$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543.cer File: b16b3fcc-0a15-499f-8a99-d97f68a2f543.cer (raw, json) Hash identifier: E/CCLnVR/Oq0vwzZAuYIHn7VCHQoJwfQ5cwDW4qs5kU= Subject key identifier: 6B:AF:86:D8:3C:10:DA:9F:87:27:40:A4:EC:70:3A:38:45:A3:21:E3 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847C0548C26DBC3275597DE5580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/b16b3fcc-0a15-499f-8a99-d97f68a2f543.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 Nov 2024 00:45:30 +0000 Certificate not after: Sat 06 Feb 2027 01:45:30 +0000 Subordinate resources: AS: 16934 IP: 68.233.144.0/20 IP: 158.51.20.0/22 IP: 2607:c700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c0:54:8c:26:db:c3:27:55:97:de:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 3 00:45:30 2024 GMT Not After : Feb 6 01:45:30 2027 GMT Subject: CN=b16b3fcc-0a15-499f-8a99-d97f68a2f543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:41:ac:1b:ab:60:6a:61:5c:6e:7e:7c:fe: 43:e5:40:86:27:7e:4b:c1:f6:85:5a:ef:95:e8:d3: c0:c2:48:08:10:ac:8e:f6:91:3b:59:1b:6c:6e:f8: 11:d6:fa:71:3c:22:f7:2a:77:be:c9:2d:35:89:9f: a3:53:a7:ab:29:93:ce:26:fb:f2:d4:56:06:0a:4b: 53:93:bb:b4:95:e8:5f:6e:63:4f:3e:98:e2:e1:a1: 86:30:33:13:b9:8b:97:41:ec:6a:e8:bb:df:16:03: 7b:8c:23:6d:8f:da:a1:01:16:50:74:84:52:ca:04: 7c:bc:54:60:b7:9b:25:b2:d9:0e:ba:c5:2f:83:a8: 31:de:46:cc:83:d1:81:fb:a3:95:27:53:13:dc:14: 07:e9:b8:42:28:14:4b:0e:fe:a8:05:d3:89:cd:6d: 56:f0:c7:91:5b:04:78:33:5a:19:3f:7c:ef:f8:9d: de:eb:d5:c8:90:b7:69:b9:4b:aa:58:06:98:1a:2c: 1e:35:f8:df:d4:83:10:c0:9a:97:88:cd:ec:5b:61: a4:1a:34:e8:78:0b:c2:7d:24:6e:d0:f4:fc:e2:a8: b2:38:50:bb:30:ba:72:21:63:d4:82:f1:c3:b1:53: d2:7e:63:a5:65:a7:65:3d:63:20:db:bb:32:7e:45: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AF:86:D8:3C:10:DA:9F:87:27:40:A4:EC:70:3A:38:45:A3:21:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b16b3fcc-0a15-499f-8a99-d97f68a2f543/b16b3fcc-0a15-499f-8a99-d97f68a2f543.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 68.233.144.0/20 158.51.20.0/22 IPv6: 2607:c700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16934 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:f0:df:9e:60:8f:88:38:83:99:6d:6f:0b:69:2e:93:3d:5c: 6c:12:00:20:54:0d:04:92:b8:64:31:e1:57:18:e8:f9:e8:0c: e7:4d:0c:13:d5:24:4c:01:88:d9:4a:e8:77:68:95:4a:89:68: 5d:b4:dc:77:8e:9a:f5:56:ee:a9:d0:2a:b4:95:9d:b4:c7:63: 57:fd:a1:97:03:bc:56:91:c7:f8:7d:d9:71:7b:e2:ab:ca:22: 6c:9a:21:e9:cb:a3:b1:44:66:29:08:dc:78:6e:d1:45:53:9b: 1a:8d:6d:cf:a8:bc:02:db:02:23:35:3b:8e:75:1d:71:13:19: 9e:95:4c:5f:8a:58:6d:c1:76:ad:9b:a4:83:64:15:31:70:c7: 74:6c:c0:a1:fa:33:67:9b:8d:6a:06:4b:3a:66:42:b3:0d:db: a3:96:ec:f8:18:71:9c:1c:71:10:7b:e4:5e:15:2e:85:1b:77: 31:47:c3:45:e3:ea:d6:87:f2:f2:12:d6:2a:33:6d:45:0c:c2: 29:f5:9a:a1:63:77:82:3e:8d:dd:c3:99:22:99:5a:63:dc:de: d9:5a:9f:64:df:cb:bb:f3:20:07:10:b4:1a:b4:dc:f4:6a:0d: 31:d3:6c:3b:9a:d1:5f:46:4e:fe:51:47:3a:18:0b:e5:d3:d7: e7:08:2d:fd -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEfAVIwm28MnVZfeVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEwMzAwNDUzMFoXDTI3MDIwNjAxNDUzMFowLzEtMCsGA1UEAxMk YjE2YjNmY2MtMGExNS00OTlmLThhOTktZDk3ZjY4YTJmNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaFBrBurYGphXG5+fP5D5UCGJ35LwfaFWu+V 6NPAwkgIEKyO9pE7WRtsbvgR1vpxPCL3Kne+yS01iZ+jU6erKZPOJvvy1FYGCktT k7u0lehfbmNPPpji4aGGMDMTuYuXQexq6LvfFgN7jCNtj9qhARZQdIRSygR8vFRg t5slstkOusUvg6gx3kbMg9GB+6OVJ1MT3BQH6bhCKBRLDv6oBdOJzW1W8MeRWwR4 M1oZP3zv+J3e69XIkLdpuUuqWAaYGiweNfjf1IMQwJqXiM3sW2GkGjToeAvCfSRu 0PT84qiyOFC7MLpyIWPUgvHDsVPSfmOlZadlPWMg27syfkXcFwIDAQABo4IELzCC BCswHQYDVR0OBBYEFGuvhtg8ENqfhydApOxwOjhFoyHjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i MTZiM2ZjYy0wYTE1LTQ5OWYtOGE5OS1kOTdmNjhhMmY1NDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2IxNmIzZmNjLTBhMTUtNDk5Zi04 YTk5LWQ5N2Y2OGEyZjU0My9iMTZiM2ZjYy0wYTE1LTQ5OWYtOGE5OS1kOTdmNjhh MmY1NDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARE6ZADBAKeMxQwDQQCAAIwBwMFACYHxwAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICQiYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApfDfnmCPiDiDmW1vC2ku kz1cbBIAIFQNBJK4ZDHhVxjo+egM500ME9UkTAGI2Urod2iVSoloXbTcd46a9Vbu qdAqtJWdtMdjV/2hlwO8VpHH+H3ZcXviq8oibJoh6cujsURmKQjceG7RRVObGo1t z6i8AtsCIzU7jnUdcRMZnpVMX4pYbcF2rZukg2QVMXDHdGzAofozZ5uNagZLOmZC sw3bo5bs+BhxnBxxEHvkXhUuhRt3MUfDRePq1ofy8hLWKjNtRQzCKfWaoWN3gj6N 3cOZIplaY9ze2VqfZN/Lu/MgBxC0GrTc9GoNMdNsO5rRX0ZO/lFHOhgL5dPX5wgt /Q== -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:28 2024 by rpki-client on console-fra.rpki-client.org