$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer File: d5a6b267-6096-4872-9afb-b9517766833a.cer (raw, json) Hash identifier: o+36jhLL0B4Wez/h0tOmv1xruZbuVSEejRZt03bs1Vk= Subject key identifier: 5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847F2B2AA32CAF5907E40EB7240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Nov 2024 01:45:33 +0000 Certificate not after: Wed 24 Feb 2027 01:45:33 +0000 Subordinate resources: IP: 199.7.91.0/24 IP: 2001:500:2d::/48 IP: 2605:880::/32 IP: 2620:50::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f2:b2:aa:32:ca:f5:90:7e:40:eb:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 21 01:45:33 2024 GMT Not After : Feb 24 01:45:33 2027 GMT Subject: CN=d5a6b267-6096-4872-9afb-b9517766833a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:f4:5b:14:21:31:f1:1f:8b:62:6d:7c:61: 9e:09:fa:52:14:e4:3c:c2:90:14:84:3f:c8:1e:28: 7b:94:78:f4:10:f8:77:b7:dc:02:98:20:ee:1b:2c: a2:08:11:59:51:1f:fa:7f:79:a3:fc:38:34:f6:8b: ca:d7:99:a7:d8:d2:ab:85:58:74:e8:bc:14:ed:a0: f8:d1:4d:bd:48:76:91:bf:b4:c1:2b:44:a0:9f:91: 49:9e:cf:59:02:9d:27:75:a8:c4:a6:ac:28:6a:7a: 12:a7:b8:35:1b:0a:5d:25:99:90:3a:40:70:58:1b: 28:4e:94:80:60:92:98:e5:63:75:3d:3d:91:88:dd: bb:dc:39:f7:3d:fa:62:86:7e:14:c5:c9:45:bb:56: 03:c8:2a:cb:94:d1:3d:7b:4e:10:72:d6:71:7a:bb: c3:ba:4f:4f:ee:5d:96:84:71:35:da:95:c4:9a:9a: 5e:50:44:57:98:80:37:0c:0b:c9:ba:5e:76:64:17: 0e:de:3c:34:b2:c1:a6:25:5a:05:45:20:28:f2:8a: 01:45:e3:1e:8d:9f:54:2d:8b:f5:e6:40:75:ff:0d: cb:39:b9:83:a5:c8:f3:30:ec:e3:a3:13:1a:16:e9: 3e:be:e4:7d:7e:28:ce:13:44:63:83:da:4c:3f:a2: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.7.91.0/24 IPv6: 2001:500:2d::/48 2605:880::/32 2620:50::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:38:6b:af:55:4c:30:34:09:1c:9f:a9:e3:31:c1:4d:a9:68: 48:e7:31:a3:a5:e3:4d:d7:33:8e:39:fb:83:81:7c:13:f2:ee: d3:a3:35:da:8a:70:b1:07:c0:f9:fc:07:8b:45:5e:08:3f:1d: 55:12:b6:95:09:64:1d:36:63:59:bd:2e:d7:9f:65:1d:24:82: c9:6b:bf:7e:cc:ea:0e:b0:02:e9:7b:ef:f5:32:af:39:a9:24: 68:96:91:58:fd:f2:5e:c0:24:87:cf:59:51:8a:cd:58:6c:af: 25:6f:11:2f:95:33:71:b4:de:57:b5:8f:d0:ac:ab:9f:41:4b: 17:d2:69:96:af:e7:5d:29:76:d8:ee:3d:4e:55:1e:23:e1:f6: 5a:20:2c:4a:4d:4c:ed:4d:66:29:8b:ef:14:50:7f:76:cd:56: 48:64:9a:e9:ef:99:29:fd:70:0d:67:63:a5:95:c6:64:6c:aa: 0d:85:81:81:42:f0:f7:c7:eb:76:a7:42:30:a6:14:cb:97:02: f9:4a:59:e5:e3:b8:e3:38:10:77:e2:fa:9a:e7:2e:2f:35:db: f1:a6:93:62:b6:ae:a7:ea:58:5b:1d:82:8b:c2:2c:9a:47:a5: ee:83:bf:48:3f:43:f4:49:87:04:51:fd:ad:d5:cf:08:ce:e2: 27:4f:a9:84 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEfysqoyyvWQfkDrckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEyMTAxNDUzM1oXDTI3MDIyNDAxNDUzM1owLzEtMCsGA1UEAxMk ZDVhNmIyNjctNjA5Ni00ODcyLTlhZmItYjk1MTc3NjY4MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB70WxQhMfEfi2JtfGGeCfpSFOQ8wpAUhD/I Hih7lHj0EPh3t9wCmCDuGyyiCBFZUR/6f3mj/Dg09ovK15mn2NKrhVh06LwU7aD4 0U29SHaRv7TBK0Sgn5FJns9ZAp0ndajEpqwoanoSp7g1GwpdJZmQOkBwWBsoTpSA YJKY5WN1PT2RiN273Dn3Pfpihn4UxclFu1YDyCrLlNE9e04QctZxervDuk9P7l2W hHE12pXEmppeUERXmIA3DAvJul52ZBcO3jw0ssGmJVoFRSAo8ooBReMejZ9ULYv1 5kB1/w3LObmDpcjzMOzjoxMaFuk+vuR9fijOE0Rjg9pMP6LWoQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFF7n8ryyFRd912/o+vAERhHjdasyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k NWE2YjI2Ny02MDk2LTQ4NzItOWFmYi1iOTUxNzc2NjgzM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Q1YTZiMjY3LTYwOTYtNDg3Mi05 YWZiLWI5NTE3NzY2ODMzYS9kNWE2YjI2Ny02MDk2LTQ4NzItOWFmYi1iOTUxNzc2 NjgzM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMAwEAgABMAYDBADHB1swHwQCAAIwGQMHACABBQAALQMFACYFCIAD BwQmIABQAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEADThrr1VMMDQJHJ+p4zHBTaloSOcxo6XjTdczjjn7 g4F8E/Lu06M12opwsQfA+fwHi0VeCD8dVRK2lQlkHTZjWb0u159lHSSCyWu/fszq DrAC6Xvv9TKvOakkaJaRWP3yXsAkh89ZUYrNWGyvJW8RL5UzcbTeV7WP0Kyrn0FL F9Jplq/nXSl22O49TlUeI+H2WiAsSk1M7U1mKYvvFFB/ds1WSGSa6e+ZKf1wDWdj pZXGZGyqDYWBgULw98frdqdCMKYUy5cC+UpZ5eO44zgQd+L6mucuLzXb8aaTYrau p+pYWx2Ci8Ismkel7oO/SD9D9EmHBFH9rdXPCM7iJ0+phA== -----END CERTIFICATE-----Generated at Thu Nov 21 16:22:16 2024 by rpki-client on console-ams.rpki-client.org