$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557.cer File: 2780f5b3-6e58-46dc-9841-4c845dccd557.cer (raw, json) Hash identifier: /3Go2GFIJT+Q/teS3alF8t7hPWc4bzr6HwJePonosoE= Subject key identifier: 28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285842D80CA4E7BA4C375A62D9E500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 11 Aug 2023 00:45:20 +0000 Certificate not after: Thu 13 Nov 2025 01:45:20 +0000 Subordinate resources: AS: 40034 IP: 66.81.192.0/20 IP: 104.254.96.0/23 IP: 162.210.68.0/23 IP: 162.222.224.0/24 IP: 162.251.87.0/24 IP: 199.79.60.0/23 IP: 199.191.50.0/23 IP: 204.11.56.0/23 IP: 208.91.196.0/23 IP: 2604:10c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:d8:0c:a4:e7:ba:4c:37:5a:62:d9:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 11 00:45:20 2023 GMT Not After : Nov 13 01:45:20 2025 GMT Subject: CN=2780f5b3-6e58-46dc-9841-4c845dccd557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:26:d5:a8:79:cd:7c:b4:a7:4b:c6:63:d1:35: 68:89:cd:d4:66:2a:df:f0:6d:2f:92:6a:72:db:c2: 11:d0:4d:66:d5:d6:3b:63:a9:c2:86:25:fc:81:88: 9f:07:d0:1d:16:dc:f0:5a:4b:c4:ab:c4:33:f4:a4: 58:04:bf:b8:26:9b:82:8b:c3:96:a7:80:a0:34:32: 77:23:d9:bc:ba:03:66:6f:1d:2f:cc:f7:9d:c7:76: 8f:52:e0:0c:cc:62:36:72:29:4b:11:3a:fc:85:7d: 7c:bb:57:e7:51:0e:da:78:a3:d4:54:da:40:20:47: 3e:f8:1e:8a:17:cd:88:77:90:4f:57:12:86:5b:9f: fc:eb:98:d8:b0:2b:29:d3:9f:97:2f:1b:4a:92:79: 2d:f9:dd:27:00:fc:e1:c3:de:db:50:65:8b:4a:a4: ca:90:0d:a7:90:3d:3b:77:71:44:d0:20:2b:f8:a8: b8:0d:fe:70:11:05:51:4a:cc:25:14:72:4b:cb:3e: b4:7d:07:e6:32:1e:c9:07:b3:a0:cf:66:b0:28:d3: de:cd:d2:b8:9a:2f:fd:fb:e4:ae:ec:ae:8b:a9:e3: b0:53:cd:b3:4d:2d:a9:33:33:ac:64:27:81:d0:50: d5:df:6f:9e:ef:7a:9d:fc:15:8b:28:5c:8e:c1:2c: 3c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DE:47:03:39:46:4A:6E:6C:22:F7:F4:26:FD:44:48:DA:C6:18:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2780f5b3-6e58-46dc-9841-4c845dccd557/2780f5b3-6e58-46dc-9841-4c845dccd557.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.81.192.0/20 104.254.96.0/23 162.210.68.0/23 162.222.224.0/24 162.251.87.0/24 199.79.60.0/23 199.191.50.0/23 204.11.56.0/23 208.91.196.0/23 IPv6: 2604:10c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40034 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6f:25:24:47:32:16:b3:16:bb:1f:59:8a:8c:4d:a9:f5:0c: 68:77:f2:b7:18:68:21:6e:61:c6:b4:e2:46:cf:79:ba:a3:44: a0:29:10:2b:ca:80:bf:40:46:78:54:62:07:b7:98:63:08:ce: ba:64:ac:e9:bf:2a:8b:38:14:5d:98:f5:7e:3b:ba:ad:ac:70: 98:01:5f:12:83:a7:30:e9:c1:fc:0a:ec:f8:26:4c:3f:9d:04: 64:5a:ba:c8:af:2d:42:bd:ef:1c:d3:f3:81:7d:7f:e4:d4:2b: 05:b0:6e:13:5b:ba:27:b2:d9:ee:01:41:8a:fa:2e:48:fc:e0: ab:24:8b:4c:58:7f:e2:b2:cb:f0:ff:62:fe:d1:42:a9:70:31: 5d:be:54:c0:d9:6b:96:0e:ee:78:63:0c:18:24:21:13:19:21: c5:7a:27:e4:7e:d9:1b:90:89:fe:8d:af:26:91:ef:dd:5a:fa: bf:d5:6d:8b:b9:2e:d5:d9:3d:cc:91:17:a2:93:28:19:da:a1: e8:35:e8:77:a7:bf:3f:1c:5d:9b:60:2f:d0:35:90:38:92:53: 15:e2:c2:2d:f3:67:bf:2c:84:ae:37:b9:32:98:76:94:8d:30: 75:1a:3e:b6:8c:df:ee:6c:d9:94:f0:f7:f5:f3:ab:4e:d4:d6: b5:3c:90:2e -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWELYDKTnukw3WmLZ5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDgxMTAwNDUyMFoXDTI1MTExMzAxNDUyMFowLzEtMCsGA1UEAxMk Mjc4MGY1YjMtNmU1OC00NmRjLTk4NDEtNGM4NDVkY2NkNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlybVqHnNfLSnS8Zj0TVoic3UZirf8G0vkmpy 28IR0E1m1dY7Y6nChiX8gYifB9AdFtzwWkvEq8Qz9KRYBL+4JpuCi8OWp4CgNDJ3 I9m8ugNmbx0vzPedx3aPUuAMzGI2cilLETr8hX18u1fnUQ7aeKPUVNpAIEc++B6K F82Id5BPVxKGW5/865jYsCsp05+XLxtKknkt+d0nAPzhw97bUGWLSqTKkA2nkD07 d3FE0CAr+Ki4Df5wEQVRSswlFHJLyz60fQfmMh7JB7Ogz2awKNPezdK4mi/9++Su 7K6LqeOwU82zTS2pMzOsZCeB0FDV32+e73qd/BWLKFyOwSw8oQIDAQABo4IEWjCC BFYwHQYDVR0OBBYEFCjeRwM5RkpubCL39Cb9REjaxhhcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y NzgwZjViMy02ZTU4LTQ2ZGMtOTg0MS00Yzg0NWRjY2Q1NTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzI3ODBmNWIzLTZlNTgtNDZkYy05 ODQxLTRjODQ1ZGNjZDU1Ny8yNzgwZjViMy02ZTU4LTQ2ZGMtOTg0MS00Yzg0NWRj Y2Q1NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBARCUcADBAFo/mADBAGi0kQDBACi3uADBACi+1cD BAHHTzwDBAHHvzIDBAHMCzgDBAHQW8QwDQQCAAIwBwMFACYEEMAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJxiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADhvJSRHMhazFrsfWYqMTan1DGh3 8rcYaCFuYca04kbPebqjRKApECvKgL9ARnhUYge3mGMIzrpkrOm/Kos4FF2Y9X47 uq2scJgBXxKDpzDpwfwK7PgmTD+dBGRausivLUK97xzT84F9f+TUKwWwbhNbuiey 2e4BQYr6Lkj84Kski0xYf+Kyy/D/Yv7RQqlwMV2+VMDZa5YO7nhjDBgkIRMZIcV6 J+R+2RuQif6NryaR791a+r/VbYu5LtXZPcyRF6KTKBnaoeg16Henvz8cXZtgL9A1 kDiSUxXiwi3zZ78shK43uTKYdpSNMHUaPraM3+5s2ZTw9/Xzq07U1rU8kC4= -----END CERTIFICATE-----Generated at Wed May 1 16:33:24 2024 by rpki-client on console-fra.rpki-client.org