$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4.cer File: 957017f9-0b2d-451e-bee3-85f42c50dde4.cer (raw, json) Hash identifier: 4wf/ie6J5OT9qQBvJDttUZb2Aui97F6UQabQS+cyjT0= Subject key identifier: 9D:FE:71:A0:1F:9D:2A:A9:5B:F7:6B:83:16:76:5E:13:90:35:2D:CB Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858437689D248F3C801FE2ADC3C87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Oct 2023 19:15:17 +0000 Certificate not after: Mon 22 Dec 2025 15:14:18 +0000 Subordinate resources: AS: 26065 IP: 64.7.34.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:76:89:d2:48:f3:c8:01:fe:2a:dc:3c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 6 19:15:17 2023 GMT Not After : Dec 22 15:14:18 2025 GMT Subject: CN=957017f9-0b2d-451e-bee3-85f42c50dde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1f:54:d2:e7:07:90:07:25:b1:61:09:a2:d2: 72:88:c4:de:fd:c0:d1:23:00:98:2e:4d:3f:61:84: e5:ca:7a:6e:bb:9c:ad:47:e7:50:46:7a:e0:09:ce: 09:9a:d8:e2:06:2e:60:5b:e2:ba:97:4e:54:a5:5e: fd:2d:1d:6a:15:f0:cc:bb:40:90:f9:ef:02:2a:c9: da:6d:e3:75:e8:1d:c2:a6:09:98:65:c0:9e:b2:55: 1f:91:23:b1:e7:99:5a:03:c5:97:ae:35:14:a9:b1: a4:44:12:c8:5a:6a:42:9b:41:65:29:1b:f2:6d:5c: 97:30:74:c0:82:c5:24:09:15:f6:8b:21:10:f3:86: 23:70:41:57:ee:68:73:af:0f:8f:f2:cf:e3:7d:17: 94:df:cb:d2:fd:c5:44:50:e0:63:04:f5:f4:b7:bb: c6:7b:0f:c0:4a:f8:4c:93:75:51:15:64:17:17:60: 44:62:c7:03:13:e7:24:85:7e:ed:8e:a6:39:6d:d7: 27:1a:70:80:76:a6:7c:96:7a:35:11:e6:69:f5:03: 10:73:94:0e:27:f2:8d:36:9a:62:d5:40:48:d3:7c: 94:9a:df:6f:1c:e6:b5:fb:c5:21:04:da:42:a1:02: da:9d:8e:1b:3a:6f:af:57:49:61:72:9d:8f:f5:37: a3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FE:71:A0:1F:9D:2A:A9:5B:F7:6B:83:16:76:5E:13:90:35:2D:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/957017f9-0b2d-451e-bee3-85f42c50dde4/957017f9-0b2d-451e-bee3-85f42c50dde4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.7.34.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26065 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:94:96:d6:88:d2:2e:ff:d7:36:72:14:73:20:2e:fd:e9:c8: de:25:ff:95:e3:2b:c9:08:90:66:31:3e:8f:20:4c:6a:75:44: 13:e4:c5:21:6c:ca:e2:d5:a2:bd:1c:d0:d3:ec:99:7c:eb:d4: d4:e1:06:81:d0:96:06:d2:e6:56:e0:3a:24:41:a9:75:c3:f3: 3e:a8:90:6a:a8:55:0d:ec:43:43:44:91:8d:62:03:78:68:3d: db:08:1a:c7:3d:8c:d0:e8:b7:32:0b:3e:2a:97:01:33:e3:24: bd:75:77:84:a3:f5:10:f9:bd:5b:a8:8a:af:97:19:85:56:32: bd:98:cc:5d:51:6c:83:a7:a5:0c:6d:cf:0c:f6:09:c9:ea:13: 02:c9:45:fc:69:37:1b:d4:17:8d:1e:ce:fd:b9:93:e1:c0:e4: c6:20:95:f4:bb:cb:a4:ea:e8:8f:b0:cd:9f:77:00:97:bb:35: 43:81:49:66:b9:24:bf:73:6f:86:23:f1:33:f3:9f:4c:dd:a4: 60:d6:ee:61:19:70:90:a5:d5:a2:8b:5f:12:fa:30:ea:b6:dc: 20:ff:b1:c1:80:52:c7:c7:c9:e8:54:e0:69:07:25:b2:61:1a: cb:eb:16:1c:e8:7a:b8:b3:87:e9:c9:8a:b3:49:e6:79:76:b0: bd:0b:6c:e5 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEN2idJI88gB/ircPIcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMTAwNjE5MTUxN1oXDTI1MTIyMjE1MTQxOFowLzEtMCsGA1UEAxMk OTU3MDE3ZjktMGIyZC00NTFlLWJlZTMtODVmNDJjNTBkZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx9U0ucHkAclsWEJotJyiMTe/cDRIwCYLk0/ YYTlynpuu5ytR+dQRnrgCc4JmtjiBi5gW+K6l05UpV79LR1qFfDMu0CQ+e8CKsna beN16B3CpgmYZcCeslUfkSOx55laA8WXrjUUqbGkRBLIWmpCm0FlKRvybVyXMHTA gsUkCRX2iyEQ84YjcEFX7mhzrw+P8s/jfReU38vS/cVEUOBjBPX0t7vGew/ASvhM k3VRFWQXF2BEYscDE+ckhX7tjqY5bdcnGnCAdqZ8lno1EeZp9QMQc5QOJ/KNNppi 1UBI03yUmt9vHOa1+8UhBNpCoQLanY4bOm+vV0lhcp2P9Tej+wIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJ3+caAfnSqpW/drgxZ2XhOQNS3LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 NTcwMTdmOS0wYjJkLTQ1MWUtYmVlMy04NWY0MmM1MGRkZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzk1NzAxN2Y5LTBiMmQtNDUxZS1i ZWUzLTg1ZjQyYzUwZGRlNC85NTcwMTdmOS0wYjJkLTQ1MWUtYmVlMy04NWY0MmM1 MGRkZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABAByIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC ZdEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAFZSW1ojSLv/XNnIUcyAu/enI3iX/leMryQiQZjE+jyBManVE E+TFIWzK4tWivRzQ0+yZfOvU1OEGgdCWBtLmVuA6JEGpdcPzPqiQaqhVDexDQ0SR jWIDeGg92wgaxz2M0Oi3Mgs+KpcBM+MkvXV3hKP1EPm9W6iKr5cZhVYyvZjMXVFs g6elDG3PDPYJyeoTAslF/Gk3G9QXjR7O/bmT4cDkxiCV9LvLpOroj7DNn3cAl7s1 Q4FJZrkkv3NvhiPxM/OfTN2kYNbuYRlwkKXVootfEvow6rbcIP+xwYBSx8fJ6FTg aQclsmEay+sWHOh6uLOH6cmKs0nmeXawvQts5Q== -----END CERTIFICATE-----Generated at Fri May 10 14:12:45 2024 by rpki-client on console-ams.rpki-client.org