$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer File: ca63f656-6be5-42a9-ad64-85773747152a.cer (raw, json) Hash identifier: ID6Urba9NvcsPYlTOqT0H6aowa+5Zd2zyRI1o/6jKjQ= Subject key identifier: B2:1F:E7:5E:89:C9:76:4C:C7:3B:2A:14:69:29:54:3C:2B:EE:24:46 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858456AE61658E0D668EA4E8A3D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Apr 2024 00:45:21 +0000 Certificate not after: Tue 07 Jul 2026 00:45:21 +0000 Subordinate resources: IP: 161.98.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6a:e6:16:58:e0:d6:68:ea:4e:8a:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 3 00:45:21 2024 GMT Not After : Jul 7 00:45:21 2026 GMT Subject: CN=ca63f656-6be5-42a9-ad64-85773747152a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:81:be:46:e7:00:46:98:4e:bd:f5:95:2f: 1b:41:9c:24:5e:8a:d1:20:0a:f9:8c:4b:43:60:44: 6d:18:6d:9a:05:71:86:b8:b3:7f:a6:1e:40:40:3a: 42:0d:4f:42:6f:ee:a1:65:62:9a:70:a1:48:e6:dc: c5:f0:cd:97:31:d8:aa:af:28:0e:a8:3b:de:d6:8d: 56:b7:4a:c4:46:fd:a4:a9:56:ef:5f:8f:41:6c:30: 58:3e:49:12:55:6e:a8:fc:81:a5:c6:e8:da:df:9a: 57:90:f8:18:11:d9:74:c4:11:e7:07:e5:dd:83:ac: f0:a0:c7:30:a5:03:ca:e3:21:f8:0c:90:40:c2:a4: 50:2a:f4:ce:67:c5:cc:59:77:57:b7:6e:a9:17:48: 88:f1:7f:d8:76:06:b7:72:bd:a4:25:ae:8d:eb:af: 63:53:59:93:5d:47:a7:b1:3e:de:56:2a:ba:db:93: e3:60:bb:8f:bd:36:0b:10:47:c6:e6:c1:ca:39:e1: 8f:67:8b:1e:ca:70:6c:38:51:1f:54:51:5c:f6:9f: 07:94:51:fa:c3:ac:21:7a:bf:a0:36:b3:b9:c3:74: 3a:12:6f:db:8c:de:6e:76:89:92:57:03:7c:61:70: 80:8c:a2:09:ca:08:57:a0:b9:b2:d2:e3:1e:16:95: 05:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1F:E7:5E:89:C9:76:4C:C7:3B:2A:14:69:29:54:3C:2B:EE:24:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 161.98.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:66:62:2a:4c:cf:84:a5:05:33:fd:25:6e:5c:85:98:af:41: 25:6b:90:f6:72:71:92:18:48:c3:d3:e2:e9:e8:ce:76:ef:c9: d8:42:8f:36:b5:ff:da:0f:1d:88:b6:b9:17:f1:60:0c:10:a0: f0:de:20:9f:da:82:2f:5d:5a:39:e3:66:58:7e:05:ce:42:73: 1f:52:a4:03:c5:20:18:cf:65:3b:6f:cc:61:c0:97:b4:78:77: 70:47:aa:b0:5d:cf:d2:6d:6e:37:59:34:7a:4e:3d:fc:86:1c: 24:59:df:cd:77:28:dc:65:5b:00:66:e2:7f:02:b8:a2:2f:7b: 04:86:da:20:3d:42:84:1b:12:9f:b1:6a:74:c8:6c:71:f6:e8: e7:01:b3:cd:d5:96:05:6f:c2:94:95:7a:f0:39:d9:40:e3:12: f4:f3:88:26:d7:f0:a5:0e:64:e7:68:bb:ec:8e:5e:53:51:dc: 38:2e:c2:f8:92:df:95:f5:33:c2:bb:81:76:1a:91:ba:25:ba: 1b:c0:cb:c6:8f:f1:14:0d:45:ae:31:08:ab:d9:07:a3:63:ea: 57:78:f5:8b:d8:c0:48:3c:05:f8:67:1b:39:f9:e2:09:9d:08: 54:2f:30:48:1a:b0:8a:cc:59:71:12:e4:94:0f:d6:65:50:e5: 18:95:59:b4 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEVq5hZY4NZo6k6KPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDQwMzAwNDUyMVoXDTI2MDcwNzAwNDUyMVowLzEtMCsGA1UEAxMk Y2E2M2Y2NTYtNmJlNS00MmE5LWFkNjQtODU3NzM3NDcxNTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxuBvkbnAEaYTr31lS8bQZwkXorRIAr5jEtD YERtGG2aBXGGuLN/ph5AQDpCDU9Cb+6hZWKacKFI5tzF8M2XMdiqrygOqDve1o1W t0rERv2kqVbvX49BbDBYPkkSVW6o/IGlxuja35pXkPgYEdl0xBHnB+Xdg6zwoMcw pQPK4yH4DJBAwqRQKvTOZ8XMWXdXt26pF0iI8X/Ydga3cr2kJa6N669jU1mTXUen sT7eViq625PjYLuPvTYLEEfG5sHKOeGPZ4seynBsOFEfVFFc9p8HlFH6w6wher+g NrO5w3Q6Em/bjN5udomSVwN8YXCAjKIJyghXoLmy0uMeFpUFpwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFLIf516JyXZMxzsqFGkpVDwr7iRGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9j YTYzZjY1Ni02YmU1LTQyYTktYWQ2NC04NTc3Mzc0NzE1MmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2NhNjNmNjU2LTZiZTUtNDJhOS1h ZDY0LTg1NzczNzQ3MTUyYS9jYTYzZjY1Ni02YmU1LTQyYTktYWQ2NC04NTc3Mzc0 NzE1MmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwChYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASZmIqTM+EpQUz/SVuXIWY r0Ela5D2cnGSGEjD0+Lp6M5278nYQo82tf/aDx2ItrkX8WAMEKDw3iCf2oIvXVo5 42ZYfgXOQnMfUqQDxSAYz2U7b8xhwJe0eHdwR6qwXc/SbW43WTR6Tj38hhwkWd/N dyjcZVsAZuJ/AriiL3sEhtogPUKEGxKfsWp0yGxx9ujnAbPN1ZYFb8KUlXrwOdlA 4xL084gm1/ClDmTnaLvsjl5TUdw4LsL4kt+V9TPCu4F2GpG6JbobwMvGj/EUDUWu MQir2QejY+pXePWL2MBIPAX4Zxs5+eIJnQhULzBIGrCKzFlxEuSUD9ZlUOUYlVm0 -----END CERTIFICATE-----Generated at Thu Apr 25 22:34:50 2024 by rpki-client on console-fra.rpki-client.org