$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer File: db131796-a27d-48da-80e5-76b8e7c0cbd3.cer (raw, json) Hash identifier: +IE1N3d2ox3pIL/IwKWuwNfJZYArbhjQ6zmWa11d9Gs= Subject key identifier: B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285843B498A2A7B3977CF9CF31C080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Oct 2023 00:45:14 +0000 Certificate not after: Sat 31 Jan 2026 01:45:14 +0000 Subordinate resources: AS: 2902 IP: 129.72.0.0/16 IP: 192.65.143.0/24 IP: 192.84.113.0/24 IP: 192.160.49.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:b4:98:a2:a7:b3:97:7c:f9:cf:31:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 29 00:45:14 2023 GMT Not After : Jan 31 01:45:14 2026 GMT Subject: CN=db131796-a27d-48da-80e5-76b8e7c0cbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:d5:f3:c0:5a:ff:5d:86:42:ed:93:5a:ff: ed:0f:46:e9:52:19:33:6a:b7:8c:b0:85:47:2a:10: ef:93:d6:20:a5:73:84:c3:62:d8:3e:5c:2b:40:cf: 09:e5:6f:18:ab:c8:10:f6:e9:77:3c:f7:66:bf:aa: 6c:ea:61:c1:81:a7:54:f7:6c:78:e0:64:f4:4b:5c: f2:16:b6:26:dd:ad:50:19:79:ea:17:66:0b:eb:59: 22:71:11:7f:8e:1f:73:6d:25:e5:17:47:81:1c:3f: 77:b7:c7:60:8f:d3:9e:32:da:6b:a6:6d:a8:36:e0: 4e:14:d7:f8:df:1a:26:c5:05:2a:8c:47:65:58:73: 1f:51:fe:df:d7:00:08:78:e6:21:c5:b2:a2:15:f8: bd:3e:e3:6e:68:56:be:82:b5:fb:60:06:0c:b4:dd: da:9a:d7:a6:fa:48:1b:55:56:68:e0:7c:73:8a:ba: 80:5b:88:5f:af:2d:9a:2d:28:00:e9:3b:31:5d:51: 64:9d:9e:93:84:20:67:67:6b:28:c9:19:82:99:3e: 37:db:ae:23:b5:d5:77:5c:ce:39:d0:3c:65:a2:37: 5d:b4:60:f6:cf:a4:6f:95:c1:d1:2a:1c:66:c1:05: 2d:77:c3:ae:9e:fb:62:12:14:bb:45:9b:c5:fe:78: 2d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 129.72.0.0/16 192.65.143.0/24 192.84.113.0/24 192.160.49.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2902 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e3:26:48:64:f4:0b:2b:01:43:3a:95:db:e4:63:f6:dd:c1: 1b:fd:71:c2:f2:f1:bd:4f:98:2b:7f:15:a5:0d:7c:5c:0f:f0: 75:78:05:ca:9c:64:b0:7c:4b:1a:fa:1c:6c:b9:b3:0c:5f:f0: f1:50:29:bd:fa:3f:5f:9e:db:ce:95:b3:f0:09:ee:0a:06:58: a7:0f:ae:c7:8b:3b:76:d5:38:3a:51:7b:d5:f1:3b:84:b9:ae: 01:b6:c8:0a:e2:df:22:4e:78:0a:1a:9e:ca:2e:ca:ac:de:db: 91:c7:54:77:8f:50:a8:4f:23:a8:2e:fe:fc:9f:a5:71:8a:25: 27:3f:fb:34:52:35:34:23:1d:10:1b:09:15:e0:9a:6c:7a:d5: 9f:08:77:b3:97:ed:3d:53:57:91:01:ad:52:a3:33:cb:5d:57: bd:70:d6:25:fa:6b:94:58:17:f2:39:a2:62:0b:c1:77:4a:8c: b3:4b:25:23:39:67:81:b2:85:1b:15:14:5d:77:8b:70:c8:fa: 7f:48:0b:a9:da:aa:88:98:66:57:a4:94:29:3e:cc:8e:64:43: 7d:1a:20:8d:93:40:c3:f8:0c:dd:2c:fd:d9:2d:9e:48:49:1a: 11:7f:7c:75:5a:be:28:84:40:89:3c:c7:73:d2:80:41:94:85: db:7e:70:8d -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEO0mKKns5d8+c8xwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTAyOTAwNDUxNFoXDTI2MDEzMTAxNDUxNFowLzEtMCsGA1UEAxMk ZGIxMzE3OTYtYTI3ZC00OGRhLTgwZTUtNzZiOGU3YzBjYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p7V88Ba/12GQu2TWv/tD0bpUhkzareMsIVH KhDvk9YgpXOEw2LYPlwrQM8J5W8Yq8gQ9ul3PPdmv6ps6mHBgadU92x44GT0S1zy FrYm3a1QGXnqF2YL61kicRF/jh9zbSXlF0eBHD93t8dgj9OeMtprpm2oNuBOFNf4 3xomxQUqjEdlWHMfUf7f1wAIeOYhxbKiFfi9PuNuaFa+grX7YAYMtN3amtem+kgb VVZo4HxzirqAW4hfry2aLSgA6TsxXVFknZ6ThCBnZ2soyRmCmT43264jtdV3XM45 0DxlojddtGD2z6RvlcHRKhxmwQUtd8OunvtiEhS7RZvF/ngtmwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFLntyt6pB1KJVfar4BWInvdzEfaVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k YjEzMTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4ZTdjMGNiZDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2RiMTMxNzk2LWEyN2QtNDhkYS04 MGU1LTc2YjhlN2MwY2JkMy9kYjEzMTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4ZTdj MGNiZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwCBSAMEAMBBjwMEAMBUcQMEAMCgMTAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgILVjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBP4yZIZPQLKwFDOpXb5GP23cEb /XHC8vG9T5grfxWlDXxcD/B1eAXKnGSwfEsa+hxsubMMX/DxUCm9+j9fntvOlbPw Ce4KBlinD67Hizt21Tg6UXvV8TuEua4BtsgK4t8iTngKGp7KLsqs3tuRx1R3j1Co TyOoLv78n6VxiiUnP/s0UjU0Ix0QGwkV4JpsetWfCHezl+09U1eRAa1SozPLXVe9 cNYl+muUWBfyOaJiC8F3SoyzSyUjOWeBsoUbFRRdd4twyPp/SAup2qqImGZXpJQp PsyOZEN9GiCNk0DD+AzdLP3ZLZ5ISRoRf3x1Wr4ohECJPMdz0oBBlIXbfnCN -----END CERTIFICATE-----Generated at Wed May 1 13:33:42 2024 by rpki-client on console-fra.rpki-client.org