$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4.cer File: 42e7c483-059a-47b9-840d-d56605959cf4.cer (raw, json) Hash identifier: hXhARCBHnUQrVIN3K6j3FvbPxJjxyW4HbJed7NElQEU= Subject key identifier: 92:75:35:DA:EA:B7:48:13:97:A9:D2:20:9E:EB:DF:12:DE:CD:C9:99 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858421FCB766D680123BBB3C79640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Jun 2023 00:45:16 +0000 Certificate not after: Mon 08 Sep 2025 00:45:16 +0000 Subordinate resources: AS: 398114 IP: 204.62.199.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:1f:cb:76:6d:68:01:23:bb:b3:c7:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 6 00:45:16 2023 GMT Not After : Sep 8 00:45:16 2025 GMT Subject: CN=42e7c483-059a-47b9-840d-d56605959cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:8e:9e:1b:8a:e9:e1:7c:71:0e:bd:7b:fa: 79:d0:59:60:f7:cb:4c:d5:88:c2:9a:b8:ae:57:4b: 76:5e:00:67:d6:88:cc:a5:4d:c2:53:e8:0a:d7:da: 20:79:4f:6a:06:69:c6:35:dc:58:e0:56:07:70:40: a8:64:6a:8f:d1:84:51:93:5c:a5:94:90:bb:71:df: df:23:7a:35:ff:7a:e5:9b:1b:9e:50:2e:be:b8:bc: d6:fb:85:da:ea:f0:49:07:4c:5d:30:08:81:48:eb: f6:ea:ad:6f:e8:e7:e1:0e:f6:3b:aa:2c:03:aa:9d: 03:bc:a6:25:17:90:a0:0d:78:ce:3f:b5:1b:df:e9: 54:e5:ad:a5:f2:94:8b:61:99:fb:7f:ad:5e:66:0d: bc:87:de:85:bd:56:27:35:5d:39:ec:bc:c7:eb:f7: 42:6f:17:74:e4:47:da:02:5f:0b:3d:fd:e8:c1:ff: 9b:4e:e9:d1:bd:bf:a9:ea:d9:79:13:b0:25:da:43: 94:72:75:b4:6d:dd:3a:7d:80:1b:36:b0:3b:7f:16: 91:5d:4b:3e:d3:67:ed:07:78:71:8f:83:3f:c2:a3: 24:30:d4:ca:c1:f5:38:8a:48:cb:48:6a:27:7d:f1: 02:6d:c4:85:cb:5d:16:15:83:a6:d3:63:7d:8e:77: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:75:35:DA:EA:B7:48:13:97:A9:D2:20:9E:EB:DF:12:DE:CD:C9:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.62.199.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398114 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:fd:da:32:cc:d2:25:33:37:51:7b:12:79:a0:93:53:8f:1c: f4:77:91:83:90:65:84:1c:2a:42:bd:83:76:69:f2:64:e7:ef: 47:ce:ac:82:5f:f2:ec:6f:c8:be:34:2e:a9:6f:c2:e5:84:0e: 75:3f:f8:e1:02:69:0a:35:7a:5e:d3:e9:d5:35:a8:04:d4:9f: 5d:5c:78:a7:be:77:e9:a3:b7:7b:5d:f3:5f:4d:57:eb:84:8f: ce:8e:b6:81:c9:49:b6:a0:a8:f1:65:6d:3e:12:75:dd:ea:d2: 16:d4:6f:5a:90:25:dc:4d:58:a6:13:fe:00:cc:d6:7e:7f:3d: 1d:c6:3f:f1:5a:31:f2:70:41:7f:c2:76:e2:60:7a:fb:90:ce: 9f:1b:43:05:f6:f8:43:9d:e1:62:16:49:58:a8:be:7d:c8:0f: 74:e6:fa:bb:97:25:34:4e:f8:92:fb:89:e4:d0:03:7a:7f:c0: 63:01:95:ed:9b:ae:d6:45:78:c3:db:f7:e2:a3:56:4e:96:d1: 96:fe:09:c2:91:f4:6e:30:8d:77:34:6b:bc:f8:10:16:0e:a4: f2:23:87:01:ad:c3:cd:4a:92:a8:eb:5e:b7:0e:b3:96:c3:37: 11:9d:3e:d1:ee:ec:9d:a0:d0:fd:03:31:26:8e:de:95:57:80: 1f:17:20:a0 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEIfy3ZtaAEju7PHlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDYwNjAwNDUxNloXDTI1MDkwODAwNDUxNlowLzEtMCsGA1UEAxMk NDJlN2M0ODMtMDU5YS00N2I5LTg0MGQtZDU2NjA1OTU5Y2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquqOnhuK6eF8cQ69e/p50Flg98tM1YjCmriu V0t2XgBn1ojMpU3CU+gK19ogeU9qBmnGNdxY4FYHcECoZGqP0YRRk1yllJC7cd/f I3o1/3rlmxueUC6+uLzW+4Xa6vBJB0xdMAiBSOv26q1v6OfhDvY7qiwDqp0DvKYl F5CgDXjOP7Ub3+lU5a2l8pSLYZn7f61eZg28h96FvVYnNV057LzH6/dCbxd05Efa Al8LPf3owf+bTunRvb+p6tl5E7Al2kOUcnW0bd06fYAbNrA7fxaRXUs+02ftB3hx j4M/wqMkMNTKwfU4ikjLSGonffECbcSFy10WFYOm02N9jnfzXQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJJ1Ndrqt0gTl6nSIJ7r3xLezcmZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 MmU3YzQ4My0wNTlhLTQ3YjktODQwZC1kNTY2MDU5NTljZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQyZTdjNDgzLTA1OWEtNDdiOS04 NDBkLWQ1NjYwNTk1OWNmNC80MmU3YzQ4My0wNTlhLTQ3YjktODQwZC1kNTY2MDU5 NTljZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMPscwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhMiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGb92jLM0iUzN1F7Enmgk1OPHPR3kYOQZYQcKkK9g3Zp8mTn 70fOrIJf8uxvyL40LqlvwuWEDnU/+OECaQo1el7T6dU1qATUn11ceKe+d+mjt3td 819NV+uEj86OtoHJSbagqPFlbT4Sdd3q0hbUb1qQJdxNWKYT/gDM1n5/PR3GP/Fa MfJwQX/CduJgevuQzp8bQwX2+EOd4WIWSViovn3ID3Tm+ruXJTRO+JL7ieTQA3p/ wGMBle2brtZFeMPb9+KjVk6W0Zb+CcKR9G4wjXc0a7z4EBYOpPIjhwGtw81Kkqjr XrcOs5bDNxGdPtHu7J2g0P0DMSaO3pVXgB8XIKA= -----END CERTIFICATE-----Generated at Wed May 1 16:33:25 2024 by rpki-client on console-fra.rpki-client.org