$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer File: d64341ea-4a31-4684-bf89-237774f5a468.cer (raw, json) Hash identifier: 4zfpKQQ9LJqRgJXxH56vF6IYiBVI0UmaiEJSA9vSDlA= Subject key identifier: A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285842E337640DF6BCF9AD4A83EB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 15 Aug 2023 00:45:21 +0000 Certificate not after: Mon 17 Nov 2025 01:45:21 +0000 Subordinate resources: AS: 16693 IP: 66.22.176.0/21 IP: 198.91.22.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:e3:37:64:0d:f6:bc:f9:ad:4a:83:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 15 00:45:21 2023 GMT Not After : Nov 17 01:45:21 2025 GMT Subject: CN=d64341ea-4a31-4684-bf89-237774f5a468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2e:aa:22:3f:8e:f3:3b:da:73:68:31:5a:48: 72:a9:65:21:2d:ea:e8:ee:87:a1:f6:e9:0f:76:81: 8d:83:7d:cc:de:ce:07:d3:64:0f:c4:33:ca:c2:0b: 51:2b:47:af:43:89:2f:f0:34:29:0c:12:c9:38:56: 48:1a:68:72:1d:b3:02:ee:4b:1b:ca:4f:45:fd:4b: 5d:47:db:97:73:fa:35:e6:3f:1e:3d:f6:82:99:91: 4b:dc:a9:00:49:14:de:aa:d0:d9:e5:3c:f7:55:7d: 86:14:b3:87:60:e4:14:3d:f0:5c:7e:43:10:27:77: 0b:0e:2f:eb:fc:59:32:e5:92:a4:05:6c:24:bc:77: 26:f5:17:d5:47:5f:9c:54:1f:b5:5a:3e:b5:2b:fe: fa:64:1c:16:a7:45:57:00:cb:0a:92:70:d1:d1:b8: 1d:9e:b6:45:b8:eb:af:f7:a7:cc:d3:dd:04:4b:36: cb:47:80:7a:ea:62:dd:af:8f:0e:2c:74:cf:a8:5c: 3e:aa:fe:da:1e:fc:06:47:a9:5e:73:99:82:83:f9: e9:c7:94:08:1c:a1:d8:77:e4:d8:fc:f9:d7:bc:47: fe:99:6e:91:22:46:c9:6f:46:9c:51:d3:7a:8c:f5: 7d:45:21:27:3f:86:da:da:a0:d6:0f:30:bf:a3:6f: 91:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.22.176.0/21 198.91.22.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16693 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ee:a8:7c:a3:c8:8f:fe:3d:02:ac:9d:9b:1f:c6:9a:4f:3a: 96:be:30:16:70:ca:1a:24:2d:7f:d0:ad:d8:68:18:33:b7:d2: 8a:64:73:aa:08:b6:01:70:05:01:19:b2:72:25:f4:4d:8c:15: 97:ac:3e:b5:7e:20:a1:e6:7d:42:a1:df:73:72:0a:81:e7:97: 74:d6:5f:bf:01:e5:70:d2:06:65:95:05:e4:99:a4:6f:c6:85: 64:a9:fa:85:ef:c6:8f:75:98:05:39:e7:bb:2f:67:19:99:2c: 4b:7a:f1:38:bd:c4:c5:9b:6d:de:97:d8:b0:9b:e5:c2:21:6b: e3:b6:e0:b2:09:7c:a2:18:46:65:6d:e4:f1:07:61:61:0c:1f: 76:ab:b3:28:1c:69:a4:a2:69:6f:82:d9:f0:be:e7:00:31:31: be:62:91:da:1b:0f:ad:79:6f:02:38:5e:29:2b:e1:95:24:6f: 49:1e:d5:74:eb:f4:57:45:6c:0c:ed:42:4d:e7:a0:4a:6f:85: 2d:ec:1d:74:b8:a2:50:0d:45:b3:bb:05:a4:3e:e1:4d:6b:0b: ba:e1:32:44:5e:5c:5d:c0:35:cd:85:ba:91:a2:5b:a9:56:2f: c4:c1:e5:d8:09:46:a2:e5:a3:db:56:f5:4c:c1:de:3c:10:9f: 6f:16:6d:53 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWELjN2QN9rz5rUqD6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDgxNTAwNDUyMVoXDTI1MTExNzAxNDUyMVowLzEtMCsGA1UEAxMk ZDY0MzQxZWEtNGEzMS00Njg0LWJmODktMjM3Nzc0ZjVhNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni6qIj+O8zvac2gxWkhyqWUhLero7oeh9ukP doGNg33M3s4H02QPxDPKwgtRK0evQ4kv8DQpDBLJOFZIGmhyHbMC7ksbyk9F/Utd R9uXc/o15j8ePfaCmZFL3KkASRTeqtDZ5Tz3VX2GFLOHYOQUPfBcfkMQJ3cLDi/r /Fky5ZKkBWwkvHcm9RfVR1+cVB+1Wj61K/76ZBwWp0VXAMsKknDR0bgdnrZFuOuv 96fM090ESzbLR4B66mLdr48OLHTPqFw+qv7aHvwGR6lec5mCg/npx5QIHKHYd+TY /PnXvEf+mW6RIkbJb0acUdN6jPV9RSEnP4ba2qDWDzC/o2+RSwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFKDvL58AXWvWciH0lhO2nPEU/TpUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k NjQzNDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3NzRmNWE0NjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q2NDM0MWVhLTRhMzEtNDY4NC1i Zjg5LTIzNzc3NGY1YTQ2OC9kNjQzNDFlYS00YTMxLTQ2ODQtYmY4OS0yMzc3NzRm NWE0NjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANCFrADBAHGWxYwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICQTUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAVu6ofKPIj/49Aqydmx/Gmk86lr4wFnDKGiQtf9Ct 2GgYM7fSimRzqgi2AXAFARmyciX0TYwVl6w+tX4goeZ9QqHfc3IKgeeXdNZfvwHl cNIGZZUF5Jmkb8aFZKn6he/Gj3WYBTnnuy9nGZksS3rxOL3ExZtt3pfYsJvlwiFr 47bgsgl8ohhGZW3k8QdhYQwfdquzKBxppKJpb4LZ8L7nADExvmKR2hsPrXlvAjhe KSvhlSRvSR7VdOv0V0VsDO1CTeegSm+FLewddLiiUA1Fs7sFpD7hTWsLuuEyRF5c XcA1zYW6kaJbqVYvxMHl2AlGouWj21b1TMHePBCfbxZtUw== -----END CERTIFICATE-----Generated at Wed May 1 13:33:41 2024 by rpki-client on console-fra.rpki-client.org