$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6.cer File: b366c6bd-92d1-4a02-8969-83018f1caca6.cer (raw, json) Hash identifier: 6xef8IT80qM4tQKrKsMbt3vQdEImfoewgdZ+z95NkHI= Subject key identifier: 93:F5:98:8D:EF:29:05:D1:03:71:DA:F4:25:9A:62:04:AB:5E:BA:8B Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858430F7CA929C6CF7E02BCBCA400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/b366c6bd-92d1-4a02-8969-83018f1caca6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Aug 2023 21:20:30 +0000 Certificate not after: Tue 02 Dec 2025 22:20:30 +0000 Subordinate resources: AS: 29749 IP: 208.99.40.0/22 IP: 2604:2f40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:0f:7c:a9:29:c6:cf:7e:02:bc:bc:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 30 21:20:30 2023 GMT Not After : Dec 2 22:20:30 2025 GMT Subject: CN=b366c6bd-92d1-4a02-8969-83018f1caca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:6f:48:08:06:e2:4e:ba:af:81:73:6a:dd: 32:b5:bd:06:90:a6:07:e3:2b:fb:c9:6b:36:d3:21: ff:37:8c:1e:01:7f:2b:bf:56:b9:bd:25:62:6e:a5: 86:28:dc:ba:a5:a0:01:28:23:55:da:60:78:36:63: a9:4a:f8:a5:71:b4:48:13:fd:91:6c:c1:5c:62:aa: 62:8e:09:6c:72:3b:e1:ca:f6:33:1a:36:00:cb:00: 62:4a:5f:85:fd:e0:5b:da:fd:a0:80:f7:11:99:b5: 5f:b0:75:9c:d5:d6:fc:5c:3b:d8:68:97:42:08:d9: 21:6b:e7:a9:54:2a:b8:1e:80:33:2d:ce:60:53:fe: 58:4d:5f:82:b4:c8:75:87:02:e4:c3:b9:10:69:5f: e4:6c:b8:3e:41:f7:52:63:7d:a7:16:8e:c1:7d:4f: ef:f6:13:e6:e7:c2:ce:3a:2b:de:6d:de:39:ce:a0: 60:e2:1f:25:86:32:d4:bd:14:79:8b:5d:5f:11:99: 0c:38:ae:f7:98:e0:a5:70:bb:17:ec:26:b0:a6:d6: be:2e:ec:ae:9b:6e:cb:2e:d7:66:d2:ed:69:ca:d3: d5:25:10:1f:f2:4b:50:a3:a8:1e:4e:f3:3e:e9:50: 84:49:fe:54:96:fc:f2:5f:43:93:4f:64:36:5d:dc: 22:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F5:98:8D:EF:29:05:D1:03:71:DA:F4:25:9A:62:04:AB:5E:BA:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/b366c6bd-92d1-4a02-8969-83018f1caca6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 208.99.40.0/22 IPv6: 2604:2f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29749 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:9e:a9:0b:e5:a2:09:93:12:67:fd:65:64:b5:ae:c7:c4:95: a5:34:2b:20:9d:63:2c:f1:4a:bf:de:7d:48:6a:61:2a:8e:9b: 25:f4:0f:92:f9:ec:9a:93:7f:da:9f:63:05:68:65:b1:6e:f5: 99:47:fd:1d:a7:4b:42:2e:7a:85:b2:75:8c:74:dc:ed:70:3d: 67:ac:5e:e1:9c:ab:79:79:c2:c9:01:80:62:87:0d:9b:4d:6d: f9:67:a8:78:e6:0d:e4:8f:c1:69:d5:6d:57:28:f7:6a:91:4c: 34:25:e3:73:6b:29:29:df:cb:63:c7:14:b1:93:b1:84:74:c5: b8:d9:4c:03:99:4c:3e:a5:db:8a:b7:0a:9c:42:65:17:4e:93: 5b:d7:8e:d6:d4:93:29:65:40:e9:4c:07:63:7c:92:86:88:7a: 1f:08:84:e2:78:7d:fc:72:10:1c:82:8d:6e:c3:f4:8e:0b:bb: 42:3d:61:ba:ac:a6:32:d1:dc:ee:e4:c5:2e:03:b5:76:52:62: 07:b6:98:23:68:8a:6b:c8:ff:a8:15:15:09:38:a1:38:04:f1: a0:66:db:b1:d3:a3:02:e1:57:ff:eb:f0:44:d6:d8:a1:06:c3: e8:ed:62:a1:a4:6f:b5:a9:34:07:74:ab:a3:44:1e:25:5d:4c: 5d:f4:da:4b -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEMPfKkpxs9+Ary8pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgzMDIxMjAzMFoXDTI1MTIwMjIyMjAzMFowLzEtMCsGA1UEAxMk YjM2NmM2YmQtOTJkMS00YTAyLTg5NjktODMwMThmMWNhY2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyBvSAgG4k66r4Fzat0ytb0GkKYH4yv7yWs2 0yH/N4weAX8rv1a5vSVibqWGKNy6paABKCNV2mB4NmOpSvilcbRIE/2RbMFcYqpi jglscjvhyvYzGjYAywBiSl+F/eBb2v2ggPcRmbVfsHWc1db8XDvYaJdCCNkha+ep VCq4HoAzLc5gU/5YTV+CtMh1hwLkw7kQaV/kbLg+QfdSY32nFo7BfU/v9hPm58LO Oivebd45zqBg4h8lhjLUvRR5i11fEZkMOK73mOClcLsX7Cawpta+Luyum27LLtdm 0u1pytPVJRAf8ktQo6geTvM+6VCESf5UlvzyX0OTT2Q2XdwiXQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFJP1mI3vKQXRA3Ha9CWaYgSrXrqLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i MzY2YzZiZC05MmQxLTRhMDItODk2OS04MzAxOGYxY2FjYTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2IzNjZjNmJkLTkyZDEtNGEwMi04 OTY5LTgzMDE4ZjFjYWNhNi9iMzY2YzZiZC05MmQxLTRhMDItODk2OS04MzAxOGYx Y2FjYTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALQYygwDQQCAAIwBwMFACYEL0AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICdDUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFp6pC+WiCZMSZ/1lZLWux8SVpTQr IJ1jLPFKv959SGphKo6bJfQPkvnsmpN/2p9jBWhlsW71mUf9HadLQi56hbJ1jHTc 7XA9Z6xe4ZyreXnCyQGAYocNm01t+WeoeOYN5I/BadVtVyj3apFMNCXjc2spKd/L Y8cUsZOxhHTFuNlMA5lMPqXbircKnEJlF06TW9eO1tSTKWVA6UwHY3yShoh6HwiE 4nh9/HIQHIKNbsP0jgu7Qj1huqymMtHc7uTFLgO1dlJiB7aYI2iKa8j/qBUVCTih OATxoGbbsdOjAuFX/+vwRNbYoQbD6O1ioaRvtak0B3Sro0QeJV1MXfTaSw== -----END CERTIFICATE-----Generated at Thu May 9 21:06:22 2024 by rpki-client on console-fra.rpki-client.org