$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer File: 10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer (raw, json) Hash identifier: JBAXQbLLpsUgQ8RVc3AZMW9budBuED4zjJxx7yRzaxA= Subject key identifier: D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858451EFF8EA0C89B5A3D9283ABC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Mar 2024 20:15:14 +0000 Certificate not after: Sun 10 Aug 2025 19:06:39 +0000 Subordinate resources: AS: 63436 IP: 138.43.120.0/24 IP: 192.124.224.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1e:ff:8e:a0:c8:9b:5a:3d:92:83:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 6 20:15:14 2024 GMT Not After : Aug 10 19:06:39 2025 GMT Subject: CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:17:3a:12:4e:0a:6d:0b:ef:cb:63:89:50: ae:89:fe:a7:c2:5c:cd:e6:3e:f5:0e:94:69:be:ee: 56:f5:32:c8:af:ab:37:da:a3:af:5d:22:d5:7a:5d: 66:25:0d:5c:d0:a2:0b:58:9e:51:fc:62:7e:46:a8: 9a:2a:c0:28:f3:54:bd:6f:80:b5:26:bd:9d:25:d6: 75:4b:09:c4:93:1d:e3:24:b8:7c:f6:fb:4e:05:96: 23:5d:87:f3:78:15:cf:57:f3:9c:a0:95:e8:31:47: 5a:e6:90:b3:83:5b:99:a8:5d:d1:cf:14:20:1c:32: c4:e2:22:76:3d:5f:0a:80:cc:60:f1:37:50:13:e1: ac:71:30:28:6d:24:96:56:12:cf:ac:2c:77:a6:21: 08:3f:c6:c9:ab:3c:7c:2b:82:ee:23:e4:2a:6d:56: f8:c0:84:6d:b2:d9:26:dc:1e:8e:13:6b:4c:bf:d3: 26:fe:b3:29:12:5c:e6:c2:8f:51:28:e1:3e:b5:24: 95:a1:6c:7c:14:34:b5:9e:b9:d2:dc:eb:c3:cf:c3: 7b:fc:6c:06:1f:58:55:c8:9b:7c:63:b6:fa:dd:6d: 58:c2:44:8a:00:e9:2e:0a:89:e8:06:af:06:c7:0c: a3:f3:3e:3b:44:18:58:44:71:a4:a2:ff:22:ff:5b: fd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 138.43.120.0/24 192.124.224.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63436 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b4:50:72:ce:88:f8:6a:bc:a2:1f:9c:93:3f:2b:c0:7a:cf: 1f:ef:34:20:f6:c2:ef:14:eb:77:44:e9:44:2e:8d:f1:83:10: 1a:a5:60:95:9f:55:c3:9e:9d:a3:ba:dc:94:fe:3a:cc:30:66: 0c:fd:4a:08:cd:20:e1:fa:10:c2:e6:1f:bb:82:e0:2b:47:f6: ae:8a:60:fd:8a:d9:ad:ca:af:d5:0e:64:46:37:ee:2d:dc:cb: bf:5f:0e:bb:45:25:86:84:3d:b8:a0:9d:c6:32:1c:cf:b7:f9: 91:8c:15:b4:37:a1:26:a8:e3:02:49:62:c7:bd:58:66:50:07: 0f:05:77:cc:6f:35:91:06:b9:8b:9e:71:57:bd:45:24:f9:d4: 7e:dd:7c:8c:56:b1:af:32:22:74:7e:22:76:c2:74:d0:ed:b3: 0a:62:54:5a:ed:ef:5f:ba:f1:4d:e7:8c:98:80:8a:6c:e3:d2: 6d:e7:c7:45:e6:b6:ae:af:57:c1:65:88:8c:c2:c1:c4:c9:8d: 4a:d6:67:80:c9:7d:bb:1f:58:14:74:b2:e3:70:eb:a3:0b:18: 15:1f:a0:e4:c0:4c:e2:ae:25:a8:ff:b8:61:21:c3:e5:e3:de: 54:ff:09:1a:d7:b6:24:fa:94:82:5c:54:5b:85:10:d2:8e:8e: aa:eb:32:c9 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEUe/46gyJtaPZKDq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDMwNjIwMTUxNFoXDTI1MDgxMDE5MDYzOVowLzEtMCsGA1UEAxMk MTBjNDAxMTItYmM4NS00Zjc1LTliYjAtNDcxZWM4NGJhM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPsXOhJOCm0L78tjiVCuif6nwlzN5j71DpRp vu5W9TLIr6s32qOvXSLVel1mJQ1c0KILWJ5R/GJ+RqiaKsAo81S9b4C1Jr2dJdZ1 SwnEkx3jJLh89vtOBZYjXYfzeBXPV/OcoJXoMUda5pCzg1uZqF3RzxQgHDLE4iJ2 PV8KgMxg8TdQE+GscTAobSSWVhLPrCx3piEIP8bJqzx8K4LuI+QqbVb4wIRtstkm 3B6OE2tMv9Mm/rMpElzmwo9RKOE+tSSVoWx8FDS1nrnS3OvDz8N7/GwGH1hVyJt8 Y7b63W1YwkSKAOkuConoBq8Gxwyj8z47RBhYRHGkov8i/1v9IQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFNjiXA9YmJTZx3GyvvZisYEXiCq4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8x MGM0MDExMi1iYzg1LTRmNzUtOWJiMC00NzFlYzg0YmEzZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzEwYzQwMTEyLWJjODUtNGY3NS05 YmIwLTQ3MWVjODRiYTNmZS8xMGM0MDExMi1iYzg1LTRmNzUtOWJiMC00NzFlYzg0 YmEzZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACKK3gDBADAfOAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPfMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABy0UHLOiPhqvKIfnJM/K8B6zx/vNCD2wu8U63dE 6UQujfGDEBqlYJWfVcOenaO63JT+OswwZgz9SgjNIOH6EMLmH7uC4CtH9q6KYP2K 2a3Kr9UOZEY37i3cy79fDrtFJYaEPbigncYyHM+3+ZGMFbQ3oSao4wJJYse9WGZQ Bw8Fd8xvNZEGuYuecVe9RST51H7dfIxWsa8yInR+InbCdNDtswpiVFrt71+68U3n jJiAimzj0m3nx0Xmtq6vV8FliIzCwcTJjUrWZ4DJfbsfWBR0suNw66MLGBUfoOTA TOKuJaj/uGEhw+Xj3lT/CRrXtiT6lIJcVFuFENKOjqrrMsk= -----END CERTIFICATE-----Generated at Fri Apr 26 08:28:54 2024 by rpki-client on console-ams.rpki-client.org