$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c11316e8-f762-407f-83bf-824a49a98164.cer File: c11316e8-f762-407f-83bf-824a49a98164.cer (raw, json) Hash identifier: dGkrNjw7/6pySb5/tS/ia4/f29zpg68Bj298pVJ3/Pc= Subject key identifier: C6:EB:08:18:57:D9:15:3E:5C:01:F9:B9:06:63:8F:B5:CC:26:F4:29 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858457BA62FECA93CE03CB4CCF1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c11316e8-f762-407f-83bf-824a49a98164/c11316e8-f762-407f-83bf-824a49a98164.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c11316e8-f762-407f-83bf-824a49a98164/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Apr 2024 00:45:21 +0000 Certificate not after: Mon 13 Jul 2026 00:45:21 +0000 Subordinate resources: IP: 198.1.16.0 -- 198.1.25.255 IP: 206.208.64.0/21 IP: 207.183.0.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7b:a6:2f:ec:a9:3c:e0:3c:b4:cc:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 9 00:45:21 2024 GMT Not After : Jul 13 00:45:21 2026 GMT Subject: CN=c11316e8-f762-407f-83bf-824a49a98164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:72:cf:60:1e:f6:01:ed:d1:3e:08:b5:e6:5d: fb:39:83:7f:5a:0d:76:70:b5:71:96:e0:ce:5d:8d: dd:be:9c:49:e2:b7:5c:86:92:15:f2:e0:1c:a8:96: ef:b5:a2:05:2d:c7:a2:74:0e:34:29:9a:64:df:a3: 0c:b0:6a:ed:3f:08:78:00:13:c0:25:e3:0d:8b:3a: a7:cf:0a:bc:32:14:c3:11:79:71:10:6e:4e:5e:38: 33:80:26:74:21:0d:d3:35:ab:4e:55:25:8a:3a:77: 01:9d:91:ef:5e:74:06:0c:b8:dc:b7:59:a7:58:23: ba:99:95:83:86:49:1e:f4:b6:05:2c:45:20:94:5f: 77:a2:8d:91:25:aa:38:61:81:94:11:b1:98:c2:92: 90:a2:30:70:cc:4e:cd:26:0b:8e:30:66:8e:34:66: c6:32:7a:dd:e7:af:4e:25:5f:f3:f8:9b:3b:3f:12: 06:03:cc:db:bc:18:9f:25:69:4a:94:46:99:aa:2d: d4:04:ba:c4:2e:c0:0a:1f:d7:d1:e8:3e:ef:64:52: 98:c9:e2:5d:39:97:4c:a5:7a:1a:e1:8b:64:2c:21: be:b9:61:21:94:09:4a:76:a6:3e:c9:c3:30:d5:a9: d3:e7:0e:d8:96:32:e5:ba:da:fd:f4:1f:8e:e5:04: 56:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EB:08:18:57:D9:15:3E:5C:01:F9:B9:06:63:8F:B5:CC:26:F4:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c11316e8-f762-407f-83bf-824a49a98164/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c11316e8-f762-407f-83bf-824a49a98164/c11316e8-f762-407f-83bf-824a49a98164.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 198.1.16.0-198.1.25.255 206.208.64.0/21 207.183.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a6:59:49:7b:60:46:97:9b:8d:aa:3b:72:f0:3d:77:fe:5a: cc:11:da:09:97:23:aa:96:e0:af:d9:19:5f:70:4a:0a:d9:fd: 54:24:8b:f7:b4:68:21:0e:b1:61:9f:f7:d8:ad:e2:98:ae:16: d5:9b:2a:7e:7c:7b:fc:a9:4d:d6:b0:1f:af:05:73:b9:4e:95: 0f:fc:03:a0:fe:4f:17:06:a8:50:ad:65:d8:e7:75:8c:d0:e7: cb:4b:f0:cd:c6:05:8b:bb:48:05:14:79:01:72:cd:3d:3d:ab: 00:5b:d3:59:81:34:66:30:0f:70:70:66:8e:26:69:9c:87:0d: d3:c3:7e:0b:41:92:3e:e2:68:c2:bd:ae:ff:f2:61:a9:e6:ba: 62:37:36:5a:ec:71:04:82:07:1d:de:3d:8a:35:b7:df:c2:ce: ef:9b:a6:77:57:b0:96:26:0e:cd:8c:2d:b2:ec:4a:7a:da:96: c6:1d:b9:86:ef:38:67:72:51:ee:0e:f7:e6:e6:6d:86:b1:28: 0b:b7:35:97:c5:a6:5f:01:f0:c3:11:0f:cd:76:f2:0f:c8:94: 60:c3:f7:4a:a8:a5:f3:28:da:5b:46:7c:6e:cc:3f:0c:22:a5: 35:ed:3e:a1:45:06:05:28:0c:96:6d:08:16:19:72:06:90:fa: 0a:c7:20:2a -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWEV7pi/sqTzgPLTM8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDQwOTAwNDUyMVoXDTI2MDcxMzAwNDUyMVowLzEtMCsGA1UEAxMk YzExMzE2ZTgtZjc2Mi00MDdmLTgzYmYtODI0YTQ5YTk4MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HLPYB72Ae3RPgi15l37OYN/Wg12cLVxluDO XY3dvpxJ4rdchpIV8uAcqJbvtaIFLceidA40KZpk36MMsGrtPwh4ABPAJeMNizqn zwq8MhTDEXlxEG5OXjgzgCZ0IQ3TNatOVSWKOncBnZHvXnQGDLjct1mnWCO6mZWD hkke9LYFLEUglF93oo2RJao4YYGUEbGYwpKQojBwzE7NJguOMGaONGbGMnrd569O JV/z+Js7PxIGA8zbvBifJWlKlEaZqi3UBLrELsAKH9fR6D7vZFKYyeJdOZdMpXoa 4YtkLCG+uWEhlAlKdqY+ycMw1anT5w7YljLlutr99B+O5QRW0QIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFMbrCBhX2RU+XAH5uQZjj7XMJvQpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j MTEzMTZlOC1mNzYyLTQwN2YtODNiZi04MjRhNDlhOTgxNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MxMTMxNmU4LWY3NjItNDA3Zi04 M2JmLTgyNGE0OWE5ODE2NC9jMTEzMTZlOC1mNzYyLTQwN2YtODNiZi04MjRhNDlh OTgxNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBowDAMEBMYBEAMEAcYBGAMEA87QQAMEBc+3ADBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAWpllJe2BGl5uNqjty8D13/lrMEdoJlyOqluCv2RlfcEoK2f1UJIv3tGgh DrFhn/fYreKYrhbVmyp+fHv8qU3WsB+vBXO5TpUP/AOg/k8XBqhQrWXY53WM0OfL S/DNxgWLu0gFFHkBcs09PasAW9NZgTRmMA9wcGaOJmmchw3Tw34LQZI+4mjCva7/ 8mGp5rpiNzZa7HEEggcd3j2KNbffws7vm6Z3V7CWJg7NjC2y7Ep62pbGHbmG7zhn clHuDvfm5m2GsSgLtzWXxaZfAfDDEQ/NdvIPyJRgw/dKqKXzKNpbRnxuzD8MIqU1 7T6hRQYFKAyWbQgWGXIGkPoKxyAq -----END CERTIFICATE-----Generated at Wed May 1 16:00:01 2024 by rpki-client on console-ams.rpki-client.org