$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer File: afac962a-1647-4571-99e5-a23db5fd79d7.cer (raw, json) Hash identifier: X7fBxjAG7Av/u9PEMPQI5Og8iM1q2VJTm0bfD4StO48= Subject key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285846635CF4B86696CC6BA7612580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Jul 2024 00:45:20 +0000 Certificate not after: Sun 04 Oct 2026 00:45:20 +0000 Subordinate resources: IP: 165.119.0.0/16 IP: 198.137.240.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:63:5c:f4:b8:66:96:cc:6b:a7:61:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jul 1 00:45:20 2024 GMT Not After : Oct 4 00:45:20 2026 GMT Subject: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:ed:3f:18:ac:e7:89:85:ce:66:1b:b4:b1: d0:be:74:06:cc:b5:f4:6f:6c:66:af:48:85:e3:88: 60:c1:e2:32:2b:9a:60:c6:f3:cc:21:3e:96:fe:78: 8f:41:83:a4:e0:5a:e4:4d:a9:73:98:96:28:d7:71: 7d:6b:93:67:66:3c:6a:07:d6:f9:8a:a2:a6:23:8b: e1:a7:4c:5b:4a:7e:db:f4:af:84:d1:0b:ed:1d:24: 57:67:b5:3a:9b:cb:48:da:f5:6a:09:18:ed:b5:53: df:0f:ca:c8:84:58:cb:7b:f4:a4:d0:c6:d5:e4:37: e8:8b:96:43:9d:15:6c:92:73:24:b2:e6:4d:a0:98: d0:a7:25:21:72:55:27:94:68:7d:24:8a:e5:14:7a: e8:de:5d:81:af:d0:77:87:65:6b:f8:eb:84:77:55: df:6c:d4:68:62:45:ef:c0:4c:34:08:0a:44:11:87: ab:a7:ea:61:e2:bd:4f:d6:03:fc:16:0d:d6:80:b0: 6b:ec:8d:1c:63:a0:6f:ec:2f:49:60:db:d4:06:eb: fe:74:59:c9:67:cf:c5:e6:1a:9c:5b:17:7c:46:0f: d1:0b:db:83:57:06:01:c5:15:57:fe:4c:4f:9c:79: d7:a5:eb:95:aa:a4:5e:6d:07:9d:6e:88:c6:2e:0d: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 165.119.0.0/16 198.137.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2e:16:9c:d4:fb:f3:86:97:66:f6:98:c4:77:a3:7f:c6:b2: 20:7a:e5:0b:b6:2e:73:f9:fb:72:37:87:f0:95:4e:bf:32:38: ef:69:3c:74:bb:62:63:0f:cf:c3:46:4d:f5:f3:e0:fa:32:69: a4:45:4c:49:d4:8e:77:43:de:e0:43:25:91:2e:d5:18:8f:54: f8:7d:d2:e9:de:5a:92:9c:9d:98:2d:b2:b2:13:cb:3f:ae:36: e5:ca:ba:13:c1:08:de:f9:d1:5c:27:a0:1f:fe:29:5c:76:b3: 6d:5a:58:24:42:f6:d5:9d:2e:06:0d:9d:ea:f5:e6:15:c6:f3: 6d:c7:63:1a:86:24:48:fb:2b:41:93:0c:94:fb:da:6c:33:b9: 9d:88:b8:7b:a6:c2:95:f4:12:6a:50:a2:c6:c4:f8:4c:90:b6: ec:5d:a5:7b:91:d6:86:57:b3:28:1f:b1:97:ea:1b:3b:85:2d: af:06:4a:cd:f3:2b:d3:9b:09:1e:75:c2:16:63:8d:b0:62:a4: 44:41:ba:b5:96:94:a2:91:0e:52:a0:6c:fd:f4:ec:03:b6:f6: ed:1c:68:81:68:fe:5b:8b:65:af:c2:55:96:6b:45:df:58:81: 8e:43:bd:6b:35:b1:57:12:32:af:17:34:c8:c5:e3:b4:2f:32: 8f:66:21:e3 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEZjXPS4ZpbMa6dhJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDcwMTAwNDUyMFoXDTI2MTAwNDAwNDUyMFowLzEtMCsGA1UEAxMk YWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3OWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HztPxis54mFzmYbtLHQvnQGzLX0b2xmr0iF 44hgweIyK5pgxvPMIT6W/niPQYOk4FrkTalzmJYo13F9a5NnZjxqB9b5iqKmI4vh p0xbSn7b9K+E0QvtHSRXZ7U6m8tI2vVqCRjttVPfD8rIhFjLe/Sk0MbV5Dfoi5ZD nRVsknMksuZNoJjQpyUhclUnlGh9JIrlFHro3l2Br9B3h2Vr+OuEd1XfbNRoYkXv wEw0CApEEYerp+ph4r1P1gP8Fg3WgLBr7I0cY6Bv7C9JYNvUBuv+dFnJZ8/F5hqc Wxd8Rg/RC9uDVwYBxRVX/kxPnHnXpeuVqqRebQedbojGLg17gwIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFNfHPVmUinWZ9VhILm2zzXy5G/IvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h ZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2FmYWM5NjJhLTE2NDctNDU3MS05 OWU1LWEyM2RiNWZkNzlkNy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVm ZDc5ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCldwMEAcaJ8DBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7Lhac1Pvzhpdm 9pjEd6N/xrIgeuULti5z+ftyN4fwlU6/MjjvaTx0u2JjD8/DRk318+D6MmmkRUxJ 1I53Q97gQyWRLtUYj1T4fdLp3lqSnJ2YLbKyE8s/rjblyroTwQje+dFcJ6Af/ilc drNtWlgkQvbVnS4GDZ3q9eYVxvNtx2MahiRI+ytBkwyU+9psM7mdiLh7psKV9BJq UKLGxPhMkLbsXaV7kdaGV7MoH7GX6hs7hS2vBkrN8yvTmwkedcIWY42wYqREQbq1 lpSikQ5SoGz99OwDtvbtHGiBaP5bi2WvwlWWa0XfWIGOQ71rNbFXEjKvFzTIxeO0 LzKPZiHj -----END CERTIFICATE-----Generated at Thu Nov 21 15:04:06 2024 by rpki-client on console-fra.rpki-client.org