$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer File: 72f56d1d-6f40-4e54-b467-65c3bb8f12bb.cer (raw, json) Hash identifier: /991rKNFGkl4/1qLzIsMaN77BSYRiSwLPUv9b3M1dw8= Subject key identifier: BD:CA:DE:94:F2:56:FE:7D:DD:66:E4:C0:CB:B1:19:17:5D:66:44:03 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285844BB22C27CC64C581F4418A400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 31 Jan 2024 01:45:20 +0000 Certificate not after: Tue 05 May 2026 00:45:20 +0000 Subordinate resources: AS: 22898 IP: 104.192.240.0/22 IP: 192.69.160.0/20 IP: 2604:5b80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:bb:22:c2:7c:c6:4c:58:1f:44:18:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jan 31 01:45:20 2024 GMT Not After : May 5 00:45:20 2026 GMT Subject: CN=72f56d1d-6f40-4e54-b467-65c3bb8f12bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:da:0b:86:6c:2d:ea:97:eb:a3:a0:1b:09: 02:2c:d7:cc:9d:0a:22:5b:71:a3:b3:67:55:64:b6: 6e:6f:13:2d:99:7b:56:ea:dc:31:9b:80:0b:98:ca: 6c:54:78:b8:be:6a:74:70:7d:6c:2b:ac:d4:99:ac: 81:c6:4d:11:77:ff:0d:a3:fe:8d:b3:9d:dc:13:fd: e9:1d:01:83:4a:17:81:65:06:80:c0:dd:b5:d3:5e: f2:7d:d6:eb:87:80:84:df:60:91:da:95:2c:45:a3: 10:3f:30:0a:47:68:f3:c7:b1:53:9f:83:17:94:e2: 15:df:2a:6d:12:78:18:7a:2a:dd:24:c3:d7:05:e4: d0:e2:20:44:27:a4:38:f3:a5:53:4e:cf:67:38:58: 82:cb:d3:48:14:31:38:6a:40:09:af:0b:c6:1f:eb: d5:42:b4:d1:13:d2:2f:1c:12:b8:9b:14:55:06:60: ca:00:1d:33:d1:63:cc:2c:22:c7:9b:c3:d1:13:8e: ae:b4:b3:ba:af:29:94:d1:28:52:2f:83:da:dc:98: 2f:9f:4c:d2:38:13:05:25:94:bc:5f:97:d7:d9:a8: 04:db:ef:4a:d5:10:f9:0d:d2:e3:0f:72:ab:9b:00: 02:69:89:42:ad:1f:50:b1:1a:03:7c:30:cc:97:7e: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CA:DE:94:F2:56:FE:7D:DD:66:E4:C0:CB:B1:19:17:5D:66:44:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72f56d1d-6f40-4e54-b467-65c3bb8f12bb/72f56d1d-6f40-4e54-b467-65c3bb8f12bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 104.192.240.0/22 192.69.160.0/20 IPv6: 2604:5b80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22898 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:fa:84:34:92:d8:23:15:91:8d:99:ad:8a:72:f2:0f:c4:18: 2b:a2:70:d7:c9:4d:06:af:18:55:39:15:ed:e0:ce:11:01:b9: 0e:12:ac:dd:10:e9:3d:88:27:ec:32:f4:f9:b3:f5:95:a9:2d: d0:9b:a2:fc:bf:1f:af:05:99:c9:1f:28:10:8b:13:0a:8f:58: 19:e5:cc:04:d7:5a:d1:c7:01:1d:99:73:69:8e:fa:40:ee:a8: d5:15:cb:ba:c8:b9:a7:ac:f6:86:bf:79:f4:e6:2e:f0:4d:76: a7:3a:c4:d5:5f:ad:7a:22:80:e5:f2:ca:73:82:09:36:65:88: d7:7c:15:61:cb:ef:6b:ea:fd:8e:cd:c9:d5:29:30:99:28:07: b6:96:fe:b7:0f:4a:f5:8b:8e:0c:df:99:bc:37:fd:22:35:30: e4:64:22:de:98:38:74:98:3b:09:21:ea:f1:fa:f9:d1:f7:0a: e3:b9:58:2f:13:ae:5a:ab:9e:f1:1e:d9:cb:d5:5c:b4:99:44: 59:b1:d9:e8:6d:5b:3e:90:3f:ac:55:bc:04:f0:ef:33:ad:b2: ca:ec:40:d0:ce:49:e2:b9:4e:3c:d2:2e:dc:1d:d6:80:bc:16: 8e:0c:10:53:59:35:60:65:d4:e1:1d:df:ef:1e:8d:d4:78:f3: ff:88:04:9f -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWES7IsJ8xkxYH0QYpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDEzMTAxNDUyMFoXDTI2MDUwNTAwNDUyMFowLzEtMCsGA1UEAxMk NzJmNTZkMWQtNmY0MC00ZTU0LWI0NjctNjVjM2JiOGYxMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvALaC4ZsLeqX66OgGwkCLNfMnQoiW3Gjs2dV ZLZubxMtmXtW6twxm4ALmMpsVHi4vmp0cH1sK6zUmayBxk0Rd/8No/6Ns53cE/3p HQGDSheBZQaAwN21017yfdbrh4CE32CR2pUsRaMQPzAKR2jzx7FTn4MXlOIV3ypt EngYeirdJMPXBeTQ4iBEJ6Q486VTTs9nOFiCy9NIFDE4akAJrwvGH+vVQrTRE9Iv HBK4mxRVBmDKAB0z0WPMLCLHm8PRE46utLO6rymU0ShSL4Pa3Jgvn0zSOBMFJZS8 X5fX2agE2+9K1RD5DdLjD3KrmwACaYlCrR9QsRoDfDDMl37KwwIDAQABo4IELzCC BCswHQYDVR0OBBYEFL3K3pTyVv593WbkwMuxGRddZkQDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83 MmY1NmQxZC02ZjQwLTRlNTQtYjQ2Ny02NWMzYmI4ZjEyYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzcyZjU2ZDFkLTZmNDAtNGU1NC1i NDY3LTY1YzNiYjhmMTJiYi83MmY1NmQxZC02ZjQwLTRlNTQtYjQ2Ny02NWMzYmI4 ZjEyYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJowPADBATARaAwDQQCAAIwBwMFACYEW4AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICWXIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgvqENJLYIxWRjZmtinLy D8QYK6Jw18lNBq8YVTkV7eDOEQG5DhKs3RDpPYgn7DL0+bP1lakt0Jui/L8frwWZ yR8oEIsTCo9YGeXMBNda0ccBHZlzaY76QO6o1RXLusi5p6z2hr959OYu8E12pzrE 1V+teiKA5fLKc4IJNmWI13wVYcvva+r9js3J1SkwmSgHtpb+tw9K9YuODN+ZvDf9 IjUw5GQi3pg4dJg7CSHq8fr50fcK47lYLxOuWque8R7Zy9VctJlEWbHZ6G1bPpA/ rFW8BPDvM62yyuxA0M5J4rlOPNIu3B3WgLwWjgwQU1k1YGXU4R3f7x6N1Hjz/4gE nw== -----END CERTIFICATE-----Generated at Sat Apr 20 01:49:00 2024 by rpki-client on console-fra.rpki-client.org