$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer File: 2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.cer (raw, json) Hash identifier: NOmCKc9vHKmmt/McPFYKCNJ0jh3pW1SRBArdFlDM8is= Subject key identifier: B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858433C8D4845E85EDA94B48AF680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 16 Sep 2023 00:45:22 +0000 Certificate not after: Fri 19 Dec 2025 01:45:22 +0000 Subordinate resources: IP: 137.75.0.0/18 IP: 137.75.128.0/17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:3c:8d:48:45:e8:5e:da:94:b4:8a:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 16 00:45:22 2023 GMT Not After : Dec 19 01:45:22 2025 GMT Subject: CN=2e8d8d1c-a3ef-40e2-991a-97642dddd6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:ef:2c:29:7b:44:f0:f1:6d:8e:3a:0a:92: 25:b0:87:c7:23:0d:21:78:6a:fe:99:99:72:2f:17: 1c:5d:8a:e9:b2:cc:c4:f4:ba:c3:f6:3b:e4:e7:af: 61:27:c4:b4:8e:e0:1a:df:83:d4:c2:f6:88:dd:f8: 71:14:56:9f:ac:2a:51:e3:63:f1:2e:d8:de:df:a8: 61:36:43:ca:93:a6:ac:a0:3e:cb:bd:2e:62:48:59: 9e:16:f2:94:fe:8a:e6:dd:31:21:a6:db:53:2d:cf: b5:4f:ec:31:dc:79:23:1c:94:f7:87:90:08:d1:aa: d2:76:cc:71:2c:45:bb:c0:d4:da:30:2a:83:dc:0b: 64:9f:a6:09:3c:e3:49:d3:3c:6d:f6:3a:fb:01:57: 42:16:08:27:dc:7a:b2:89:b9:95:ea:2c:64:80:96: ba:fd:be:41:e2:8c:9e:3a:e9:5a:25:95:8d:f8:99: 31:8e:18:d1:69:41:a8:ed:6b:3a:5c:ba:86:9a:ba: b1:5b:36:10:f0:bd:f8:cd:95:0f:ef:5a:bf:42:bb: 7d:e6:d7:ca:26:85:03:d1:f2:fd:19:3c:3c:cc:97: 6d:88:ae:54:9b:1a:ae:bc:08:21:ae:08:f5:d1:83: 55:bd:92:b4:46:e0:01:08:c7:f0:3b:d6:0a:d0:71: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DD:65:9F:3B:EB:8A:05:BD:9F:33:1A:52:25:3A:93:F2:3B:12:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac/2e8d8d1c-a3ef-40e2-991a-97642dddd6ac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 137.75.0.0/18 137.75.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b5:97:65:73:0c:bd:5e:81:b5:7f:10:a8:ca:dc:24:95:62: 80:53:d7:73:e0:2e:a1:f1:87:84:de:b6:d6:d4:33:38:7b:fc: 8a:51:47:d3:6a:97:9e:36:64:8b:b2:3f:5b:a5:0d:94:06:39: f3:c8:28:d3:48:7e:40:98:b2:a2:7e:b0:a1:1a:04:34:42:78: 72:cb:89:0c:3b:79:2c:ec:f0:5b:9d:2e:3b:ae:44:24:e5:45: b5:63:c2:c2:e1:b2:0f:4c:38:a1:74:69:77:b6:8b:1d:13:09: 6a:68:e4:40:20:16:ff:72:16:ad:d1:0b:54:54:16:80:61:73: aa:4d:87:a0:e6:29:49:fc:69:84:8d:f9:90:26:c9:8f:70:d1: 88:60:01:a4:97:5f:30:80:04:43:be:87:d6:d0:95:36:25:9a: dd:d1:59:7a:36:a0:6a:2d:4e:80:fb:c0:c5:a5:37:47:f5:6e: ae:48:df:3e:69:7f:f4:c3:bc:c1:0c:88:3e:97:b8:1b:a8:a8: 95:5b:ec:16:f9:a5:0b:27:98:f9:3c:bb:05:cb:69:72:8e:86: 59:de:de:1d:e5:c6:98:62:fb:db:1c:f9:a4:5b:83:bd:02:f7: 8c:13:f8:f6:0d:63:b6:5b:90:fc:f3:b0:f6:39:22:61:99:90: 1d:7a:c8:bc -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEM8jUhF6F7alLSK9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDkxNjAwNDUyMloXDTI1MTIxOTAxNDUyMlowLzEtMCsGA1UEAxMk MmU4ZDhkMWMtYTNlZi00MGUyLTk5MWEtOTc2NDJkZGRkNmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tvvLCl7RPDxbY46CpIlsIfHIw0heGr+mZly LxccXYrpsszE9LrD9jvk569hJ8S0juAa34PUwvaI3fhxFFafrCpR42PxLtje36hh NkPKk6asoD7LvS5iSFmeFvKU/orm3TEhpttTLc+1T+wx3HkjHJT3h5AI0arSdsxx LEW7wNTaMCqD3Atkn6YJPONJ0zxt9jr7AVdCFggn3HqyibmV6ixkgJa6/b5B4oye OulaJZWN+JkxjhjRaUGo7Ws6XLqGmrqxWzYQ8L34zZUP71q/Qrt95tfKJoUD0fL9 GTw8zJdtiK5UmxquvAghrgj10YNVvZK0RuABCMfwO9YK0HE2VQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFLDdZZ8764oFvZ8zGlIlOpPyOxL3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8y ZThkOGQxYy1hM2VmLTQwZTItOTkxYS05NzY0MmRkZGQ2YWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzJlOGQ4ZDFjLWEzZWYtNDBlMi05 OTFhLTk3NjQyZGRkZDZhYy8yZThkOGQxYy1hM2VmLTQwZTItOTkxYS05NzY0MmRk ZGQ2YWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAaJSwADBAeJS4AwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQbWXZXMMvV6B tX8QqMrcJJVigFPXc+AuofGHhN621tQzOHv8ilFH02qXnjZki7I/W6UNlAY588go 00h+QJiyon6woRoENEJ4csuJDDt5LOzwW50uO65EJOVFtWPCwuGyD0w4oXRpd7aL HRMJamjkQCAW/3IWrdELVFQWgGFzqk2HoOYpSfxphI35kCbJj3DRiGABpJdfMIAE Q76H1tCVNiWa3dFZejagai1OgPvAxaU3R/VurkjfPml/9MO8wQyIPpe4G6iolVvs FvmlCyeY+Ty7Bctpco6GWd7eHeXGmGL72xz5pFuDvQL3jBP49g1jtluQ/POw9jki YZmQHXrIvA== -----END CERTIFICATE-----Generated at Thu Apr 18 03:36:37 2024 by rpki-client on console-ams.rpki-client.org