$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer File: c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer (raw, json) Hash identifier: NYuMNEQ0koPYOuHgYoEYfQcWDJ2X5p+oR1vO9bROQak= Subject key identifier: 2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842F91A75408534870ACA110980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Aug 2023 20:54:51 +0000 Certificate not after: Mon 24 Nov 2025 21:54:51 +0000 Subordinate resources: IP: 151.179.0.0/16 IP: 198.50.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:f9:1a:75:40:85:34:87:0a:ca:11:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 22 20:54:51 2023 GMT Not After : Nov 24 21:54:51 2025 GMT Subject: CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:de:b4:a6:18:71:d5:84:4b:50:75:2a:67: 6e:cc:26:8d:de:4f:72:c6:eb:dd:19:fa:ae:9d:d1: ae:a7:d4:5e:ff:52:f8:ab:79:65:be:67:ce:a5:5e: ec:7b:d5:1b:fd:a7:71:70:b8:78:e0:be:e1:3b:41: 7a:1d:2f:71:0c:e3:a7:9d:6e:f9:e8:af:f8:d6:2f: 97:3b:0a:d0:4b:e0:c3:ab:ad:e4:74:88:cd:01:0d: 24:ed:8f:53:1e:87:ae:06:85:10:fb:5b:43:b8:d1: 75:ca:69:e8:3e:18:d8:cc:59:e0:a4:17:56:f2:6c: 44:08:79:f5:d7:3a:38:ab:16:06:2c:b2:36:cf:04: 2c:0e:23:54:22:98:ca:18:bf:0a:a2:0f:dd:22:0a: e9:42:08:0b:8c:4b:ff:83:9e:48:ac:27:ec:02:8c: bc:60:86:08:9b:ea:2f:4b:ed:ce:f8:48:c8:30:e4: ce:fc:9a:d6:ea:d2:71:c1:42:33:af:ef:b1:7c:a7: 1b:1b:3f:4b:b7:04:8a:a5:68:95:1b:9b:d8:64:b7: fc:ec:5a:09:bb:36:e9:99:90:63:5e:81:b8:fc:ad: 52:35:27:b3:a0:b6:55:84:4b:11:6f:c7:f1:93:36: c2:17:5b:90:c3:48:57:81:61:9d:63:ca:1a:8e:ad: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 151.179.0.0/16 198.50.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ca:9f:d7:53:84:de:44:6b:af:0a:18:57:86:ae:1a:0c:c2: c6:86:27:46:8e:8b:c5:9f:ad:c9:f8:01:5d:31:a7:c2:ea:ff: 63:1f:dc:16:39:6e:c8:de:81:43:01:b8:ab:9b:fd:88:2d:8b: f6:78:5c:d9:8b:4c:b9:c8:4c:df:c7:40:16:f5:e8:79:07:6f: 83:61:cd:c5:73:05:db:18:0c:d2:cc:58:b9:7b:74:f2:fa:56: 5d:8e:9d:98:51:ff:3b:6b:9a:82:43:32:76:d8:1b:ed:b9:fd: 4f:b2:b6:c3:45:fd:3e:42:23:d7:b9:e7:90:17:0b:af:ed:57: 6e:44:c3:27:ee:5f:a3:f7:6e:bc:26:11:39:08:18:a2:d0:37: 80:94:30:89:5a:73:4a:86:84:79:8b:0d:b3:60:48:67:dd:c5: 76:33:e5:ee:2a:9a:aa:47:d2:f8:82:76:b8:e6:31:a4:82:9b: 68:5a:ce:17:95:0b:93:39:b3:74:76:0f:42:2a:c7:c7:d6:59: c4:80:98:0f:9d:13:2d:c5:4f:ab:54:96:14:7a:e7:0c:04:12: da:cb:cf:ba:66:1e:79:a7:d1:1b:6a:02:90:d9:7a:9c:e9:6c: c2:54:c8:bf:82:98:23:94:ca:0f:41:39:3f:29:f7:52:1b:b9: a1:f5:2f:ff -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEL5GnVAhTSHCsoRCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgyMjIwNTQ1MVoXDTI1MTEyNDIxNTQ1MVowLzEtMCsGA1UEAxMk YzJlNTMzOTgtZDg3Ny00MzgxLThmZGItMmVjN2RiNTNmYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcPetKYYcdWES1B1KmduzCaN3k9yxuvdGfqu ndGup9Re/1L4q3llvmfOpV7se9Ub/adxcLh44L7hO0F6HS9xDOOnnW756K/41i+X OwrQS+DDq63kdIjNAQ0k7Y9THoeuBoUQ+1tDuNF1ymnoPhjYzFngpBdW8mxECHn1 1zo4qxYGLLI2zwQsDiNUIpjKGL8Kog/dIgrpQggLjEv/g55IrCfsAoy8YIYIm+ov S+3O+EjIMOTO/JrW6tJxwUIzr++xfKcbGz9LtwSKpWiVG5vYZLf87FoJuzbpmZBj XoG4/K1SNSezoLZVhEsRb8fxkzbCF1uQw0hXgWGdY8oajq2VfQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFCvhuP5OdNsnS45fzp0wZufaDepRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j MmU1MzM5OC1kODc3LTQzODEtOGZkYi0yZWM3ZGI1M2ZjNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2MyZTUzMzk4LWQ4NzctNDM4MS04 ZmRiLTJlYzdkYjUzZmM1ZS9jMmU1MzM5OC1kODc3LTQzODEtOGZkYi0yZWM3ZGI1 M2ZjNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCXswMEBcYyIDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJyp/XU4TeRGuv ChhXhq4aDMLGhidGjovFn63J+AFdMafC6v9jH9wWOW7I3oFDAbirm/2ILYv2eFzZ i0y5yEzfx0AW9eh5B2+DYc3FcwXbGAzSzFi5e3Ty+lZdjp2YUf87a5qCQzJ22Bvt uf1PsrbDRf0+QiPXueeQFwuv7VduRMMn7l+j9268JhE5CBii0DeAlDCJWnNKhoR5 iw2zYEhn3cV2M+XuKpqqR9L4gna45jGkgptoWs4XlQuTObN0dg9CKsfH1lnEgJgP nRMtxU+rVJYUeucMBBLay8+6Zh55p9EbagKQ2Xqc6WzCVMi/gpgjlMoPQTk/KfdS G7mh9S// -----END CERTIFICATE-----Generated at Thu May 9 21:06:23 2024 by rpki-client on console-fra.rpki-client.org