$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer File: f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer (raw, json) Hash identifier: CMryM+dSBaUAb/geHz/5e3v7TfWjn8/oeJqWqUZYFdY= Subject key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285841E4834C0EFFED688C56190E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Mon 09 Jun 2025 19:06:39 +0000 Subordinate resources: AS: 14464 IP: 131.109.0.0/16 IP: 2604:a700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4c:0e:ff:ed:68:8c:56:19:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jun 9 19:06:39 2025 GMT Subject: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d7:07:73:9e:93:f7:8a:ae:5f:19:00:8d:38: f8:27:5d:f9:1d:b1:43:f4:65:99:5c:ad:12:1f:3f: f5:58:25:13:51:87:30:60:c6:9b:64:87:e5:c1:ca: aa:82:68:b6:1a:87:32:9c:89:7f:db:6b:70:1f:a9: 5a:a8:54:cf:e0:29:76:85:88:ef:b0:d9:84:8f:0e: 4f:34:23:8e:9d:4e:c3:72:45:99:0e:c2:a0:d8:0e: aa:71:1e:89:1d:f1:a3:f0:df:a3:a5:5b:f5:3b:47: 41:23:35:f9:90:5a:5a:6c:8b:0f:9e:07:07:02:c4: a4:e1:a9:f0:55:a6:f6:26:2d:6b:f9:2d:ec:34:df: 81:fb:7f:ee:e6:6f:62:82:7e:2a:97:87:6e:99:cd: 84:bf:2b:30:6c:24:8f:a9:7d:ef:ed:bb:51:71:16: eb:45:45:06:18:ab:1c:20:bb:9b:df:d7:30:6d:82: 0a:dd:eb:3d:59:fe:d9:9e:f9:4e:fd:89:71:ef:7f: b3:66:cc:0d:7f:0c:77:09:8e:e6:e2:98:6c:2a:c3: e0:13:ea:a1:b0:0c:00:6c:14:72:64:b1:e5:a8:ce: 0e:53:de:54:ed:f0:65:83:cb:2f:87:86:21:c7:b2: bc:c4:1c:b4:ac:59:f9:57:b2:2f:64:4b:4e:70:01: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 131.109.0.0/16 IPv6: 2604:a700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14464 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9c:37:2e:ff:f4:ac:0c:e8:13:92:48:ae:f6:83:87:30:34: f8:57:a8:4e:c6:42:53:cc:4f:13:93:72:ae:a9:7c:08:96:d8: 09:ed:93:08:5a:71:c8:9a:93:5d:bb:d8:0b:07:8c:37:e0:31: a0:b6:46:fd:24:dc:cc:54:39:d8:f4:66:c3:3f:3a:42:9d:85: 26:42:86:5f:43:7d:68:9c:86:6a:53:38:9f:8f:8b:fe:10:e0: ce:31:c9:12:0b:16:0d:0d:84:0b:d3:a5:71:e4:2d:47:5e:72: ad:d2:f1:9d:cf:23:68:7b:bf:65:ca:31:15:e1:d4:cd:bc:60: 49:b2:55:84:3b:cb:00:84:65:b6:9f:ec:c1:ac:5b:ad:29:2f: 4b:df:ed:c8:f1:4c:16:89:1b:8b:de:07:f1:a8:e4:7c:76:3d: f0:0f:1a:75:46:7d:48:b5:d4:79:cc:19:9b:ef:7e:48:93:49: c2:89:bf:be:d2:b1:c6:0b:2f:2b:36:35:61:ce:76:c5:b2:99: 00:e4:3d:7f:1f:54:66:ea:f0:20:31:b2:d0:e8:50:e2:42:2f: 47:9c:de:d5:65:2b:a5:50:6b:6f:96:c9:7a:b6:2f:20:88:31: 03:77:24:16:cd:6e:57:9b:b3:a0:ac:6b:40:67:4a:dc:98:28: ba:0a:76:9c -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWEHkg0wO/+1ojFYZDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYwOTE5MDYzOVowLzEtMCsGA1UEAxMk ZjNlMDk2NzMtNWM2ZS00MzQwLWFkMTEtNGRhOGRmYjhjNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNcHc56T94quXxkAjTj4J135HbFD9GWZXK0S Hz/1WCUTUYcwYMabZIflwcqqgmi2GocynIl/22twH6laqFTP4Cl2hYjvsNmEjw5P NCOOnU7DckWZDsKg2A6qcR6JHfGj8N+jpVv1O0dBIzX5kFpabIsPngcHAsSk4anw Vab2Ji1r+S3sNN+B+3/u5m9ign4ql4dumc2EvyswbCSPqX3v7btRcRbrRUUGGKsc ILub39cwbYIK3es9Wf7ZnvlO/Ylx73+zZswNfwx3CY7m4phsKsPgE+qhsAwAbBRy ZLHlqM4OU95U7fBlg8svh4Yhx7K8xBy0rFn5V7IvZEtOcAGDFwIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFGs/rcZ4NWVPGE+7qo57JAjeMtq7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9m M2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZiOGM3NzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2YzZTA5NjczLTVjNmUtNDM0MC1h ZDExLTRkYThkZmI4Yzc3Ny9mM2UwOTY3My01YzZlLTQzNDAtYWQxMS00ZGE4ZGZi OGM3NzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMAsEAgABMAUDAwCDbTANBAIAAjAHAwUAJgSnADAZBggrBgEFBQcB CAEB/wQKMAigBjAEAgI4gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXnDcu//SsDOgTkkiu9oOHMDT4V6hO xkJTzE8Tk3KuqXwIltgJ7ZMIWnHImpNdu9gLB4w34DGgtkb9JNzMVDnY9GbDPzpC nYUmQoZfQ31onIZqUzifj4v+EODOMckSCxYNDYQL06Vx5C1HXnKt0vGdzyNoe79l yjEV4dTNvGBJslWEO8sAhGW2n+zBrFutKS9L3+3I8UwWiRuL3gfxqOR8dj3wDxp1 Rn1ItdR5zBmb735Ik0nCib++0rHGCy8rNjVhznbFspkA5D1/H1Rm6vAgMbLQ6FDi Qi9HnN7VZSulUGtvlsl6ti8giDEDdyQWzW5Xm7OgrGtAZ0rcmCi6Cnac -----END CERTIFICATE-----Generated at Wed May 1 16:00:06 2024 by rpki-client on console-ams.rpki-client.org