$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer File: afac962a-1647-4571-99e5-a23db5fd79d7.cer (raw, json) Hash identifier: zqDJfj7Z7rbPh4U0NK0N1V7OGzF7wlcMzoT0PspzvgE= Subject key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285841E4834F1631FAA5600763A580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Mon 30 Jun 2025 19:06:39 +0000 Subordinate resources: IP: 165.119.0.0/16 IP: 198.137.240.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4f:16:31:fa:a5:60:07:63:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jun 30 19:06:39 2025 GMT Subject: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:ed:3f:18:ac:e7:89:85:ce:66:1b:b4:b1: d0:be:74:06:cc:b5:f4:6f:6c:66:af:48:85:e3:88: 60:c1:e2:32:2b:9a:60:c6:f3:cc:21:3e:96:fe:78: 8f:41:83:a4:e0:5a:e4:4d:a9:73:98:96:28:d7:71: 7d:6b:93:67:66:3c:6a:07:d6:f9:8a:a2:a6:23:8b: e1:a7:4c:5b:4a:7e:db:f4:af:84:d1:0b:ed:1d:24: 57:67:b5:3a:9b:cb:48:da:f5:6a:09:18:ed:b5:53: df:0f:ca:c8:84:58:cb:7b:f4:a4:d0:c6:d5:e4:37: e8:8b:96:43:9d:15:6c:92:73:24:b2:e6:4d:a0:98: d0:a7:25:21:72:55:27:94:68:7d:24:8a:e5:14:7a: e8:de:5d:81:af:d0:77:87:65:6b:f8:eb:84:77:55: df:6c:d4:68:62:45:ef:c0:4c:34:08:0a:44:11:87: ab:a7:ea:61:e2:bd:4f:d6:03:fc:16:0d:d6:80:b0: 6b:ec:8d:1c:63:a0:6f:ec:2f:49:60:db:d4:06:eb: fe:74:59:c9:67:cf:c5:e6:1a:9c:5b:17:7c:46:0f: d1:0b:db:83:57:06:01:c5:15:57:fe:4c:4f:9c:79: d7:a5:eb:95:aa:a4:5e:6d:07:9d:6e:88:c6:2e:0d: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 165.119.0.0/16 198.137.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5a:ad:d1:b8:20:4e:b8:0a:db:3a:98:82:f4:ea:f8:c9:5a: 08:f2:ca:e9:9e:73:7b:8b:80:e4:92:ec:46:62:c3:3f:67:8a: 95:22:9c:97:f8:d1:53:ea:67:38:ad:f2:92:0c:48:a6:67:49: 07:38:dc:56:33:fc:26:65:fa:1e:51:57:c8:e1:ec:29:48:37: d4:94:10:63:3f:80:00:11:6f:4c:00:ba:37:7e:d1:69:77:b3: d7:81:42:7f:d4:73:7a:2a:7f:7c:07:97:ca:3c:55:47:2b:90: 33:d7:2d:46:b8:da:3d:30:c9:ea:40:0f:36:fb:a2:eb:f2:4e: fe:51:07:40:7c:e9:c7:7e:55:c6:37:d8:0a:1d:95:fe:33:23: 87:6a:76:27:d1:b0:5d:3e:04:8c:6f:55:e7:9c:ea:87:1f:ac: 1a:c5:f6:51:3a:ef:d5:d4:c3:a9:40:b2:e9:c9:d8:a0:44:a6: d3:3a:11:a9:63:78:ea:30:d4:93:87:ee:40:b3:bd:ec:07:66: de:c7:9b:c9:3e:86:58:e0:ca:01:ba:e0:79:09:b0:eb:c5:88: b5:f4:67:15:82:5a:a9:fe:82:e8:29:82:91:7b:e4:8e:29:70: 36:59:0c:cd:78:4f:3d:a7:a4:cb:31:33:32:6e:9b:ec:64:92: ce:b6:37:4d -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEHkg08WMfqlYAdjpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYzMDE5MDYzOVowLzEtMCsGA1UEAxMk YWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3OWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HztPxis54mFzmYbtLHQvnQGzLX0b2xmr0iF 44hgweIyK5pgxvPMIT6W/niPQYOk4FrkTalzmJYo13F9a5NnZjxqB9b5iqKmI4vh p0xbSn7b9K+E0QvtHSRXZ7U6m8tI2vVqCRjttVPfD8rIhFjLe/Sk0MbV5Dfoi5ZD nRVsknMksuZNoJjQpyUhclUnlGh9JIrlFHro3l2Br9B3h2Vr+OuEd1XfbNRoYkXv wEw0CApEEYerp+ph4r1P1gP8Fg3WgLBr7I0cY6Bv7C9JYNvUBuv+dFnJZ8/F5hqc Wxd8Rg/RC9uDVwYBxRVX/kxPnHnXpeuVqqRebQedbojGLg17gwIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFNfHPVmUinWZ9VhILm2zzXy5G/IvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h ZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2FmYWM5NjJhLTE2NDctNDU3MS05 OWU1LWEyM2RiNWZkNzlkNy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVm ZDc5ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCldwMEAcaJ8DBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgWq3RuCBOuArb OpiC9Or4yVoI8srpnnN7i4DkkuxGYsM/Z4qVIpyX+NFT6mc4rfKSDEimZ0kHONxW M/wmZfoeUVfI4ewpSDfUlBBjP4AAEW9MALo3ftFpd7PXgUJ/1HN6Kn98B5fKPFVH K5Az1y1GuNo9MMnqQA82+6Lr8k7+UQdAfOnHflXGN9gKHZX+MyOHanYn0bBdPgSM b1XnnOqHH6waxfZROu/V1MOpQLLpydigRKbTOhGpY3jqMNSTh+5As73sB2bex5vJ PoZY4MoBuuB5CbDrxYi19GcVglqp/oLoKYKRe+SOKXA2WQzNeE89p6TLMTMybpvs ZJLOtjdN -----END CERTIFICATE-----Generated at Sat Apr 20 02:39:52 2024 by rpki-client on console-ams.rpki-client.org