$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer File: c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer (raw, json) Hash identifier: 3ImcvMtQEu7I6sSA5pI6BzY9sGZrYCm1/tD0+w5qq2Q= Subject key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584261E26DD123913D36B952C980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Jun 2023 16:54:54 +0000 Certificate not after: Wed 01 Oct 2025 16:54:54 +0000 Subordinate resources: AS: 33125 IP: 66.97.96.0/20 IP: 204.9.152.0/21 IP: 204.11.128.0/21 IP: 204.15.24.0/21 IP: 204.15.104.0/21 IP: 207.200.224.0/19 IP: 2604:9540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:61:e2:6d:d1:23:91:3d:36:b9:52:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 29 16:54:54 2023 GMT Not After : Oct 1 16:54:54 2025 GMT Subject: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:09:cc:a2:3d:a8:63:f3:6d:dd:b9:5c:df:3a: 00:1d:da:bc:a5:e1:f4:1b:fd:c8:95:06:3b:9b:6b: db:e2:03:85:a9:97:a3:86:96:4d:d5:a0:b0:6c:b5: b2:88:ae:18:ca:35:17:af:0d:1c:fd:d4:cc:29:55: e6:65:61:62:15:f0:ae:d4:26:ec:3c:dd:08:1b:1e: 65:14:9d:86:e3:e7:80:c5:16:ea:79:89:b0:44:40: 38:7e:83:e2:a8:ec:9f:be:04:b8:b4:5a:c4:91:83: 34:b4:5a:41:bc:4e:38:8d:78:34:3c:02:39:b9:66: 7b:26:92:58:b0:3a:f9:fe:c6:bf:7e:15:b8:ec:74: 82:0a:cd:d1:5f:6b:1d:59:83:4b:b7:3c:64:49:2f: d5:34:85:63:cf:de:69:7c:41:8d:10:9d:dd:43:a5: 25:19:07:14:06:cb:40:69:3d:c9:45:9e:0d:c3:ad: 07:dd:81:40:d9:84:1c:e6:16:a8:77:24:cd:a1:90: f1:2f:4d:46:b7:69:f3:73:01:71:c0:f0:cf:76:00: 2d:5e:2c:43:18:61:42:aa:d9:20:d1:0b:11:53:be: 60:eb:64:42:41:44:7b:d4:a0:9a:e9:fd:3c:9e:d9: 93:02:63:01:ac:01:21:47:99:33:47:f4:bc:87:88: 0d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 66.97.96.0/20 204.9.152.0/21 204.11.128.0/21 204.15.24.0/21 204.15.104.0/21 207.200.224.0/19 IPv6: 2604:9540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ef:a9:08:74:07:bd:a5:52:a0:7b:26:6a:bc:0e:14:1d:78: 79:84:f1:02:af:65:c6:2b:23:79:81:cd:46:a7:a4:72:71:bb: a8:8b:02:98:b8:8e:2f:90:00:56:5a:19:3f:ba:ec:6f:df:e8: 03:47:1d:57:bb:b5:93:f2:53:e4:d6:21:c2:2d:d9:e2:0c:4c: 36:5a:c9:fb:d3:58:6c:bc:35:33:ba:a3:49:74:85:78:23:18: cd:6b:e4:02:02:27:6a:4e:d9:64:cc:18:a1:96:c0:f9:d1:67: e8:8c:28:ab:f4:e4:38:3e:5d:81:6d:60:75:15:19:82:5c:a0: 84:1b:49:e9:a8:9b:41:c2:3e:b8:f9:20:89:bb:f3:1d:54:7a: 78:f8:ab:e0:76:20:71:f1:ee:0c:30:50:2b:73:59:86:1b:55: 1f:bd:30:a5:6e:7b:85:94:34:d4:51:f3:7a:a3:9d:a5:6d:15: 29:30:7b:03:a5:ae:94:d4:38:e4:0b:e2:23:c4:ec:28:0b:51: 44:b1:90:da:2a:e7:7b:9f:d0:06:0b:65:c0:32:f3:c1:89:b8: a1:4a:92:18:df:01:8f:2d:3a:71:50:b1:65:78:0d:96:3b:d5: 7d:66:87:d8:62:90:a7:a3:63:95:20:2d:0c:8c:34:dc:d8:7e: a3:80:6a:e5 -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEJh4m3RI5E9NrlSyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDYyOTE2NTQ1NFoXDTI1MTAwMTE2NTQ1NFowLzEtMCsGA1UEAxMk Yzg2YzM1M2QtMmFlNC00YTI4LThkZjctMGE5MDZiN2M2OTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAnMoj2oY/Nt3blc3zoAHdq8peH0G/3IlQY7 m2vb4gOFqZejhpZN1aCwbLWyiK4YyjUXrw0c/dTMKVXmZWFiFfCu1CbsPN0IGx5l FJ2G4+eAxRbqeYmwREA4foPiqOyfvgS4tFrEkYM0tFpBvE44jXg0PAI5uWZ7JpJY sDr5/sa/fhW47HSCCs3RX2sdWYNLtzxkSS/VNIVjz95pfEGNEJ3dQ6UlGQcUBstA aT3JRZ4Nw60H3YFA2YQc5haodyTNoZDxL01Gt2nzcwFxwPDPdgAtXixDGGFCqtkg 0QsRU75g62RCQUR71KCa6f08ntmTAmMBrAEhR5kzR/S8h4gNSQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFOPZ4YIK85wlbOsbsDJpvn8k/X71MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j ODZjMzUzZC0yYWU0LTRhMjgtOGRmNy0wYTkwNmI3YzY5NjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2M4NmMzNTNkLTJhZTQtNGEyOC04 ZGY3LTBhOTA2YjdjNjk2My9jODZjMzUzZC0yYWU0LTRhMjgtOGRmNy0wYTkwNmI3 YzY5NjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBARCYWADBAPMCZgDBAPMC4ADBAPMDxgDBAPMD2gD BAXPyOAwDQQCAAIwBwMFACYElUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIFl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHnvqQh0B72lUqB7Jmq8DhQdeHmE8QKvZcYrI3mBzUanpHJxu6iL Api4ji+QAFZaGT+67G/f6ANHHVe7tZPyU+TWIcIt2eIMTDZayfvTWGy8NTO6o0l0 hXgjGM1r5AICJ2pO2WTMGKGWwPnRZ+iMKKv05Dg+XYFtYHUVGYJcoIQbSemom0HC Prj5IIm78x1Uenj4q+B2IHHx7gwwUCtzWYYbVR+9MKVue4WUNNRR83qjnaVtFSkw ewOlrpTUOOQL4iPE7CgLUUSxkNoq53uf0AYLZcAy88GJuKFKkhjfAY8tOnFQsWV4 DZY71X1mh9hikKejY5UgLQyMNNzYfqOAauU= -----END CERTIFICATE-----Generated at Thu May 9 21:06:23 2024 by rpki-client on console-fra.rpki-client.org