$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer File: e0b35546-769e-41a6-987e-2a9732555de4.cer (raw, json) Hash identifier: XEIHvsC7XX4DNt0HxjQ7190XLfqrIvWuRP85gJwWdYE= Subject key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285843F4EC279AE8084B77ECA92180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Nov 2023 01:45:15 +0000 Certificate not after: Mon 23 Feb 2026 01:45:15 +0000 Subordinate resources: IP: 23.146.72.0/24 IP: 23.162.120.0/24 IP: 2602:faac::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:f4:ec:27:9a:e8:08:4b:77:ec:a9:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 21 01:45:15 2023 GMT Not After : Feb 23 01:45:15 2026 GMT Subject: CN=e0b35546-769e-41a6-987e-2a9732555de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fb:5f:a4:c4:c4:6e:84:54:5f:de:df:64:2e: 7c:6c:e9:11:38:13:d2:34:fd:9a:8e:06:8c:44:52: b7:5a:a6:7e:22:bf:5a:4a:d3:3c:9c:ab:0a:04:48: 61:ea:8a:e0:49:ac:be:d8:b5:a5:cd:43:96:f5:26: 44:51:99:09:bc:17:cb:b0:cc:33:c2:41:e6:b6:4d: aa:b0:8a:6e:f7:15:da:4b:03:45:27:7c:dc:01:10: 58:69:bc:76:8e:98:e2:65:0f:4d:56:be:0f:53:6c: 5e:c5:03:91:3d:89:f6:b4:12:66:d5:bb:33:b8:a9: a4:f1:36:25:75:f1:00:67:cb:a1:b7:8e:6a:f4:19: 67:3d:d6:c1:de:7f:88:01:f1:23:44:4e:62:68:30: bd:fe:6e:54:61:90:ff:7e:38:ce:fc:dc:6a:19:ec: 29:06:21:fe:68:a2:67:af:99:c4:c0:a5:2f:98:86: 8c:c2:60:df:2e:a6:16:8e:b9:48:49:f7:b5:47:c7: 00:a6:31:c3:c5:1e:97:b7:0e:7d:2a:35:3d:27:05: ec:bd:f0:34:d0:41:45:7b:d7:ad:05:f4:49:97:4f: 0e:80:1c:0b:13:0e:18:22:fc:de:e9:32:16:16:e1: f2:c8:86:4d:9b:8d:12:94:3e:05:1a:b2:96:c1:05: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.146.72.0/24 23.162.120.0/24 IPv6: 2602:faac::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f0:57:ac:5f:eb:92:5a:c4:60:93:1f:fa:83:97:6a:0d:0b: e9:62:75:79:d2:ae:fd:cb:9d:fe:30:ba:77:87:76:2d:7e:75: 7e:04:75:3e:f3:63:7b:7c:ef:6d:c5:6c:f9:da:4b:43:cb:94: 2c:8b:fd:9e:18:7d:a6:56:4d:ff:33:d2:80:87:32:87:68:6e: eb:b9:f2:bb:93:d0:74:55:24:55:c8:f2:9e:37:ea:0e:55:42: a3:a0:2d:ed:ff:c4:e5:13:c5:d6:f2:9a:f4:b2:7c:2c:60:c1: d1:2a:7d:79:bf:b1:55:5a:e8:21:24:ca:f4:15:17:74:fe:2c: 8a:a5:3e:36:90:64:24:21:17:99:03:bc:1d:ea:ff:72:5f:d0: 7e:c3:42:82:7b:57:8b:80:b6:d5:99:5e:59:52:45:4c:b4:ee: 38:79:2a:a8:9c:be:a9:bb:b7:1e:06:50:3b:7b:cd:15:89:8c: 38:26:59:aa:b0:e5:73:fb:7f:8d:cd:78:ff:8c:34:b9:0b:f2: 71:a4:67:6b:bb:8e:d9:10:4b:44:71:01:cc:57:90:35:6b:48: 8c:b8:a8:32:88:71:ba:5f:04:72:82:57:2a:ae:d7:9e:ba:f1: 45:52:33:fe:76:14:26:06:de:58:b3:e0:01:57:44:0c:cb:22: 23:c2:10:14 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEP07Cea6AhLd+ypIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTEyMTAxNDUxNVoXDTI2MDIyMzAxNDUxNVowLzEtMCsGA1UEAxMk ZTBiMzU1NDYtNzY5ZS00MWE2LTk4N2UtMmE5NzMyNTU1ZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPtfpMTEboRUX97fZC58bOkROBPSNP2ajgaM RFK3WqZ+Ir9aStM8nKsKBEhh6orgSay+2LWlzUOW9SZEUZkJvBfLsMwzwkHmtk2q sIpu9xXaSwNFJ3zcARBYabx2jpjiZQ9NVr4PU2xexQORPYn2tBJm1bszuKmk8TYl dfEAZ8uht45q9BlnPdbB3n+IAfEjRE5iaDC9/m5UYZD/fjjO/NxqGewpBiH+aKJn r5nEwKUvmIaMwmDfLqYWjrlISfe1R8cApjHDxR6Xtw59KjU9JwXsvfA00EFFe9et BfRJl08OgBwLEw4YIvze6TIWFuHyyIZNm40SlD4FGrKWwQXuFQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFP32F6WBfLMYt+MR/7D839PszAioMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l MGIzNTU0Ni03NjllLTQxYTYtOTg3ZS0yYTk3MzI1NTVkZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2UwYjM1NTQ2LTc2OWUtNDFhNi05 ODdlLTJhOTczMjU1NWRlNC9lMGIzNTU0Ni03NjllLTQxYTYtOTg3ZS0yYTk3MzI1 NTVkZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkkgDBAAXongwDgQCAAIwCAMGBCYC+qwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvwV6xf65JaxGCTH/qDl2oNC+lidXnSrv3Lnf4wuneHdi1+dX4EdT7z Y3t8723FbPnaS0PLlCyL/Z4YfaZWTf8z0oCHModobuu58ruT0HRVJFXI8p436g5V QqOgLe3/xOUTxdbymvSyfCxgwdEqfXm/sVVa6CEkyvQVF3T+LIqlPjaQZCQhF5kD vB3q/3Jf0H7DQoJ7V4uAttWZXllSRUy07jh5Kqicvqm7tx4GUDt7zRWJjDgmWaqw 5XP7f43NeP+MNLkL8nGkZ2u7jtkQS0RxAcxXkDVrSIy4qDKIcbpfBHKCVyqu1566 8UVSM/52FCYG3liz4AFXRAzLIiPCEBQ= -----END CERTIFICATE-----Generated at Wed May 1 16:33:36 2024 by rpki-client on console-fra.rpki-client.org