$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer File: a91f81ff-5317-40f4-a544-5df2e3358a57.cer (raw, json) Hash identifier: 8pEYYYIidTTfmApw8FqxdpfGdnwoTaXvVkVM7xamh9s= Subject key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858433C0DFCE16C95D69AE0548280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 15 Sep 2023 20:28:53 +0000 Certificate not after: Thu 18 Dec 2025 21:28:53 +0000 Subordinate resources: IP: 199.190.128.0/23 IP: 204.62.16.0 -- 204.62.27.255 IP: 204.87.64.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:3c:0d:fc:e1:6c:95:d6:9a:e0:54:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 15 20:28:53 2023 GMT Not After : Dec 18 21:28:53 2025 GMT Subject: CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:14:ca:dd:52:d4:f5:eb:c6:25:c7:93:11:91: b1:da:73:3d:98:66:d4:96:9d:b2:04:d8:ed:5b:e6: 36:f6:38:06:76:fa:cf:b7:ae:0c:14:af:f6:1f:af: 60:19:5a:d2:5b:c2:b8:45:58:8f:22:07:7f:94:f6: c2:a5:6e:50:8c:c6:ce:04:3a:6c:1b:ca:5b:90:19: ad:7d:5c:1b:17:14:03:1e:29:fd:cc:59:a8:13:20: 1f:81:3e:49:a3:15:ce:ec:6b:79:63:91:f0:12:e8: 56:2b:44:ac:12:75:55:b4:02:b8:87:97:60:b0:db: ab:6e:ff:bc:84:c8:c3:1a:51:d5:f9:f9:2a:73:61: e6:60:24:aa:2f:be:0b:0d:fd:75:5e:35:96:54:2e: c8:c8:59:1f:2a:be:5f:02:36:8e:90:cc:9d:a5:73: 37:2f:45:81:52:d3:5a:87:5f:03:da:1a:09:00:47: 70:17:58:c9:3f:84:24:56:1f:9b:56:7d:48:ed:80: 5f:19:ab:08:18:72:b3:ae:21:1c:e0:0d:93:ab:9e: 5b:c6:ee:9d:29:11:04:d7:97:9d:49:4a:b4:e5:f7: 06:86:8b:02:3b:66:7e:63:0a:46:3f:39:75:29:33: de:90:b7:d8:31:96:da:de:2e:a9:81:84:96:78:bf: 82:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.190.128.0/23 204.62.16.0-204.62.27.255 204.87.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a2:aa:75:6a:e0:a4:52:e2:ba:53:42:65:06:d1:bc:0e:3b: 56:39:a3:1b:9b:bd:4f:29:92:5e:d4:8b:bf:a5:46:02:bb:5b: 93:17:6f:7c:63:21:a7:1a:c1:2e:1a:1e:c7:aa:08:ca:e1:59: 93:a6:cd:38:e5:12:d2:0b:04:ff:11:56:eb:5c:2f:f4:c6:22: e5:14:7b:0c:9e:ec:28:08:66:86:a5:5b:03:c9:72:68:32:be: 55:6b:77:e3:d4:9d:72:d0:29:9a:7a:70:2f:27:89:8e:cc:f8: 80:dc:23:52:2f:bd:1f:7c:41:56:10:d0:a3:4f:15:05:e6:e8: 70:30:24:58:62:74:6f:f7:89:92:52:5a:4b:4e:51:a1:9e:06: ec:83:c8:a1:6a:23:6a:82:49:98:1a:3c:52:84:8c:bd:a7:3c: e1:4d:bb:ba:80:ff:d6:e0:86:39:62:4c:a1:5d:78:4c:3e:22: 82:ab:da:7c:55:6b:20:9f:1b:55:ea:7c:86:13:3e:28:3c:6c: cf:f9:42:c5:31:64:0b:c4:36:51:b0:7a:c5:e5:58:3d:b7:5c: 48:22:e2:58:18:c8:00:e0:fd:25:49:35:fc:48:06:cb:97:34: ff:59:97:1e:fb:7e:68:37:ec:dc:dc:0e:7c:34:ee:13:85:08: 9d:3c:83:c1 -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWEM8DfzhbJXWmuBUgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDkxNTIwMjg1M1oXDTI1MTIxODIxMjg1M1owLzEtMCsGA1UEAxMk YTkxZjgxZmYtNTMxNy00MGY0LWE1NDQtNWRmMmUzMzU4YTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBTK3VLU9evGJceTEZGx2nM9mGbUlp2yBNjt W+Y29jgGdvrPt64MFK/2H69gGVrSW8K4RViPIgd/lPbCpW5QjMbOBDpsG8pbkBmt fVwbFxQDHin9zFmoEyAfgT5JoxXO7Gt5Y5HwEuhWK0SsEnVVtAK4h5dgsNurbv+8 hMjDGlHV+fkqc2HmYCSqL74LDf11XjWWVC7IyFkfKr5fAjaOkMydpXM3L0WBUtNa h18D2hoJAEdwF1jJP4QkVh+bVn1I7YBfGasIGHKzriEc4A2Tq55bxu6dKREE15ed SUq05fcGhosCO2Z+YwpGPzl1KTPekLfYMZba3i6pgYSWeL+CrwIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFDQHE2cPER2zTLIudb2wbkvUXyJeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h OTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMzNThhNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2E5MWY4MWZmLTUzMTctNDBmNC1h NTQ0LTVkZjJlMzM1OGE1Ny9hOTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMz NThhNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBAHHvoAwDAMEBMw+EAMEAsw+GAMEBsxXQDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBpoqp1auCkUuK6U0JlBtG8DjtWOaMbm71PKZJe1Iu/pUYCu1uTF298YyGn GsEuGh7HqgjK4VmTps045RLSCwT/EVbrXC/0xiLlFHsMnuwoCGaGpVsDyXJoMr5V a3fj1J1y0CmaenAvJ4mOzPiA3CNSL70ffEFWENCjTxUF5uhwMCRYYnRv94mSUlpL TlGhngbsg8ihaiNqgkmYGjxShIy9pzzhTbu6gP/W4IY5YkyhXXhMPiKCq9p8VWsg nxtV6nyGEz4oPGzP+ULFMWQLxDZRsHrF5Vg9t1xIIuJYGMgA4P0lSTX8SAbLlzT/ WZce+35oN+zc3A58NO4ThQidPIPB -----END CERTIFICATE-----Generated at Thu May 9 21:06:21 2024 by rpki-client on console-fra.rpki-client.org