$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765.cer File: 8c8dc77f-caa8-4bb5-be39-fe8ad71f8765.cer (raw, json) Hash identifier: /nHQLZpOBNsB6VEUQINzYH9XNbh5/Z/ZeyniRpxAu/k= Subject key identifier: BC:5E:2C:CF:11:F9:9B:A5:23:D0:EE:7F:1F:7F:73:FB:E0:A8:60:76 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858433949F2E1A603AF0238949E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Sep 2023 20:42:16 +0000 Certificate not after: Fri 14 Nov 2025 01:45:20 +0000 Subordinate resources: AS: 19818 IP: 64.239.104.0/22 IP: 198.59.136.0/22 IP: 216.120.132.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:39:49:f2:e1:a6:03:af:02:38:94:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 14 20:42:16 2023 GMT Not After : Nov 14 01:45:20 2025 GMT Subject: CN=8c8dc77f-caa8-4bb5-be39-fe8ad71f8765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:50:39:c9:5b:ac:d3:06:7f:96:52:e2:28: ed:58:29:6c:21:bf:85:1f:6a:3b:fe:86:8b:1c:e5: b7:32:a2:c0:7b:09:e8:df:66:7e:dc:f7:6a:7c:d4: 35:40:13:d3:ff:a9:38:c8:46:e8:42:b1:d3:1a:6e: 01:35:0d:db:6f:74:71:77:fa:ba:79:70:64:1e:58: b3:10:1b:31:8e:be:c1:f1:b8:ba:6f:39:23:d9:ac: 60:a7:e3:ca:fc:f2:34:04:d6:ed:9c:3e:db:1c:34: 68:3c:1d:f4:a9:a1:ed:91:93:e1:20:34:0f:74:db: f4:11:5c:47:8c:90:f9:63:fb:af:31:43:a7:78:63: cc:44:20:67:42:20:78:0a:b2:47:6c:fe:74:54:7b: 9e:78:ef:3b:98:38:e9:2c:05:ab:f2:06:8d:7f:0d: ba:c7:f3:9a:78:a4:c4:da:6d:22:d8:74:ff:9e:e1: d3:6e:1a:98:e3:dc:af:dd:6e:dd:60:7d:c0:0f:86: fe:f8:49:00:d0:92:bd:26:f3:77:e8:5a:e7:db:54: 32:f0:72:ee:4b:50:33:16:8f:32:1c:ef:58:c6:fa: 3b:96:f3:5c:9f:b1:2b:5c:b9:e8:39:36:ce:bf:6a: a4:9c:ab:cf:f1:fa:5f:b2:dc:61:31:9b:a0:6d:0b: b2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:5E:2C:CF:11:F9:9B:A5:23:D0:EE:7F:1F:7F:73:FB:E0:A8:60:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765/8c8dc77f-caa8-4bb5-be39-fe8ad71f8765.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.239.104.0/22 198.59.136.0/22 216.120.132.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19818 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:61:68:19:f6:c6:d9:5f:9f:b7:17:96:3a:c7:ff:82:76:85: 9c:15:a0:f2:74:37:32:70:66:9f:49:c7:75:1e:04:b6:9d:99: f9:d9:5d:d7:0c:14:44:ff:d6:e0:67:06:e3:3c:0e:2e:b0:b3: 3a:e8:49:ba:6f:3d:99:07:5d:5d:d5:cf:a5:b7:4b:4c:50:73: 77:7a:54:61:b7:d9:3a:c9:16:72:60:e2:3e:39:a6:3d:df:c8: a4:0a:49:4b:f4:f7:4a:fb:50:59:db:be:81:28:48:8d:49:08: ed:3a:0f:59:48:0f:53:46:b3:e4:4f:4e:0e:38:b6:0a:f0:2e: 48:6a:3f:27:0d:dd:57:84:6f:16:82:f9:f6:93:da:80:47:fa: b9:87:90:5c:2d:af:86:19:d4:2f:1a:24:29:15:4d:96:26:0e: a9:c1:20:9c:fc:89:10:53:cc:04:c0:09:0d:a8:00:3e:08:a7: e1:77:a2:6f:78:49:ed:5f:98:25:e0:d5:be:90:e7:24:7d:46: 1e:6f:2a:ed:c3:18:f8:5d:66:e7:ba:46:2c:a0:be:4c:1b:8a: b9:c5:a8:81:dc:f1:46:11:e7:f6:d2:f2:0c:dd:13:6c:cb:47: eb:b4:23:ea:cb:ac:3a:bc:0e:bc:32:21:5c:0f:59:9b:ec:bb: c4:f4:4d:fe -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEM5SfLhpgOvAjiUngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDkxNDIwNDIxNloXDTI1MTExNDAxNDUyMFowLzEtMCsGA1UEAxMk OGM4ZGM3N2YtY2FhOC00YmI1LWJlMzktZmU4YWQ3MWY4NzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCtQOclbrNMGf5ZS4ijtWClsIb+FH2o7/oaL HOW3MqLAewno32Z+3PdqfNQ1QBPT/6k4yEboQrHTGm4BNQ3bb3Rxd/q6eXBkHliz EBsxjr7B8bi6bzkj2axgp+PK/PI0BNbtnD7bHDRoPB30qaHtkZPhIDQPdNv0EVxH jJD5Y/uvMUOneGPMRCBnQiB4CrJHbP50VHueeO87mDjpLAWr8gaNfw26x/OaeKTE 2m0i2HT/nuHTbhqY49yv3W7dYH3AD4b++EkA0JK9JvN36Frn21Qy8HLuS1AzFo8y HO9Yxvo7lvNcn7ErXLnoOTbOv2qknKvP8fpfstxhMZugbQuyUwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFLxeLM8R+ZulI9Dufx9/c/vgqGB2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 YzhkYzc3Zi1jYWE4LTRiYjUtYmUzOS1mZThhZDcxZjg3NjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzhjOGRjNzdmLWNhYTgtNGJiNS1i ZTM5LWZlOGFkNzFmODc2NS84YzhkYzc3Zi1jYWE4LTRiYjUtYmUzOS1mZThhZDcx Zjg3NjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAJA72gDBALGO4gDBALYeIQwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICTWowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMmFoGfbG2V+ftxeWOsf/gnaFnBWg8nQ3 MnBmn0nHdR4Etp2Z+dld1wwURP/W4GcG4zwOLrCzOuhJum89mQddXdXPpbdLTFBz d3pUYbfZOskWcmDiPjmmPd/IpApJS/T3SvtQWdu+gShIjUkI7ToPWUgPU0az5E9O Dji2CvAuSGo/Jw3dV4RvFoL59pPagEf6uYeQXC2vhhnULxokKRVNliYOqcEgnPyJ EFPMBMAJDagAPgin4Xeib3hJ7V+YJeDVvpDnJH1GHm8q7cMY+F1m57pGLKC+TBuK ucWogdzxRhHn9tLyDN0TbMtH67Qj6susOrwOvDIhXA9Zm+y7xPRN/g== -----END CERTIFICATE-----Generated at Wed May 1 15:59:59 2024 by rpki-client on console-ams.rpki-client.org