$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer File: da733fda-b405-4eb1-adbe-811e8f7eacd4.cer (raw, json) Hash identifier: oBWNmf7LTcMvQ0mNf+fSWnRa7SAiU+uw9e8f3ak3pRc= Subject key identifier: CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584723FE37352375E60FB6E4A8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Sep 2024 00:45:27 +0000 Certificate not after: Sat 12 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 55159 IP: 64.89.168.0/22 IP: 2607:18c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:23:fe:37:35:23:75:e6:0f:b6:e4:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 8 00:45:27 2024 GMT Not After : Dec 12 01:45:27 2026 GMT Subject: CN=da733fda-b405-4eb1-adbe-811e8f7eacd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:41:9f:b7:74:f3:22:c7:a4:55:76:2e:10:e1: fc:57:ac:30:23:c5:93:3e:c4:36:e4:b1:e6:42:87: 1d:ce:14:d7:aa:d4:30:db:9b:d8:4b:18:c7:c4:d3: 69:48:6c:47:83:89:f8:47:ed:fd:66:ef:7d:c4:41: 0e:87:3a:03:79:f9:9e:fd:48:54:47:62:7c:8d:53: 32:44:53:55:40:0d:34:e0:f8:9d:60:97:51:d5:e8: ef:64:f0:b3:35:73:32:e5:48:16:d6:af:68:8f:b0: 00:8e:37:7d:ee:6a:17:1a:b3:c7:97:14:ee:43:fc: eb:f2:ad:a4:87:ff:8a:b8:7f:1c:4c:f1:30:94:9d: 82:7c:46:1a:02:fa:95:6a:36:54:53:e1:4c:29:0d: a7:2c:47:df:f2:c8:c2:e7:de:de:49:a8:b6:5b:1d: 39:0c:21:ef:5f:ce:0a:89:48:94:ac:e7:0a:6e:7b: 61:89:a5:83:ad:c2:5b:fe:a6:17:d1:32:52:eb:9e: a3:5a:f9:bb:b9:3d:cf:8f:15:8f:3c:66:1e:e2:ec: ee:cd:2a:98:ac:59:33:96:64:3a:03:8d:b0:b6:6d: ce:ec:ce:31:ac:e4:c0:33:72:8c:0a:69:3a:f3:fc: f2:6b:1a:60:c0:6c:4a:02:df:9f:a4:08:23:b0:d8: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.89.168.0/22 IPv6: 2607:18c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55159 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c0:c7:bb:ce:07:b4:df:3e:7f:75:48:74:2e:64:3f:9b:61: da:bc:34:ef:6d:3a:f4:69:cb:d0:6a:bf:b6:ea:d7:79:43:bf: fa:1b:62:37:84:d8:87:25:63:e7:90:87:ea:81:64:07:dd:be: 5c:a0:9f:dc:1b:bb:17:92:4e:09:ba:04:fb:70:a8:fb:84:fa: dc:cc:93:bf:ac:de:78:1c:f8:48:1a:f0:11:5e:a5:6d:38:77: d2:d6:12:fa:2b:e8:b5:f4:43:d4:a7:db:b5:cc:ec:28:0b:bb: 58:f2:5a:ed:34:25:8c:bd:8f:a5:ad:96:44:25:00:f8:f7:df: 50:72:e6:5c:ed:5f:68:1d:43:cf:65:ba:09:92:aa:c1:2c:a3: 11:97:58:9f:d3:c6:cf:65:62:11:ba:af:e7:8c:d4:59:0e:aa: bd:2a:79:2d:23:84:c5:fe:83:8e:5e:b4:cf:83:1c:36:1f:fa: fc:e7:d0:d2:39:4e:04:93:8e:ea:60:83:f5:42:6c:f3:6f:8e: 68:56:50:6d:7b:16:57:99:19:aa:80:cc:83:e2:97:e3:79:f1: 91:24:47:3b:ad:75:74:fc:b0:2c:d9:4b:80:e5:97:69:c2:0a: 4a:7c:a7:f3:47:d3:58:f6:06:1d:06:e7:cf:76:30:d0:32:1c: f2:50:b9:5e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEcj/jc1I3XmD7bkqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkwODAwNDUyN1oXDTI2MTIxMjAxNDUyN1owLzEtMCsGA1UEAxMk ZGE3MzNmZGEtYjQwNS00ZWIxLWFkYmUtODExZThmN2VhY2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUGft3TzIsekVXYuEOH8V6wwI8WTPsQ25LHm QocdzhTXqtQw25vYSxjHxNNpSGxHg4n4R+39Zu99xEEOhzoDefme/UhUR2J8jVMy RFNVQA004PidYJdR1ejvZPCzNXMy5UgW1q9oj7AAjjd97moXGrPHlxTuQ/zr8q2k h/+KuH8cTPEwlJ2CfEYaAvqVajZUU+FMKQ2nLEff8sjC597eSai2Wx05DCHvX84K iUiUrOcKbnthiaWDrcJb/qYX0TJS656jWvm7uT3PjxWPPGYe4uzuzSqYrFkzlmQ6 A42wtm3O7M4xrOTAM3KMCmk68/zyaxpgwGxKAt+fpAgjsNjSZQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFM+avwTIQo8/UqoNUOjHe9J1RuU4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k YTczM2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFlOGY3ZWFjZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2RhNzMzZmRhLWI0MDUtNGViMS1h ZGJlLTgxMWU4ZjdlYWNkNC9kYTczM2ZkYS1iNDA1LTRlYjEtYWRiZS04MTFlOGY3 ZWFjZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJAWagwDQQCAAIwBwMFACYHGMAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANd3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIHAx7vOB7TfPn91SHQuZD+bYdq8 NO9tOvRpy9Bqv7bq13lDv/obYjeE2IclY+eQh+qBZAfdvlygn9wbuxeSTgm6BPtw qPuE+tzMk7+s3ngc+Ega8BFepW04d9LWEvor6LX0Q9Sn27XM7CgLu1jyWu00JYy9 j6WtlkQlAPj331By5lztX2gdQ89lugmSqsEsoxGXWJ/Txs9lYhG6r+eM1FkOqr0q eS0jhMX+g45etM+DHDYf+vzn0NI5TgSTjupgg/VCbPNvjmhWUG17FleZGaqAzIPi l+N58ZEkRzutdXT8sCzZS4Dll2nCCkp8p/NH01j2Bh0G5892MNAyHPJQuV4= -----END CERTIFICATE-----Generated at Thu Nov 21 16:22:17 2024 by rpki-client on console-ams.rpki-client.org