$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2.cer File: 9251b7c9-cc55-4637-b464-be2f1813b4c2.cer (raw, json) Hash identifier: ok2AIak2js7MpPb/tsQFDoMlc45YiKFdIuNFJIg8DNA= Subject key identifier: 00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842218662299D7A74DAADD40D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Jun 2023 15:37:42 +0000 Certificate not after: Mon 08 Sep 2025 15:37:42 +0000 Subordinate resources: AS: 399956 IP: 195.85.113.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:21:86:62:29:9d:7a:74:da:ad:d4:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 6 15:37:42 2023 GMT Not After : Sep 8 15:37:42 2025 GMT Subject: CN=9251b7c9-cc55-4637-b464-be2f1813b4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:31:ba:cb:6f:c0:c1:ca:e3:41:27:95:4a:ca: cc:5c:a4:18:13:50:79:73:19:ca:43:1c:2c:b6:f1: 1b:36:c3:ae:73:1c:4d:88:fb:58:bd:06:f6:69:7e: f7:0b:6a:53:01:10:7c:16:92:ad:00:e0:a0:55:65: a8:d0:1b:53:e8:44:57:69:d6:1c:18:85:68:92:4c: c2:09:5c:68:df:db:9c:b7:7b:48:0d:e6:03:81:8a: de:dc:25:f5:fa:3a:15:3f:e5:e7:c8:2e:5a:b1:bb: b9:a5:7a:f6:bb:e0:14:c7:f0:10:5a:d1:7c:82:4f: 5f:ad:37:6b:10:e3:2a:9f:cb:01:13:78:3b:82:e8: 42:90:43:71:e3:0c:07:d1:5d:26:59:5a:b6:73:be: b9:30:29:d3:9c:88:88:a6:60:b0:3d:03:39:c0:4e: a9:99:2b:dd:83:ea:e6:c3:33:d9:66:cc:45:a8:47: 3e:5f:14:a3:ae:91:ac:ac:f4:da:c3:54:6d:bc:87: e5:66:e5:48:6f:5e:5e:41:d5:d6:59:5c:5a:6d:de: 3a:84:a7:01:b2:0b:34:e2:df:cd:7e:b1:33:d9:69: 8c:ee:0a:03:e0:0a:1c:97:98:2e:56:1a:e2:57:31: b5:22:2e:e0:06:ce:f1:d3:6b:42:da:00:6d:46:70: 91:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:23:37:C2:FF:50:26:00:2F:FD:74:58:64:0B:CF:4F:90:F8:32:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9251b7c9-cc55-4637-b464-be2f1813b4c2/9251b7c9-cc55-4637-b464-be2f1813b4c2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 195.85.113.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399956 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c2:ff:f3:c8:ed:e0:17:ae:81:aa:d9:ba:48:55:d9:9a:c1: e5:01:f2:91:af:c1:cd:26:7e:40:30:a7:ae:aa:17:71:c4:4b: da:58:f7:b9:68:23:a6:6c:1f:82:0d:55:43:7f:d8:59:df:8c: 0c:f0:bd:16:57:da:cd:36:a8:9f:de:c5:dd:46:bb:79:09:4b: 69:a4:60:4e:cf:21:24:a2:ba:09:8e:cb:3d:f6:7b:b2:ad:dc: ef:90:fe:46:11:7e:71:63:d3:f2:d9:8f:c9:1f:25:40:d4:c9: 65:d6:f2:63:f0:09:c8:28:fd:ca:8c:40:23:3c:44:71:73:ce: 77:03:3a:8b:f2:c5:1c:e5:97:09:7f:08:21:6e:21:48:f2:60: ae:d8:47:4b:bf:4d:9b:3a:1b:d4:9a:33:e5:3f:65:5c:cb:0d: 1c:d1:46:85:74:63:22:1b:a4:db:e8:ba:cb:21:93:a3:db:e8: 66:d8:89:15:21:b4:1f:e3:f6:16:53:29:09:06:72:99:b3:5f: a1:71:28:11:b6:31:42:01:4e:55:a2:9f:db:c8:73:56:9c:30: 64:d6:0c:01:5f:3c:33:71:8f:3b:32:2f:60:70:5e:e3:11:d9: 28:56:4c:dd:aa:fb:cf:03:77:92:bc:e6:b0:4c:d4:d9:b0:72: e6:42:52:9b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEIhhmIpnXp02q3UDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDYwNjE1Mzc0MloXDTI1MDkwODE1Mzc0MlowLzEtMCsGA1UEAxMk OTI1MWI3YzktY2M1NS00NjM3LWI0NjQtYmUyZjE4MTNiNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjG6y2/AwcrjQSeVSsrMXKQYE1B5cxnKQxws tvEbNsOucxxNiPtYvQb2aX73C2pTARB8FpKtAOCgVWWo0BtT6ERXadYcGIVokkzC CVxo39uct3tIDeYDgYre3CX1+joVP+XnyC5asbu5pXr2u+AUx/AQWtF8gk9frTdr EOMqn8sBE3g7guhCkENx4wwH0V0mWVq2c765MCnTnIiIpmCwPQM5wE6pmSvdg+rm wzPZZsxFqEc+XxSjrpGsrPTaw1RtvIflZuVIb15eQdXWWVxabd46hKcBsgs04t/N frEz2WmM7goD4Aocl5guVhriVzG1Ii7gBs7x02tC2gBtRnCRMQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAAjN8L/UCYAL/10WGQLz0+Q+DJAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 MjUxYjdjOS1jYzU1LTQ2MzctYjQ2NC1iZTJmMTgxM2I0YzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzkyNTFiN2M5LWNjNTUtNDYzNy1i NDY0LWJlMmYxODEzYjRjMi85MjUxYjdjOS1jYzU1LTQ2MzctYjQ2NC1iZTJmMTgx M2I0YzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADDVXEwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhpUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADDC//PI7eAXroGq2bpIVdmaweUB8pGvwc0mfkAwp66qF3HE S9pY97loI6ZsH4INVUN/2FnfjAzwvRZX2s02qJ/exd1Gu3kJS2mkYE7PISSiugmO yz32e7Kt3O+Q/kYRfnFj0/LZj8kfJUDUyWXW8mPwCcgo/cqMQCM8RHFzzncDOovy xRzllwl/CCFuIUjyYK7YR0u/TZs6G9SaM+U/ZVzLDRzRRoV0YyIbpNvousshk6Pb 6GbYiRUhtB/j9hZTKQkGcpmzX6FxKBG2MUIBTlWin9vIc1acMGTWDAFfPDNxjzsy L2BwXuMR2ShWTN2q+88Dd5K85rBM1NmwcuZCUps= -----END CERTIFICATE-----Generated at Fri May 10 14:28:33 2024 by rpki-client on console-fra.rpki-client.org