$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer File: 10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer (raw, json) Hash identifier: RTxgvDSpgjufsRC8eYPxOsrkJrgK50EmOFjaAwQUn/I= Subject key identifier: D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285846D5D30561DE31632EFFE8CE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Aug 2024 00:45:22 +0000 Certificate not after: Sat 14 Nov 2026 01:45:22 +0000 Subordinate resources: AS: 63436 IP: 138.43.120.0/24 IP: 192.124.224.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:d5:d3:05:61:de:31:63:2e:ff:e8:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 11 00:45:22 2024 GMT Not After : Nov 14 01:45:22 2026 GMT Subject: CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:17:3a:12:4e:0a:6d:0b:ef:cb:63:89:50: ae:89:fe:a7:c2:5c:cd:e6:3e:f5:0e:94:69:be:ee: 56:f5:32:c8:af:ab:37:da:a3:af:5d:22:d5:7a:5d: 66:25:0d:5c:d0:a2:0b:58:9e:51:fc:62:7e:46:a8: 9a:2a:c0:28:f3:54:bd:6f:80:b5:26:bd:9d:25:d6: 75:4b:09:c4:93:1d:e3:24:b8:7c:f6:fb:4e:05:96: 23:5d:87:f3:78:15:cf:57:f3:9c:a0:95:e8:31:47: 5a:e6:90:b3:83:5b:99:a8:5d:d1:cf:14:20:1c:32: c4:e2:22:76:3d:5f:0a:80:cc:60:f1:37:50:13:e1: ac:71:30:28:6d:24:96:56:12:cf:ac:2c:77:a6:21: 08:3f:c6:c9:ab:3c:7c:2b:82:ee:23:e4:2a:6d:56: f8:c0:84:6d:b2:d9:26:dc:1e:8e:13:6b:4c:bf:d3: 26:fe:b3:29:12:5c:e6:c2:8f:51:28:e1:3e:b5:24: 95:a1:6c:7c:14:34:b5:9e:b9:d2:dc:eb:c3:cf:c3: 7b:fc:6c:06:1f:58:55:c8:9b:7c:63:b6:fa:dd:6d: 58:c2:44:8a:00:e9:2e:0a:89:e8:06:af:06:c7:0c: a3:f3:3e:3b:44:18:58:44:71:a4:a2:ff:22:ff:5b: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 138.43.120.0/24 192.124.224.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63436 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:66:31:84:92:ff:ed:3b:53:05:2c:02:f5:13:cf:48:9a:72: 9d:dd:f7:68:72:7f:a2:40:0f:4f:31:06:d7:73:73:2a:97:4e: f8:78:4a:59:6a:63:46:c3:cb:52:5b:91:8d:cd:f8:65:40:c3: 59:f3:93:fb:11:7a:0a:ec:5d:07:46:ee:8c:a2:20:f7:b3:64: c0:1d:29:1c:0c:22:84:94:c1:5e:ff:3f:61:17:f6:73:ac:1c: 83:56:b7:a2:42:cb:62:83:2d:80:ef:ea:d0:62:58:33:b9:1e: 17:2f:07:34:1b:d0:40:57:fc:21:9d:9a:f3:d7:84:e8:d0:71: 59:35:e0:ac:3f:05:ad:c8:fa:c4:66:4d:c6:a1:1a:cd:6f:1d: 94:ae:37:c3:61:1a:d4:20:d5:8a:87:1c:a5:e1:29:96:70:44: 5f:66:ec:64:4f:b0:3d:17:8e:67:39:32:c8:b6:42:24:31:0e: a0:52:31:b2:6f:6e:73:b3:8d:aa:e7:f9:d8:fb:f2:00:f5:49: 82:fd:30:5f:3f:c9:0c:20:fb:69:c0:5f:0f:ff:cf:8b:77:4c: 83:c3:a7:3c:92:76:8e:b2:4a:26:3b:cf:0d:77:e2:3b:5f:75: da:ec:2b:7c:d1:42:da:91:e9:31:9d:f9:80:9e:78:ed:0f:40: 18:3b:31:b2 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEbV0wVh3jFjLv/ozoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDgxMTAwNDUyMloXDTI2MTExNDAxNDUyMlowLzEtMCsGA1UEAxMk MTBjNDAxMTItYmM4NS00Zjc1LTliYjAtNDcxZWM4NGJhM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPsXOhJOCm0L78tjiVCuif6nwlzN5j71DpRp vu5W9TLIr6s32qOvXSLVel1mJQ1c0KILWJ5R/GJ+RqiaKsAo81S9b4C1Jr2dJdZ1 SwnEkx3jJLh89vtOBZYjXYfzeBXPV/OcoJXoMUda5pCzg1uZqF3RzxQgHDLE4iJ2 PV8KgMxg8TdQE+GscTAobSSWVhLPrCx3piEIP8bJqzx8K4LuI+QqbVb4wIRtstkm 3B6OE2tMv9Mm/rMpElzmwo9RKOE+tSSVoWx8FDS1nrnS3OvDz8N7/GwGH1hVyJt8 Y7b63W1YwkSKAOkuConoBq8Gxwyj8z47RBhYRHGkov8i/1v9IQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFNjiXA9YmJTZx3GyvvZisYEXiCq4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8x MGM0MDExMi1iYzg1LTRmNzUtOWJiMC00NzFlYzg0YmEzZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzEwYzQwMTEyLWJjODUtNGY3NS05 YmIwLTQ3MWVjODRiYTNmZS8xMGM0MDExMi1iYzg1LTRmNzUtOWJiMC00NzFlYzg0 YmEzZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACKK3gDBADAfOAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPfMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADtmMYSS/+07UwUsAvUTz0iacp3d92hyf6JAD08x BtdzcyqXTvh4SllqY0bDy1JbkY3N+GVAw1nzk/sRegrsXQdG7oyiIPezZMAdKRwM IoSUwV7/P2EX9nOsHINWt6JCy2KDLYDv6tBiWDO5HhcvBzQb0EBX/CGdmvPXhOjQ cVk14Kw/Ba3I+sRmTcahGs1vHZSuN8NhGtQg1YqHHKXhKZZwRF9m7GRPsD0Xjmc5 Msi2QiQxDqBSMbJvbnOzjarn+dj78gD1SYL9MF8/yQwg+2nAXw//z4t3TIPDpzyS do6ySiY7zw134jtfddrsK3zRQtqR6TGd+YCeeO0PQBg7MbI= -----END CERTIFICATE-----Generated at Thu Nov 21 15:48:23 2024 by rpki-client on console-ams.rpki-client.org