$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67ef9075-336a-4d9f-9e02-65621e3e3735.cer File: 67ef9075-336a-4d9f-9e02-65621e3e3735.cer (raw, json) Hash identifier: ERSFunIFzrWES2C/b6RYHNUuvfp5GWmW60b2gpbic0g= Subject key identifier: F2:B3:DC:AA:6A:2B:A8:A1:F6:4A:CC:F3:10:65:77:20:1B:1A:15:78 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285841E4835399F56F631C57899580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67ef9075-336a-4d9f-9e02-65621e3e3735/67ef9075-336a-4d9f-9e02-65621e3e3735.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67ef9075-336a-4d9f-9e02-65621e3e3735/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Thu 31 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 13912 AS: 15282 AS: 47067 IP: 216.163.176.0/20 IP: 2620:a1:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:53:99:f5:6f:63:1c:57:89:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 31 19:06:39 2025 GMT Subject: CN=67ef9075-336a-4d9f-9e02-65621e3e3735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:14:be:27:c6:2f:86:73:55:35:26:19:28: ae:89:63:5e:74:9a:81:bc:f9:d1:46:ba:23:1b:2a: 93:89:9e:39:5c:66:b0:1c:1b:2f:3e:d3:4a:6d:08: 3b:81:a1:3c:6c:fc:ee:e9:0e:f3:15:98:2e:68:24: 53:bf:ff:78:fb:8e:58:68:7e:b0:c4:f3:d8:49:30: da:a4:1f:29:3d:af:ad:d5:a6:fd:c9:9e:c7:f1:f1: ae:18:fa:dc:e1:dd:f8:48:2c:02:67:40:b8:c8:f5: 16:04:d6:f6:4e:5f:cd:fb:69:31:d2:a3:0f:aa:a8: 26:96:43:6f:05:4b:30:ea:05:42:f2:61:cb:8b:07: 69:05:04:ed:a0:f9:f3:25:92:cc:42:de:64:1f:fe: ab:aa:4a:f6:58:17:6b:77:da:b2:f1:0e:b8:24:01: 7d:ad:2d:28:cc:9a:83:d1:92:e2:c8:37:dc:d1:9c: a4:14:4b:5c:09:4e:3c:f5:e4:25:94:df:13:4f:61: 91:73:cc:23:c1:ec:f4:4f:e0:51:fb:4d:dc:ef:1f: d7:fe:a6:a0:67:1d:4b:a6:73:22:f0:9d:f1:70:47: 45:24:2b:f7:98:e3:0b:dc:3f:ec:6c:ba:7e:2b:fc: c7:6b:b5:41:8d:bb:ca:a1:ab:1e:01:f6:0e:85:e6: 57:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B3:DC:AA:6A:2B:A8:A1:F6:4A:CC:F3:10:65:77:20:1B:1A:15:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67ef9075-336a-4d9f-9e02-65621e3e3735/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67ef9075-336a-4d9f-9e02-65621e3e3735/67ef9075-336a-4d9f-9e02-65621e3e3735.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 216.163.176.0/20 IPv6: 2620:a1:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13912 15282 47067 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f6:5d:bb:2f:95:4c:b3:41:a8:04:6f:99:fd:78:82:8a:e6: 6f:60:7a:d4:c7:a9:6f:8d:cc:af:2b:c5:26:70:9d:03:f1:22: a6:8f:98:95:4f:ee:c7:86:6c:53:2d:e6:5c:17:c2:23:97:c2: 21:61:a7:30:d1:68:74:6c:cd:fa:96:19:36:3e:11:29:2b:12: 02:c2:50:2e:8f:55:09:91:9c:3f:79:69:d2:9e:2d:d2:4e:42: 9e:4e:84:04:af:da:a1:a6:33:ac:d2:96:05:30:a3:6e:ac:90: 40:cc:89:8b:b9:99:d8:cd:56:cc:f1:d5:dc:f2:66:1d:cd:bc: 7d:43:da:35:80:a3:fb:5f:5f:05:12:41:6e:c7:c6:b5:9c:a2: d8:c4:50:d6:11:c2:8f:ab:da:c2:8e:53:54:76:44:44:4d:32: 74:a9:23:2f:cc:1a:d5:6c:9f:79:0e:72:5e:e0:54:69:c7:c8: 99:33:05:f3:6a:61:dc:6a:ab:1d:ce:6e:9e:dc:b0:4a:07:c1: 43:ef:78:30:d9:ea:b9:98:10:02:86:a9:bb:2e:01:7f:b5:6b: e7:85:1b:72:27:e1:d7:b1:83:c8:9e:31:4c:1d:15:6b:71:48: fb:22:a7:82:f2:99:42:71:a5:7a:85:aa:0c:1f:75:44:54:bb: a5:81:7a:be -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEHkg1OZ9W9jHFeJlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDczMTE5MDYzOVowLzEtMCsGA1UEAxMk NjdlZjkwNzUtMzM2YS00ZDlmLTllMDItNjU2MjFlM2UzNzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr4UvifGL4ZzVTUmGSiuiWNedJqBvPnRRroj GyqTiZ45XGawHBsvPtNKbQg7gaE8bPzu6Q7zFZguaCRTv/94+45YaH6wxPPYSTDa pB8pPa+t1ab9yZ7H8fGuGPrc4d34SCwCZ0C4yPUWBNb2Tl/N+2kx0qMPqqgmlkNv BUsw6gVC8mHLiwdpBQTtoPnzJZLMQt5kH/6rqkr2WBdrd9qy8Q64JAF9rS0ozJqD 0ZLiyDfc0ZykFEtcCU489eQllN8TT2GRc8wjwez0T+BR+03c7x/X/qagZx1LpnMi 8J3xcEdFJCv3mOML3D/sbLp+K/zHa7VBjbvKoaseAfYOheZXUwIDAQABo4IENDCC BDAwHQYDVR0OBBYEFPKz3KpqK6ih9krM8xBldyAbGhV4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 N2VmOTA3NS0zMzZhLTRkOWYtOWUwMi02NTYyMWUzZTM3MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY3ZWY5MDc1LTMzNmEtNGQ5Zi05 ZTAyLTY1NjIxZTNlMzczNS82N2VmOTA3NS0zMzZhLTRkOWYtOWUwMi02NTYyMWUz ZTM3MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBATYo7AwDwQCAAIwCQMHACYgAKGAADAiBggrBgEF BQcBCAEB/wQTMBGgDzANAgI2WAICO7ICAwC32zBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAf9l27L5VMs0Go BG+Z/XiCiuZvYHrUx6lvjcyvK8UmcJ0D8SKmj5iVT+7HhmxTLeZcF8Ijl8IhYacw 0Wh0bM36lhk2PhEpKxICwlAuj1UJkZw/eWnSni3STkKeToQEr9qhpjOs0pYFMKNu rJBAzImLuZnYzVbM8dXc8mYdzbx9Q9o1gKP7X18FEkFux8a1nKLYxFDWEcKPq9rC jlNUdkRETTJ0qSMvzBrVbJ95DnJe4FRpx8iZMwXzamHcaqsdzm6e3LBKB8FD73gw 2eq5mBAChqm7LgF/tWvnhRtyJ+HXsYPInjFMHRVrcUj7IqeC8plCcaV6haoMH3VE VLulgXq+ -----END CERTIFICATE-----Generated at Fri May 3 03:23:17 2024 by rpki-client on console-ams.rpki-client.org