$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer File: b8a29c46-e0f1-4edc-988a-9420affbc339.cer (raw, json) Hash identifier: xxSFTv4eI/cQwpuMcPbHcRpFLN6lnVU5uouaK8BQjv4= Subject key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285843772DA5D4F0F3304B5D57DEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Oct 2023 00:45:22 +0000 Certificate not after: Fri 09 Jan 2026 01:45:22 +0000 Subordinate resources: AS: 13598 IP: 170.2.0.0/16 IP: 2620:21:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:77:2d:a5:d4:f0:f3:30:4b:5d:57:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 7 00:45:22 2023 GMT Not After : Jan 9 01:45:22 2026 GMT Subject: CN=b8a29c46-e0f1-4edc-988a-9420affbc339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:91:90:d7:17:c0:56:f6:e7:76:1d:06:3c:6c: 42:a9:03:e3:b6:45:2a:cd:cc:b1:24:5c:f9:4b:8a: 12:86:91:07:6a:8c:67:d6:18:ec:58:87:29:ea:85: ea:6d:21:b0:1b:67:42:19:74:ad:ef:29:6c:85:f8: 6d:d1:27:6a:71:fc:e3:76:0b:a5:2c:e4:50:23:9a: 37:3c:9c:c2:41:8b:8e:9d:bd:3d:5f:16:f3:a2:69: d5:ca:f6:3a:f9:12:90:35:ed:b3:d4:fa:8a:d7:2d: 53:99:9f:db:2d:46:1c:5a:8c:05:55:0e:95:06:e9: 90:26:8a:a1:ee:c5:cd:2e:13:d9:ff:9a:24:81:f5: 19:16:72:d1:02:be:da:af:68:0f:72:1f:79:3e:14: 5a:8b:24:0d:8c:f6:f5:3f:9f:b0:fc:81:15:fc:c9: 3d:d4:57:79:22:08:1d:37:d8:bb:69:93:4e:22:a1: 10:d8:87:79:68:46:92:dd:3c:8f:d5:88:ce:af:7a: 36:1c:35:38:a6:03:0d:b8:3a:47:c5:8f:f6:3d:b3: 3b:9e:6b:d6:92:ac:7f:ed:a4:24:7a:63:9f:96:ce: 66:eb:9a:18:eb:5b:80:b7:c7:c0:8e:04:2a:50:bf: a4:0e:10:47:de:b6:ad:b8:14:e4:db:9b:1a:93:ae: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 170.2.0.0/16 IPv6: 2620:21:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13598 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3a:f1:b7:51:9e:a9:c6:c7:0c:e1:41:6f:69:9c:94:02:9a: ec:47:bc:61:07:f6:76:77:41:e5:7b:ae:2f:fc:81:a6:7d:5c: 3e:90:60:56:93:54:18:6a:81:dd:de:e4:ff:e6:73:4f:24:02: 00:17:bd:a8:92:29:c1:65:f8:6b:c6:3f:9f:91:32:73:5b:d9: ad:d2:ce:8b:fe:32:4e:9c:b5:89:27:da:60:25:b3:be:fc:3d: 33:ff:a0:c6:75:09:7b:03:0a:1e:36:73:45:4e:8e:f7:54:28: f0:28:d1:53:70:7b:79:11:0d:b6:a0:87:c4:33:86:b8:31:38: 0b:1e:24:9a:8f:d1:88:ea:79:d1:6f:47:30:c1:14:7e:4b:66: 07:fc:ea:45:d2:79:6d:06:84:4a:84:4f:10:09:f5:4d:69:ec: b2:ec:cb:d4:94:07:2a:73:d7:1c:73:d7:41:b1:e2:4a:3f:be: d2:24:c7:8a:0f:b1:a7:13:d1:87:bf:1c:6e:09:b3:3a:d1:1e: b6:63:7a:83:f8:e1:44:11:0c:40:54:3c:8a:c8:da:b8:95:01: ab:9a:a3:d7:01:16:0c:e9:3d:9a:0b:cd:c1:4c:4f:20:d5:84: ca:d1:9d:3f:f8:9e:c6:4a:76:15:30:1f:91:4f:a0:d4:41:3a: d2:19:65:3f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEN3LaXU8PMwS11X3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTAwNzAwNDUyMloXDTI2MDEwOTAxNDUyMlowLzEtMCsGA1UEAxMk YjhhMjljNDYtZTBmMS00ZWRjLTk4OGEtOTQyMGFmZmJjMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJGQ1xfAVvbndh0GPGxCqQPjtkUqzcyxJFz5 S4oShpEHaoxn1hjsWIcp6oXqbSGwG2dCGXSt7ylshfht0SdqcfzjdgulLORQI5o3 PJzCQYuOnb09XxbzomnVyvY6+RKQNe2z1PqK1y1TmZ/bLUYcWowFVQ6VBumQJoqh 7sXNLhPZ/5okgfUZFnLRAr7ar2gPch95PhRaiyQNjPb1P5+w/IEV/Mk91Fd5Iggd N9i7aZNOIqEQ2Id5aEaS3TyP1YjOr3o2HDU4pgMNuDpHxY/2PbM7nmvWkqx/7aQk emOfls5m65oY61uAt8fAjgQqUL+kDhBH3ratuBTk25sak67VLwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFK5bkQoa92oK+chhurksgK5B4HkUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i OGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZmYmMzMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2I4YTI5YzQ2LWUwZjEtNGVkYy05 ODhhLTk0MjBhZmZiYzMzOS9iOGEyOWM0Ni1lMGYxLTRlZGMtOTg4YS05NDIwYWZm YmMzMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwCqAjAPBAIAAjAJAwcAJiAAIaAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjUeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA868bdRnqnGxwzhQW9pnJQCmuxH vGEH9nZ3QeV7ri/8gaZ9XD6QYFaTVBhqgd3e5P/mc08kAgAXvaiSKcFl+GvGP5+R MnNb2a3Szov+Mk6ctYkn2mAls778PTP/oMZ1CXsDCh42c0VOjvdUKPAo0VNwe3kR Dbagh8QzhrgxOAseJJqP0YjqedFvRzDBFH5LZgf86kXSeW0GhEqETxAJ9U1p7LLs y9SUBypz1xxz10Gx4ko/vtIkx4oPsacT0Ye/HG4JszrRHrZjeoP44UQRDEBUPIrI 2riVAauao9cBFgzpPZoLzcFMTyDVhMrRnT/4nsZKdhUwH5FPoNRBOtIZZT8= -----END CERTIFICATE-----Generated at Wed May 1 16:33:34 2024 by rpki-client on console-fra.rpki-client.org