$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3.cer File: 4b36fa3e-06ec-405c-acf7-72589e9511d3.cer (raw, json) Hash identifier: dNprsCHtSL1T5UBIdF4L2sdIiFxNl8G7RCm+LronBJk= Subject key identifier: 98:B2:D4:63:17:2E:11:B1:65:95:50:5C:CC:22:2D:E3:4B:59:95:A7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285843E9C16B63716CB02311E19B60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/4b36fa3e-06ec-405c-acf7-72589e9511d3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Nov 2023 01:45:16 +0000 Certificate not after: Thu 19 Feb 2026 01:45:16 +0000 Subordinate resources: AS: 395734 IP: 23.128.128.0/23 IP: 149.112.56.0/23 IP: 149.112.64.0/22 IP: 2607:df80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:e9:c1:6b:63:71:6c:b0:23:11:e1:9b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 17 01:45:16 2023 GMT Not After : Feb 19 01:45:16 2026 GMT Subject: CN=4b36fa3e-06ec-405c-acf7-72589e9511d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:b7:1e:6b:87:36:61:72:4b:24:d1:d1:24: d6:22:59:55:c7:85:9d:ab:43:7a:39:43:53:ab:89: 37:ee:49:d3:7f:18:5f:0a:f9:76:c3:d7:e5:6d:65: d9:cf:4e:95:0f:db:6c:34:82:ce:74:0b:7e:fa:1b: 18:a4:0f:4c:0d:0f:ef:6a:d0:fb:de:6d:30:18:4b: f1:8d:5f:a0:a0:97:4e:40:a7:56:4a:d9:ad:e7:47: bb:40:60:e2:1b:0b:48:67:f0:d9:f7:92:de:d2:33: 9c:88:8f:2d:cc:92:e7:0b:99:e8:5c:68:2a:53:86: 00:08:78:b6:46:86:37:46:ff:49:ec:e6:e6:f1:b5: d7:ef:8e:14:c9:e6:fc:e4:6c:41:2d:09:d8:5b:29: 0c:af:58:28:b8:9e:a2:20:a6:11:2f:36:5a:aa:62: de:03:04:49:ea:a3:3d:7a:84:68:d6:0b:ba:f5:ef: 61:4d:b4:ff:78:cc:ee:30:95:5c:42:fb:50:9e:17: fc:bc:fb:11:15:5f:e6:c9:85:11:d9:3c:be:0f:01: ba:c2:2e:9c:51:58:77:d9:88:72:c6:af:8f:a3:22: 74:f6:e8:76:e3:75:d6:4d:f3:f5:d8:42:96:8d:ca: ce:75:07:4f:ac:ef:5c:03:53:47:26:2c:7e:da:0e: 0a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B2:D4:63:17:2E:11:B1:65:95:50:5C:CC:22:2D:E3:4B:59:95:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/4b36fa3e-06ec-405c-acf7-72589e9511d3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.128.128.0/23 149.112.56.0/23 149.112.64.0/22 IPv6: 2607:df80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395734 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c3:af:4b:43:cd:7e:47:68:e7:a8:e6:12:dc:2e:8e:86:94: e6:d9:b5:d9:ca:c4:d6:21:6a:54:3b:5a:9c:2e:55:69:7f:67: 45:08:a2:d5:65:f9:8a:31:2f:f4:80:a0:d6:f9:02:93:80:b7: 2f:30:ae:9c:07:6d:df:90:07:f2:56:ca:2d:0a:42:0c:46:eb: 02:ca:36:c5:8a:f7:1a:e0:c2:8d:4a:57:63:dc:ab:93:86:41: 3a:af:6b:93:08:cf:c8:8d:2f:0e:0b:01:06:42:2c:f2:24:ce: 28:99:8b:d7:3a:b4:a5:73:98:c2:d2:c7:0c:9e:23:e6:12:71: a5:54:df:ec:d6:81:7c:09:31:7e:56:3e:b6:33:8f:32:66:dc: 28:0e:d1:70:2c:33:9d:ec:f4:5f:f0:af:95:b5:7c:7b:62:1a: 4e:bd:0d:7c:42:d4:da:d6:c7:83:12:f4:30:e2:86:2e:3c:67: 2b:b5:92:2d:5d:5f:be:a6:25:1d:93:77:47:35:7d:55:87:df: 6d:ef:bf:9b:33:d2:6f:b0:60:46:ba:eb:99:bc:f3:bc:f8:04: 19:98:b2:67:cd:80:b7:a7:7e:8e:d0:51:d0:b6:f7:ae:59:37: 89:70:29:36:24:2a:7e:27:99:4c:19:8b:c5:86:ef:3e:1d:02: e1:d0:2c:df -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEPpwWtjcWywIxHhm2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMTExNzAxNDUxNloXDTI2MDIxOTAxNDUxNlowLzEtMCsGA1UEAxMk NGIzNmZhM2UtMDZlYy00MDVjLWFjZjctNzI1ODllOTUxMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgm3HmuHNmFySyTR0STWIllVx4Wdq0N6OUNT q4k37knTfxhfCvl2w9flbWXZz06VD9tsNILOdAt++hsYpA9MDQ/vatD73m0wGEvx jV+goJdOQKdWStmt50e7QGDiGwtIZ/DZ95Le0jOciI8tzJLnC5noXGgqU4YACHi2 RoY3Rv9J7Obm8bXX744Uyeb85GxBLQnYWykMr1gouJ6iIKYRLzZaqmLeAwRJ6qM9 eoRo1gu69e9hTbT/eMzuMJVcQvtQnhf8vPsRFV/myYUR2Ty+DwG6wi6cUVh32Yhy xq+PoyJ09uh243XWTfP12EKWjcrOdQdPrO9cA1NHJix+2g4KGQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFJiy1GMXLhGxZZVQXMwiLeNLWZWnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 YjM2ZmEzZS0wNmVjLTQwNWMtYWNmNy03MjU4OWU5NTExZDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzRiMzZmYTNlLTA2ZWMtNDA1Yy1h Y2Y3LTcyNTg5ZTk1MTFkMy80YjM2ZmEzZS0wNmVjLTQwNWMtYWNmNy03MjU4OWU5 NTExZDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAEXgIADBAGVcDgDBAKVcEAwDQQCAAIwBwMFACYH 34AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgnWMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD/Dr0tDzX5H aOeo5hLcLo6GlObZtdnKxNYhalQ7WpwuVWl/Z0UIotVl+YoxL/SAoNb5ApOAty8w rpwHbd+QB/JWyi0KQgxG6wLKNsWK9xrgwo1KV2Pcq5OGQTqva5MIz8iNLw4LAQZC LPIkziiZi9c6tKVzmMLSxwyeI+YScaVU3+zWgXwJMX5WPrYzjzJm3CgO0XAsM53s 9F/wr5W1fHtiGk69DXxC1NrWx4MS9DDihi48Zyu1ki1dX76mJR2Td0c1fVWH323v v5sz0m+wYEa665m887z4BBmYsmfNgLenfo7QUdC2965ZN4lwKTYkKn4nmUwZi8WG 7z4dAuHQLN8= -----END CERTIFICATE-----Generated at Fri Apr 26 00:40:50 2024 by rpki-client on console-fra.rpki-client.org