$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer File: 5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer (raw, json) Hash identifier: 1hZUgjOGTOo1MPY52Amw+RsIGPZ2goaNJ0meh3x0sqA= Subject key identifier: 49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584297D6DF9DA1AC88D349596D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 19 Jul 2023 00:45:16 +0000 Certificate not after: Tue 21 Oct 2025 00:45:16 +0000 Subordinate resources: IP: 192.16.104.0/22 IP: 204.144.176.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:97:d6:df:9d:a1:ac:88:d3:49:59:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 19 00:45:16 2023 GMT Not After : Oct 21 00:45:16 2025 GMT Subject: CN=5f8eb08f-0895-4c2b-8851-fe9215edcff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:b8:71:c9:3d:da:e8:0d:98:a7:07:d0:61: 2e:25:dc:a5:5d:4c:c6:11:fb:c5:e3:ac:36:ff:45: 6d:74:84:e1:08:85:f6:ca:8f:34:75:a7:1c:3f:21: 4b:cf:01:d1:0a:85:d2:86:5d:7a:bf:c2:c2:5e:c4: a1:67:e2:98:56:18:60:b6:6f:02:83:ee:91:29:e7: fc:78:9e:0e:9b:98:07:3a:8e:bc:84:0e:ab:23:3a: fe:86:c5:73:d4:88:49:d4:02:e2:c1:a1:54:39:e1: 0d:93:e6:f7:e7:61:b9:a8:a8:ed:e6:38:7f:dc:60: 49:4c:de:a8:74:ba:cf:bd:33:7a:bf:e3:93:b0:86: c5:5b:34:2f:9d:84:58:28:24:0e:ad:0e:e9:a6:27: fd:2b:68:78:e3:54:26:4e:ea:94:28:58:87:c1:89: e6:eb:2d:ff:92:26:14:d2:16:fe:3a:02:14:1a:0e: d2:7e:6b:25:d1:25:89:16:0c:0f:fb:dd:ae:7d:58: db:09:92:6a:94:c7:72:3d:28:d7:a9:74:b1:d3:e8: 57:6b:05:42:33:08:fa:bf:7d:d1:9f:ad:92:d9:cc: 6d:7e:22:12:e3:90:d7:d7:56:05:b2:f4:c0:41:7d: 9d:4f:61:5e:85:11:b2:95:77:80:f9:8f:57:4f:5e: ce:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.16.104.0/22 204.144.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2a:0a:c6:c1:59:75:ff:8f:78:32:58:11:48:5f:a0:26:45: 69:22:bd:39:fb:91:10:ec:8d:e8:81:ae:4e:51:11:83:69:79: 45:79:d0:4c:d6:6c:0f:13:40:12:c3:a6:97:09:68:6e:30:2c: 0e:69:c8:7c:46:d5:f4:63:1f:5e:e9:56:a6:bf:23:b9:2c:9b: 94:39:7b:59:d4:aa:98:ea:fd:ff:da:50:b8:b6:4e:c0:b2:88: d6:0b:14:15:7b:bf:58:42:d5:f6:37:f3:c0:dc:93:9f:21:d0: 32:45:1b:9c:23:2b:9d:3e:4e:ca:24:74:64:be:35:75:1c:41: 1d:42:2d:19:84:23:8d:9f:5c:d1:01:f0:0f:3c:c0:bc:e9:4c: e5:df:a4:96:2e:45:5c:63:e6:56:58:c1:38:1b:46:d3:23:ea: ad:80:ef:af:d9:ad:66:57:0e:2a:56:26:35:32:b5:5f:9e:5b: ed:7a:ec:00:73:d5:ee:de:72:d2:df:f4:35:46:69:d7:6d:e5: fd:ea:c4:52:d7:27:d4:37:a1:67:d0:77:d1:de:fd:1b:9c:10: 30:6d:1c:e4:f9:38:46:82:c1:15:7e:48:1e:e5:70:3e:43:53: ef:ab:53:cc:30:c9:89:f0:e2:9c:85:7a:46:89:e8:3d:40:e3: c9:d1:be:c3 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEKX1t+doayI00lZbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDcxOTAwNDUxNloXDTI1MTAyMTAwNDUxNlowLzEtMCsGA1UEAxMk NWY4ZWIwOGYtMDg5NS00YzJiLTg4NTEtZmU5MjE1ZWRjZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOS4cck92ugNmKcH0GEuJdylXUzGEfvF46w2 /0VtdIThCIX2yo80daccPyFLzwHRCoXShl16v8LCXsShZ+KYVhhgtm8Cg+6RKef8 eJ4Om5gHOo68hA6rIzr+hsVz1IhJ1ALiwaFUOeENk+b352G5qKjt5jh/3GBJTN6o dLrPvTN6v+OTsIbFWzQvnYRYKCQOrQ7ppif9K2h441QmTuqUKFiHwYnm6y3/kiYU 0hb+OgIUGg7Sfmsl0SWJFgwP+92ufVjbCZJqlMdyPSjXqXSx0+hXawVCMwj6v33R n62S2cxtfiIS45DX11YFsvTAQX2dT2FehRGylXeA+Y9XT17OUQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFEnaHmWbB1VJMjRMEeAslgzLR9oSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81 ZjhlYjA4Zi0wODk1LTRjMmItODg1MS1mZTkyMTVlZGNmZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzVmOGViMDhmLTA4OTUtNGMyYi04 ODUxLWZlOTIxNWVkY2ZmMC81ZjhlYjA4Zi0wODk1LTRjMmItODg1MS1mZTkyMTVl ZGNmZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALAEGgDBAHMkLAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAICoKxsFZdf+P eDJYEUhfoCZFaSK9OfuREOyN6IGuTlERg2l5RXnQTNZsDxNAEsOmlwlobjAsDmnI fEbV9GMfXulWpr8juSyblDl7WdSqmOr9/9pQuLZOwLKI1gsUFXu/WELV9jfzwNyT nyHQMkUbnCMrnT5OyiR0ZL41dRxBHUItGYQjjZ9c0QHwDzzAvOlM5d+kli5FXGPm VljBOBtG0yPqrYDvr9mtZlcOKlYmNTK1X55b7XrsAHPV7t5y0t/0NUZp123l/erE Utcn1DehZ9B30d79G5wQMG0c5Pk4RoLBFX5IHuVwPkNT76tTzDDJifDinIV6Rono PUDjydG+ww== -----END CERTIFICATE-----Generated at Wed May 1 16:33:27 2024 by rpki-client on console-fra.rpki-client.org