$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366.cer File: 8818451e-2b15-4de5-89f9-f3d1cb4d7366.cer (raw, json) Hash identifier: vw6qV2dIcoMFYEU/udTUHN+vWHbsNQsHY9ATKCQ47II= Subject key identifier: 9E:7C:F0:C6:2D:14:2D:7E:6D:BE:76:F6:20:E1:3E:1D:95:7B:2A:CD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285841E48353C898172E0DFECCCA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/8818451e-2b15-4de5-89f9-f3d1cb4d7366.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Fri 01 Aug 2025 19:06:39 +0000 Subordinate resources: IP: 23.148.216.0/24 IP: 2607:2cc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:53:c8:98:17:2e:0d:fe:cc:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Aug 1 19:06:39 2025 GMT Subject: CN=8818451e-2b15-4de5-89f9-f3d1cb4d7366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:98:f0:0f:ec:5d:d9:35:06:6e:4f:99:a4: 6a:6c:85:76:6f:77:64:09:d2:fe:ef:e0:6e:b2:c1: 3e:14:00:59:cb:8d:32:cc:24:37:b3:56:b3:6f:b8: 97:1f:62:74:08:67:18:00:61:35:b7:26:81:29:61: 96:15:a1:0a:87:88:54:0d:cc:19:8c:8c:c2:62:31: 72:68:68:ee:ea:ef:05:60:8a:e5:6b:25:fe:f4:2c: 4d:30:12:9e:8f:ad:c0:11:ab:dd:1b:0b:59:9a:69: 47:a3:67:f1:46:6b:37:fa:83:16:6e:de:ae:d6:1f: 37:db:bc:26:af:87:22:66:2f:36:51:0b:77:30:1a: c2:9e:ac:d8:3f:f4:fe:ef:44:75:7f:f3:f4:5a:af: c1:ed:eb:80:9d:2f:d2:35:ab:93:03:a0:f6:13:5f: b0:a3:e8:47:95:b0:ad:8f:70:81:1c:6c:3c:23:b0: 52:00:1e:73:5a:f4:b0:99:47:f2:e2:57:a3:2c:64: ec:1d:36:c2:e8:01:14:de:8f:10:b0:ea:4f:09:bd: d8:01:ce:92:e3:19:28:eb:73:91:77:fb:3c:78:d9: c9:25:49:34:e8:70:df:f2:ae:84:05:aa:c0:be:e6: 27:5e:83:2c:53:f9:11:31:66:1f:dd:a9:f8:5a:72: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:F0:C6:2D:14:2D:7E:6D:BE:76:F6:20:E1:3E:1D:95:7B:2A:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/8818451e-2b15-4de5-89f9-f3d1cb4d7366.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.148.216.0/24 IPv6: 2607:2cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ac:03:21:d5:0d:a5:db:f9:6d:65:dd:c1:7e:39:69:cf:f1: 15:54:6a:ad:5c:cf:ed:98:01:ce:45:ff:74:d7:7b:48:cd:17: e5:c8:92:5b:67:9e:ad:42:bc:99:a4:1c:3c:1d:99:3b:64:54: a8:fe:3f:05:6a:58:da:57:38:ba:71:59:b6:88:a4:0f:fc:f5: 87:cf:e0:78:69:20:0b:f8:cd:94:df:37:72:28:4c:05:35:d0: 2d:59:35:c9:ba:d6:15:94:84:2d:58:26:9a:0d:f1:00:ae:c6: fe:17:ec:ef:ad:79:28:2a:78:ac:59:ce:c4:71:29:ac:1f:67: 52:c9:64:66:64:ce:29:ee:72:bc:2e:05:e5:86:96:b1:5c:8f: 13:dd:3b:1a:1e:ff:3a:0a:0e:2d:2c:11:1c:cc:5b:2b:6d:b6: 79:d7:7c:21:d8:9c:d7:d3:98:91:c3:ab:ab:b4:20:ba:db:39: 1d:24:09:f8:f1:1b:ea:2a:d5:cf:eb:dd:ea:33:80:57:2c:b1: b4:49:dd:38:ab:d1:d6:9b:90:06:a9:4d:cb:d2:9b:d0:76:cc: 6c:1e:bf:fa:7d:a8:71:e8:0b:a0:4f:61:d9:31:d2:c3:00:67: cf:25:d9:53:1d:fb:a3:04:1c:3e:c9:f7:36:aa:ba:98:01:0b: c4:f1:fa:6e -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEHkg1PImBcuDf7MyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgwMTE5MDYzOVowLzEtMCsGA1UEAxMk ODgxODQ1MWUtMmIxNS00ZGU1LTg5ZjktZjNkMWNiNGQ3MzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOKY8A/sXdk1Bm5PmaRqbIV2b3dkCdL+7+Bu ssE+FABZy40yzCQ3s1azb7iXH2J0CGcYAGE1tyaBKWGWFaEKh4hUDcwZjIzCYjFy aGju6u8FYIrlayX+9CxNMBKej63AEavdGwtZmmlHo2fxRms3+oMWbt6u1h8327wm r4ciZi82UQt3MBrCnqzYP/T+70R1f/P0Wq/B7euAnS/SNauTA6D2E1+wo+hHlbCt j3CBHGw8I7BSAB5zWvSwmUfy4lejLGTsHTbC6AEU3o8QsOpPCb3YAc6S4xko63OR d/s8eNnJJUk06HDf8q6EBarAvuYnXoMsU/kRMWYf3an4WnKNJQIDAQABo4IEDjCC BAowHQYDVR0OBBYEFJ588MYtFC1+bb529iDhPh2VeyrNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 ODE4NDUxZS0yYjE1LTRkZTUtODlmOS1mM2QxY2I0ZDczNjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg4MTg0NTFlLTJiMTUtNGRlNS04 OWY5LWYzZDFjYjRkNzM2Ni84ODE4NDUxZS0yYjE1LTRkZTUtODlmOS1mM2QxY2I0 ZDczNjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXlNgwDQQCAAIwBwMFACYHLMAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA RqwDIdUNpdv5bWXdwX45ac/xFVRqrVzP7ZgBzkX/dNd7SM0X5ciSW2eerUK8maQc PB2ZO2RUqP4/BWpY2lc4unFZtoikD/z1h8/geGkgC/jNlN83cihMBTXQLVk1ybrW FZSELVgmmg3xAK7G/hfs7615KCp4rFnOxHEprB9nUslkZmTOKe5yvC4F5YaWsVyP E907Gh7/OgoOLSwRHMxbK222edd8Idic19OYkcOrq7Qguts5HSQJ+PEb6irVz+vd 6jOAVyyxtEndOKvR1puQBqlNy9Kb0HbMbB6/+n2ocegLoE9h2THSwwBnzyXZUx37 owQcPsn3Nqq6mAELxPH6bg== -----END CERTIFICATE-----Generated at Wed May 1 16:33:29 2024 by rpki-client on console-fra.rpki-client.org