$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer File: efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer (raw, json) Hash identifier: oPgunk9G259nnetNCfAlmcgabeejFsDpwk0YhMXD/I0= Subject key identifier: 22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584261E1806ABECA967913D5D500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Jun 2023 16:53:02 +0000 Certificate not after: Wed 01 Oct 2025 16:53:02 +0000 Subordinate resources: AS: 19568 IP: 23.170.192.0/24 IP: 2604:92c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:61:e1:80:6a:be:ca:96:79:13:d5:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 29 16:53:02 2023 GMT Not After : Oct 1 16:53:02 2025 GMT Subject: CN=efa71532-ea1b-4e27-a2a7-c90b9db119b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:33:ab:ab:31:85:82:e7:0e:e0:bc:44:dd: 2d:4f:ef:f6:47:c1:0d:87:2c:da:8a:c0:f2:57:6d: 67:8c:d9:73:49:71:63:8c:dc:2e:ee:cc:e6:60:4a: df:e2:7e:e2:14:b0:49:f1:29:d9:c8:99:d9:b7:68: 87:4f:ec:a7:9d:37:e4:df:32:a4:98:5a:e1:77:10: 10:d5:41:cc:44:1f:a5:6a:5a:7e:e9:83:49:5d:71: 09:1e:d2:62:0e:34:c2:2a:a8:b8:d4:24:ba:a7:2f: 69:6d:1d:24:9e:3c:a3:9b:80:f2:f7:c0:50:e4:f9: 64:a3:37:90:91:64:df:87:48:cd:f4:49:fa:6d:0c: d0:cd:b6:14:e2:2b:a2:e3:4a:42:5c:3d:e6:81:fd: 9a:0a:b4:bf:80:e0:d5:bd:f1:68:0d:88:52:df:b0: 70:1c:09:8d:ec:8a:04:af:73:04:55:7d:57:7a:66: c0:21:09:e6:40:6c:ca:f4:f7:33:80:80:c5:78:7a: 0c:42:b4:a3:4f:3d:29:8c:7f:37:34:5e:65:f3:00: a5:82:cc:9e:7c:5e:e9:bd:6f:65:fa:37:64:d9:ac: fe:6f:95:57:3c:04:60:38:bf:5c:a0:0b:46:dd:4e: 30:fd:9a:02:30:0e:38:7d:0f:a0:3b:65:4d:5e:85: 8c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.170.192.0/24 IPv6: 2604:92c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19568 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:51:2f:30:0f:9f:b3:5f:ca:5e:7e:e2:4d:56:6f:48:46:84: 95:47:f6:13:1d:cb:09:f6:3c:1d:fa:b5:06:bd:c3:0c:17:e0: e0:57:1c:30:84:f8:c6:78:b1:02:86:f0:24:76:dd:2b:5b:f5: e4:90:b9:96:44:40:15:49:a3:35:87:c4:e0:39:f3:16:45:b5: c3:0f:f6:eb:d1:ef:7f:9f:06:f7:fa:30:ef:e2:3b:8e:1f:15: 45:03:0c:34:03:4d:44:33:61:30:9d:d6:a1:99:cf:24:73:46: 1e:22:95:0c:15:cf:d6:b2:21:ae:96:73:76:4f:4b:fb:f8:dd: 9a:9e:21:f5:98:7b:a2:23:4c:56:86:ea:20:76:8b:c0:6c:3d: 9e:fe:34:ae:39:50:e8:71:f9:df:e4:8a:31:84:06:72:7f:9b: 48:68:75:a3:bd:c3:88:20:35:9b:8f:bf:bb:55:37:86:1e:45: 8e:21:59:c1:b0:a1:d1:7b:3d:23:24:8d:48:55:7d:15:42:3d: 6b:32:4d:fd:89:db:73:6c:e4:ac:53:f6:fb:4a:4a:92:d6:9e: 27:29:cf:d0:3b:60:0f:84:78:bc:88:e2:bb:3e:ed:e4:13:89: 58:84:e1:bb:00:1d:d4:42:4d:ed:56:d1:4c:a4:b0:2b:0b:06: dd:d2:22:3a -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEJh4YBqvsqWeRPV1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDYyOTE2NTMwMloXDTI1MTAwMTE2NTMwMlowLzEtMCsGA1UEAxMk ZWZhNzE1MzItZWExYi00ZTI3LWEyYTctYzkwYjlkYjExOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s4zq6sxhYLnDuC8RN0tT+/2R8ENhyzaisDy V21njNlzSXFjjNwu7szmYErf4n7iFLBJ8SnZyJnZt2iHT+ynnTfk3zKkmFrhdxAQ 1UHMRB+lalp+6YNJXXEJHtJiDjTCKqi41CS6py9pbR0knjyjm4Dy98BQ5PlkozeQ kWTfh0jN9En6bQzQzbYU4iui40pCXD3mgf2aCrS/gODVvfFoDYhS37BwHAmN7IoE r3MEVX1XembAIQnmQGzK9PczgIDFeHoMQrSjTz0pjH83NF5l8wClgsyefF7pvW9l +jdk2az+b5VXPARgOL9coAtG3U4w/ZoCMA44fQ+gO2VNXoWMgQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFCL9R3BWB+5QJMlmWxXJg8MiPeE+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l ZmE3MTUzMi1lYTFiLTRlMjctYTJhNy1jOTBiOWRiMTE5YjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2VmYTcxNTMyLWVhMWItNGUyNy1h MmE3LWM5MGI5ZGIxMTliNi9lZmE3MTUzMi1lYTFiLTRlMjctYTJhNy1jOTBiOWRi MTE5YjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXqsAwDQQCAAIwBwMFACYEksAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICTHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYVEvMA+fs1/KXn7iTVZvSEaElUf2 Ex3LCfY8Hfq1Br3DDBfg4FccMIT4xnixAobwJHbdK1v15JC5lkRAFUmjNYfE4Dnz FkW1ww/269Hvf58G9/ow7+I7jh8VRQMMNANNRDNhMJ3WoZnPJHNGHiKVDBXP1rIh rpZzdk9L+/jdmp4h9Zh7oiNMVobqIHaLwGw9nv40rjlQ6HH53+SKMYQGcn+bSGh1 o73DiCA1m4+/u1U3hh5FjiFZwbCh0Xs9IySNSFV9FUI9azJN/Ynbc2zkrFP2+0pK ktaeJynP0DtgD4R4vIjiuz7t5BOJWIThuwAd1EJN7VbRTKSwKwsG3dIiOg== -----END CERTIFICATE-----Generated at Thu May 9 21:06:26 2024 by rpki-client on console-fra.rpki-client.org