$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e.cer File: 2011e64c-7c9c-4249-87ab-c66e2076120e.cer (raw, json) Hash identifier: fvUcl78RKmhQUPYu5ajrzQJaFzFLPl3ftgrQ05NGM+Q= Subject key identifier: 50:36:5D:61:27:D2:BC:93:FC:D5:DE:A6:A0:30:4C:FB:0E:D3:93:6D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842CE8745D8F022FA0527EB6E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/2011e64c-7c9c-4249-87ab-c66e2076120e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:54:20 +0000 Certificate not after: Thu 25 Sep 2025 00:45:15 +0000 Subordinate resources: AS: 25815 IP: 23.164.192.0/24 IP: 198.167.255.0/24 IP: 2604:9240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:87:45:d8:f0:22:fa:05:27:eb:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 7 14:54:20 2023 GMT Not After : Sep 25 00:45:15 2025 GMT Subject: CN=2011e64c-7c9c-4249-87ab-c66e2076120e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:15:a9:4c:71:17:db:94:f3:d6:3d:a1:40: 97:3b:e9:83:40:2c:3e:12:ef:a0:d2:48:8a:32:13: 9c:3a:a6:ac:00:1c:38:07:13:a5:9c:7e:ed:dc:64: 3b:05:5a:a5:42:97:59:db:2e:db:6c:c1:8b:f1:50: ef:dc:5f:61:cd:ef:19:1f:91:65:09:e4:6b:50:84: e4:35:98:b7:81:c6:50:71:81:74:48:b0:90:76:cd: 3e:48:50:dc:81:da:58:56:69:81:48:8e:c4:cf:59: f1:96:65:5f:59:a4:55:72:85:d2:74:d0:22:3d:dc: ab:7b:7c:8c:b0:81:43:12:6d:24:3c:e3:1f:1e:70: d5:da:a5:84:db:4e:b7:43:de:4f:90:4e:cb:e0:bc: 8e:a2:a6:86:7c:e8:ca:d5:8c:ac:0b:06:53:2a:ed: 12:8c:e5:df:9f:d8:03:e0:bb:db:ff:be:bc:7d:cf: 5a:fc:2e:39:bd:e5:ba:9d:a0:6c:eb:cc:44:cf:b4: 01:b5:a1:47:8e:d6:b4:0b:b6:97:ed:87:b7:68:81: ec:26:54:d5:df:91:8e:3c:69:e4:2f:ee:6d:83:d0: f5:1b:70:8e:77:be:5b:46:f6:ee:7e:e4:b0:4f:19: ee:19:d2:48:e3:59:2e:c5:61:44:05:95:88:d3:1d: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:36:5D:61:27:D2:BC:93:FC:D5:DE:A6:A0:30:4C:FB:0E:D3:93:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2011e64c-7c9c-4249-87ab-c66e2076120e/2011e64c-7c9c-4249-87ab-c66e2076120e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.164.192.0/24 198.167.255.0/24 IPv6: 2604:9240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25815 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e2:07:6f:3f:fa:5a:66:73:8b:70:cd:03:dd:fa:12:26:3d: b4:8f:a7:82:af:41:89:30:8b:1f:a8:60:43:06:a8:90:b2:40: 43:aa:60:14:57:39:91:34:1e:d6:6f:0b:b8:cc:60:e3:fe:a2: da:59:6f:3c:21:73:19:54:d3:e0:5e:89:52:a3:0f:60:55:7f: 15:7a:68:3c:40:84:b7:fd:4c:09:a1:cf:8c:88:75:84:18:a7: 3c:ed:1d:33:b5:09:ba:96:21:07:18:a5:aa:60:2e:56:a7:82: 62:e1:85:1a:5f:a4:7c:95:5d:69:76:dc:8c:fc:29:11:50:a5: 38:b9:85:ed:d2:ca:61:e5:d5:78:25:63:b6:70:ec:6a:0e:90: 32:46:6e:3a:30:34:c0:71:75:fe:1c:f8:81:1d:e0:6d:09:c5: 02:28:29:b2:be:95:65:af:6b:6f:5d:ff:98:27:99:d5:70:9a: 58:96:e5:85:d4:cc:88:ed:e4:56:05:55:f4:9c:78:6b:02:8d: e5:0d:bf:d0:19:ff:74:20:6d:c1:8c:dd:04:3e:b5:53:6a:65: 39:6e:4e:1b:6b:86:7e:cc:4f:51:7f:39:c8:5d:ef:11:1c:4b: f8:73:8e:2b:ad:d9:e8:99:09:be:7c:d1:da:3b:b2:9e:14:46: 74:d3:fb:f8 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWELOh0XY8CL6BSfrboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDgwNzE0NTQyMFoXDTI1MDkyNTAwNDUxNVowLzEtMCsGA1UEAxMk MjAxMWU2NGMtN2M5Yy00MjQ5LTg3YWItYzY2ZTIwNzYxMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytYVqUxxF9uU89Y9oUCXO+mDQCw+Eu+g0kiK MhOcOqasABw4BxOlnH7t3GQ7BVqlQpdZ2y7bbMGL8VDv3F9hze8ZH5FlCeRrUITk NZi3gcZQcYF0SLCQds0+SFDcgdpYVmmBSI7Ez1nxlmVfWaRVcoXSdNAiPdyre3yM sIFDEm0kPOMfHnDV2qWE2063Q95PkE7L4LyOoqaGfOjK1YysCwZTKu0SjOXfn9gD 4Lvb/768fc9a/C45veW6naBs68xEz7QBtaFHjta0C7aX7Ye3aIHsJlTV35GOPGnk L+5tg9D1G3COd75bRvbufuSwTxnuGdJI41kuxWFEBZWI0x1PmQIDAQABo4IELzCC BCswHQYDVR0OBBYEFFA2XWEn0ryT/NXepqAwTPsO05NtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y MDExZTY0Yy03YzljLTQyNDktODdhYi1jNjZlMjA3NjEyMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzIwMTFlNjRjLTdjOWMtNDI0OS04 N2FiLWM2NmUyMDc2MTIwZS8yMDExZTY0Yy03YzljLTQyNDktODdhYi1jNjZlMjA3 NjEyMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXpMADBADGp/8wDQQCAAIwBwMFACYEkkAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICZNcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADOIHbz/6WmZzi3DNA936 EiY9tI+ngq9BiTCLH6hgQwaokLJAQ6pgFFc5kTQe1m8LuMxg4/6i2llvPCFzGVTT 4F6JUqMPYFV/FXpoPECEt/1MCaHPjIh1hBinPO0dM7UJupYhBxilqmAuVqeCYuGF Gl+kfJVdaXbcjPwpEVClOLmF7dLKYeXVeCVjtnDsag6QMkZuOjA0wHF1/hz4gR3g bQnFAigpsr6VZa9rb13/mCeZ1XCaWJblhdTMiO3kVgVV9Jx4awKN5Q2/0Bn/dCBt wYzdBD61U2plOW5OG2uGfsxPUX85yF3vERxL+HOOK63Z6JkJvnzR2juynhRGdNP7 +A== -----END CERTIFICATE-----Generated at Thu Apr 18 12:02:46 2024 by rpki-client on console-fra.rpki-client.org