$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer File: e0927227-fbc8-4924-89af-1885637cb07c.cer (raw, json) Hash identifier: 5u9zHL0bzJ4FYxLem7nMw1F/UTce0JhPeLbce21f21A= Subject key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858424901F3D7891236C0834B8880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Jun 2023 19:03:12 +0000 Certificate not after: Thu 11 Sep 2025 15:01:42 +0000 Subordinate resources: AS: 843 AS: 36516 AS: 55002 AS: 397144 AS: 398349 IP: 23.158.32.0/24 IP: 72.19.3.0/24 IP: 107.162.0.0/16 IP: 2602:fa75::/36 IP: 2602:fe2b::/36 IP: 2604:e180::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:49:01:f3:d7:89:12:36:c0:83:4b:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 20 19:03:12 2023 GMT Not After : Sep 11 15:01:42 2025 GMT Subject: CN=e0927227-fbc8-4924-89af-1885637cb07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:5a:10:05:88:82:cb:2e:95:5a:8a:50:9a: f5:de:ec:e2:6f:73:87:5e:c7:e7:6d:71:19:73:91: b1:69:5b:88:4a:de:36:0f:c4:9c:01:37:22:d4:64: 4a:91:ee:31:59:fb:b2:20:e0:e8:3d:26:58:68:9b: 50:f9:b0:44:01:1d:ec:92:8f:2f:ca:94:6e:73:3e: 3a:52:52:cc:45:21:f1:0a:e7:0f:a0:7a:4a:29:65: de:d8:11:d0:64:c8:c5:05:33:aa:4d:84:ef:4c:f4: 29:42:58:ff:c3:cd:14:66:f7:8d:43:91:62:c9:90: 1c:98:ee:8a:de:05:48:d4:c9:37:c6:32:64:28:3c: 8a:64:23:6d:de:9d:11:b3:88:bb:ec:9f:97:c0:40: 92:7b:ba:f0:0e:85:f7:8f:d7:ef:21:6d:93:71:6a: 36:a7:f7:fe:fe:1d:a3:b0:11:9d:ae:74:12:5a:0c: 64:f1:ef:44:be:5c:ce:0e:c3:51:ec:80:c4:2d:26: 77:a5:a6:41:3b:e8:f7:68:5a:ff:f0:f0:a8:b0:10: bf:08:d3:3e:35:15:56:84:2e:5d:8c:22:ee:48:5f: 84:b0:c7:bf:a9:34:d6:26:f1:53:f6:38:2f:3d:1f: 0d:ae:2f:69:c1:60:e5:0a:0f:a8:91:66:5c:66:09: fc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.158.32.0/24 72.19.3.0/24 107.162.0.0/16 IPv6: 2602:fa75::/36 2602:fe2b::/36 2604:e180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 843 36516 55002 397144 398349 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:af:3c:55:4a:84:32:8e:be:06:0d:3f:8d:59:00:0a:5f:37: 18:42:f8:be:be:35:89:b7:ce:1d:6f:77:b2:2e:d9:1f:3b:5c: 66:30:67:41:b4:63:92:48:60:23:b9:01:c1:06:b9:60:cc:58: 42:67:5c:cb:16:60:1e:0c:92:b5:51:96:57:8b:03:9a:3d:b9: 98:ab:ac:c8:5d:34:79:9b:37:83:a7:12:97:a3:61:d9:6f:e2: 76:3f:c9:5c:23:22:ae:5c:2d:08:8e:d8:a2:57:d5:5f:9b:7f: 8c:70:12:6f:cc:3c:de:23:7a:01:9c:bf:8b:19:b6:2c:07:da: b1:c3:8e:8b:94:7c:d7:39:33:77:87:48:64:48:68:d7:ca:84: af:b1:ac:25:2a:78:75:9b:92:e7:6b:67:a7:d8:eb:1f:47:f3: 72:91:64:52:27:b7:da:fc:19:95:50:0c:d7:c9:2d:02:61:6f: d9:88:ce:d6:c5:63:94:21:62:31:79:82:33:fb:3e:61:71:bc: fb:51:57:2b:b7:1b:e0:e5:81:d9:78:8a:31:3b:d8:66:37:f1: 1c:f7:c9:f3:86:11:a6:53:64:92:73:9f:22:8b:f4:ec:8b:89: 00:09:57:b7:45:70:b6:8f:53:d1:0c:a8:c4:6a:c5:de:fc:39: 8e:49:ed:d1 -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEJJAfPXiRI2wINLiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDYyMDE5MDMxMloXDTI1MDkxMTE1MDE0MlowLzEtMCsGA1UEAxMk ZTA5MjcyMjctZmJjOC00OTI0LTg5YWYtMTg4NTYzN2NiMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVBaEAWIgssulVqKUJr13uzib3OHXsfnbXEZ c5GxaVuISt42D8ScATci1GRKke4xWfuyIODoPSZYaJtQ+bBEAR3sko8vypRucz46 UlLMRSHxCucPoHpKKWXe2BHQZMjFBTOqTYTvTPQpQlj/w80UZveNQ5FiyZAcmO6K 3gVI1Mk3xjJkKDyKZCNt3p0Rs4i77J+XwECSe7rwDoX3j9fvIW2TcWo2p/f+/h2j sBGdrnQSWgxk8e9EvlzODsNR7IDELSZ3paZBO+j3aFr/8PCosBC/CNM+NRVWhC5d jCLuSF+EsMe/qTTWJvFT9jgvPR8Nri9pwWDlCg+okWZcZgn8GQIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFELUwNarGe6BIle9wraIHKFxwH/MMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l MDkyNzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1NjM3Y2IwN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2UwOTI3MjI3LWZiYzgtNDkyNC04 OWFmLTE4ODU2MzdjYjA3Yy9lMDkyNzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1NjM3 Y2IwN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MBcEAgABMBEDBAAXniADBABIEwMDAwBrojAdBAIAAjAXAwYEJgL6 dQADBgQmAv4rAAMFACYE4YAwLQYIKwYBBQUHAQgBAf8EHjAcoBowGAICA0sCAwCO pAIDANbaAgMGD1gCAwYUDTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQrzxVSoQyjr4GDT+NWQAKXzcYQvi+ vjWJt84db3eyLtkfO1xmMGdBtGOSSGAjuQHBBrlgzFhCZ1zLFmAeDJK1UZZXiwOa PbmYq6zIXTR5mzeDpxKXo2HZb+J2P8lcIyKuXC0IjtiiV9Vfm3+McBJvzDzeI3oB nL+LGbYsB9qxw46LlHzXOTN3h0hkSGjXyoSvsawlKnh1m5Lna2en2OsfR/NykWRS J7fa/BmVUAzXyS0CYW/ZiM7WxWOUIWIxeYIz+z5hcbz7UVcrtxvg5YHZeIoxO9hm N/Ec98nzhhGmU2SSc58ii/Tsi4kACVe3RXC2j1PRDKjEasXe/DmOSe3R -----END CERTIFICATE-----Generated at Thu May 9 20:34:35 2024 by rpki-client on console-ams.rpki-client.org