$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer File: 8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer (raw, json) Hash identifier: BcLwctBCCKD+x+G3l8W7EQGFSZo4ET98EhgJFx6+g1M= Subject key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285844D0332BC12BC6C49852BC08E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Feb 2024 14:50:23 +0000 Certificate not after: Tue 12 May 2026 13:50:23 +0000 Subordinate resources: IP: 23.140.40.0/24 IP: 141.195.112.0/22 IP: 2602:fb26::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d0:33:2b:c1:2b:c6:c4:98:52:bc:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 7 14:50:23 2024 GMT Not After : May 12 13:50:23 2026 GMT Subject: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:cd:f1:29:ef:05:c5:0b:b1:bc:5f:84:97: da:b3:77:07:6f:36:b7:57:de:20:ea:a8:d2:a0:c5: 16:e2:84:c9:1c:fa:ff:cb:39:9c:58:ba:5f:65:4b: a5:1a:3a:9b:48:d1:4c:e9:89:38:d6:fc:bd:d0:d6: 5f:74:ac:a2:20:dd:3e:71:2b:cc:0a:13:60:ac:04: d2:62:10:a6:96:a3:c3:df:b1:0d:18:95:fc:1c:80: f6:f9:82:db:5a:5f:bd:87:2a:42:ab:b8:46:7f:49: 41:08:63:cb:d7:ff:e6:3c:0a:02:36:57:dc:0c:9e: d6:28:e2:78:8d:33:a9:cb:15:11:df:e6:57:7c:47: 35:31:59:35:ab:c8:5f:86:d1:15:6d:87:ad:f6:4f: 4f:8b:2e:c1:4f:ae:ac:82:79:68:fb:e7:e2:10:f0: 44:7e:1a:9b:8b:f3:c1:49:07:10:2d:8b:d8:89:99: 65:63:95:3d:55:20:60:e1:dd:27:fb:f3:1d:a9:f3: 15:26:a0:01:d9:eb:8a:a7:7e:6b:b6:fd:4d:92:66: 6a:8a:c8:22:3a:9a:9c:85:a4:14:af:21:18:af:4e: 97:b5:06:35:49:12:bc:22:34:3a:c0:7b:32:47:23: 73:9b:df:26:9e:6e:9d:f5:6e:26:9c:77:a4:d2:b4: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.140.40.0/24 141.195.112.0/22 IPv6: 2602:fb26::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3b:8d:79:80:75:4c:39:f8:63:42:0c:a2:f4:e9:c4:34:61: ab:f1:9d:bc:c5:18:41:34:31:92:a9:9a:99:cc:7b:f5:85:26: 55:f4:f1:57:f1:aa:da:0e:d5:f8:53:7c:bf:73:0d:81:1c:1e: 57:6a:82:8b:34:16:72:ec:ba:90:56:d7:84:65:ae:e5:e3:fb: e0:2d:dc:15:ea:80:4f:4c:11:6d:69:b7:b4:ec:f8:8d:b6:ad: 2e:c0:a4:99:cb:89:1b:ab:45:98:c7:93:5d:c3:2e:42:2a:15: a5:c5:7e:4f:f5:eb:9b:e3:72:ae:b7:f2:d1:45:ed:80:e0:94: b2:d5:6e:c1:c5:77:a4:1c:ae:53:71:5b:c6:7c:93:13:9f:20: 8a:fd:f6:d7:5c:ed:24:21:3e:ca:5f:4b:cc:6f:fe:07:e8:0d: fb:00:0f:b6:ab:ab:b5:b6:4b:88:08:07:2f:ae:99:1c:59:c6: a8:3f:81:5b:f1:72:67:90:0d:38:4f:e3:67:15:a7:6b:bf:b2: 38:ec:9f:91:2f:ce:fc:e4:e6:09:ac:8c:5d:65:ba:a3:1e:7c: 76:6a:39:f1:97:06:a5:a7:8b:9c:8b:fb:85:c1:87:9e:cf:08: ae:12:46:63:be:3e:1e:3b:04:ac:7c:05:b4:77:84:0f:c8:3f: 41:c9:b5:18 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWETQMyvBK8bEmFK8COAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDIwNzE0NTAyM1oXDTI2MDUxMjEzNTAyM1owLzEtMCsGA1UEAxMk OGFlOTE5MjgtMzVjZi00NmVkLWJmODctOTJkOWJmZDYyOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTrN8SnvBcULsbxfhJfas3cHbza3V94g6qjS oMUW4oTJHPr/yzmcWLpfZUulGjqbSNFM6Yk41vy90NZfdKyiIN0+cSvMChNgrATS YhCmlqPD37ENGJX8HID2+YLbWl+9hypCq7hGf0lBCGPL1//mPAoCNlfcDJ7WKOJ4 jTOpyxUR3+ZXfEc1MVk1q8hfhtEVbYet9k9Piy7BT66sgnlo++fiEPBEfhqbi/PB SQcQLYvYiZllY5U9VSBg4d0n+/MdqfMVJqAB2euKp35rtv1NkmZqisgiOpqchaQU ryEYr06XtQY1SRK8IjQ6wHsyRyNzm98mnm6d9W4mnHek0rSU4QIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFNk0EcCzxaRAZWQB4wSY3Isy15flMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZkNjI5ZWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhhZTkxOTI4LTM1Y2YtNDZlZC1i Zjg3LTkyZDliZmQ2MjllYy84YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZk NjI5ZWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjCgDBAKNw3AwDgQCAAIwCAMGBCYC+yYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY7jXmAdUw5+GNCDKL06cQ0YavxnbzFGEE0MZKpmpnMe/WFJlX08Vfx qtoO1fhTfL9zDYEcHldqgos0FnLsupBW14RlruXj++At3BXqgE9MEW1pt7Ts+I22 rS7ApJnLiRurRZjHk13DLkIqFaXFfk/165vjcq638tFF7YDglLLVbsHFd6QcrlNx W8Z8kxOfIIr99tdc7SQhPspfS8xv/gfoDfsAD7arq7W2S4gIBy+umRxZxqg/gVvx cmeQDThP42cVp2u/sjjsn5Evzvzk5gmsjF1luqMefHZqOfGXBqWni5yL+4XBh57P CK4SRmO+Ph47BKx8BbR3hA/IP0HJtRg= -----END CERTIFICATE-----Generated at Wed May 1 15:59:58 2024 by rpki-client on console-ams.rpki-client.org