$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer File: 4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer (raw, json) Hash identifier: aQwx7OtMp6Tk6b/r4kv+9Kzw/KftD7FpISSuhZWi02s= Subject key identifier: F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584246E10B845218DB0BD48EB400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Jun 2023 00:45:17 +0000 Certificate not after: Mon 22 Sep 2025 00:45:17 +0000 Subordinate resources: IP: 168.151.29.0/24 IP: 192.206.23.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:46:e1:0b:84:52:18:db:0b:d4:8e:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 20 00:45:17 2023 GMT Not After : Sep 22 00:45:17 2025 GMT Subject: CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7e:47:dd:e9:83:ce:76:3b:59:dc:d3:8e:d1: c7:95:ca:dd:cd:2d:48:3c:5e:67:81:c3:7b:45:50: 9d:13:c2:48:e6:77:53:91:fb:ee:dd:1b:e0:03:3c: 67:e4:49:44:c9:bb:34:eb:da:5b:4e:4e:43:6d:14: 2c:6a:fe:25:4a:2e:75:74:74:bf:5e:c9:97:7f:07: b4:70:21:89:f6:e6:be:2c:dd:4c:72:3f:59:44:53: e0:60:4f:5e:83:bd:6f:15:80:be:ea:f6:b8:37:34: 4d:66:2b:2c:3f:2f:be:6a:b5:3e:a9:29:55:ab:ca: 28:cd:0d:11:b5:dc:2d:8d:ba:a6:37:60:93:57:59: ac:86:a6:7b:db:a9:b3:23:99:67:2f:b2:2f:ce:0a: c0:e5:6b:b2:40:55:3a:09:60:ff:3e:db:0c:79:02: 3a:b3:66:79:bc:9e:54:81:1b:e5:dc:1d:55:ab:34: 92:99:d5:ee:3e:f1:95:2e:21:f4:64:9e:2f:20:ce: 95:42:8c:4f:7c:1c:89:7d:d8:2c:42:3f:ff:91:a3: fe:e3:e7:74:01:fd:f8:3d:f5:af:51:11:4c:a3:d4: 62:56:16:45:fd:fa:50:c8:ad:85:9e:4e:9d:16:84: 21:30:28:84:44:fb:3b:b3:38:4d:39:77:e7:bf:42: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 168.151.29.0/24 192.206.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:db:24:bb:08:f0:1e:60:ae:95:d9:fc:40:c2:32:e3:0d:da: 62:4d:4a:2e:b9:14:c8:cc:73:bc:f4:f1:32:a9:25:26:20:f7: 73:d9:01:55:e3:17:7e:67:2c:eb:9d:c8:0c:8a:c5:75:03:b1: a1:27:b6:23:e7:e1:e1:af:5d:da:4c:a3:03:2c:6c:c6:0b:87: 73:88:c5:ba:3f:22:c8:04:05:a4:4c:6e:82:0f:53:11:54:31: d0:1c:2b:fc:69:f0:6f:ca:6d:b7:5d:66:09:f0:fd:a3:0f:d4: 34:40:28:31:73:61:d9:7f:58:29:20:61:e5:2a:23:8b:67:81: d0:24:a8:76:f6:55:b9:f6:ba:1c:e5:da:75:41:ec:27:8f:39: 0f:29:c8:ea:4d:73:28:d4:19:ec:24:94:84:da:74:61:6c:65: c2:13:2f:fd:f2:bb:17:0d:88:1d:7b:b4:72:fa:b5:d6:0c:92: 02:bc:c9:59:f5:c1:a9:6e:32:2b:ca:52:24:0d:75:d9:eb:0c: ff:5d:41:f4:64:99:d0:99:6f:c5:0d:9f:9e:bc:de:62:68:9e: 29:26:42:94:a0:28:4e:87:4d:33:a8:35:c1:d5:b1:5e:b9:be: 29:54:3f:5b:af:9f:57:fb:42:f3:51:51:c6:58:76:83:79:37: fc:b5:0e:b5 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEJG4QuEUhjbC9SOtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDYyMDAwNDUxN1oXDTI1MDkyMjAwNDUxN1owLzEtMCsGA1UEAxMk NDEzMmJmOGMtNGFmNy00YjAxLTljZDYtZGZhMjE5M2QxMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA735H3emDznY7WdzTjtHHlcrdzS1IPF5ngcN7 RVCdE8JI5ndTkfvu3RvgAzxn5ElEybs069pbTk5DbRQsav4lSi51dHS/XsmXfwe0 cCGJ9ua+LN1Mcj9ZRFPgYE9eg71vFYC+6va4NzRNZissPy++arU+qSlVq8oozQ0R tdwtjbqmN2CTV1mshqZ726mzI5lnL7IvzgrA5WuyQFU6CWD/PtsMeQI6s2Z5vJ5U gRvl3B1VqzSSmdXuPvGVLiH0ZJ4vIM6VQoxPfByJfdgsQj//kaP+4+d0Af34PfWv URFMo9RiVhZF/fpQyK2Fnk6dFoQhMCiERPs7szhNOXfnv0KIUQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFPK8P2AVIw2La3zmUll4bnirIRdmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 MTMyYmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEyMTkzZDEyN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQxMzJiZjhjLTRhZjctNGIwMS05 Y2Q2LWRmYTIxOTNkMTI3ZC80MTMyYmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEyMTkz ZDEyN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAColx0DBADAzhcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEtskuwjwHmCu ldn8QMIy4w3aYk1KLrkUyMxzvPTxMqklJiD3c9kBVeMXfmcs653IDIrFdQOxoSe2 I+fh4a9d2kyjAyxsxguHc4jFuj8iyAQFpExugg9TEVQx0Bwr/Gnwb8ptt11mCfD9 ow/UNEAoMXNh2X9YKSBh5Soji2eB0CSodvZVufa6HOXadUHsJ485DynI6k1zKNQZ 7CSUhNp0YWxlwhMv/fK7Fw2IHXu0cvq11gySArzJWfXBqW4yK8pSJA112esM/11B 9GSZ0JlvxQ2fnrzeYmieKSZClKAoTodNM6g1wdWxXrm+KVQ/W6+fV/tC81FRxlh2 g3k3/LUOtQ== -----END CERTIFICATE-----Generated at Thu Mar 28 16:10:47 2024 by rpki-client on console-ams.rpki-client.org