$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer File: ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer (raw, json) Hash identifier: 4zd+Zogto8kJlID/7h8xLgcX+2V5W+6aB9iocK80O0c= Subject key identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285843262FE30F7B65329806A44F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Sep 2023 00:29:24 +0000 Certificate not after: Thu 11 Dec 2025 01:29:24 +0000 Subordinate resources: AS: 53823 IP: 198.15.0.0/21 IP: 209.172.8.0/22 IP: 2606:48c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:26:2f:e3:0f:7b:65:32:98:06:a4:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 8 00:29:24 2023 GMT Not After : Dec 11 01:29:24 2025 GMT Subject: CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:63:b1:94:b7:b4:37:2c:36:a4:48:6c:00:95: d9:6f:a4:cc:38:a7:ca:29:d1:c2:6f:03:a9:4e:af: f0:e0:d2:28:1f:96:d4:ab:34:56:4e:b5:bb:15:32: 3b:cd:e1:1a:92:01:c0:07:65:27:d6:c7:86:f4:2d: ac:3d:2f:c7:c0:bc:d8:b4:73:27:36:42:fd:a4:9c: ed:19:21:d1:09:b5:61:da:7b:b1:ca:33:10:96:e2: 96:8d:53:c8:d5:f1:e3:4a:30:1f:46:f5:63:36:28: e8:0c:f4:4b:a3:ed:51:3e:33:b6:5e:11:7e:b0:72: 22:61:44:96:e3:bd:06:88:03:9f:57:61:d4:a0:a9: aa:2c:ef:be:d3:93:c0:45:26:04:28:8f:a9:bf:92: 1e:6c:8e:27:c9:d7:ad:de:09:5c:47:f7:3e:1e:5d: 04:0c:d2:a7:ed:6f:26:22:d9:3d:71:1e:df:6d:a0: 7c:c0:f7:0e:f9:69:11:dc:07:d8:18:04:67:bb:03: 1f:2f:74:c5:40:85:11:b2:f5:6c:d2:9a:90:30:40: 0a:de:0a:b5:b0:4b:33:d5:41:6f:8a:87:74:85:93: f8:bc:fc:11:12:a4:88:05:88:46:69:97:69:b5:0c: 5e:26:35:cb:36:db:43:1e:da:47:17:82:f8:0a:e2: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 198.15.0.0/21 209.172.8.0/22 IPv6: 2606:48c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53823 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c9:b0:a8:4e:e0:b0:5a:01:88:46:c3:e7:24:d6:52:5b:17: fe:ff:18:2b:15:76:2b:a4:d5:18:fd:1a:67:e0:74:1c:c4:19: cf:65:dc:9b:76:71:89:c4:7a:a3:80:a3:22:28:5e:d5:4e:bf: 7d:18:15:c0:7f:16:78:39:f4:e7:7e:5f:3c:18:e0:b9:eb:b1: 35:42:00:2c:24:5d:6a:80:54:cd:dd:45:62:6b:3c:ec:e3:56: 30:e3:3c:f4:9f:f9:e3:62:3f:e8:0b:41:3a:25:d5:73:d4:4c: d0:06:8b:24:0b:27:aa:70:43:06:ac:50:93:a2:e6:b3:5c:f4: 96:98:2b:41:b4:74:ac:41:4f:94:d3:58:27:ce:6f:a8:6d:af: 22:f1:c8:e2:6e:74:a1:01:ac:28:46:61:4a:ea:8f:95:10:bf: 2d:36:0b:62:3d:98:b9:6c:30:b6:4e:0f:f1:df:2f:dc:5d:55: 78:f0:f5:57:5d:8d:35:c3:ea:e1:9c:99:91:14:91:92:08:ab: f4:b1:ea:14:2f:8a:29:74:1a:8c:af:a1:48:dd:b0:dc:ab:d6: 6d:10:b8:45:d9:8a:d6:92:9f:2b:38:58:a1:4a:cc:77:fa:ab: 56:0d:14:8c:fe:50:8e:1e:e4:81:3f:77:da:62:99:87:83:7f: 59:f8:5f:cf -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEMmL+MPe2UymAakTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDkwODAwMjkyNFoXDTI1MTIxMTAxMjkyNFowLzEtMCsGA1UEAxMk YWQ2ZTVkZGItMDNmZi00MTM5LThhNTEtYjkxOGJjODRmNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WOxlLe0Nyw2pEhsAJXZb6TMOKfKKdHCbwOp Tq/w4NIoH5bUqzRWTrW7FTI7zeEakgHAB2Un1seG9C2sPS/HwLzYtHMnNkL9pJzt GSHRCbVh2nuxyjMQluKWjVPI1fHjSjAfRvVjNijoDPRLo+1RPjO2XhF+sHIiYUSW 470GiAOfV2HUoKmqLO++05PARSYEKI+pv5IebI4nydet3glcR/c+Hl0EDNKn7W8m Itk9cR7fbaB8wPcO+WkR3AfYGARnuwMfL3TFQIURsvVs0pqQMEAK3gq1sEsz1UFv iod0hZP4vPwREqSIBYhGaZdptQxeJjXLNttDHtpHF4L4CuLlQwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFH9shEdJpzxOVXOfWkYXJCj4K3eoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h ZDZlNWRkYi0wM2ZmLTQxMzktOGE1MS1iOTE4YmM4NGY3MzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FkNmU1ZGRiLTAzZmYtNDEzOS04 YTUxLWI5MThiYzg0ZjczMi9hZDZlNWRkYi0wM2ZmLTQxMzktOGE1MS1iOTE4YmM4 NGY3MzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAPGDwADBALRrAgwDQQCAAIwBwMFACYGSMAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANI/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHnJsKhO4LBaAYhGw+ck 1lJbF/7/GCsVdiuk1Rj9GmfgdBzEGc9l3Jt2cYnEeqOAoyIoXtVOv30YFcB/Fng5 9Od+XzwY4LnrsTVCACwkXWqAVM3dRWJrPOzjVjDjPPSf+eNiP+gLQTol1XPUTNAG iyQLJ6pwQwasUJOi5rNc9JaYK0G0dKxBT5TTWCfOb6htryLxyOJudKEBrChGYUrq j5UQvy02C2I9mLlsMLZOD/HfL9xdVXjw9VddjTXD6uGcmZEUkZIIq/Sx6hQviil0 GoyvoUjdsNyr1m0QuEXZitaSnys4WKFKzHf6q1YNFIz+UI4e5IE/d9pimYeDf1n4 X88= -----END CERTIFICATE-----Generated at Fri May 10 16:51:56 2024 by rpki-client on console-ams.rpki-client.org