$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer File: 6e10601c-e280-4510-9d84-b6d2b02b8446.cer (raw, json) Hash identifier: cfo2BonEGIjgrHuJTzkPxDlutZIT+9X+xv+JvZYEc74= Subject key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285844484A645497D7D8F7DD02DAA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Dec 2023 22:27:14 +0000 Certificate not after: Sun 04 Jan 2026 01:45:23 +0000 Subordinate resources: AS: 393397 IP: 66.150.64.0/21 IP: 69.72.96.0/19 IP: 156.146.64.0/19 IP: 2607:8c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:48:4a:64:54:97:d7:d8:f7:dd:02:da:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 20 22:27:14 2023 GMT Not After : Jan 4 01:45:23 2026 GMT Subject: CN=6e10601c-e280-4510-9d84-b6d2b02b8446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:ab:a0:85:e5:e1:62:40:5a:0f:c5:97:69: e7:5a:08:2d:4b:91:6f:fd:d3:40:f5:e3:aa:c8:32: d5:f8:8f:fc:6b:84:57:15:76:db:cc:f2:80:df:86: 1e:85:26:f4:22:de:dc:d5:dc:88:d9:65:c0:ec:d5: 82:58:f4:31:3a:7c:e9:5a:69:ea:85:4a:a2:ed:ea: d3:f5:0e:b2:e8:5a:ad:ba:a4:4c:a4:6a:ba:7c:bd: a9:29:9a:f8:7a:f9:f9:e3:86:53:a5:37:c9:3e:1f: 77:e1:7b:c1:ce:f3:b7:aa:60:b9:d9:18:ee:10:b5: a8:56:83:c5:a8:11:e2:7d:a4:d1:80:5d:06:cf:1c: de:e3:a8:7e:fe:7b:7e:b6:df:c6:b4:23:3e:30:09: 97:f9:39:bd:b1:7c:84:51:27:55:40:d0:3a:f0:84: 58:54:ca:4c:14:b3:23:16:26:33:55:9f:fe:5a:f0: 51:de:88:3b:ff:3e:cf:47:be:ff:f3:0b:c5:ba:75: 18:e8:18:a8:05:0e:7f:16:c6:94:3b:ac:45:a5:08: 60:d2:26:c5:e0:10:0a:de:e3:a6:15:7b:bc:c7:40: 85:34:26:9c:c1:a8:f1:55:dc:52:cf:05:1a:87:b3: 2a:20:3a:83:a9:64:72:af:54:b9:84:91:0a:2c:90: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.150.64.0/21 69.72.96.0/19 156.146.64.0/19 IPv6: 2607:8c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393397 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d1:37:a1:ed:67:b9:f5:d8:ec:53:a2:7a:7f:8f:37:de:fa: 4b:bb:bb:a8:e2:15:58:4c:97:76:4f:47:91:44:5e:63:b3:2b: 5c:69:71:f7:b9:53:0c:ba:f0:82:06:32:a0:97:34:36:0f:a5: 3a:0b:ec:54:9c:45:86:44:67:ee:ac:7b:a6:29:27:d7:0a:f9: 32:c5:e7:34:31:1c:82:43:6c:35:34:58:6f:67:c7:2f:70:f7: 74:13:a0:f0:0d:1e:ba:9a:fe:3e:19:ba:ab:35:07:71:58:d1: 2f:52:da:f7:f4:5c:8d:9f:c2:dd:e4:af:e7:92:72:bb:fe:a1: da:62:1a:6b:ad:9f:91:a4:8f:c8:90:f1:52:36:8c:71:9a:cf: 0e:26:c9:66:3b:f4:ce:6d:d2:20:d3:89:b5:14:6d:9a:a8:a3: ce:9b:85:e6:6e:34:1c:79:ef:1d:77:67:b6:fa:3a:72:51:71: 44:4b:80:e6:4d:f5:5a:a8:49:c8:fb:af:08:b6:d1:17:8a:89: 28:99:0c:4a:4c:49:37:92:67:95:1c:95:7f:a6:74:30:b6:55: dd:de:73:94:61:83:79:08:60:8d:20:52:4a:2e:9b:6f:97:1c: e8:ec:1c:d0:bd:10:e8:64:01:37:b6:4c:d2:39:e0:11:b1:ba: bb:e7:d6:83 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWERISmRUl9fY990C2qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTIyMDIyMjcxNFoXDTI2MDEwNDAxNDUyM1owLzEtMCsGA1UEAxMk NmUxMDYwMWMtZTI4MC00NTEwLTlkODQtYjZkMmIwMmI4NDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNGroIXl4WJAWg/Fl2nnWggtS5Fv/dNA9eOq yDLV+I/8a4RXFXbbzPKA34YehSb0It7c1dyI2WXA7NWCWPQxOnzpWmnqhUqi7erT 9Q6y6FqtuqRMpGq6fL2pKZr4evn544ZTpTfJPh934XvBzvO3qmC52RjuELWoVoPF qBHifaTRgF0Gzxze46h+/nt+tt/GtCM+MAmX+Tm9sXyEUSdVQNA68IRYVMpMFLMj FiYzVZ/+WvBR3og7/z7PR77/8wvFunUY6BioBQ5/FsaUO6xFpQhg0ibF4BAK3uOm FXu8x0CFNCacwajxVdxSzwUah7MqIDqDqWRyr1S5hJEKLJCRKQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFE7tRJdYmhw5mjO4pYAHlteDOopEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 ZTEwNjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQyYjAyYjg0NDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZlMTA2MDFjLWUyODAtNDUxMC05 ZDg0LWI2ZDJiMDJiODQ0Ni82ZTEwNjAxYy1lMjgwLTQ1MTAtOWQ4NC1iNmQyYjAy Yjg0NDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBANClkADBAVFSGADBAWckkAwDQQCAAIwBwMFACYH jIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgC1MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADrRN6HtZ7n1 2OxTonp/jzfe+ku7u6jiFVhMl3ZPR5FEXmOzK1xpcfe5Uwy68IIGMqCXNDYPpToL 7FScRYZEZ+6se6YpJ9cK+TLF5zQxHIJDbDU0WG9nxy9w93QToPANHrqa/j4Zuqs1 B3FY0S9S2vf0XI2fwt3kr+eScrv+odpiGmutn5Gkj8iQ8VI2jHGazw4myWY79M5t 0iDTibUUbZqoo86bheZuNBx57x13Z7b6OnJRcURLgOZN9VqoScj7rwi20ReKiSiZ DEpMSTeSZ5UclX+mdDC2Vd3ec5Rhg3kIYI0gUkoum2+XHOjsHNC9EOhkATe2TNI5 4BGxurvn1oM= -----END CERTIFICATE-----Generated at Wed May 1 15:59:58 2024 by rpki-client on console-ams.rpki-client.org