$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5.cer File: 1c939443-d4d3-4122-9e02-8422f40f90c5.cer (raw, json) Hash identifier: dvIdY7+xdb4IBtPNhK1b9yFzqLMnh+qw8QP/aMOzHEI= Subject key identifier: 73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858430ED6791FFEEA431CB428F5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Aug 2023 15:45:39 +0000 Certificate not after: Tue 02 Dec 2025 16:45:39 +0000 Subordinate resources: AS: 50892 IP: 65.38.110.0/24 IP: 216.245.183.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:0e:d6:79:1f:fe:ea:43:1c:b4:28:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 30 15:45:39 2023 GMT Not After : Dec 2 16:45:39 2025 GMT Subject: CN=1c939443-d4d3-4122-9e02-8422f40f90c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c2:0a:73:27:47:ae:91:10:69:34:a1:6f:29: be:78:85:9d:e4:cd:5a:3f:ab:87:ec:72:5d:4d:50: a3:3e:cc:33:be:8d:f1:7d:f6:c3:64:3c:bd:a0:3c: 49:80:56:12:da:70:5e:7f:ec:f5:4b:c2:17:b2:37: 9d:c9:95:b0:a4:e8:cf:99:27:f8:40:2e:d1:4c:53: 7e:41:e4:53:7c:56:af:7e:e4:f6:7c:0d:4b:f2:d5: eb:ca:c3:e2:cb:0e:15:91:f8:87:46:56:06:7b:e1: c7:ed:fd:80:7f:79:90:fc:53:db:80:52:c4:75:c0: 24:09:f8:8a:e5:ac:fd:3d:46:28:47:73:7b:43:73: e8:90:f4:d6:d0:f7:e3:9e:71:c9:d9:b7:ae:ca:d0: c4:e2:04:4c:ca:cc:b8:72:7d:88:b4:0d:4c:50:27: ec:10:46:09:d4:0b:ee:3a:5c:b2:8a:8c:83:79:43: 13:b6:89:d6:f5:81:4c:5a:e4:8c:ab:15:87:4c:bf: b4:c9:a2:a4:cb:b4:2e:e1:67:90:d3:f5:73:a8:1d: 0f:ef:bb:a7:07:4f:ff:15:70:23:da:bb:65:5e:04: 01:05:3a:66:5c:e0:c5:35:29:3a:41:56:c0:6e:15: 5a:04:03:d4:54:ef:8d:f8:a9:89:7a:86:8e:cd:c8: cc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:00:4C:55:91:03:A0:09:C4:2B:5D:E8:77:98:19:E6:6D:47:75:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c939443-d4d3-4122-9e02-8422f40f90c5/1c939443-d4d3-4122-9e02-8422f40f90c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 65.38.110.0/24 216.245.183.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50892 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e0:aa:46:ba:c7:9c:02:67:86:f8:7c:c3:85:9f:1f:34:d0: 5d:95:03:b3:16:95:d7:2b:8a:ca:82:13:8d:07:49:b9:71:26: c9:f5:fb:41:f3:92:9b:bb:5a:38:60:61:2c:d5:12:0e:05:9a: 99:fd:2f:8e:8b:1c:80:cc:9d:23:4b:a6:fc:4c:6d:10:22:68: b9:4b:61:aa:77:42:bb:86:1a:52:6e:57:15:0d:9e:fc:9c:a1: a1:bb:ce:f6:c4:e0:35:d4:42:3b:7e:b8:a3:ca:85:e2:13:8a: e8:bf:78:c5:b6:7b:75:0a:bd:36:ce:56:02:32:34:67:12:68: f6:f7:1a:a3:a5:2e:07:bf:5d:ce:3e:c3:04:8e:1f:8c:00:9a: 78:ac:55:2f:2c:b6:9e:1e:78:70:2a:b3:1f:e8:d3:82:33:bc: 31:a5:b7:aa:a4:d3:86:b6:08:87:9e:b7:97:97:55:f8:0b:56: 43:62:eb:dd:3e:da:f5:c8:1e:36:72:6d:f3:a6:08:89:32:52: b1:f4:3c:94:60:45:a2:19:25:9f:1f:30:29:71:dc:96:d2:14: d4:b8:c7:c5:62:28:8b:db:5b:c2:ed:41:12:a7:1c:e5:ee:b6: 43:58:00:43:d3:8c:2c:d4:dc:8c:db:84:56:95:50:e8:ec:63: 73:d5:eb:3f -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEMO1nkf/upDHLQo9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDgzMDE1NDUzOVoXDTI1MTIwMjE2NDUzOVowLzEtMCsGA1UEAxMk MWM5Mzk0NDMtZDRkMy00MTIyLTllMDItODQyMmY0MGY5MGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcIKcydHrpEQaTShbym+eIWd5M1aP6uH7HJd TVCjPswzvo3xffbDZDy9oDxJgFYS2nBef+z1S8IXsjedyZWwpOjPmSf4QC7RTFN+ QeRTfFavfuT2fA1L8tXrysPiyw4VkfiHRlYGe+HH7f2Af3mQ/FPbgFLEdcAkCfiK 5az9PUYoR3N7Q3PokPTW0PfjnnHJ2beuytDE4gRMysy4cn2ItA1MUCfsEEYJ1Avu OlyyioyDeUMTtonW9YFMWuSMqxWHTL+0yaKky7Qu4WeQ0/VzqB0P77unB0//FXAj 2rtlXgQBBTpmXODFNSk6QVbAbhVaBAPUVO+N+KmJeoaOzcjMmQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFHMATFWRA6AJxCtd6HeYGeZtR3VhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x YzkzOTQ0My1kNGQzLTQxMjItOWUwMi04NDIyZjQwZjkwYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFjOTM5NDQzLWQ0ZDMtNDEyMi05 ZTAyLTg0MjJmNDBmOTBjNS8xYzkzOTQ0My1kNGQzLTQxMjItOWUwMi04NDIyZjQw ZjkwYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABBJm4DBADY9bcwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAMbMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAvgqka6x5wCZ4b4fMOFnx800F2VA7MWldcrisqC E40HSblxJsn1+0Hzkpu7WjhgYSzVEg4Fmpn9L46LHIDMnSNLpvxMbRAiaLlLYap3 QruGGlJuVxUNnvycoaG7zvbE4DXUQjt+uKPKheITiui/eMW2e3UKvTbOVgIyNGcS aPb3GqOlLge/Xc4+wwSOH4wAmnisVS8stp4eeHAqsx/o04IzvDGlt6qk04a2CIee t5eXVfgLVkNi690+2vXIHjZybfOmCIkyUrH0PJRgRaIZJZ8fMClx3JbSFNS4x8Vi KIvbW8LtQRKnHOXutkNYAEPTjCzU3IzbhFaVUOjsY3PV6z8= -----END CERTIFICATE-----Generated at Wed May 1 16:33:24 2024 by rpki-client on console-fra.rpki-client.org