$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer File: 78108340-c24e-45fa-a787-5578ce17c653.cer (raw, json) Hash identifier: S7ir8glCmpNlyUIaWp3gh1dYMLOc250BhNYXmtHXgC4= Subject key identifier: 96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584405AC41F6B6D49E284D8A0240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Nov 2023 01:45:15 +0000 Certificate not after: Sun 01 Mar 2026 01:45:15 +0000 Subordinate resources: IP: 172.82.4.0/22 IP: 206.168.48.0/22 IP: 208.74.40.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:05:ac:41:f6:b6:d4:9e:28:4d:8a:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 27 01:45:15 2023 GMT Not After : Mar 1 01:45:15 2026 GMT Subject: CN=78108340-c24e-45fa-a787-5578ce17c653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4d:8d:91:44:2d:05:31:67:b3:62:12:64:de: 6b:3f:cc:9c:b6:40:f6:49:ed:b0:98:05:76:4e:75: 12:9c:37:fd:f6:75:88:a9:ac:2c:7d:f1:32:93:d2: 95:c7:c1:14:9e:f6:a7:08:6f:3e:00:36:97:06:33: 33:86:24:97:64:0a:d3:0e:2b:a4:cc:2e:77:40:38: 10:3a:7f:1c:88:40:bb:7b:8f:8a:54:57:a9:64:a8: fc:5c:34:fa:eb:ab:03:cb:aa:73:f5:4d:33:74:01: eb:50:0a:87:3c:ac:74:bd:72:22:9e:52:d8:e1:83: e0:ad:14:ad:8f:cd:c7:58:0f:6b:e0:8d:b5:a6:bc: 33:a2:8a:39:52:80:d6:18:73:87:a1:a0:f9:d1:3f: 2d:90:03:58:8d:df:46:58:54:d3:eb:41:c5:8d:f2: 3e:74:a4:a5:6f:e6:c1:b4:06:9a:b9:14:fd:a0:d2: 87:39:25:d9:54:e7:52:00:7e:33:1e:51:d1:ac:4f: 3e:21:06:b9:51:e4:de:f5:72:a9:e3:a7:93:b5:3b: 6e:16:8e:d5:82:32:5f:d0:66:c3:d0:db:e0:c9:d2: ff:0f:07:b4:e8:d8:5a:bc:7f:2c:2b:d6:c2:45:a9: f9:ce:b8:a2:4c:e1:8b:1a:b0:2a:4b:25:2f:0b:e2: 2a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 172.82.4.0/22 206.168.48.0/22 208.74.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:09:f2:18:c4:e3:29:af:e0:45:23:26:71:55:1f:df:5d:40: 3a:d1:9a:e9:d2:d5:a6:9c:5e:07:5b:51:1b:d9:86:36:ec:9e: 55:1c:7c:df:49:cb:47:7e:6c:d9:c5:94:57:e3:b5:4c:40:96: 86:23:ba:0f:1e:0c:ca:33:4c:56:ea:76:40:0f:8d:2f:58:c0: 95:f3:32:ba:c5:d3:f3:73:0f:ae:64:7a:39:94:9c:ae:3c:7e: c0:2c:72:1a:8a:b9:10:f6:86:59:bd:98:38:01:96:0f:98:e0: 64:af:e1:55:2b:ae:da:47:2c:53:5f:d9:5d:98:62:6f:d2:b3: fc:29:4c:e7:82:d6:bc:e5:8a:8b:1b:53:02:66:8a:64:89:25: 19:98:3e:c2:7a:31:7d:e1:11:ec:df:fb:12:73:51:c2:86:4e: 0e:2e:02:30:85:e6:4b:67:ef:07:30:ab:cf:e8:c1:75:f3:a1: 8c:6c:40:40:a2:e2:66:0d:6a:53:d8:69:e2:9d:ec:10:d3:1c: 3e:63:30:72:6d:31:f5:6c:e7:b0:0a:91:f1:75:49:9a:09:15: 4b:0c:44:c1:2f:b4:71:8d:05:fc:c6:b9:17:2c:50:78:d2:1a: 7f:f4:5e:e7:b0:ab:c6:ed:71:06:5b:ee:2b:9c:1d:5d:15:bd: 17:75:95:8f -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEQFrEH2ttSeKE2KAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTEyNzAxNDUxNVoXDTI2MDMwMTAxNDUxNVowLzEtMCsGA1UEAxMk NzgxMDgzNDAtYzI0ZS00NWZhLWE3ODctNTU3OGNlMTdjNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi02NkUQtBTFns2ISZN5rP8yctkD2Se2wmAV2 TnUSnDf99nWIqawsffEyk9KVx8EUnvanCG8+ADaXBjMzhiSXZArTDiukzC53QDgQ On8ciEC7e4+KVFepZKj8XDT666sDy6pz9U0zdAHrUAqHPKx0vXIinlLY4YPgrRSt j83HWA9r4I21prwzooo5UoDWGHOHoaD50T8tkANYjd9GWFTT60HFjfI+dKSlb+bB tAaauRT9oNKHOSXZVOdSAH4zHlHRrE8+IQa5UeTe9XKp46eTtTtuFo7VgjJf0GbD 0NvgydL/Dwe06NhavH8sK9bCRan5zriiTOGLGrAqSyUvC+Iq6QIDAQABo4IECzCC BAcwHQYDVR0OBBYEFJa0K4MZPXmIcrJN2bdtG+GxVkPdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 ODEwODM0MC1jMjRlLTQ1ZmEtYTc4Ny01NTc4Y2UxN2M2NTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzc4MTA4MzQwLWMyNGUtNDVmYS1h Nzg3LTU1NzhjZTE3YzY1My83ODEwODM0MC1jMjRlLTQ1ZmEtYTc4Ny01NTc4Y2Ux N2M2NTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAKsUgQDBALOqDADBALQSigwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACAny GMTjKa/gRSMmcVUf311AOtGa6dLVppxeB1tRG9mGNuyeVRx830nLR35s2cWUV+O1 TECWhiO6Dx4MyjNMVup2QA+NL1jAlfMyusXT83MPrmR6OZScrjx+wCxyGoq5EPaG Wb2YOAGWD5jgZK/hVSuu2kcsU1/ZXZhib9Kz/ClM54LWvOWKixtTAmaKZIklGZg+ wnoxfeER7N/7EnNRwoZODi4CMIXmS2fvBzCrz+jBdfOhjGxAQKLiZg1qU9hp4p3s ENMcPmMwcm0x9WznsAqR8XVJmgkVSwxEwS+0cY0F/Ma5FyxQeNIaf/Re57Crxu1x BlvuK5wdXRW9F3WVjw== -----END CERTIFICATE-----Generated at Wed May 1 12:32:34 2024 by rpki-client on console-ams.rpki-client.org