$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260.cer File: a32f8632-bd41-4783-afca-fc93bcb85260.cer (raw, json) Hash identifier: LJQKWxM84aBaGP24/mHqy+Zox+mN7BcrlQzMU9YgRfs= Subject key identifier: 4E:76:F5:2D:CF:B4:A8:64:5D:50:9F:3E:9A:C1:31:4D:4D:87:F3:83 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842114EBD1D93F4E829F7891800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 31 May 2023 20:12:39 +0000 Certificate not after: Tue 02 Sep 2025 20:12:39 +0000 Subordinate resources: AS: 398850 IP: 192.234.172.0/24 IP: 204.235.170.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:11:4e:bd:1d:93:f4:e8:29:f7:89:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: May 31 20:12:39 2023 GMT Not After : Sep 2 20:12:39 2025 GMT Subject: CN=a32f8632-bd41-4783-afca-fc93bcb85260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:14:38:ef:fb:22:05:55:de:fe:28:9f:08:76: be:42:b1:81:52:1c:03:0a:9c:01:80:21:2b:6a:01: 05:63:83:7d:8a:b6:ef:f3:01:0e:86:88:1e:4b:35: 3a:44:bd:f7:fa:87:bb:4f:8d:99:1a:76:63:07:5d: 64:a3:39:64:44:11:0c:16:53:6a:5a:0f:41:7c:1f: 9d:54:b9:88:2b:fe:0d:27:eb:23:93:cd:f7:13:31: fa:ad:51:60:42:4f:46:a4:f9:11:ff:62:85:88:c3: 05:48:5d:59:a2:4f:6c:0f:cc:9c:2f:3f:fd:c5:47: 26:f7:0d:4f:e5:95:9a:0c:b8:bb:e0:df:7d:03:37: 4f:8d:9a:6b:88:61:e9:09:9f:89:9e:84:4f:98:73: d3:b9:9c:6b:2f:c0:6f:f2:0b:f0:d5:ba:34:56:b8: a5:b0:3c:bb:e9:20:5a:25:b5:c9:8a:dc:a7:c4:e4: 23:ad:71:64:88:04:a0:3b:82:f1:b2:ee:4b:d8:7d: 30:20:f6:b4:ae:97:96:25:fe:9d:d9:8c:52:44:b8: dd:3b:73:d6:c3:73:0f:a4:12:7c:13:f7:eb:bc:31: 29:73:79:72:6e:f6:cf:d9:dd:a9:01:d9:b8:9b:0f: 1d:22:76:a2:09:6d:87:35:55:c0:e0:87:98:82:62: ec:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:76:F5:2D:CF:B4:A8:64:5D:50:9F:3E:9A:C1:31:4D:4D:87:F3:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.234.172.0/24 204.235.170.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398850 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6a:fb:51:cd:d3:cb:c8:fa:64:15:8f:46:88:e4:67:a8:dd: 25:b4:85:ad:f4:82:21:a1:c2:fa:61:82:a5:4d:0e:49:13:bd: 8a:a4:e7:d0:22:00:0b:c2:fd:b6:4c:a2:f6:c0:df:64:1c:9b: 0c:3f:8d:ad:10:a3:99:17:90:41:3b:34:6a:4b:d8:df:d9:94: 02:08:1a:f2:f5:11:f0:3d:1e:2d:97:14:50:b9:a4:58:ff:05: 97:f2:64:95:7e:1f:61:05:76:30:48:68:75:92:b5:b1:6f:bd: 5f:bd:b1:e6:8c:6b:c6:de:ef:09:ee:fc:0c:c4:81:6b:23:fc: e8:83:82:7f:39:d9:ca:ff:8a:06:d1:f7:8f:09:f4:85:90:dd: d7:76:f4:4a:d4:3a:59:65:4e:8a:58:f9:51:99:d7:d2:da:2a: 07:c1:48:91:37:61:29:99:a9:c3:72:ea:92:23:20:f2:4c:c8: 06:28:6f:b5:f3:e1:70:5b:f7:48:db:fe:75:36:74:2d:61:1c: bc:d1:49:6b:9d:6f:63:7e:72:7e:b5:14:89:ec:13:59:c6:cc: c0:62:64:ad:93:40:f9:2a:24:46:43:a5:f2:3f:7b:6c:08:bc: c5:08:71:ae:d2:7a:55:b6:a0:5c:0f:d1:e3:95:7f:c5:eb:6e: 9d:39:46:0d -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEIRTr0dk/ToKfeJGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDUzMTIwMTIzOVoXDTI1MDkwMjIwMTIzOVowLzEtMCsGA1UEAxMk YTMyZjg2MzItYmQ0MS00NzgzLWFmY2EtZmM5M2JjYjg1MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxQ47/siBVXe/iifCHa+QrGBUhwDCpwBgCEr agEFY4N9irbv8wEOhogeSzU6RL33+oe7T42ZGnZjB11kozlkRBEMFlNqWg9BfB+d VLmIK/4NJ+sjk833EzH6rVFgQk9GpPkR/2KFiMMFSF1Zok9sD8ycLz/9xUcm9w1P 5ZWaDLi74N99AzdPjZpriGHpCZ+JnoRPmHPTuZxrL8Bv8gvw1bo0VrilsDy76SBa JbXJitynxOQjrXFkiASgO4Lxsu5L2H0wIPa0rpeWJf6d2YxSRLjdO3PWw3MPpBJ8 E/frvDEpc3lybvbP2d2pAdm4mw8dInaiCW2HNVXA4IeYgmLs3wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFE529S3PtKhkXVCfPprBMU1Nh/ODMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h MzJmODYzMi1iZDQxLTQ3ODMtYWZjYS1mYzkzYmNiODUyNjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2EzMmY4NjMyLWJkNDEtNDc4My1h ZmNhLWZjOTNiY2I4NTI2MC9hMzJmODYzMi1iZDQxLTQ3ODMtYWZjYS1mYzkzYmNi ODUyNjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADA6qwDBAHM66owGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhYCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFZq+1HN08vI+mQVj0aI5Geo3SW0ha30giGhwvph gqVNDkkTvYqk59AiAAvC/bZMovbA32Qcmww/ja0Qo5kXkEE7NGpL2N/ZlAIIGvL1 EfA9Hi2XFFC5pFj/BZfyZJV+H2EFdjBIaHWStbFvvV+9seaMa8be7wnu/AzEgWsj /OiDgn852cr/igbR948J9IWQ3dd29ErUOlllTopY+VGZ19LaKgfBSJE3YSmZqcNy 6pIjIPJMyAYob7Xz4XBb90jb/nU2dC1hHLzRSWudb2N+cn61FInsE1nGzMBiZK2T QPkqJEZDpfI/e2wIvMUIca7SelW2oFwP0eOVf8Xrbp05Rg0= -----END CERTIFICATE-----Generated at Thu May 9 21:06:21 2024 by rpki-client on console-fra.rpki-client.org