$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24.cer File: 900920d7-dc26-412d-b92a-7af35af2cc24.cer (raw, json) Hash identifier: OPBPIMm5emFYGjOxlcdVwF+hWKweaoDZUFTDHu+4xHk= Subject key identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584578DB8086247EE4B449E86ED0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Apr 2024 00:45:20 +0000 Certificate not after: Sun 12 Jul 2026 00:45:20 +0000 Subordinate resources: AS: 36694 IP: 104.219.228.0/22 IP: 2620:11d:1000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:78:db:80:86:24:7e:e4:b4:49:e8:6e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 8 00:45:20 2024 GMT Not After : Jul 12 00:45:20 2026 GMT Subject: CN=900920d7-dc26-412d-b92a-7af35af2cc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:66:45:fb:f1:3a:a3:d2:a7:65:0f:ad:ea:f0: d5:a4:68:48:2e:b0:fb:1c:16:bd:6e:ae:23:07:c3: 40:17:0a:2e:d9:05:6b:47:8f:3a:f8:4f:eb:82:f9: 08:4f:14:8b:cc:3f:5e:77:9e:26:1d:31:ec:ca:79: 8a:ca:f2:d9:e4:72:ab:fb:bc:7a:0b:1a:df:6b:71: cc:7c:b7:6e:22:fc:7c:cb:a0:c8:7f:73:4d:45:e0: 51:6e:9a:1c:60:f2:ee:78:c8:f0:6e:a8:53:c9:7c: 64:9c:cc:8a:59:59:31:d0:93:68:ea:83:79:f9:7b: df:66:af:d6:68:ac:02:4d:a0:66:91:6e:0b:90:33: 03:d8:59:6a:e2:bb:e5:5f:1b:dc:8d:f8:14:a4:76: 14:1d:59:ae:a9:b3:ed:0c:36:a0:56:54:7d:bd:b5: f1:14:9b:6e:8e:06:52:14:cb:b7:1e:2a:88:3c:ec: 33:09:3c:ba:5f:14:d2:e1:e0:6a:1e:c3:de:c4:80: 15:af:4f:94:6e:b2:c0:dd:e8:a6:20:ae:aa:47:66: 9d:42:9b:16:a5:2b:2a:5d:b6:19:cb:39:51:ef:84: 9b:d4:d4:1c:7b:da:b5:ec:ff:39:88:44:d4:ec:e5: a7:08:13:de:74:1f:c3:18:92:34:be:b8:9c:a8:35: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:72:A6:9A:5A:9A:5E:31:05:1B:21:51:B8:3B:C7:48:89:48:D3:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/900920d7-dc26-412d-b92a-7af35af2cc24/900920d7-dc26-412d-b92a-7af35af2cc24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 104.219.228.0/22 IPv6: 2620:11d:1000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36694 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5e:f7:37:bd:95:60:45:24:3e:92:93:ad:7e:37:0f:11:2d: b2:b7:d9:e8:cf:8a:43:71:34:8a:36:7f:64:61:b5:62:1b:19: e2:ea:0e:24:c9:ab:f6:8b:1d:cc:58:1b:c9:38:6d:36:f7:75: db:60:cf:ea:40:45:28:16:e5:c8:41:3f:a0:57:3f:b7:ae:31: 43:85:71:b4:d6:36:8d:33:d5:7d:fd:72:b5:36:f6:49:5a:9f: 62:79:03:9c:96:7b:70:ac:45:93:e5:de:43:13:a5:4d:d4:55: 80:55:36:7b:a2:c9:18:5a:10:3d:4f:90:7d:36:3a:b4:e2:4a: b0:4b:c4:80:81:34:44:80:15:a1:6f:66:56:25:7d:80:db:99: a7:0a:4b:d3:33:13:fc:8d:98:8d:49:0b:9f:8a:6e:c2:f7:7d: 5c:24:ae:e0:0d:89:7e:99:34:72:41:3a:1a:d1:e5:d0:7e:a4: b0:6e:97:04:ea:7f:bd:ca:83:22:f0:3a:ec:c9:ff:09:ef:80: 95:00:f8:70:4e:00:22:0c:89:4f:5a:bb:b4:cf:c2:ff:44:01: 3f:b8:73:49:de:fb:f8:4c:27:36:47:33:f9:78:31:8a:17:38: 38:51:9d:d0:23:d6:69:32:81:ee:f8:23:5b:27:80:ff:c3:fb: 1d:f1:cf:8c -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEV424CGJH7ktEnobtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDQwODAwNDUyMFoXDTI2MDcxMjAwNDUyMFowLzEtMCsGA1UEAxMk OTAwOTIwZDctZGMyNi00MTJkLWI5MmEtN2FmMzVhZjJjYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mZF+/E6o9KnZQ+t6vDVpGhILrD7HBa9bq4j B8NAFwou2QVrR486+E/rgvkITxSLzD9ed54mHTHsynmKyvLZ5HKr+7x6Cxrfa3HM fLduIvx8y6DIf3NNReBRbpocYPLueMjwbqhTyXxknMyKWVkx0JNo6oN5+XvfZq/W aKwCTaBmkW4LkDMD2Flq4rvlXxvcjfgUpHYUHVmuqbPtDDagVlR9vbXxFJtujgZS FMu3HiqIPOwzCTy6XxTS4eBqHsPexIAVr0+UbrLA3eimIK6qR2adQpsWpSsqXbYZ yzlR74Sb1NQce9q17P85iETU7OWnCBPedB/DGJI0vricqDWiaQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFNdypppaml4xBRshUbg7x0iJSNPgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFmMmNjMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzkwMDkyMGQ3LWRjMjYtNDEyZC1i OTJhLTdhZjM1YWYyY2MyNC85MDA5MjBkNy1kYzI2LTQxMmQtYjkyYS03YWYzNWFm MmNjMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAJo2+QwDwQCAAIwCQMHBCYgAR0QADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAj1YwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQV73N72VYEUkPpKTrX43DxEt srfZ6M+KQ3E0ijZ/ZGG1YhsZ4uoOJMmr9osdzFgbyThtNvd122DP6kBFKBblyEE/ oFc/t64xQ4VxtNY2jTPVff1ytTb2SVqfYnkDnJZ7cKxFk+XeQxOlTdRVgFU2e6LJ GFoQPU+QfTY6tOJKsEvEgIE0RIAVoW9mViV9gNuZpwpL0zMT/I2YjUkLn4puwvd9 XCSu4A2Jfpk0ckE6GtHl0H6ksG6XBOp/vcqDIvA67Mn/Ce+AlQD4cE4AIgyJT1q7 tM/C/0QBP7hzSd77+EwnNkcz+Xgxihc4OFGd0CPWaTKB7vgjWyeA/8P7HfHPjA== -----END CERTIFICATE-----Generated at Tue Apr 16 01:29:21 2024 by rpki-client on console-ams.rpki-client.org