$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.cer File: 55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.cer (raw, json) Hash identifier: qMPLnjuS53997+aDUAemlB2kL3Dafr32MBfLVUJdafc= Subject key identifier: 7A:BF:47:66:28:D2:AC:65:DC:39:48:86:E8:AF:26:0B:45:15:0D:25 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285846DD1A7AB81B141ADF2CA30680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Aug 2024 15:20:01 +0000 Certificate not after: Mon 16 Nov 2026 16:20:01 +0000 Subordinate resources: AS: 401276 IP: 23.186.88.0/24 IP: 2602:f84a::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:dd:1a:7a:b8:1b:14:1a:df:2c:a3:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Aug 13 15:20:01 2024 GMT Not After : Nov 16 16:20:01 2026 GMT Subject: CN=55a1eb83-a00f-4ad7-9fc1-d44b90ef547e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:53:e9:f6:55:42:d8:d1:da:d3:c0:3b:21: 15:5e:3b:2f:24:1a:7c:08:8f:6b:b5:9e:9b:79:a5: 89:42:ad:c8:3a:5e:44:17:a4:58:8f:f5:81:d2:5f: 46:a6:dd:ff:34:2a:a4:db:23:b5:82:00:ff:d3:a3: 87:4d:d7:f5:71:b5:13:a8:9b:5b:1e:ce:39:93:ce: e7:0b:32:08:c2:dd:3a:b4:8e:28:21:ff:b3:82:90: f0:0d:5c:70:5e:3b:03:bc:e5:e0:37:e5:d3:e5:ba: 35:bf:af:61:cb:10:a4:91:ab:0e:b3:07:10:9f:42: 70:29:3f:08:77:e4:06:84:3b:86:d4:80:db:7b:49: a5:db:6a:d2:cc:73:a2:a9:a6:c3:9c:71:8b:3e:31: 20:fd:e7:b1:f1:41:7b:51:ff:85:69:2a:a1:1e:87: a4:20:86:8f:02:b9:9d:a0:fb:4f:20:0e:0f:3b:77: b4:64:e1:e1:3b:be:b4:8e:78:f5:b1:ed:cc:11:ba: 5c:ac:4b:ab:8a:85:9b:71:51:35:73:18:36:37:7e: 19:15:a8:af:45:8a:aa:02:2d:b3:ae:d6:9b:67:0a: 3c:ec:32:19:18:6d:88:d9:1a:36:b2:dc:6a:07:e7: 8c:ff:77:4a:b6:c3:12:45:e5:0f:18:a0:94:2a:98: f9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BF:47:66:28:D2:AC:65:DC:39:48:86:E8:AF:26:0B:45:15:0D:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e/55a1eb83-a00f-4ad7-9fc1-d44b90ef547e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.186.88.0/24 IPv6: 2602:f84a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401276 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f0:f9:94:fc:f5:fb:9d:e1:63:87:d5:f9:c7:9c:53:b7:f7: 05:32:0e:92:c8:f1:58:82:f8:b4:7c:98:34:4d:5a:97:f5:24: 0e:9c:39:e2:8c:47:48:97:07:69:33:4d:45:0e:1f:9c:84:2e: d9:df:6f:ba:b6:83:8f:2a:c5:cd:46:50:8d:e5:90:d9:f0:2a: a3:97:9c:60:91:54:0d:83:c9:1f:a6:b8:f9:c1:62:e2:f1:90: 5b:37:10:68:2b:2f:f6:04:41:65:37:6a:6e:0f:1d:40:9e:64: ca:6f:89:8a:ba:f7:3a:b4:58:2f:83:ba:1a:8c:63:59:3a:89: 08:e7:05:4d:0a:45:4a:58:b9:9a:56:e8:5b:8b:0f:49:38:f6: 9b:19:f0:15:81:b6:88:89:e4:87:d7:e1:5c:d6:05:b2:26:0e: 7b:21:44:70:b5:93:8a:31:61:09:3b:e7:01:d9:c7:d9:f9:f7: 31:04:4f:6b:d1:e5:e0:72:e0:e2:05:37:23:9e:7f:9e:58:e8: 22:25:d0:f2:b4:1a:83:84:d9:5a:de:ce:b1:d2:8b:a3:ed:89: 99:24:3c:c3:8a:96:c0:b4:c1:d1:5d:80:1e:ee:da:2b:c9:12: 55:9b:23:2a:5c:ab:ba:d2:cf:b6:90:28:85:57:30:ec:1d:c5: f8:7e:96:3c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEbdGnq4GxQa3yyjBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDgxMzE1MjAwMVoXDTI2MTExNjE2MjAwMVowLzEtMCsGA1UEAxMk NTVhMWViODMtYTAwZi00YWQ3LTlmYzEtZDQ0YjkwZWY1NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk5T6fZVQtjR2tPAOyEVXjsvJBp8CI9rtZ6b eaWJQq3IOl5EF6RYj/WB0l9Gpt3/NCqk2yO1ggD/06OHTdf1cbUTqJtbHs45k87n CzIIwt06tI4oIf+zgpDwDVxwXjsDvOXgN+XT5bo1v69hyxCkkasOswcQn0JwKT8I d+QGhDuG1IDbe0ml22rSzHOiqabDnHGLPjEg/eex8UF7Uf+FaSqhHoekIIaPArmd oPtPIA4PO3e0ZOHhO760jnj1se3MEbpcrEurioWbcVE1cxg2N34ZFaivRYqqAi2z rtabZwo87DIZGG2I2Ro2stxqB+eM/3dKtsMSReUPGKCUKpj5EwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHq/R2Yo0qxl3DlIhuivJgtFFQ0lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 NWExZWI4My1hMDBmLTRhZDctOWZjMS1kNDRiOTBlZjU0N2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzU1YTFlYjgzLWEwMGYtNGFkNy05 ZmMxLWQ0NGI5MGVmNTQ3ZS81NWExZWI4My1hMDBmLTRhZDctOWZjMS1kNDRiOTBl ZjU0N2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXulgwDgQCAAIwCAMGACYC+EoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYffDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAW8PmU/PX7neFjh9X5x5xTt/cF Mg6SyPFYgvi0fJg0TVqX9SQOnDnijEdIlwdpM01FDh+chC7Z32+6toOPKsXNRlCN 5ZDZ8Cqjl5xgkVQNg8kfprj5wWLi8ZBbNxBoKy/2BEFlN2puDx1AnmTKb4mKuvc6 tFgvg7oajGNZOokI5wVNCkVKWLmaVuhbiw9JOPabGfAVgbaIieSH1+Fc1gWyJg57 IURwtZOKMWEJO+cB2cfZ+fcxBE9r0eXgcuDiBTcjnn+eWOgiJdDytBqDhNla3s6x 0ouj7YmZJDzDipbAtMHRXYAe7toryRJVmyMqXKu60s+2kCiFVzDsHcX4fpY8 -----END CERTIFICATE-----Generated at Thu Sep 19 19:54:55 2024 by rpki-client on console-ams.rpki-client.org