$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer File: 1fcf03e6-ce00-46fb-a94d-ae02bfc41232.cer (raw, json) Hash identifier: PebT4DAwPkLV0JcSmIlOpgQwOMYlXG82kVGNMxsuduc= Subject key identifier: AA:3C:33:55:FE:F6:2B:B1:51:3F:B9:E9:F9:A2:CC:9C:97:D0:C2:DF Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584347B80531D1F01AC9AB88B750 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Sep 2023 00:45:22 +0000 Certificate not after: Tue 23 Dec 2025 01:45:22 +0000 Subordinate resources: IP: 104.232.45.0/24 IP: 204.27.244.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:47:b8:05:31:d1:f0:1a:c9:ab:88:b7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 20 00:45:22 2023 GMT Not After : Dec 23 01:45:22 2025 GMT Subject: CN=1fcf03e6-ce00-46fb-a94d-ae02bfc41232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:9b:a6:a4:a1:57:a9:52:9c:72:c0:db:1c: 6e:68:53:de:ce:02:9b:fd:64:e1:6c:b4:e7:3a:26: a8:c3:b6:54:ed:c8:79:57:ee:41:48:83:b9:36:aa: a3:c1:1c:0c:dc:99:a1:f5:9d:c3:58:74:5d:c4:78: 24:4a:d1:72:92:e6:f7:ff:af:cb:06:83:92:9c:dd: 9d:c3:07:b7:ca:74:87:b3:61:98:3c:c1:64:33:5e: a0:1f:14:ed:e8:85:62:dd:83:5a:94:01:cd:5f:0e: 2d:60:c6:f8:cd:26:b1:11:53:10:6b:37:55:13:6f: c0:4c:57:f2:99:db:aa:a9:7f:d7:bf:7a:c0:71:a2: ce:8f:a1:f7:3c:3a:e8:f0:fe:6c:93:34:09:ba:89: 58:61:00:7c:53:84:d8:af:63:4c:d3:29:7d:78:11: f0:65:ef:d4:c7:34:6a:60:25:19:d2:50:fd:df:9d: bc:f1:2c:2b:cf:c9:c2:cc:d6:74:4e:3d:13:85:27: 07:f0:14:0d:77:cc:f2:9d:67:79:38:9a:43:be:cb: dd:5e:98:7c:86:5d:c2:74:7f:34:e1:ef:4a:aa:4b: a4:7c:59:02:0f:c5:0e:38:d4:e2:24:af:c6:eb:74: cf:b6:3b:dd:bf:47:f4:0b:ec:fc:9e:ca:91:1d:2d: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3C:33:55:FE:F6:2B:B1:51:3F:B9:E9:F9:A2:CC:9C:97:D0:C2:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1fcf03e6-ce00-46fb-a94d-ae02bfc41232/1fcf03e6-ce00-46fb-a94d-ae02bfc41232.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 104.232.45.0/24 204.27.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:db:db:84:a5:d1:5c:70:45:b6:b0:77:0a:19:38:43:be:a2: ae:79:dc:42:3b:22:43:1c:0e:ae:77:4a:4e:9a:8f:5a:86:a3: 28:23:e3:ac:9f:11:c3:1e:b5:f7:56:9f:13:0c:1e:56:bb:7e: 2a:55:4c:2b:be:bf:e4:fa:7d:de:80:d7:08:3b:34:36:b7:74: e8:11:77:61:e6:bc:b4:b2:f1:ac:86:3a:0e:c0:3d:29:ad:46: cb:20:53:7c:3a:1f:83:9f:32:d8:99:d1:26:1f:7c:0b:1b:92: 59:be:94:95:60:4a:51:d3:c8:db:d0:73:86:27:df:6f:ee:85: 3c:47:7b:d1:f4:8b:f9:43:94:b5:b1:9a:ea:1c:50:66:4f:a9: 77:f1:f9:68:6e:8a:51:39:c5:e0:22:00:98:53:26:f4:8d:8f: 58:6c:59:2d:9c:67:31:00:9e:30:e8:27:d9:7e:01:c6:2c:a7: 04:35:02:84:77:a9:51:c9:00:6f:bf:c1:d0:51:02:5d:d3:01: 23:93:7f:cd:1f:fa:ff:ef:21:8f:a8:40:33:c1:e4:5b:2b:d7: e8:10:59:5e:56:f7:e3:f5:3e:bd:c9:12:de:78:14:2b:e4:c7: 3e:6f:be:83:f9:d5:53:4f:e7:4b:66:01:38:9c:26:f7:fd:f8: 20:18:67:67 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWENHuAUx0fAayauIt1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDkyMDAwNDUyMloXDTI1MTIyMzAxNDUyMlowLzEtMCsGA1UEAxMk MWZjZjAzZTYtY2UwMC00NmZiLWE5NGQtYWUwMmJmYzQxMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx6bpqShV6lSnHLA2xxuaFPezgKb/WThbLTn Oiaow7ZU7ch5V+5BSIO5NqqjwRwM3Jmh9Z3DWHRdxHgkStFykub3/6/LBoOSnN2d wwe3ynSHs2GYPMFkM16gHxTt6IVi3YNalAHNXw4tYMb4zSaxEVMQazdVE2/ATFfy mduqqX/Xv3rAcaLOj6H3PDro8P5skzQJuolYYQB8U4TYr2NM0yl9eBHwZe/UxzRq YCUZ0lD935288Swrz8nCzNZ0Tj0ThScH8BQNd8zynWd5OJpDvsvdXph8hl3CdH80 4e9KqkukfFkCD8UOONTiJK/G63TPtjvdv0f0C+z8nsqRHS2jmQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFKo8M1X+9iuxUT+56fmizJyX0MLfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8x ZmNmMDNlNi1jZTAwLTQ2ZmItYTk0ZC1hZTAyYmZjNDEyMzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFmY2YwM2U2LWNlMDAtNDZmYi1h OTRkLWFlMDJiZmM0MTIzMi8xZmNmMDNlNi1jZTAwLTQ2ZmItYTk0ZC1hZTAyYmZj NDEyMzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABo6C0DBADMG/QwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXtvbhKXRXHBF trB3Chk4Q76irnncQjsiQxwOrndKTpqPWoajKCPjrJ8Rwx6191afEwweVrt+KlVM K76/5Pp93oDXCDs0Nrd06BF3Yea8tLLxrIY6DsA9Ka1GyyBTfDofg58y2JnRJh98 CxuSWb6UlWBKUdPI29Bzhiffb+6FPEd70fSL+UOUtbGa6hxQZk+pd/H5aG6KUTnF 4CIAmFMm9I2PWGxZLZxnMQCeMOgn2X4BxiynBDUChHepUckAb7/B0FECXdMBI5N/ zR/6/+8hj6hAM8HkWyvX6BBZXlb34/U+vckS3ngUK+THPm++g/nVU0/nS2YBOJwm 9/34IBhnZw== -----END CERTIFICATE-----Generated at Sat Apr 20 02:39:59 2024 by rpki-client on console-ams.rpki-client.org