$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer File: b927dc15-9316-467a-b50d-d6b361478436.cer (raw, json) Hash identifier: 4uJV8CamCML0izsbkErBo1YFgQ4QF9mk6HCED7HTa9o= Subject key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584443174EB12CC4CA73E8030AE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 19 Dec 2023 01:45:15 +0000 Certificate not after: Mon 23 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 2901 AS: 11173 AS: 26640 IP: 192.133.99.0/24 IP: 192.150.253.0/24 IP: 198.49.160.0/24 IP: 198.59.96.0/24 IP: 198.59.98.0 -- 198.59.105.255 IP: 198.59.109.0 -- 198.59.114.255 IP: 198.59.116.0 -- 198.59.127.255 IP: 198.187.251.0/24 IP: 2605:800::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:43:17:4e:b1:2c:c4:ca:73:e8:03:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Dec 19 01:45:15 2023 GMT Not After : Mar 23 00:45:15 2026 GMT Subject: CN=b927dc15-9316-467a-b50d-d6b361478436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:0e:ff:da:41:59:f2:69:e1:a6:7e:05:b5: f0:61:4e:c2:24:f3:66:21:ba:97:25:07:d6:2e:a0: f1:3e:13:cb:c9:ae:52:e6:4b:4b:71:c0:58:1c:e3: 68:e6:77:04:f0:47:e2:0f:98:15:64:0d:06:ee:45: 60:70:68:53:26:7d:9b:ba:44:43:50:57:34:35:f8: d2:85:6c:28:15:00:82:b3:7a:2d:bb:06:01:e5:07: 8b:5b:30:4c:1f:fd:72:1c:41:ab:b2:a0:2e:87:90: d2:33:02:b7:33:35:53:0d:7a:6f:79:3e:88:c5:67: dd:33:e5:c7:57:6d:b7:be:ae:58:e0:b8:6c:02:db: 62:03:d9:17:6f:08:2e:29:b3:a1:74:09:d9:5a:c5: dd:56:aa:50:74:16:c8:39:68:32:07:81:27:22:77: 10:db:eb:eb:3d:f9:a5:a1:10:f4:9d:60:4c:b5:71: ae:cb:3c:1a:40:0b:73:6e:7d:c4:fa:9d:2a:62:62: ca:14:4a:52:98:ca:50:5d:77:87:34:f6:4c:45:34: fe:6b:b6:90:3e:e4:e9:c9:76:35:96:fd:8c:c8:3b: 24:33:ed:c1:bf:b8:3d:15:cd:c8:cd:c1:ba:d9:e5: bb:91:7e:83:d0:60:40:89:7a:51:68:21:4c:76:18: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.133.99.0/24 192.150.253.0/24 198.49.160.0/24 198.59.96.0/24 198.59.98.0-198.59.105.255 198.59.109.0-198.59.114.255 198.59.116.0-198.59.127.255 198.187.251.0/24 IPv6: 2605:800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2901 11173 26640 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:17:d1:46:5e:a6:21:9e:3c:ba:38:12:c1:9a:10:cd:46:ce: 2b:32:3f:0e:cc:5d:90:3b:b7:af:a6:d8:bc:99:0f:ae:99:4e: 54:c1:f9:63:2b:08:a4:7d:33:4f:39:3e:ac:6c:20:6e:ed:e0: cb:91:1b:26:41:53:bd:f8:c9:7a:38:b1:c3:e0:b6:03:81:6a: e3:9a:2a:6b:a4:06:03:3b:84:c8:a6:9b:3b:5b:c4:e3:96:42: da:44:4c:e9:ff:b9:dd:9e:24:8d:a2:41:19:df:70:96:62:3f: b8:96:91:e3:ae:02:6b:35:52:10:38:0e:0d:81:6b:bd:f0:36: 56:21:c9:47:a4:16:bc:ab:fc:21:f4:18:e8:22:c5:b7:c4:69: a0:3f:94:cb:67:4f:34:0e:e6:50:0a:a8:38:e6:69:d0:5e:2c: de:35:57:74:c9:ad:35:ba:9d:ce:2c:b7:46:7e:6e:ea:b0:87: a0:ca:c1:41:3b:f7:b3:7b:10:c1:0d:6e:02:0c:f2:45:ed:ef: f3:3b:7c:c0:7d:85:e3:cb:5c:10:11:fe:12:fe:bd:29:1f:2b: 41:11:ec:90:95:24:84:b7:42:ab:57:d5:4a:a3:c7:2a:06:7b: 49:2e:01:c3:e5:20:61:ba:9f:3c:34:d3:df:e0:2f:a1:bf:86: 9c:9a:89:9f -----BEGIN CERTIFICATE----- MIIHYTCCBkmgAwIBAgIUAQ0Mn0MoWERDF06xLMTKc+gDCuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTIxOTAxNDUxNVoXDTI2MDMyMzAwNDUxNVowLzEtMCsGA1UEAxMk YjkyN2RjMTUtOTMxNi00NjdhLWI1MGQtZDZiMzYxNDc4NDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfwO/9pBWfJp4aZ+BbXwYU7CJPNmIbqXJQfW LqDxPhPLya5S5ktLccBYHONo5ncE8EfiD5gVZA0G7kVgcGhTJn2bukRDUFc0NfjS hWwoFQCCs3otuwYB5QeLWzBMH/1yHEGrsqAuh5DSMwK3MzVTDXpveT6IxWfdM+XH V223vq5Y4LhsAttiA9kXbwguKbOhdAnZWsXdVqpQdBbIOWgyB4EnIncQ2+vrPfml oRD0nWBMtXGuyzwaQAtzbn3E+p0qYmLKFEpSmMpQXXeHNPZMRTT+a7aQPuTpyXY1 lv2MyDskM+3Bv7g9Fc3IzcG62eW7kX6D0GBAiXpRaCFMdhglCQIDAQABo4IEczCC BG8wHQYDVR0OBBYEFJpbgqgA39YjKkWeektVF/QY5YPiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i OTI3ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIzNjE0Nzg0MzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2I5MjdkYzE1LTkzMTYtNDY3YS1i NTBkLWQ2YjM2MTQ3ODQzNi9iOTI3ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIzNjE0 Nzg0MzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwcAYIKwYBBQUH AQcBAf8EYTBfME4EAgABMEgDBADAhWMDBADAlv0DBADGMaADBADGO2AwDAMEAcY7 YgMEAcY7aDAMAwQAxjttAwQAxjtyMAwDBALGO3QDBAfGOwADBADGu/swDQQCAAIw BwMFACYFCAAwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICC1UCAiulAgJoEDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBsF9FGXqYhnjy6OBLBmhDNRs4rMj8OzF2QO7evpti8mQ+umU5UwfljKwik fTNPOT6sbCBu7eDLkRsmQVO9+Ml6OLHD4LYDgWrjmiprpAYDO4TIpps7W8TjlkLa REzp/7ndniSNokEZ33CWYj+4lpHjrgJrNVIQOA4NgWu98DZWIclHpBa8q/wh9Bjo IsW3xGmgP5TLZ080DuZQCqg45mnQXizeNVd0ya01up3OLLdGfm7qsIegysFBO/ez exDBDW4CDPJF7e/zO3zAfYXjy1wQEf4S/r0pHytBEeyQlSSEt0KrV9VKo8cqBntJ LgHD5SBhup88NNPf4C+hv4acmomf -----END CERTIFICATE-----Generated at Wed May 1 16:00:01 2024 by rpki-client on console-ams.rpki-client.org