$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer File: 09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer (raw, json) Hash identifier: S2qMQvIWjhWkJT4q+e0b5Ah+jHx7sI8HBGJbPrlIJfU= Subject key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285842A896FD40A34E5146B800CE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Jul 2023 00:45:17 +0000 Certificate not after: Mon 27 Oct 2025 00:45:17 +0000 Subordinate resources: IP: 209.127.216.0/24 IP: 209.188.109.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:a8:96:fd:40:a3:4e:51:46:b8:00:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jul 25 00:45:17 2023 GMT Not After : Oct 27 00:45:17 2025 GMT Subject: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:5f:a3:be:40:09:d3:ca:4f:93:8d:19:ba: 9a:38:a6:08:78:47:38:17:a8:10:c2:05:16:c3:15: fb:6c:57:bd:fc:48:21:5b:8f:9b:d3:99:22:8a:a6: 88:f6:af:1c:90:47:f8:de:f0:40:d6:c4:00:05:bb: 54:63:74:d8:61:55:d6:c4:1b:d8:59:94:c8:67:db: 1f:21:36:08:ff:b8:52:a6:f6:ce:87:ae:70:86:c3: 8e:0c:61:bc:b2:d0:16:af:66:6c:ee:27:f7:9f:37: 56:83:b8:23:17:5e:8b:d9:96:1d:20:89:cf:a9:5e: 30:b0:3a:86:4c:a3:89:69:94:88:87:3e:b8:46:e6: 81:6b:25:6d:a3:a7:3f:f2:0a:1a:f7:5d:8f:2d:4d: be:f9:8e:99:c1:a5:7f:dc:9e:4b:60:77:4b:89:29: ff:eb:48:68:f8:1a:30:18:a1:9f:1f:16:c8:37:6f: ba:be:38:c3:df:51:39:e2:ed:39:56:fe:f5:46:53: 71:de:f5:31:7c:f4:cd:23:d7:f7:25:10:47:01:4e: 87:4e:fa:5d:9c:60:07:5b:35:06:37:2d:97:0c:44: 5d:4a:43:6c:b7:90:3b:0d:c5:34:e7:8f:6b:85:be: 01:49:74:b2:58:b4:4f:50:3e:55:1b:dc:be:5e:b4: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 209.127.216.0/24 209.188.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:91:26:b4:81:be:fc:76:12:ba:d9:1f:1d:cc:92:4f:a1:5a: 33:e4:1f:20:98:b9:d6:c3:07:07:3b:b1:66:60:a9:a7:fa:5c: 9d:89:94:be:c0:84:f1:b4:e1:99:95:a3:26:c6:cd:b7:ed:3d: 37:b3:d4:df:62:31:21:f2:31:4c:a7:d1:01:4e:5a:67:cf:13: ab:82:39:7e:0d:4d:35:b1:d7:80:b8:69:08:d5:e6:c1:fe:88: a1:85:86:49:df:e0:27:14:94:15:1e:7b:61:54:e6:07:15:7e: a1:bf:5a:99:8a:6a:04:12:41:f5:68:6c:9b:ef:05:b4:bb:05: 04:f1:f5:51:d7:13:0b:80:ed:c6:6c:64:af:5c:77:ba:74:af: 03:c6:5d:7d:e5:26:86:cd:8b:e9:45:83:12:18:d1:df:be:23: ac:4d:24:c0:e7:ed:55:6f:da:75:50:e5:7f:20:3f:cb:0c:ce: 4d:2c:85:bd:5f:f0:9f:8c:b8:09:36:be:69:1c:a2:fd:24:88: ee:ef:03:27:57:3e:c6:48:28:a1:55:d6:f5:5e:f9:9e:57:53: c7:ca:6f:f3:7c:0c:c1:3a:f2:24:2c:ce:b1:8f:c7:67:c0:40: aa:0b:3d:55:80:64:67:88:88:f1:5a:f6:cd:d5:3f:1e:80:c1: 32:b6:38:8b -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEKolv1Ao05RRrgAzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDcyNTAwNDUxN1oXDTI1MTAyNzAwNDUxN1owLzEtMCsGA1UEAxMk MDlmZTQ2YjAtNzAzNC00ZDdiLWE3NDYtN2E3MGY3ODhjM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPFfo75ACdPKT5ONGbqaOKYIeEc4F6gQwgUW wxX7bFe9/EghW4+b05kiiqaI9q8ckEf43vBA1sQABbtUY3TYYVXWxBvYWZTIZ9sf ITYI/7hSpvbOh65whsOODGG8stAWr2Zs7if3nzdWg7gjF16L2ZYdIInPqV4wsDqG TKOJaZSIhz64RuaBayVto6c/8goa912PLU2++Y6ZwaV/3J5LYHdLiSn/60ho+Bow GKGfHxbIN2+6vjjD31E54u05Vv71RlNx3vUxfPTNI9f3JRBHAU6HTvpdnGAHWzUG Ny2XDERdSkNst5A7DcU0549rhb4BSXSyWLRPUD5VG9y+XrSY7QIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFCpSG3Xdqe4+kezLb6fC6z3qvDhLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w OWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4OGMzZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzA5ZmU0NmIwLTcwMzQtNGQ3Yi1h NzQ2LTdhNzBmNzg4YzNmNS8wOWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4 OGMzZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADRf9gDBADRvG0wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbZEmtIG+/HYS utkfHcyST6FaM+QfIJi51sMHBzuxZmCpp/pcnYmUvsCE8bThmZWjJsbNt+09N7PU 32IxIfIxTKfRAU5aZ88Tq4I5fg1NNbHXgLhpCNXmwf6IoYWGSd/gJxSUFR57YVTm BxV+ob9amYpqBBJB9Whsm+8FtLsFBPH1UdcTC4Dtxmxkr1x3unSvA8ZdfeUmhs2L 6UWDEhjR374jrE0kwOftVW/adVDlfyA/ywzOTSyFvV/wn4y4CTa+aRyi/SSI7u8D J1c+xkgooVXW9V75nldTx8pv83wMwTryJCzOsY/HZ8BAqgs9VYBkZ4iI8Vr2zdU/ HoDBMrY4iw== -----END CERTIFICATE-----Generated at Wed Apr 24 01:56:24 2024 by rpki-client on console-ams.rpki-client.org