$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf.cer File: 231e7311-eefe-40ee-a478-3ca2852934bf.cer (raw, json) Hash identifier: bBHHsp/YA5WguqUaEAQ0iy2+hrOyGD0k+ZDQp2GqRfA= Subject key identifier: E5:FC:71:E1:DA:81:BA:08:C4:B8:62:D4:07:7A:B4:43:69:42:5D:5E Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858426001323FC96535BA26FDFF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Jun 2023 00:45:16 +0000 Certificate not after: Wed 01 Oct 2025 00:45:16 +0000 Subordinate resources: IP: 170.52.44.0/22 IP: 192.190.134.0/23 IP: 2620:34:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:60:01:32:3f:c9:65:35:ba:26:fd:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 29 00:45:16 2023 GMT Not After : Oct 1 00:45:16 2025 GMT Subject: CN=231e7311-eefe-40ee-a478-3ca2852934bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:3e:d0:72:1a:bf:a3:ba:da:06:cb:07:92: 72:4c:df:95:ed:7b:b4:36:d5:b2:26:23:e8:18:e3: f0:26:f9:43:db:f8:8e:df:f7:81:00:30:8a:cd:67: b4:f0:db:e5:fb:58:77:12:71:49:3e:78:09:98:6a: 85:47:7f:00:ca:0f:17:44:ee:69:72:17:71:f5:a3: 12:97:d3:42:57:33:25:1a:04:a7:77:d3:78:f8:74: 11:00:91:62:23:ef:9e:20:8d:23:aa:c0:a4:9b:cc: 54:56:8e:0e:6a:0a:33:49:ec:5b:5c:59:62:96:62: d9:d2:32:82:b0:57:1d:9e:67:e7:3c:3b:39:e7:2c: dc:12:51:3d:a0:c5:85:b0:32:b4:98:9d:d7:40:73: c5:ef:df:4e:67:21:86:6a:63:42:88:ae:74:88:3d: 33:37:5d:35:a6:80:0d:71:34:de:b6:48:2a:49:1e: ce:56:5a:28:ac:e6:64:7d:f4:a4:af:d9:8d:26:49: 36:69:aa:fe:c6:02:9d:93:59:26:77:fd:e9:07:50: 91:1a:ad:ca:0f:7e:9b:42:75:cc:07:ce:de:18:df: 41:ee:ad:ca:16:bc:25:d2:b9:4f:e2:37:ba:24:c6: 5f:f3:c6:e4:4b:0a:20:89:fb:40:f4:a6:91:e1:80: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FC:71:E1:DA:81:BA:08:C4:B8:62:D4:07:7A:B4:43:69:42:5D:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/231e7311-eefe-40ee-a478-3ca2852934bf/231e7311-eefe-40ee-a478-3ca2852934bf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 170.52.44.0/22 192.190.134.0/23 IPv6: 2620:34:a000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:cc:4f:e0:43:29:d6:b8:53:e0:c1:16:87:f4:21:22:3e:b8: 69:e0:ef:65:7e:f3:61:bf:17:fb:fa:e9:e8:5a:38:2b:0c:fe: c7:89:de:f9:5e:81:bb:6c:16:a2:fa:3f:f6:60:89:13:9a:c2: f1:6f:71:85:c3:00:dd:ca:9b:0e:55:9a:d9:7f:51:3c:58:44: 5d:28:c4:81:96:ba:13:83:a3:b6:de:3e:1d:0d:3f:06:e4:78: 80:5b:93:6d:94:0e:30:d4:14:db:4d:01:45:18:6f:b7:60:f4: c3:45:ff:ad:a1:0e:af:25:d4:43:d9:35:2e:79:e2:6e:a0:20: c3:70:c9:12:b3:4f:08:8d:9f:37:0a:9f:42:bb:e8:2b:7a:eb: 1f:3f:d5:d0:2f:d8:38:7a:0b:ab:6a:ce:74:ad:b3:91:b1:16: e2:41:3d:80:b2:36:6a:b9:6f:46:e3:08:5a:9c:60:04:11:dc: e1:24:f0:5a:aa:be:83:5f:a4:19:ad:1e:06:a8:1c:c0:20:d1: b8:5a:f0:2a:ca:74:5e:69:c2:15:77:d8:d6:80:f6:8e:47:cf: e8:91:0e:c7:c8:a1:02:5a:bd:27:93:d6:8d:80:e3:73:de:d6: 31:a8:29:66:ce:35:0d:d9:c5:85:59:e3:42:44:1f:f4:f3:f5: e2:76:98:88 -----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUAQ0Mn0MoWEJgATI/yWU1uib9/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDYyOTAwNDUxNloXDTI1MTAwMTAwNDUxNlowLzEtMCsGA1UEAxMk MjMxZTczMTEtZWVmZS00MGVlLWE0NzgtM2NhMjg1MjkzNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrw+0HIav6O62gbLB5JyTN+V7Xu0NtWyJiPo GOPwJvlD2/iO3/eBADCKzWe08Nvl+1h3EnFJPngJmGqFR38Ayg8XRO5pchdx9aMS l9NCVzMlGgSnd9N4+HQRAJFiI++eII0jqsCkm8xUVo4OagozSexbXFlilmLZ0jKC sFcdnmfnPDs55yzcElE9oMWFsDK0mJ3XQHPF799OZyGGamNCiK50iD0zN101poAN cTTetkgqSR7OVloorOZkffSkr9mNJkk2aar+xgKdk1kmd/3pB1CRGq3KD36bQnXM B87eGN9B7q3KFrwl0rlP4je6JMZf88bkSwogiftA9KaR4YCGDQIDAQABo4IEFjCC BBIwHQYDVR0OBBYEFOX8ceHagboIxLhi1Ad6tENpQl1eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y MzFlNzMxMS1lZWZlLTQwZWUtYTQ3OC0zY2EyODUyOTM0YmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzIzMWU3MzExLWVlZmUtNDBlZS1h NDc4LTNjYTI4NTI5MzRiZi8yMzFlNzMxMS1lZWZlLTQwZWUtYTQ3OC0zY2EyODUy OTM0YmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAKqNCwDBAHAvoYwDwQCAAIwCQMHBCYgADSgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBWzE/gQynWuFPgwRaH9CEiPrhp4O9lfvNhvxf7+unoWjgrDP7Hid75 XoG7bBai+j/2YIkTmsLxb3GFwwDdypsOVZrZf1E8WERdKMSBlroTg6O23j4dDT8G 5HiAW5NtlA4w1BTbTQFFGG+3YPTDRf+toQ6vJdRD2TUueeJuoCDDcMkSs08IjZ83 Cp9Cu+greusfP9XQL9g4eguras50rbORsRbiQT2AsjZquW9G4whanGAEEdzhJPBa qr6DX6QZrR4GqBzAING4WvAqynReacIVd9jWgPaOR8/okQ7HyKECWr0nk9aNgONz 3tYxqClmzjUN2cWFWeNCRB/08/XidpiI -----END CERTIFICATE-----Generated at Sat Apr 20 02:40:00 2024 by rpki-client on console-ams.rpki-client.org