$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer File: 036d6da4-f590-4da8-a22f-55511da98ee5.cer (raw, json) Hash identifier: AMNOmp7Qxf+IBFW15QQH5Vk21octCde4uEUACSbumR4= Subject key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285841E48349B65A926867DFE03580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sat 24 May 2025 19:06:39 +0000 Subordinate resources: AS: 395042 IP: 52.128.40.0/21 IP: 192.92.97.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:49:b6:5a:92:68:67:df:e0:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 24 19:06:39 2025 GMT Subject: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:36:be:5d:90:6d:25:76:73:12:73:cc:b7: 08:52:83:b4:eb:47:e1:9e:03:b6:61:fb:cb:14:72: 1e:5a:07:e3:ce:9f:e8:91:94:3c:97:49:03:31:06: 32:3f:61:8b:8b:18:e0:e4:3e:75:5a:1a:7b:c1:b0: fd:b4:d7:af:e3:47:6a:b0:be:9e:a8:30:d7:a6:bc: 1d:71:b2:64:39:3d:04:77:2a:53:a9:48:4a:1f:c4: a7:18:f4:cb:70:b9:7f:22:bd:c3:5c:45:4a:ed:d3: a1:65:d1:c1:9b:68:30:44:f2:ba:16:f7:df:3e:b6: 3e:2a:b9:a2:a3:1a:5b:e1:f9:ad:a0:62:42:67:3f: 07:63:83:83:01:75:9d:b1:71:c4:91:f4:a4:79:63: cc:25:d1:f2:9c:02:8a:86:35:6c:06:9d:c8:8b:48: ca:a8:cd:ec:49:29:d0:9a:97:7c:e0:b7:56:e4:0d: 7c:8d:69:54:1f:7b:98:1e:70:c7:bb:c9:7c:77:77: 93:89:b6:9e:7e:e8:b1:b1:25:c7:b0:3d:68:83:86: 09:47:ec:fa:3e:65:27:f5:0d:bb:8f:37:b6:60:03: 40:f6:10:cb:7b:47:8b:ed:4e:3f:95:c7:4f:e1:8c: 6b:ad:d8:46:72:a3:94:27:2f:62:6e:29:e3:03:cc: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 52.128.40.0/21 192.92.97.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395042 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:44:f6:15:fd:8d:18:75:64:1b:5a:e5:30:9f:6d:2c:35:ec: 32:00:67:3d:20:d5:c8:7f:53:47:26:5a:ec:b8:03:68:9f:d3: 3f:e0:15:09:cd:e5:bf:77:a8:b5:64:f4:72:df:db:f4:bc:ba: fa:9f:5f:a1:9f:f0:9c:ec:00:62:46:a1:33:b1:78:17:18:cd: 8a:0f:02:ed:16:b3:12:40:1d:10:d4:1e:b5:51:05:d4:0f:ee: 49:6a:38:56:9a:82:c9:e1:03:78:f4:2a:03:8d:d2:b8:60:9f: f1:4d:55:50:c1:5f:12:2c:c7:52:ba:1d:25:bd:da:01:1a:4f: 12:14:15:33:fd:ea:85:25:7b:e0:c9:56:2b:84:9c:d2:48:84: 7e:98:eb:74:84:72:ec:f9:88:2f:13:43:2f:49:b6:1d:79:06: 03:c0:1f:51:44:bd:7a:d4:d6:26:a6:20:e5:3a:8f:2e:15:01: d6:02:57:a6:cd:48:6d:14:da:b1:fe:ac:e6:1e:70:99:8e:51: 0f:58:82:80:2d:a8:36:d6:a5:8b:eb:a2:28:26:d5:b2:33:9d: ce:38:ed:ed:44:da:8e:d3:1e:41:3b:62:d0:ee:b5:61:43:48: 1c:ad:76:e6:cb:f7:da:3e:f2:54:2b:c4:47:f3:8b:c4:c3:d1: c9:90:f1:a6 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEHkg0m2WpJoZ9/gNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUyNDE5MDYzOVowLzEtMCsGA1UEAxMk MDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN02vl2QbSV2cxJzzLcIUoO060fhngO2YfvL FHIeWgfjzp/okZQ8l0kDMQYyP2GLixjg5D51Whp7wbD9tNev40dqsL6eqDDXprwd cbJkOT0EdypTqUhKH8SnGPTLcLl/Ir3DXEVK7dOhZdHBm2gwRPK6FvffPrY+Krmi oxpb4fmtoGJCZz8HY4ODAXWdsXHEkfSkeWPMJdHynAKKhjVsBp3Ii0jKqM3sSSnQ mpd84LdW5A18jWlUH3uYHnDHu8l8d3eTibaefuixsSXHsD1og4YJR+z6PmUn9Q27 jze2YANA9hDLe0eL7U4/lcdP4YxrrdhGcqOUJy9ibinjA8yNZwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGnBn2A9s18VLsGCWtKjF7cSJDtrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w MzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzAzNmQ2ZGE0LWY1OTAtNGRhOC1h MjJmLTU1NTExZGE5OGVlNS8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRh OThlZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAM0gCgDBADAXGEwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgciMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGBE9hX9jRh1ZBta5TCfbSw17DIAZz0g1ch/U0cm Wuy4A2if0z/gFQnN5b93qLVk9HLf2/S8uvqfX6Gf8JzsAGJGoTOxeBcYzYoPAu0W sxJAHRDUHrVRBdQP7klqOFaagsnhA3j0KgON0rhgn/FNVVDBXxIsx1K6HSW92gEa TxIUFTP96oUle+DJViuEnNJIhH6Y63SEcuz5iC8TQy9Jth15BgPAH1FEvXrU1iam IOU6jy4VAdYCV6bNSG0U2rH+rOYecJmOUQ9YgoAtqDbWpYvroigm1bIznc447e1E 2o7THkE7YtDutWFDSBytdubL99o+8lQrxEfzi8TD0cmQ8aY= -----END CERTIFICATE-----Generated at Sat Apr 20 01:10:47 2024 by rpki-client on console-ams.rpki-client.org