$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce.cer File: 95f49444-5166-4f97-ba58-3d78336ec4ce.cer (raw, json) Hash identifier: CTWlOrVxrVA+wR0k/ivL4alYGxWUVN8I190epwfxEuY= Subject key identifier: AE:7E:BB:B6:EA:26:51:87:2D:15:43:B6:4D:5B:6B:55:EC:7C:1C:C0 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858427BEC0937E0506299C5A5A440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/95f49444-5166-4f97-ba58-3d78336ec4ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 09 Jul 2023 00:45:16 +0000 Certificate not after: Sat 11 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 16517 IP: 198.252.255.0/24 IP: 2620:97:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:7b:ec:09:37:e0:50:62:99:c5:a5:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 9 00:45:16 2023 GMT Not After : Oct 11 00:45:16 2025 GMT Subject: CN=95f49444-5166-4f97-ba58-3d78336ec4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:2e:72:03:88:1f:35:2a:9e:95:77:c8:14: 6d:db:c0:e4:b1:dd:cc:c7:62:9a:89:87:7c:74:9c: 06:c1:95:4b:57:d0:b1:49:ad:d8:82:29:ac:31:85: 19:22:16:64:0b:ab:d1:75:27:d2:27:4e:9b:a3:e3: 94:43:9f:5c:db:a1:fb:b4:ed:60:38:c6:bb:09:10: e9:77:f8:96:4d:55:4a:85:bd:97:04:d6:3d:ff:e2: fc:37:d5:e3:7d:56:5d:3f:aa:57:d6:55:6b:a9:af: 33:ee:81:0d:8c:a7:b5:45:09:f4:28:09:a6:62:b8: 84:b9:69:7e:aa:f4:91:c9:17:45:6d:52:ad:59:9d: 83:f0:29:6e:91:37:22:9f:ff:c2:a6:a3:5c:0b:e7: 58:95:3e:c1:5b:12:ec:ef:2f:68:70:d6:03:d2:83: 3a:87:c4:01:90:fb:fc:0d:2e:a5:55:23:4e:67:ab: 5d:0e:68:c6:46:17:e6:eb:b8:cb:b9:b6:81:07:99: 15:65:01:6a:d1:01:15:ff:d2:1f:dc:62:b3:31:7a: ea:1d:96:63:64:b5:c6:b8:b1:5c:b6:6c:6f:d3:4d: eb:70:62:af:4f:37:ff:55:94:8f:e8:b7:7b:f5:46: 89:40:ab:33:72:2c:99:1e:cd:ef:6e:bb:4c:96:fd: 59:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7E:BB:B6:EA:26:51:87:2D:15:43:B6:4D:5B:6B:55:EC:7C:1C:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/95f49444-5166-4f97-ba58-3d78336ec4ce/95f49444-5166-4f97-ba58-3d78336ec4ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 198.252.255.0/24 IPv6: 2620:97:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16517 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:aa:23:a2:4c:78:92:00:60:19:69:21:e4:71:22:30:24:f8: a1:3a:d4:e2:e5:fa:83:8e:34:94:a5:d6:11:af:8e:94:6e:ec: ea:0f:a2:56:2c:70:7f:d5:c0:fc:e0:d6:58:1f:66:0e:3e:31: fd:6d:f6:47:db:ab:d5:47:24:eb:b8:e8:07:7f:97:5a:27:e8: 5f:1d:68:93:05:3c:f8:3b:81:83:13:ae:70:a5:40:f8:fa:96: cf:3d:32:4d:4c:74:34:33:e0:4f:c5:8b:83:b4:a1:e4:91:a9: 24:38:8e:4a:68:ea:47:80:87:5f:de:7a:7c:26:ff:47:af:cd: 36:f7:54:dd:e2:f0:4c:68:94:6f:9c:c0:af:9f:cb:7a:04:93: 2e:41:38:f1:eb:f5:0c:83:27:f2:45:86:97:c4:36:3a:39:85: c9:e8:a4:70:8d:95:18:37:df:7b:4c:96:50:27:29:59:83:89: 52:bc:1d:92:b2:f3:66:55:9f:93:39:92:ed:c3:d5:dc:62:ca: 81:37:fe:cd:2e:1a:59:89:39:c4:66:46:4d:68:ce:a4:2a:cd: a2:13:97:a6:50:71:d1:a7:06:f7:bf:5d:58:07:6c:4b:d2:65: 0b:3f:ff:03:9f:15:69:79:98:9e:db:95:62:b2:f9:2b:53:d4: 8a:e8:d2:24 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEJ77Ak34FBimcWlpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDcwOTAwNDUxNloXDTI1MTAxMTAwNDUxNlowLzEtMCsGA1UEAxMk OTVmNDk0NDQtNTE2Ni00Zjk3LWJhNTgtM2Q3ODMzNmVjNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopEucgOIHzUqnpV3yBRt28Dksd3Mx2KaiYd8 dJwGwZVLV9CxSa3YgimsMYUZIhZkC6vRdSfSJ06bo+OUQ59c26H7tO1gOMa7CRDp d/iWTVVKhb2XBNY9/+L8N9XjfVZdP6pX1lVrqa8z7oENjKe1RQn0KAmmYriEuWl+ qvSRyRdFbVKtWZ2D8ClukTcin//CpqNcC+dYlT7BWxLs7y9ocNYD0oM6h8QBkPv8 DS6lVSNOZ6tdDmjGRhfm67jLubaBB5kVZQFq0QEV/9If3GKzMXrqHZZjZLXGuLFc tmxv003rcGKvTzf/VZSP6Ld79UaJQKszciyZHs3vbrtMlv1ZZwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFK5+u7bqJlGHLRVDtk1ba1XsfBzAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 NWY0OTQ0NC01MTY2LTRmOTctYmE1OC0zZDc4MzM2ZWM0Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzk1ZjQ5NDQ0LTUxNjYtNGY5Ny1i YTU4LTNkNzgzMzZlYzRjZS85NWY0OTQ0NC01MTY2LTRmOTctYmE1OC0zZDc4MzM2 ZWM0Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADG/P8wDwQCAAIwCQMHACYgAJdgADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJAhTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbqiOiTHiSAGAZaSHkcSIwJPih OtTi5fqDjjSUpdYRr46UbuzqD6JWLHB/1cD84NZYH2YOPjH9bfZH26vVRyTruOgH f5daJ+hfHWiTBTz4O4GDE65wpUD4+pbPPTJNTHQ0M+BPxYuDtKHkkakkOI5KaOpH gIdf3np8Jv9Hr80291Td4vBMaJRvnMCvn8t6BJMuQTjx6/UMgyfyRYaXxDY6OYXJ 6KRwjZUYN997TJZQJylZg4lSvB2SsvNmVZ+TOZLtw9XcYsqBN/7NLhpZiTnEZkZN aM6kKs2iE5emUHHRpwb3v11YB2xL0mULP/8DnxVpeZie25VisvkrU9SK6NIk -----END CERTIFICATE-----Generated at Thu Apr 25 01:27:33 2024 by rpki-client on console-fra.rpki-client.org