$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer File: 4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer (raw, json) Hash identifier: 47Gzsc2NbZ/V5odscTW36T5+/LBowN9VQihdDOtoTvI= Subject key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285841E48349EFD28E6B8299098780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Mon 26 May 2025 19:06:39 +0000 Subordinate resources: AS: 15128 IP: 104.250.64.0/19 IP: 147.194.0.0/16 IP: 192.235.128.0/17 IP: 209.163.64.0/19 IP: 2604:fb80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:49:ef:d2:8e:6b:82:99:09:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 26 19:06:39 2025 GMT Subject: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:08:99:4d:e5:43:01:85:a6:39:a6:48:ef:03: e5:2f:b1:09:b3:38:fc:15:9a:8e:15:8b:c7:98:01: a5:1d:85:d9:83:38:13:bc:d1:f9:ae:cb:84:06:8c: 39:6d:06:a5:90:93:74:5c:99:1d:10:48:78:97:80: d1:ae:15:b5:c6:3d:6e:b7:f3:fb:51:0d:64:9a:a7: db:4a:16:62:51:6c:a8:0a:9b:ee:fe:90:9a:e3:29: 04:b2:e9:01:44:56:4b:bf:88:d0:a4:28:a6:80:68: 28:7d:72:6f:92:7f:29:08:09:4a:b8:af:41:0d:c2: f2:a3:1d:d0:d8:dd:5b:97:f6:c3:28:2a:93:09:f6: a8:e0:b1:c9:3f:89:c9:84:67:5c:c9:32:64:24:a3: 0d:f5:34:33:e1:f5:42:d8:c7:58:cf:94:59:2d:69: db:b1:b9:dc:a7:43:83:2f:ae:8e:46:ce:6c:f6:c9: c1:35:46:1c:29:28:af:ba:17:d9:6b:e5:99:3e:e0: c7:55:1f:f7:24:68:54:18:26:7c:b8:f1:b8:d3:ca: e3:90:8e:0f:ca:47:2d:c1:c3:f8:55:9b:6d:03:6e: e9:b2:42:76:d1:46:ae:17:25:01:0c:d5:1e:91:af: a8:5a:ab:9e:08:3a:04:ba:71:6d:24:1c:fa:41:6d: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 104.250.64.0/19 147.194.0.0/16 192.235.128.0/17 209.163.64.0/19 IPv6: 2604:fb80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:0f:b9:43:db:d1:6f:59:28:13:5a:37:7f:3a:8d:94:51:31: 8c:21:f1:b5:d5:fe:53:22:af:ff:2a:b5:35:9e:30:81:dd:41: 83:ab:88:9f:74:8a:60:c9:7f:f7:76:94:c8:22:ec:85:1e:61: cc:41:5a:5e:dc:df:f0:f4:80:32:7f:c8:fa:73:c3:16:d5:53: 52:e5:32:b3:37:a3:ee:dc:3e:70:7b:1c:9f:f5:f2:69:32:f3: 98:8b:08:a9:3b:68:07:53:5c:5e:30:48:6b:89:e5:c9:df:a7: 7b:69:97:74:e6:08:b1:be:7d:d3:0a:89:71:73:38:a1:26:6b: 3a:cf:ca:09:b1:46:ba:c9:72:0d:ae:71:5c:2d:52:1e:ad:30: 38:7a:2e:6d:08:92:69:d9:89:ed:51:ea:22:16:66:3b:74:ae: d0:d5:6d:ce:76:d1:5a:5d:16:7d:35:8e:3e:a6:79:86:a6:3b: 65:2b:96:4c:3c:e2:78:2d:a0:11:e6:1f:22:14:65:60:6a:2a: a3:4b:5b:82:f0:fa:88:db:b1:f1:19:08:98:6a:29:d5:2e:08: 3a:60:69:6d:ba:de:bc:50:1b:b6:e8:72:41:03:4d:31:11:09: e4:13:c3:59:0a:54:7d:f0:e5:b9:11:2a:6c:ca:ad:99:4e:22: e3:db:e9:76 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEHkg0nv0o5rgpkJh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUyNjE5MDYzOVowLzEtMCsGA1UEAxMk NGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMwZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QiZTeVDAYWmOaZI7wPlL7EJszj8FZqOFYvH mAGlHYXZgzgTvNH5rsuEBow5bQalkJN0XJkdEEh4l4DRrhW1xj1ut/P7UQ1kmqfb ShZiUWyoCpvu/pCa4ykEsukBRFZLv4jQpCimgGgofXJvkn8pCAlKuK9BDcLyox3Q 2N1bl/bDKCqTCfao4LHJP4nJhGdcyTJkJKMN9TQz4fVC2MdYz5RZLWnbsbncp0OD L66ORs5s9snBNUYcKSivuhfZa+WZPuDHVR/3JGhUGCZ8uPG408rjkI4PykctwcP4 VZttA27pskJ20UauFyUBDNUeka+oWqueCDoEunFtJBz6QW3FqQIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFCIjlv8NF9Vg6wvjkXpWmnSSgMEYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80 ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzRlNjUzZjM3LTRiMjItNDBhMy1h OGJkLWU3MGYyMDhjMGVmYi80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4 YzBlZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMB0EAgABMBcDBAVo+kADAwCTwgMEB8DrgAMEBdGjQDANBAIAAjAH AwUAJgT7gDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI7GDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCpD7lD 29FvWSgTWjd/Oo2UUTGMIfG11f5TIq//KrU1njCB3UGDq4ifdIpgyX/3dpTIIuyF HmHMQVpe3N/w9IAyf8j6c8MW1VNS5TKzN6Pu3D5wexyf9fJpMvOYiwipO2gHU1xe MEhrieXJ36d7aZd05gixvn3TColxczihJms6z8oJsUa6yXINrnFcLVIerTA4ei5t CJJp2YntUeoiFmY7dK7Q1W3OdtFaXRZ9NY4+pnmGpjtlK5ZMPOJ4LaAR5h8iFGVg aiqjS1uC8PqI27HxGQiYainVLgg6YGltut68UBu26HJBA00xEQnkE8NZClR98OW5 ESpsyq2ZTiLj2+l2 -----END CERTIFICATE-----Generated at Fri Apr 19 01:26:50 2024 by rpki-client on console-fra.rpki-client.org