$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995.cer File: a32f288b-650d-44c2-aec9-5ae902ab4995.cer (raw, json) Hash identifier: /NqCx6jBhSxebvRyujn0NYLgV6JfqcvmMtiGs/Lg13c= Subject key identifier: 78:80:BE:2F:8A:DD:10:45:0D:CC:78:DB:03:17:78:2E:C1:E6:0F:32 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842E2D0B2C4E7FA60E9631F03C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995/a32f288b-650d-44c2-aec9-5ae902ab4995.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Aug 2023 21:18:27 +0000 Certificate not after: Sun 16 Nov 2025 22:18:27 +0000 Subordinate resources: AS: 25840 AS: 33509 IP: 72.19.32.0/19 IP: 140.82.240.0/21 IP: 173.239.80.0/20 IP: 216.155.208.0/20 IP: 2607:ff80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:e2:d0:b2:c4:e7:fa:60:e9:63:1f:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 14 21:18:27 2023 GMT Not After : Nov 16 22:18:27 2025 GMT Subject: CN=a32f288b-650d-44c2-aec9-5ae902ab4995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b7:6f:89:60:c4:e1:b9:70:48:75:23:2f:b1: 02:cc:08:e2:66:38:3b:73:12:c2:23:8e:7b:80:b0: 9e:8f:49:a2:c6:af:06:a1:9b:ad:f2:79:eb:fb:2e: 5a:b7:97:35:60:8b:39:80:15:66:f0:23:cf:88:39: 7f:75:65:9e:2b:5b:28:40:8e:5b:22:e9:ea:90:89: 76:f7:94:01:21:84:6c:2b:aa:5e:e3:74:0c:fc:5b: fe:1a:2e:51:45:3f:87:aa:bd:2f:c4:b9:93:5c:5d: 75:76:63:99:8c:1e:7e:e5:d3:11:2c:8c:b4:33:a2: 37:10:b3:52:5c:45:95:68:f5:f4:a9:d1:83:7b:27: 8b:ce:46:ec:d7:7d:9c:c8:b2:9b:f4:22:73:6f:7d: 51:48:36:af:98:96:42:40:16:25:d3:c8:fb:4f:c5: 13:e3:78:96:49:bf:39:a8:c1:f8:e6:3c:76:f1:d2: 72:00:ad:3d:c4:28:8e:b7:be:dc:be:02:e7:75:df: 19:47:97:c9:48:2c:31:57:ca:64:b4:6c:09:68:aa: 60:09:32:5b:c3:ff:f3:14:5e:c1:c4:50:f5:34:83: c4:9d:2f:87:fc:dc:5c:c6:8d:5d:4c:83:01:65:10: af:2c:37:29:32:88:03:09:02:d0:0f:5b:3d:4a:f1: 9a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:80:BE:2F:8A:DD:10:45:0D:CC:78:DB:03:17:78:2E:C1:E6:0F:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f288b-650d-44c2-aec9-5ae902ab4995/a32f288b-650d-44c2-aec9-5ae902ab4995.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 72.19.32.0/19 140.82.240.0/21 173.239.80.0/20 216.155.208.0/20 IPv6: 2607:ff80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25840 33509 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ef:00:b2:a8:bd:de:5d:f5:4a:28:55:e7:77:5c:50:13:2c: 89:a9:78:d6:31:54:12:df:1d:9f:a2:99:96:2a:31:43:ea:4c: 25:72:11:63:7e:26:f0:ad:c1:f2:3e:a5:9c:eb:7b:41:99:d3: d2:2a:63:a7:44:b9:48:f6:59:a4:e6:b5:1a:b2:fb:51:ef:1e: 4e:8c:26:80:9e:f6:72:d6:38:93:d7:0e:e7:94:16:b3:e9:a3: f8:cd:f4:cb:74:09:3d:4e:fd:c3:10:a6:c2:e4:eb:cb:4a:2c: 4e:22:35:8d:a1:49:6f:ef:a2:0a:24:69:e0:a3:8f:cb:f1:7e: ff:23:55:41:f4:53:4d:39:d2:37:14:a6:9e:92:fc:a9:67:29: f9:1b:0f:00:9b:2f:5f:85:dc:73:b5:32:f2:e4:3e:73:39:5f: ba:f3:f3:14:f4:ac:0c:0e:8e:74:50:74:24:d7:6e:f7:14:bf: b3:97:df:a3:90:d7:cb:fc:d5:d4:a8:11:bb:b9:06:53:6e:3a: 97:16:16:65:08:bf:3b:3a:4f:be:98:4b:9b:91:85:5b:bd:19: ff:06:fc:ac:5f:cc:48:28:82:97:9a:91:8b:7c:d3:31:9d:d5: 50:85:de:1f:69:bb:1d:bf:67:e1:99:93:3d:ef:a8:22:97:26: 35:02:df:80 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWELi0LLE5/pg6WMfA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgxNDIxMTgyN1oXDTI1MTExNjIyMTgyN1owLzEtMCsGA1UEAxMk YTMyZjI4OGItNjUwZC00NGMyLWFlYzktNWFlOTAyYWI0OTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrdviWDE4blwSHUjL7ECzAjiZjg7cxLCI457 gLCej0mixq8GoZut8nnr+y5at5c1YIs5gBVm8CPPiDl/dWWeK1soQI5bIunqkIl2 95QBIYRsK6pe43QM/Fv+Gi5RRT+Hqr0vxLmTXF11dmOZjB5+5dMRLIy0M6I3ELNS XEWVaPX0qdGDeyeLzkbs132cyLKb9CJzb31RSDavmJZCQBYl08j7T8UT43iWSb85 qMH45jx28dJyAK09xCiOt77cvgLndd8ZR5fJSCwxV8pktGwJaKpgCTJbw//zFF7B xFD1NIPEnS+H/Nxcxo1dTIMBZRCvLDcpMogDCQLQD1s9SvGaCQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFHiAvi+K3RBFDcx42wMXeC7B5g8yMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h MzJmMjg4Yi02NTBkLTQ0YzItYWVjOS01YWU5MDJhYjQ5OTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2EzMmYyODhiLTY1MGQtNDRjMi1h ZWM5LTVhZTkwMmFiNDk5NS9hMzJmMjg4Yi02NTBkLTQ0YzItYWVjOS01YWU5MDJh YjQ5OTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAVIEyADBAOMUvADBASt71ADBATYm9AwDQQCAAIw BwMFACYH/4AwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICZPACAwCC5TBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAk7wCyqL3eXfVKKFXnd1xQEyyJqXjWMVQS3x2fopmWKjFD6kwlchFjfibwrcHy PqWc63tBmdPSKmOnRLlI9lmk5rUasvtR7x5OjCaAnvZy1jiT1w7nlBaz6aP4zfTL dAk9Tv3DEKbC5OvLSixOIjWNoUlv76IKJGngo4/L8X7/I1VB9FNNOdI3FKaekvyp Zyn5Gw8Amy9fhdxztTLy5D5zOV+68/MU9KwMDo50UHQk1273FL+zl9+jkNfL/NXU qBG7uQZTbjqXFhZlCL87Ok++mEubkYVbvRn/BvysX8xIKIKXmpGLfNMxndVQhd4f absdv2fhmZM976gilyY1At+A -----END CERTIFICATE-----Generated at Fri May 10 14:28:35 2024 by rpki-client on console-fra.rpki-client.org