$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer File: 77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer (raw, json) Hash identifier: 8zVksS/GmxHuhtx9TBDVN4i9PGDAsUXndOyME5hhsRs= Subject key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842CE8740A84203C09AE2057500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:54:18 +0000 Certificate not after: Tue 04 Nov 2025 01:45:16 +0000 Subordinate resources: AS: 33717 IP: 66.171.112.0/20 IP: 208.70.200.0/21 IP: 2606:c00::/32 IP: 2606:39c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:87:40:a8:42:03:c0:9a:e2:05:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 7 14:54:18 2023 GMT Not After : Nov 4 01:45:16 2025 GMT Subject: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:33:e4:fb:10:74:24:5e:cf:71:6f:3a:f5: d6:f7:16:80:f5:62:84:bf:37:18:83:79:35:9a:af: bd:0b:41:b0:96:a9:5f:57:68:3a:aa:71:dd:ec:fa: 17:1e:d6:85:84:01:f8:62:8d:8d:b5:65:7a:06:ba: b3:87:11:75:84:de:52:cc:4a:17:76:c7:59:65:ff: 2f:99:16:aa:d4:39:ae:1b:bc:df:f9:8d:25:95:97: 70:54:77:fa:d8:a7:16:14:28:9e:70:0d:10:18:ad: 96:84:bf:10:72:36:57:b1:50:c7:61:78:9c:77:31: 01:ee:02:e6:36:a6:2e:44:38:41:75:ed:e5:5b:ae: c6:65:70:35:0a:a1:6a:77:f5:67:70:7f:ce:e5:99: e9:95:db:c9:1a:62:3f:9e:77:2f:af:ba:fa:04:3c: 8d:65:c5:3a:14:21:dc:89:43:a0:5b:26:f9:b3:7b: 4e:37:da:7e:19:9f:11:66:52:d6:81:43:cb:83:79: 84:a7:62:c2:f8:c2:d7:ba:9c:9b:4e:be:03:84:76: 6a:31:f3:c9:6b:40:29:79:ce:ee:e6:78:a0:23:b8: fd:29:ff:1b:f0:df:83:05:88:cf:d8:a0:66:ac:4f: c4:76:ea:e9:f6:03:2b:10:14:f3:b8:2a:95:18:35: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.171.112.0/20 208.70.200.0/21 IPv6: 2606:c00::/32 2606:39c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33717 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:0c:c9:cc:f6:88:6e:2e:1d:47:c3:9e:e2:15:5f:3e:4b:e0: b0:59:b9:a9:79:d3:dd:73:3d:eb:ef:8b:d3:66:3f:c0:8f:58: c0:ef:44:8c:38:3c:6d:db:eb:99:a6:7a:1f:b2:bc:f0:fe:ae: 4f:3a:e4:bb:bd:d7:84:74:77:65:10:ac:08:f7:05:df:26:df: 96:7f:69:87:8b:66:41:ed:96:ff:c9:a8:f9:b7:4e:d0:08:6f: 44:f9:81:97:8c:cf:bd:d4:c2:24:2a:10:28:87:97:08:30:0a: 5c:65:9a:05:e0:b6:7f:38:6e:78:49:92:56:78:e5:86:68:23: c5:80:bd:4f:d1:32:2f:ae:f7:84:15:da:2b:6f:69:dd:07:1a: b6:00:f6:0a:1b:2a:07:6b:bc:04:9d:eb:83:26:5b:e8:6e:0c: 14:b4:8b:64:6e:0e:c3:81:e9:8f:36:ae:ad:4c:b2:16:a7:88: 01:c1:0a:90:57:19:af:ee:e9:b1:36:ab:e6:62:a1:04:ee:dd: d8:97:c4:cd:5a:84:0f:57:37:32:a9:6a:ed:54:e6:23:d8:ea: 9e:8f:94:69:8f:c5:98:49:5f:9d:f3:3c:04:ee:e2:7a:39:d7: 9f:92:c4:9e:4c:85:19:e0:94:cc:49:85:f8:82:c0:9d:47:a1: 4f:32:f3:5e -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWELOh0CoQgPAmuIFdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDgwNzE0NTQxOFoXDTI1MTEwNDAxNDUxNlowLzEtMCsGA1UEAxMk NzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNiZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHEz5PsQdCRez3FvOvXW9xaA9WKEvzcYg3k1 mq+9C0GwlqlfV2g6qnHd7PoXHtaFhAH4Yo2NtWV6BrqzhxF1hN5SzEoXdsdZZf8v mRaq1DmuG7zf+Y0llZdwVHf62KcWFCiecA0QGK2WhL8QcjZXsVDHYXicdzEB7gLm NqYuRDhBde3lW67GZXA1CqFqd/VncH/O5ZnpldvJGmI/nncvr7r6BDyNZcU6FCHc iUOgWyb5s3tON9p+GZ8RZlLWgUPLg3mEp2LC+MLXupybTr4DhHZqMfPJa0Apec7u 5nigI7j9Kf8b8N+DBYjP2KBmrE/Edurp9gMrEBTzuCqVGDVo0wIDAQABo4IENzCC BDMwHQYDVR0OBBYEFOKd6A2G4Iv9Is/+ZXiUIPC9ct8TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzc3YzRjNjJhLTNmNmQtNGMxYy04 YmRiLTM3MDYyNDZjYmZkNi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2 Y2JmZDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBIEAgABMAwDBARCq3ADBAPQRsgwFAQCAAIwDgMFACYGDAADBQAm BjnAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCDtTBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbDMnM9ohu Lh1Hw57iFV8+S+CwWbmpedPdcz3r74vTZj/Aj1jA70SMODxt2+uZpnofsrzw/q5P OuS7vdeEdHdlEKwI9wXfJt+Wf2mHi2ZB7Zb/yaj5t07QCG9E+YGXjM+91MIkKhAo h5cIMApcZZoF4LZ/OG54SZJWeOWGaCPFgL1P0TIvrveEFdorb2ndBxq2APYKGyoH a7wEneuDJlvobgwUtItkbg7DgemPNq6tTLIWp4gBwQqQVxmv7umxNqvmYqEE7t3Y l8TNWoQPVzcyqWrtVOYj2Oqej5Rpj8WYSV+d8zwE7uJ6OdefksSeTIUZ4JTMSYX4 gsCdR6FPMvNe -----END CERTIFICATE-----Generated at Thu Apr 25 22:41:39 2024 by rpki-client on console-fra.rpki-client.org