff:74:96:5c: ee:72:d2:86:78:40:16:b7:40:ca:d6:41:b6:4a:ac: 2c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.159.120.0/24 IPv6: 2607:5fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22597 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:08:32:2e:a5:bc:7e:ec:cb:38:b3:84:ea:63:ab:0c:14:c9: 90:cd:1b:e3:2e:f0:03:05:d7:40:87:c9:af:83:84:1a:c2:3b: 65:c9:8d:2e:d3:00:43:9c:67:a1:30:e0:ff:8b:07:3e:77:32: 4d:b0:42:80:27:b5:05:83:9b:c9:ea:bd:65:7d:60:1f:3f:08: 27:77:2a:a8:03:a0:fa:bf:bf:b6:03:5d:20:00:74:83:36:6b: 85:d7:0e:92:c7:61:67:2b:4a:7e:1f:3e:2a:37:de:21:d3:8d: 0f:c1:53:10:51:24:ce:80:4f:4d:fd:a8:ee:d2:7d:31:f2:24: 8d:94:8d:af:2e:46:51:3f:fc:43:a1:f3:a4:83:31:41:af:73: 59:d0:73:b7:31:fa:7c:fe:78:31:33:57:d3:1f:3a:a7:b0:9b: 7d:57:d5:6b:51:e4:a1:a3:27:66:10:84:19:a3:fe:dc:36:4d: e6:25:d3:b2:26:57:20:45:a2:06:db:cb:57:74:01:b4:b1:9b: ff:d8:a0:76:6b:24:fd:4d:f4:1c:3d:9f:4a:78:5a:e2:ee:a8: 39:ee:03:f9:5f:26:af:85:0c:25:c8:00:7c:53:73:f7:62:8c: bd:d0:3d:4e:45:2f:27:2e:b8:01:cb:27:0b:70:70:a0:69:14: 6e:52:be:c5 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWELDTBWibhtDoBjcbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgwMzE0MjExMVoXDTI1MTAzMDIxNTA1MFowLzEtMCsGA1UEAxMk OGFmZDg4OTUtMTFlOS00M2Q0LWJiOWYtNjQwNDJiMWQyOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/xwu1ghdg2XzhIuoD3swbPgpjJUCb5xo3bD ukpg7NjBCjJuGp3mGSdsBchNu44I6yqXEpgK7r0g3+Nk6YOW4X7lyVS7YBhzNXk+ O2CRGykygvkDzcez5IlFLyxNmcUXglZeL1dfsedUxkx1FRT2R0HX24M9QwggMujq j0GUEB2w1Jyid/y9Z3GT9ppYRdsJgu+begUQFOJnkK3K++XepgU4az4wJtZKOsR1 R/dT8sRnyM+fJ2K4CKssxi+rAwJPmElUKPLNWSg/DddsF06EHK+4yp4lx8tfHO2N oQ7f6gbL7KVrDl8v3XQTev90llzuctKGeEAWt0DK1kG2SqwsjQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFBiVriYA6+agYOoZEHtZlnru4lgXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIxZDI4ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzhhZmQ4ODk1LTExZTktNDNkNC1i YjlmLTY0MDQyYjFkMjhmNi84YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIx ZDI4ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXn3gwDQQCAAIwBwMFACYHX8AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICWEUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbwgyLqW8fuzLOLOE6mOrDBTJkM0b 4y7wAwXXQIfJr4OEGsI7ZcmNLtMAQ5xnoTDg/4sHPncyTbBCgCe1BYObyeq9ZX1g Hz8IJ3cqqAOg+r+/tgNdIAB0gzZrhdcOksdhZytKfh8+KjfeIdOND8FTEFEkzoBP Tf2o7tJ9MfIkjZSNry5GUT/8Q6HzpIMxQa9zWdBztzH6fP54MTNX0x86p7CbfVfV a1HkoaMnZhCEGaP+3DZN5iXTsiZXIEWiBtvLV3QBtLGb/9igdmsk/U30HD2fSnha 4u6oOe4D+V8mr4UMJcgAfFNz92KMvdA9TkUvJy64AcsnC3BwoGkUblK+xQ== -----END CERTIFICATE-----Generated at Thu May 9 21:06:18 2024 by rpki-client on console-fra.rpki-client.org