$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer File: ae6e260c-421d-48c3-b47d-d76ac074fbba.cer (raw, json) Hash identifier: lH6swEL7R7vqOaLKs4aB/I9NpgAmtGI0BiLSY+gm2hs= Subject key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285843B1CDF50A32AF6EBF77710C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Oct 2023 00:45:15 +0000 Certificate not after: Fri 30 Jan 2026 01:45:15 +0000 Subordinate resources: IP: 163.245.0.0/16 IP: 205.215.64.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:b1:cd:f5:0a:32:af:6e:bf:77:71:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 28 00:45:15 2023 GMT Not After : Jan 30 01:45:15 2026 GMT Subject: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:51:2d:aa:be:8a:0e:8a:9a:df:07:46:af:1a: b9:dd:a8:cf:43:49:6e:4d:28:e7:ee:3b:68:ee:b7: 1f:d6:dc:79:86:f7:d2:e0:8d:d9:ac:5f:30:a6:b5: c5:f8:8c:11:27:77:60:c1:91:25:7b:60:11:82:41: f3:cd:b9:3a:59:d4:36:9a:d1:07:37:a0:7d:25:27: 85:1a:71:d6:e6:8c:fd:44:cb:bf:e1:64:6b:c3:51: 17:b0:a3:b7:ef:03:49:86:0c:c4:18:7a:67:86:2a: 00:96:75:90:c4:65:06:6d:fc:52:e6:21:30:a3:7a: c7:97:ab:e6:50:07:4e:23:9b:35:14:5b:fc:98:c4: ce:6a:de:c8:91:7e:5b:d2:af:53:6a:5a:c5:7b:4d: 32:55:c9:50:69:3d:d4:73:e9:11:a5:e7:7e:bb:f3: 22:bc:e7:79:1a:17:6e:b5:b9:a0:d6:88:14:6d:ef: be:14:1c:da:a7:04:f8:04:24:c5:ed:0b:ec:e3:ab: 2a:4f:13:62:d4:20:77:ec:96:5d:54:90:bc:fd:9d: 96:14:07:74:d0:77:6d:40:80:8b:3a:1e:8f:bb:ae: 07:79:23:64:a0:db:8a:80:76:9e:c6:8b:7c:77:bf: 37:7d:ba:53:99:9a:78:0d:e2:4b:77:a2:36:47:fa: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 163.245.0.0/16 205.215.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:13:d2:aa:4d:c8:f9:0a:df:3b:5c:fb:2c:82:73:34:13:18: 76:59:9b:1c:49:c9:94:0d:5f:f7:22:2d:51:51:82:0b:90:00: 6f:28:8d:cb:9f:1b:76:6d:bc:a5:a5:83:39:7d:1e:ee:12:c9: 20:8a:1d:05:39:2f:df:ad:17:26:74:85:26:d9:db:73:f4:fd: 13:ce:a9:e4:44:6e:4b:19:0c:11:ea:85:eb:ed:cb:11:5d:a8: 63:b1:98:c5:0a:57:83:c2:37:ad:55:96:87:e9:cf:a5:d6:e0: b4:e8:39:a4:c2:2a:e0:10:cf:c2:75:96:60:e2:32:ae:9a:01: 1e:3e:10:47:5d:78:22:ca:ee:d1:86:bf:50:cb:ed:ce:ef:f4: d0:cb:5c:4d:2b:a8:3d:20:20:7a:fa:c9:b1:8d:7b:81:74:81: f2:e4:57:0c:65:2e:4a:89:59:cf:0a:5c:b4:8e:b2:7a:9d:7b: ae:a9:50:e5:b4:44:93:ae:b1:00:6f:77:0c:ab:79:71:6a:88: cd:74:6d:31:6e:bd:6b:d4:59:c5:6a:88:0f:45:15:de:c7:c6: fa:af:f6:7a:5b:85:6c:4b:42:cf:b8:0b:6e:c7:b8:b0:00:51: 5e:e5:56:29:c2:d7:1e:05:ce:5f:fa:fb:97:94:f3:aa:93:63: 56:dc:1f:20 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEOxzfUKMq9uv3dxDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTAyODAwNDUxNVoXDTI2MDEzMDAxNDUxNVowLzEtMCsGA1UEAxMk YWU2ZTI2MGMtNDIxZC00OGMzLWI0N2QtZDc2YWMwNzRmYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFEtqr6KDoqa3wdGrxq53ajPQ0luTSjn7jto 7rcf1tx5hvfS4I3ZrF8wprXF+IwRJ3dgwZEle2ARgkHzzbk6WdQ2mtEHN6B9JSeF GnHW5oz9RMu/4WRrw1EXsKO37wNJhgzEGHpnhioAlnWQxGUGbfxS5iEwo3rHl6vm UAdOI5s1FFv8mMTOat7IkX5b0q9TalrFe00yVclQaT3Uc+kRped+u/MivOd5Ghdu tbmg1ogUbe++FBzapwT4BCTF7Qvs46sqTxNi1CB37JZdVJC8/Z2WFAd00HdtQICL Oh6Pu64HeSNkoNuKgHaexot8d783fbpTmZp4DeJLd6I2R/r/fQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFHSTYFyspXJjGrq3lS7dZwKD3jzjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h ZTZlMjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZhYzA3NGZiYmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2FlNmUyNjBjLTQyMWQtNDhjMy1i NDdkLWQ3NmFjMDc0ZmJiYS9hZTZlMjYwYy00MjFkLTQ4YzMtYjQ3ZC1kNzZhYzA3 NGZiYmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCj9QMEBs3XQDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxE9KqTcj5Ct87 XPssgnM0Exh2WZscScmUDV/3Ii1RUYILkABvKI3Lnxt2bbylpYM5fR7uEskgih0F OS/frRcmdIUm2dtz9P0TzqnkRG5LGQwR6oXr7csRXahjsZjFCleDwjetVZaH6c+l 1uC06DmkwirgEM/CdZZg4jKumgEePhBHXXgiyu7Rhr9Qy+3O7/TQy1xNK6g9ICB6 +smxjXuBdIHy5FcMZS5KiVnPCly0jrJ6nXuuqVDltESTrrEAb3cMq3lxaojNdG0x br1r1FnFaogPRRXex8b6r/Z6W4VsS0LPuAtux7iwAFFe5VYpwtceBc5f+vuXlPOq k2NW3B8g -----END CERTIFICATE-----Generated at Wed May 1 16:00:01 2024 by rpki-client on console-ams.rpki-client.org