$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer File: 618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer (raw, json) Hash identifier: KB5/7JQwK2suaZXqVJVVfeaFZAxDNn4RPYbdFWx9ZZ8= Subject key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584432573427482C054BB7D6CE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Dec 2023 01:45:15 +0000 Certificate not after: Tue 17 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 11641 AS: 14436 AS: 20439 AS: 21894 AS: 30181 AS: 54802 AS: 393711 IP: 173.240.160.0/20 IP: 199.16.136.0/21 IP: 199.187.152.0/21 IP: 206.108.40.0/21 IP: 206.225.192.0/19 IP: 2620:103:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:32:57:34:27:48:2c:05:4b:b7:d6:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 13 01:45:15 2023 GMT Not After : Mar 17 00:45:15 2026 GMT Subject: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:21:92:74:32:1b:f7:20:ef:36:ae:bc:2f:c2: 3a:6c:ae:80:03:6e:04:b2:fb:d7:d0:da:c0:c7:f9: ff:86:41:7a:d9:21:51:44:38:92:71:69:0a:f2:62: 18:36:d0:1d:3f:fd:db:cc:27:d2:b2:5f:54:43:0c: 83:d0:4b:7b:e7:55:ba:2a:03:c3:3b:86:d5:27:f8: de:26:c7:3e:81:1e:b9:60:77:2a:7a:c6:9b:59:c4: ae:7c:38:dc:ce:c9:0e:3b:8b:1d:65:48:be:b3:35: 44:ee:30:13:56:65:1d:4e:3e:94:4b:4c:23:16:48: fd:fe:1b:3f:18:77:27:1f:b5:8a:dc:93:52:fd:fe: dd:05:ce:cc:ec:32:a5:78:a7:c9:7e:a3:87:6a:37: f4:fd:3e:6c:36:73:d4:20:cf:72:e8:a0:71:35:25: 14:5d:86:82:18:f5:c9:94:3c:e7:d6:aa:79:bb:1b: 65:3b:4e:e6:5a:af:b3:68:c8:a1:4b:b2:eb:e0:a9: be:59:27:1a:68:fd:ef:d0:c5:d4:57:69:27:40:3f: 89:bc:67:f2:dc:3c:ad:8f:c6:d4:dd:b5:82:1c:ce: 82:b7:78:05:68:f9:42:8d:ec:2b:04:de:12:30:d6: 21:6a:fe:e8:5a:13:ac:06:26:be:10:7c:fe:d2:ad: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 173.240.160.0/20 199.16.136.0/21 199.187.152.0/21 206.108.40.0/21 206.225.192.0/19 IPv6: 2620:103:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11641 14436 20439 21894 30181 54802 393711 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:27:b3:65:95:ba:fc:ff:a1:3d:c1:ef:3f:b1:97:3b:58:1a: 06:ef:ec:06:bb:21:bf:52:a7:ff:1b:75:9f:f3:c9:75:76:89: a6:a2:f8:5a:18:82:d0:e9:23:11:cd:23:84:eb:49:b7:b7:dd: c9:1b:ba:e9:5b:8e:5b:a9:25:36:a4:55:69:44:98:eb:ec:b7: 03:d5:5e:84:86:ae:fa:72:f1:c8:a5:55:1d:29:81:de:ad:ca: f4:d2:61:af:94:c8:0d:95:c4:4b:ca:94:f7:e5:92:77:47:58: fd:6c:a2:c3:95:58:63:f6:cf:40:27:e2:55:de:f2:9d:8e:90: 02:63:54:f1:b3:6d:18:f8:da:88:71:95:9a:58:6f:83:b2:13: fe:db:94:26:e0:f3:79:df:c3:12:a7:9d:bd:c7:db:df:47:e4: 74:28:90:93:85:10:50:ba:1d:3c:26:5c:57:f0:2e:f9:1d:f7: 1d:e3:e7:71:fa:3d:95:4e:fa:58:62:54:90:aa:8b:07:77:58: 37:b4:53:9a:4e:63:d5:0f:cf:d0:91:de:a5:04:14:33:e9:b2: ef:da:30:bc:ac:84:65:43:16:54:e4:5b:ca:72:37:b4:7c:e6: 02:36:9a:8f:46:a6:11:24:a0:f1:5d:bb:23:d2:a0:d3:22:34: f6:1f:6f:b6 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUAQ0Mn0MoWEQyVzQnSCwFS7fWzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMTIxMzAxNDUxNVoXDTI2MDMxNzAwNDUxNVowLzEtMCsGA1UEAxMk NjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SGSdDIb9yDvNq68L8I6bK6AA24EsvvX0NrA x/n/hkF62SFRRDiScWkK8mIYNtAdP/3bzCfSsl9UQwyD0Et751W6KgPDO4bVJ/je Jsc+gR65YHcqesabWcSufDjczskOO4sdZUi+szVE7jATVmUdTj6US0wjFkj9/hs/ GHcnH7WK3JNS/f7dBc7M7DKleKfJfqOHajf0/T5sNnPUIM9y6KBxNSUUXYaCGPXJ lDzn1qp5uxtlO07mWq+zaMihS7Lr4Km+WScaaP3v0MXUV2knQD+JvGfy3Dytj8bU 3bWCHM6Ct3gFaPlCjewrBN4SMNYhav7oWhOsBia+EHz+0q3WTQIDAQABo4IEXTCC BFkwHQYDVR0OBBYEFJc+V/UxgbFSUmfTBiul8UpIvqN1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYxOGE4YWU0LWJlNjItNGVmMC05 ZGM3LTRjNGQ4MjZhNDBkZi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2 YTQwZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCQEAgABMB4DBASt8KADBAPHEIgDBAPHu5gDBAPObCgDBAXO4cAw DwQCAAIwCQMHBCYgAQNwADAzBggrBgEFBQcBCAEB/wQkMCKgIDAeAgIteQICOGQC Ak/XAgJVhgICdeUCAwDWEgIDBgHvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFMns2WVuvz/oT3B7z+xlztY Ggbv7Aa7Ib9Sp/8bdZ/zyXV2iaai+FoYgtDpIxHNI4TrSbe33ckbuulbjlupJTak VWlEmOvstwPVXoSGrvpy8cilVR0pgd6tyvTSYa+UyA2VxEvKlPflkndHWP1sosOV WGP2z0An4lXe8p2OkAJjVPGzbRj42ohxlZpYb4OyE/7blCbg83nfwxKnnb3H299H 5HQokJOFEFC6HTwmXFfwLvkd9x3j53H6PZVO+lhiVJCqiwd3WDe0U5pOY9UPz9CR 3qUEFDPpsu/aMLyshGVDFlTkW8pyN7R85gI2mo9GphEkoPFduyPSoNMiNPYfb7Y= -----END CERTIFICATE-----Generated at Wed Apr 24 16:01:26 2024 by rpki-client on console-ams.rpki-client.org