$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer File: b9ea3438-4142-4de2-a912-7b081a51b42d.cer (raw, json) Hash identifier: j0EraY21bKfZXKXEp1hsjSelmPX9CgCLCoxd6Cwxc1U= Subject key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584796744240F4F0D8EFB6647100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Oct 2024 00:45:27 +0000 Certificate not after: Fri 22 Jan 2027 01:45:27 +0000 Subordinate resources: IP: 74.116.104.0/21 IP: 198.17.50.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:96:74:42:40:f4:f0:d8:ef:b6:64:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 19 00:45:27 2024 GMT Not After : Jan 22 01:45:27 2027 GMT Subject: CN=b9ea3438-4142-4de2-a912-7b081a51b42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:75:55:95:19:2f:25:ac:07:db:f0:a2:27: aa:ff:59:a1:f4:dd:29:95:12:13:f9:f9:a8:25:35: 7a:44:b8:79:7b:50:38:62:f1:40:5a:d3:e4:f3:f4: 42:27:38:35:fc:1c:eb:92:8e:4c:16:a5:4f:7a:3c: 6d:a3:4d:16:37:23:2b:52:e9:fa:49:14:2c:8b:67: 95:48:77:4b:df:ad:04:68:30:0e:50:d0:c7:85:71: e9:64:9b:02:ec:0c:40:d3:da:86:3b:35:be:b2:28: 91:c7:40:94:77:62:dc:14:42:c0:74:4b:83:c1:bf: c6:c6:0a:dd:05:72:61:12:c8:a7:43:07:23:24:85: a0:71:cd:1f:53:33:ce:64:f0:31:7f:7a:28:70:7d: 01:24:7c:17:1e:1f:f3:4d:26:f6:ac:73:91:7f:cc: 91:80:cb:73:91:e4:ef:ad:da:93:95:a0:3a:00:fa: b8:32:41:91:27:84:1c:91:06:0b:a9:28:78:1b:4e: 5b:70:11:4e:71:c6:b1:ec:48:d8:13:d5:fc:20:cb: f5:df:c2:e8:c5:28:36:37:6e:34:e4:87:1d:73:3e: 9c:f6:66:ff:57:4c:b9:3e:44:ba:a5:d3:ca:6c:49: 64:8f:d4:e9:0f:ea:c2:a0:53:fc:eb:61:0f:02:27: 51:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.116.104.0/21 198.17.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e2:e4:c6:96:cb:e4:6a:ee:71:9d:b7:02:3e:d7:ce:18:af: 0e:09:ea:38:a5:40:42:b9:7a:7c:76:a1:81:fa:57:7c:b1:63: 33:9c:4c:13:93:b7:3b:43:c2:17:43:b8:e1:f5:83:c7:35:cd: c8:b1:74:93:2e:cf:f8:34:75:67:8e:8b:3a:80:e0:12:5d:58: 8c:a3:93:d9:f5:e7:18:ef:aa:33:a2:a2:e1:5c:e0:78:ce:81: 23:6c:15:78:fc:91:2a:51:f6:05:76:03:36:4b:66:00:d3:00: 09:85:3a:f5:c2:f0:0d:44:37:54:b9:db:8a:e6:dd:15:19:75: 08:3f:35:57:8c:75:8f:97:2b:27:b6:f4:f3:9f:d2:31:89:46: ee:2f:f2:d5:40:a9:cb:d7:99:37:aa:95:12:8e:60:85:1a:c4: 06:6c:50:b2:0e:a4:d1:95:c6:4e:93:8c:bf:c3:24:fc:d9:a2: 98:1e:49:da:99:9a:9c:b0:43:4d:cd:a3:de:0e:1c:b2:77:8d: 81:0c:2f:17:17:ed:d4:f9:36:a5:f1:32:59:b7:65:39:4c:cc: 17:4b:85:e0:5e:e2:67:92:50:74:bb:4d:05:6b:20:06:39:f3: 89:65:08:5e:b2:bc:5d:a7:9b:d6:fb:d7:8c:c7:e7:24:b3:5b: a6:97:12:70 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEeWdEJA9PDY77ZkcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTAxOTAwNDUyN1oXDTI3MDEyMjAxNDUyN1owLzEtMCsGA1UEAxMk YjllYTM0MzgtNDE0Mi00ZGUyLWE5MTItN2IwODFhNTFiNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w51VZUZLyWsB9vwoieq/1mh9N0plRIT+fmo JTV6RLh5e1A4YvFAWtPk8/RCJzg1/Bzrko5MFqVPejxto00WNyMrUun6SRQsi2eV SHdL360EaDAOUNDHhXHpZJsC7AxA09qGOzW+siiRx0CUd2LcFELAdEuDwb/Gxgrd BXJhEsinQwcjJIWgcc0fUzPOZPAxf3oocH0BJHwXHh/zTSb2rHORf8yRgMtzkeTv rdqTlaA6APq4MkGRJ4QckQYLqSh4G05bcBFOccax7EjYE9X8IMv138LoxSg2N240 5Icdcz6c9mb/V0y5PkS6pdPKbElkj9TpD+rCoFP862EPAidRiQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFCQ5Yl6Idnj2c5gRreRIFm05Nq9tMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i OWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1MWI0MmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I5ZWEzNDM4LTQxNDItNGRlMi1h OTEyLTdiMDgxYTUxYjQyZC9iOWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1 MWI0MmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANKdGgDBAHGETIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQuLkxpbL5Gru cZ23Aj7XzhivDgnqOKVAQrl6fHahgfpXfLFjM5xME5O3O0PCF0O44fWDxzXNyLF0 ky7P+DR1Z46LOoDgEl1YjKOT2fXnGO+qM6Ki4VzgeM6BI2wVePyRKlH2BXYDNktm ANMACYU69cLwDUQ3VLnbiubdFRl1CD81V4x1j5crJ7b085/SMYlG7i/y1UCpy9eZ N6qVEo5ghRrEBmxQsg6k0ZXGTpOMv8Mk/NmimB5J2pmanLBDTc2j3g4csneNgQwv Fxft1Pk2pfEyWbdlOUzMF0uF4F7iZ5JQdLtNBWsgBjnziWUIXrK8Xaeb1vvXjMfn JLNbppcScA== -----END CERTIFICATE-----Generated at Thu Nov 21 16:15:41 2024 by rpki-client on console-ams.rpki-client.org