$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer File: 9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.cer (raw, json) Hash identifier: 4UkJ6dHrGlINhaCshAnGvVo7uudaWUcx6rxx97mKMGc= Subject key identifier: 6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584349E144A00AAC0F3A4749E180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Sep 2023 19:20:06 +0000 Certificate not after: Tue 23 Dec 2025 20:20:06 +0000 Subordinate resources: AS: 397140 IP: 64.32.43.0/24 IP: 198.8.74.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:49:e1:44:a0:0a:ac:0f:3a:47:49:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 20 19:20:06 2023 GMT Not After : Dec 23 20:20:06 2025 GMT Subject: CN=9e06ce3b-4bb5-4594-bb6a-2ee5b342370c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:cc:47:39:c5:10:23:4a:6a:07:72:b1:54: 0a:4f:66:e0:fa:d4:0c:33:51:fa:de:8c:0b:7b:91: f8:7f:40:c1:c0:dc:ec:ae:15:df:1c:e4:5f:c9:cf: cd:c0:c9:0f:85:72:aa:38:56:e5:96:80:95:73:ae: cb:1d:ac:2a:b4:e5:8f:91:60:ef:a7:c8:06:02:c3: 88:47:bf:93:d3:8a:4e:98:a4:80:24:c1:e4:83:44: 0a:1c:33:c4:be:ee:a1:1c:c1:72:47:09:1b:05:94: a1:fb:be:ad:e1:70:3f:71:c0:d4:54:dc:04:84:b8: 9c:41:fd:3c:b2:59:55:fd:46:7a:99:5a:6e:2a:37: 37:87:27:a0:48:c4:9e:b6:f1:79:27:a8:7f:04:53: 11:b7:ad:1b:71:36:87:03:de:1e:53:da:a6:76:64: b8:30:80:21:f4:d5:64:29:12:05:b5:25:86:4e:d8: fd:1e:da:fb:9e:ec:df:6f:d3:6a:e5:cf:a9:2f:e9: 1d:80:9e:a2:d3:49:67:6a:0d:59:60:80:9b:4c:d3: 8b:5e:b6:b2:73:04:26:e7:08:0c:de:37:0d:31:11: 54:ea:55:0d:32:3b:9b:10:64:3c:04:03:73:eb:8a: a0:39:13:5c:29:29:ab:5c:3f:e0:7e:7e:02:7e:57: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AB:E8:DB:D3:B3:C5:1B:25:2F:DF:92:C0:AF:56:11:B5:3F:13:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c/9e06ce3b-4bb5-4594-bb6a-2ee5b342370c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.32.43.0/24 198.8.74.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397140 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:28:43:5c:b3:66:8e:a2:79:4f:eb:07:2b:14:8d:48:3a:8e: b8:71:38:b4:54:99:73:9b:08:84:cc:4e:e9:da:2a:cf:27:48: 1b:bf:54:d0:95:85:8a:6a:05:b9:d6:69:e0:0a:99:9a:f0:2e: ec:6d:c7:38:cd:8a:47:9e:6e:a6:ff:2a:3c:89:ea:4a:df:b0: a6:5e:95:3c:68:83:0b:41:3f:9c:12:ac:4a:7a:f3:1a:30:1a: 80:34:88:c2:7c:c4:33:62:ee:59:d6:49:bc:fb:21:74:07:b4: 1d:72:1e:0e:22:6c:00:d2:f7:45:89:5d:49:8d:a8:5d:06:61: cc:b4:79:e1:9b:f3:5a:1f:da:bf:44:ed:20:60:f9:9e:18:8b: a3:91:7d:db:55:e2:ba:1c:e7:46:5b:ed:0c:a9:8a:ad:dd:9e: fd:ea:c1:29:77:c5:07:9c:27:c3:5c:ad:f3:af:47:28:dc:e0: 15:a7:6f:5b:e5:ff:a8:74:b7:ab:76:fe:08:9e:a9:8a:8c:a6: 0f:c7:1c:70:a8:60:44:95:fb:27:3f:f1:fd:a4:e4:97:f3:b7: 8e:03:8a:39:69:39:79:40:fd:f6:18:c8:1e:80:02:2f:e0:4a: 36:1a:83:42:1d:72:75:0b:2e:bc:fe:b2:15:11:29:19:ea:ac: 86:35:9d:d5 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWENJ4USgCqwPOkdJ4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDkyMDE5MjAwNloXDTI1MTIyMzIwMjAwNlowLzEtMCsGA1UEAxMk OWUwNmNlM2ItNGJiNS00NTk0LWJiNmEtMmVlNWIzNDIzNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUrMRznFECNKagdysVQKT2bg+tQMM1H63owL e5H4f0DBwNzsrhXfHORfyc/NwMkPhXKqOFblloCVc67LHawqtOWPkWDvp8gGAsOI R7+T04pOmKSAJMHkg0QKHDPEvu6hHMFyRwkbBZSh+76t4XA/ccDUVNwEhLicQf08 sllV/UZ6mVpuKjc3hyegSMSetvF5J6h/BFMRt60bcTaHA94eU9qmdmS4MIAh9NVk KRIFtSWGTtj9Htr7nuzfb9Nq5c+pL+kdgJ6i00lnag1ZYICbTNOLXraycwQm5wgM 3jcNMRFU6lUNMjubEGQ8BANz64qgORNcKSmrXD/gfn4CflfWwQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGyr6NvTs8UbJS/fksCvVhG1PxOSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 ZTA2Y2UzYi00YmI1LTQ1OTQtYmI2YS0yZWU1YjM0MjM3MGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzllMDZjZTNiLTRiYjUtNDU5NC1i YjZhLTJlZTViMzQyMzcwYy85ZTA2Y2UzYi00YmI1LTQ1OTQtYmI2YS0yZWU1YjM0 MjM3MGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABAICsDBADGCEowGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBg9UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADsoQ1yzZo6ieU/rBysUjUg6jrhxOLRUmXObCITM TunaKs8nSBu/VNCVhYpqBbnWaeAKmZrwLuxtxzjNikeebqb/KjyJ6krfsKZelTxo gwtBP5wSrEp68xowGoA0iMJ8xDNi7lnWSbz7IXQHtB1yHg4ibADS90WJXUmNqF0G Ycy0eeGb81of2r9E7SBg+Z4Yi6ORfdtV4roc50Zb7Qypiq3dnv3qwSl3xQecJ8Nc rfOvRyjc4BWnb1vl/6h0t6t2/gieqYqMpg/HHHCoYESV+yc/8f2k5Jfzt44Dijlp OXlA/fYYyB6AAi/gSjYag0IdcnULLrz+shURKRnqrIY1ndU= -----END CERTIFICATE-----Generated at Thu May 9 21:06:21 2024 by rpki-client on console-fra.rpki-client.org