$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer File: b9ea3438-4142-4de2-a912-7b081a51b42d.cer (raw, json) Hash identifier: /AlduYiTMUVf3ERhe8uUWA586fqfS/SF0ZzjG3xaP/c= Subject key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842924182684B0096A8DA42E400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Jul 2023 00:45:16 +0000 Certificate not after: Sun 19 Oct 2025 00:45:16 +0000 Subordinate resources: IP: 74.116.104.0/21 IP: 198.17.50.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:92:41:82:68:4b:00:96:a8:da:42:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 17 00:45:16 2023 GMT Not After : Oct 19 00:45:16 2025 GMT Subject: CN=b9ea3438-4142-4de2-a912-7b081a51b42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:75:55:95:19:2f:25:ac:07:db:f0:a2:27: aa:ff:59:a1:f4:dd:29:95:12:13:f9:f9:a8:25:35: 7a:44:b8:79:7b:50:38:62:f1:40:5a:d3:e4:f3:f4: 42:27:38:35:fc:1c:eb:92:8e:4c:16:a5:4f:7a:3c: 6d:a3:4d:16:37:23:2b:52:e9:fa:49:14:2c:8b:67: 95:48:77:4b:df:ad:04:68:30:0e:50:d0:c7:85:71: e9:64:9b:02:ec:0c:40:d3:da:86:3b:35:be:b2:28: 91:c7:40:94:77:62:dc:14:42:c0:74:4b:83:c1:bf: c6:c6:0a:dd:05:72:61:12:c8:a7:43:07:23:24:85: a0:71:cd:1f:53:33:ce:64:f0:31:7f:7a:28:70:7d: 01:24:7c:17:1e:1f:f3:4d:26:f6:ac:73:91:7f:cc: 91:80:cb:73:91:e4:ef:ad:da:93:95:a0:3a:00:fa: b8:32:41:91:27:84:1c:91:06:0b:a9:28:78:1b:4e: 5b:70:11:4e:71:c6:b1:ec:48:d8:13:d5:fc:20:cb: f5:df:c2:e8:c5:28:36:37:6e:34:e4:87:1d:73:3e: 9c:f6:66:ff:57:4c:b9:3e:44:ba:a5:d3:ca:6c:49: 64:8f:d4:e9:0f:ea:c2:a0:53:fc:eb:61:0f:02:27: 51:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.116.104.0/21 198.17.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3b:4d:d6:15:ac:ad:a6:6f:71:94:62:49:e3:0b:3d:ca:25: 2f:1e:eb:bf:d9:42:cc:dc:a3:41:dd:55:99:b8:fd:f4:44:48: f2:ec:62:76:d8:96:1b:71:b9:9d:f3:32:f6:5a:b6:7c:56:e2: 95:dc:6c:0e:d2:f2:dc:93:49:04:39:9c:38:be:ee:49:64:7f: bf:2c:49:50:0a:3b:1d:de:07:6c:d1:3a:23:7c:fe:7c:6d:3c: e7:51:00:13:c1:02:24:a6:11:a3:c6:90:4b:ce:5c:ee:92:c0: 89:07:4c:5f:af:ef:20:b2:fd:72:83:bb:55:fd:e6:a1:fa:e8: 43:c3:c0:b8:63:52:52:89:18:c0:55:25:df:cb:10:14:40:83: ba:14:38:b1:0d:8a:a2:b0:c4:cc:83:a4:d6:e0:6c:49:1c:8c: 88:b4:1b:b9:f9:9c:72:54:1a:6b:ec:c5:21:04:c3:d6:44:3f: 60:95:5b:ec:0d:0e:b8:ae:5e:66:8c:1e:90:9c:fb:0c:98:45: 02:2c:61:c5:a0:db:54:b4:18:1e:d7:f9:d4:06:8a:d1:43:13: d0:40:00:3a:30:5a:dc:a2:19:ee:6e:16:38:5d:e5:43:f6:84: a6:17:eb:bc:1a:06:61:42:11:c5:49:37:d7:08:c5:af:79:cf: ec:7f:8b:e9 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEKSQYJoSwCWqNpC5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDcxNzAwNDUxNloXDTI1MTAxOTAwNDUxNlowLzEtMCsGA1UEAxMk YjllYTM0MzgtNDE0Mi00ZGUyLWE5MTItN2IwODFhNTFiNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w51VZUZLyWsB9vwoieq/1mh9N0plRIT+fmo JTV6RLh5e1A4YvFAWtPk8/RCJzg1/Bzrko5MFqVPejxto00WNyMrUun6SRQsi2eV SHdL360EaDAOUNDHhXHpZJsC7AxA09qGOzW+siiRx0CUd2LcFELAdEuDwb/Gxgrd BXJhEsinQwcjJIWgcc0fUzPOZPAxf3oocH0BJHwXHh/zTSb2rHORf8yRgMtzkeTv rdqTlaA6APq4MkGRJ4QckQYLqSh4G05bcBFOccax7EjYE9X8IMv138LoxSg2N240 5Icdcz6c9mb/V0y5PkS6pdPKbElkj9TpD+rCoFP862EPAidRiQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFCQ5Yl6Idnj2c5gRreRIFm05Nq9tMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i OWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1MWI0MmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I5ZWEzNDM4LTQxNDItNGRlMi1h OTEyLTdiMDgxYTUxYjQyZC9iOWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1 MWI0MmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANKdGgDBAHGETIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmjtN1hWsraZv cZRiSeMLPcolLx7rv9lCzNyjQd1Vmbj99ERI8uxidtiWG3G5nfMy9lq2fFbildxs DtLy3JNJBDmcOL7uSWR/vyxJUAo7Hd4HbNE6I3z+fG0851EAE8ECJKYRo8aQS85c 7pLAiQdMX6/vILL9coO7Vf3mofroQ8PAuGNSUokYwFUl38sQFECDuhQ4sQ2KorDE zIOk1uBsSRyMiLQbufmcclQaa+zFIQTD1kQ/YJVb7A0OuK5eZowekJz7DJhFAixh xaDbVLQYHtf51AaK0UMT0EAAOjBa3KIZ7m4WOF3lQ/aEphfrvBoGYUIRxUk31wjF r3nP7H+L6Q== -----END CERTIFICATE-----Generated at Fri May 3 01:49:21 2024 by rpki-client on console-fra.rpki-client.org