$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer File: a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer (raw, json) Hash identifier: 0Bi/bFClvIuXVxR5Z39XYIpVSL+P7oBcAnit0wVzIYM= Subject key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285845A4AFFC4B1511786DA7C7E240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Apr 2024 17:33:14 +0000 Certificate not after: Sun 07 Sep 2025 11:45:47 +0000 Subordinate resources: AS: 64289 IP: 23.155.72.0/24 IP: 206.71.158.0/24 IP: 2602:2ea::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a4:af:fc:4b:15:11:78:6d:a7:c7:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Apr 23 17:33:14 2024 GMT Not After : Sep 7 11:45:47 2025 GMT Subject: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:b3:9a:30:af:6b:d6:cc:46:3a:f4:c3:33: be:2e:59:eb:5b:33:eb:18:21:da:50:49:72:9c:6b: fd:2f:db:3d:fa:3b:90:eb:c7:9e:ec:0f:67:29:c1: b8:fb:54:19:4a:a8:c8:07:91:11:fe:fe:e2:d2:b4: 19:bf:69:cc:44:98:15:9c:a8:54:29:cf:ef:e4:ce: cc:b6:ad:cd:45:7e:a6:df:26:89:ad:60:6e:fe:f3: 91:54:24:73:be:e5:71:f0:16:53:94:f1:55:5c:93: 9a:a1:91:f1:0f:40:73:be:0d:b1:0a:59:6e:2e:fd: 3c:16:f4:4c:7f:4e:dc:cf:71:7b:9e:cb:54:e9:14: eb:e0:60:8c:41:02:19:01:0f:34:69:e1:1c:f8:09: c3:fe:8e:34:f9:2d:ea:e8:20:17:e1:c0:16:ac:5f: dd:b9:d4:07:14:0b:63:ab:90:e2:b6:0d:de:91:4e: 87:e1:9d:b4:10:e0:84:09:d5:c5:bb:66:c7:d3:2f: 03:02:9d:b2:d5:fe:63:92:5b:39:9a:08:83:b5:53: 59:e9:c5:37:55:79:32:53:b8:bb:bb:62:fd:c9:de: 9d:c3:b6:19:87:dd:6c:5f:3c:27:17:18:0e:da:9d: 17:9c:5e:43:b2:e5:b0:91:09:d1:4d:77:5b:f4:64: 79:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.155.72.0/24 206.71.158.0/24 IPv6: 2602:2ea::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64289 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9b:aa:aa:88:d9:13:3e:dc:fa:e8:6e:89:6f:36:2d:79:fd: 58:61:ff:78:f0:37:f3:13:37:04:be:c6:b6:02:84:eb:b7:56: e9:c9:57:da:78:72:78:eb:fc:98:0f:db:30:09:41:5e:fc:8c: 11:36:e4:6e:26:6e:a7:da:f6:8c:49:38:46:7a:6c:c9:2a:ff: ca:51:8a:e4:b1:17:a2:cd:aa:d5:96:bd:bd:d3:8c:5d:2f:ba: 42:f7:5e:dc:01:9a:cf:72:e1:a3:ff:a7:e1:9f:b2:7b:1d:7a: f9:63:f9:67:76:8d:39:8d:02:b6:0b:e1:8e:29:ac:4b:42:5b: e1:8c:7e:1e:ed:9e:3f:18:5f:f2:fa:0d:ac:e2:a4:c9:bf:ce: 0c:17:cf:6c:b4:e8:92:f8:6c:55:ad:b4:0f:09:af:ce:e2:eb: b8:7a:63:35:79:c6:ab:e5:b8:4b:ec:65:96:e2:e6:cf:ac:82: 24:5e:ee:6a:58:71:be:c2:47:4d:4b:ae:a5:12:d7:d7:6c:58: e5:be:f5:f5:82:57:a9:e0:fc:7d:47:9d:16:dd:31:20:6f:e5: 98:f8:ef:fe:a2:8a:f2:f0:b2:f0:9b:05:a8:ac:1b:b9:86:e2: 85:8f:9a:67:5e:ee:a0:11:cd:61:02:60:6e:76:fa:42:b4:a1: 46:44:0e:80 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEWkr/xLFRF4bafH4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDQyMzE3MzMxNFoXDTI1MDkwNzExNDU0N1owLzEtMCsGA1UEAxMk YTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJkMDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynyzmjCva9bMRjr0wzO+LlnrWzPrGCHaUEly nGv9L9s9+juQ68ee7A9nKcG4+1QZSqjIB5ER/v7i0rQZv2nMRJgVnKhUKc/v5M7M tq3NRX6m3yaJrWBu/vORVCRzvuVx8BZTlPFVXJOaoZHxD0Bzvg2xClluLv08FvRM f07cz3F7nstU6RTr4GCMQQIZAQ80aeEc+AnD/o40+S3q6CAX4cAWrF/dudQHFAtj q5Ditg3ekU6H4Z20EOCECdXFu2bH0y8DAp2y1f5jkls5mgiDtVNZ6cU3VXkyU7i7 u2L9yd6dw7YZh91sXzwnFxgO2p0XnF5DsuWwkQnRTXdb9GR5DwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFDMN0VP+NRIH3VeKKRtr5hfbHFj0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h MjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2EyM2JjMDdkLTU0YzYtNDE1Zi05 ZGMxLWMxYTIwOWYyZDA4MC9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlm MmQwODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXm0gDBADOR54wDgQCAAIwCAMGBCYCAuoAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD7ITBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdm6qqiNkTPtz66G6J bzYtef1YYf948DfzEzcEvsa2AoTrt1bpyVfaeHJ46/yYD9swCUFe/IwRNuRuJm6n 2vaMSThGemzJKv/KUYrksReizarVlr2904xdL7pC917cAZrPcuGj/6fhn7J7HXr5 Y/lndo05jQK2C+GOKaxLQlvhjH4e7Z4/GF/y+g2s4qTJv84MF89stOiS+GxVrbQP Ca/O4uu4emM1ecar5bhL7GWW4ubPrIIkXu5qWHG+wkdNS66lEtfXbFjlvvX1glep 4Px9R50W3TEgb+WY+O/+oory8LLwmwWorBu5huKFj5pnXu6gEc1hAmBudvpCtKFG RA6A -----END CERTIFICATE-----Generated at Fri May 10 14:28:35 2024 by rpki-client on console-fra.rpki-client.org