$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1.cer File: bffdabcb-09d5-4804-be56-5d34d53f6cf1.cer (raw, json) Hash identifier: rT7paJ5stMEzVnMSCwVKJNb25RtXQ2dOHiOMWCh4Iew= Subject key identifier: E9:BA:08:1A:5A:39:0B:9C:D1:4B:B3:27:DF:89:C5:94:8C:F1:0D:AE Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842CE8744F1F622814052547CEA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/bffdabcb-09d5-4804-be56-5d34d53f6cf1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:54:20 +0000 Certificate not after: Fri 02 May 2025 19:06:39 +0000 Subordinate resources: AS: 395277 IP: 192.101.143.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:87:44:f1:f6:22:81:40:52:54:7c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 7 14:54:20 2023 GMT Not After : May 2 19:06:39 2025 GMT Subject: CN=bffdabcb-09d5-4804-be56-5d34d53f6cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:be:2d:14:aa:1a:4a:b3:78:2a:b6:f7:6b: e1:86:8a:d8:5b:cc:3c:f0:9d:fa:88:e6:39:22:a0: 6c:77:3f:4e:57:25:f9:ac:7f:0f:ee:07:e4:95:7f: ca:f7:b5:d9:8f:3a:82:fa:fb:ab:fa:84:ee:fc:0e: f6:57:9b:d3:95:bf:58:0c:ee:f9:a6:11:7e:12:d3: 85:d3:30:8b:fe:83:95:2f:bc:d1:22:7e:88:c3:be: 88:c4:17:bc:16:36:0f:6e:42:f9:9e:fe:eb:c4:87: 40:8f:13:9c:21:85:c0:2e:06:05:85:4a:f8:f2:43: c3:7b:f8:aa:a6:6b:31:4b:7e:52:a5:54:84:6d:5c: 8b:46:6a:fb:e7:c9:50:9d:dc:67:7c:6e:fd:e3:03: 0d:b7:69:c8:d0:00:12:44:4a:25:3e:a7:45:4b:52: b9:c8:7f:cd:36:f9:98:26:08:b4:9d:85:1a:ab:82: 3d:ef:c1:4c:0b:4a:18:9a:5c:db:e0:55:84:6b:d4: 0a:d9:6e:02:23:fc:2c:b6:fa:fc:22:3b:1e:10:99: 23:b2:59:6a:c0:9c:f3:f6:77:2b:63:57:c3:05:d9: aa:5a:3a:b4:af:98:6d:0a:a0:b3:cc:16:6e:a1:bd: 42:7a:8f:09:7e:d6:31:37:de:41:7a:63:dc:e7:7a: 2f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BA:08:1A:5A:39:0B:9C:D1:4B:B3:27:DF:89:C5:94:8C:F1:0D:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/bffdabcb-09d5-4804-be56-5d34d53f6cf1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.101.143.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395277 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:91:60:1d:ab:23:fc:c7:8b:db:3f:44:bc:ad:60:ec:1e:c7: 12:8c:e8:1d:4b:07:7c:e0:98:e8:20:be:c6:0e:d6:5d:09:bf: ac:9d:36:38:5a:41:d0:cd:c2:16:5b:29:a4:37:ba:3e:20:a1: 90:e2:93:bc:80:45:44:b9:f8:ec:e3:fb:b1:14:cd:bb:54:6f: 9b:27:ad:8d:09:bf:ca:5b:33:23:e7:8c:5b:18:d3:0a:57:dc: 29:b7:29:fc:26:b6:10:e3:fe:0e:3b:24:8c:c5:16:21:80:02: 76:6c:bc:70:86:e0:7a:d6:9c:05:72:ea:ae:63:86:ba:52:fb: f5:ff:36:30:ac:19:dc:cc:0f:6d:00:d4:d2:83:ef:d2:75:21: 16:fa:54:ec:ee:cb:4d:87:19:c7:74:1a:0d:43:d2:b6:78:54: bf:d4:6c:12:98:7b:27:9d:d5:76:19:31:10:c0:59:a2:c2:b8: 4b:92:a6:df:78:d6:cf:37:60:92:0c:04:7c:e1:29:5e:f9:e4: 75:49:0f:ba:0c:95:07:7f:3c:3d:38:2d:cd:3b:61:9a:21:05: f0:52:c0:41:98:e9:82:b0:02:c3:02:03:87:93:51:ae:22:72: 8b:db:3b:73:68:a5:a7:0d:31:aa:e8:a2:d3:00:5f:f3:78:a8: dd:dc:66:63 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWELOh0Tx9iKBQFJUfOowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDgwNzE0NTQyMFoXDTI1MDUwMjE5MDYzOVowLzEtMCsGA1UEAxMk YmZmZGFiY2ItMDlkNS00ODA0LWJlNTYtNWQzNGQ1M2Y2Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrq+LRSqGkqzeCq292vhhorYW8w88J36iOY5 IqBsdz9OVyX5rH8P7gfklX/K97XZjzqC+vur+oTu/A72V5vTlb9YDO75phF+EtOF 0zCL/oOVL7zRIn6Iw76IxBe8FjYPbkL5nv7rxIdAjxOcIYXALgYFhUr48kPDe/iq pmsxS35SpVSEbVyLRmr758lQndxnfG794wMNt2nI0AASREolPqdFS1K5yH/NNvmY Jgi0nYUaq4I978FMC0oYmlzb4FWEa9QK2W4CI/wstvr8IjseEJkjsllqwJzz9ncr Y1fDBdmqWjq0r5htCqCzzBZuob1Ceo8JftYxN95BemPc53ovewIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFOm6CBpaOQuc0UuzJ9+JxZSM8Q2uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i ZmZkYWJjYi0wOWQ1LTQ4MDQtYmU1Ni01ZDM0ZDUzZjZjZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2JmZmRhYmNiLTA5ZDUtNDgwNC1i ZTU2LTVkMzRkNTNmNmNmMS9iZmZkYWJjYi0wOWQ1LTQ4MDQtYmU1Ni01ZDM0ZDUz ZjZjZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAZY8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BggNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADmRYB2rI/zHi9s/RLytYOwexxKM6B1LB3zgmOggvsYO1l0J v6ydNjhaQdDNwhZbKaQ3uj4goZDik7yARUS5+Ozj+7EUzbtUb5snrY0Jv8pbMyPn jFsY0wpX3Cm3KfwmthDj/g47JIzFFiGAAnZsvHCG4HrWnAVy6q5jhrpS+/X/NjCs GdzMD20A1NKD79J1IRb6VOzuy02HGcd0Gg1D0rZ4VL/UbBKYeyed1XYZMRDAWaLC uEuSpt941s83YJIMBHzhKV755HVJD7oMlQd/PD04Lc07YZohBfBSwEGY6YKwAsMC A4eTUa4icovbO3NopacNMarootMAX/N4qN3cZmM= -----END CERTIFICATE-----Generated at Fri Mar 29 02:29:04 2024 by rpki-client on console-ams.rpki-client.org