$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer File: d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.cer (raw, json) Hash identifier: MH9JZGZ+gw9G3r7xtzBFUiGPunATQpi6ld/w2GDrDeM= Subject key identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285844596CC61CEFA3BBF52F842E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 Dec 2023 01:45:15 +0000 Certificate not after: Tue 31 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 395291 IP: 104.193.184.0/22 IP: 204.154.248.0/21 IP: 2620:121:5000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:59:6c:c6:1c:ef:a3:bb:f5:2f:84:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 27 01:45:15 2023 GMT Not After : Mar 31 00:45:15 2026 GMT Subject: CN=d12ff9c7-ced8-4cc2-b3d5-adf1859a808c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:a4:71:3f:e6:3d:ec:19:d8:a2:ab:be:c8: d4:f4:e6:90:e1:2d:5a:55:16:c5:66:d5:26:e9:9a: dd:fb:86:3b:98:40:92:57:bf:ab:a7:4f:e7:46:00: d1:ca:9d:b5:91:ea:2d:4b:64:58:66:e8:3c:b3:5d: 89:a0:28:5d:a5:48:0e:57:e8:35:9d:47:ad:05:2d: f9:ab:3f:28:56:3b:12:16:d7:f9:04:f8:ef:92:b6: c4:63:b1:a7:79:28:72:8a:ea:14:b9:16:5b:bf:83: 9d:23:90:97:c6:64:53:9d:88:fe:6b:49:e4:81:ad: 7c:43:9e:9e:f0:63:2a:79:ce:22:63:0b:db:b6:29: c8:4a:7f:ce:5e:aa:ff:9b:4f:6e:05:86:64:f9:c8: 91:30:fb:5c:94:39:02:fc:be:1a:6a:ab:20:d6:e3: d7:a0:6b:77:01:ef:b1:ae:44:e3:09:40:e0:6c:26: 66:48:71:ec:21:ae:5f:cb:e6:1d:b8:08:9a:a5:b4: 10:b5:42:39:e9:ab:5c:00:be:f7:b1:e5:e1:10:ac: 7e:dc:96:28:71:fc:d8:33:2c:a8:db:ed:e2:33:4b: e2:c0:27:81:82:f2:aa:98:93:aa:27:a5:38:0c:e5: 37:3e:2f:b7:65:3c:97:ad:ac:f2:cc:1f:12:22:f9: a9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CD:BF:B9:70:80:A4:AA:F3:8E:B8:58:29:11:41:07:9C:EE:FD:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c/d12ff9c7-ced8-4cc2-b3d5-adf1859a808c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 104.193.184.0/22 204.154.248.0/21 IPv6: 2620:121:5000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395291 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:0c:57:1d:ee:57:28:ff:28:04:da:09:be:14:dd:06:34:78: e0:4f:38:c1:12:ca:bd:c4:06:8c:41:2a:70:a6:60:c1:9b:0c: d9:26:7a:73:77:96:83:3a:27:de:bc:a9:ec:7c:fd:47:cc:e6: 1f:4f:b4:d1:7f:06:41:9b:e9:a5:43:45:7d:aa:e0:25:fd:84: 0d:3b:b9:c2:60:05:69:9d:b5:e1:8d:34:de:a4:76:b1:b8:9c: 57:3e:92:9c:99:3f:cf:61:4c:8c:14:ca:dc:3a:ad:03:cf:3f: ff:d8:6b:cf:fc:77:b5:51:f9:c9:64:c1:d0:a8:e6:1e:88:89: 3c:64:93:1f:1d:76:99:67:29:1a:a9:00:37:e9:aa:0e:76:15: 7c:50:62:e2:e2:22:4e:1f:6e:6a:36:e9:8e:f1:fd:b6:b9:7c: 6c:7a:72:70:f0:a5:1c:3e:5a:c8:91:e6:86:dc:d9:72:58:d6: 5b:76:bb:87:86:b1:12:a8:25:ba:ab:7f:16:68:a2:fa:3f:39: 2a:f1:1a:5c:1c:eb:26:1a:ea:52:70:0d:59:c9:46:de:33:c0: a0:5a:1a:4d:22:ca:bb:3c:97:9c:31:09:8c:83:ef:bb:fb:76: 79:d0:7a:3c:63:d7:ff:55:1d:d3:91:37:f8:ed:a0:a7:c4:a2: 53:b0:fd:a2 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWERZbMYc76O79S+ELgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMTIyNzAxNDUxNVoXDTI2MDMzMTAwNDUxNVowLzEtMCsGA1UEAxMk ZDEyZmY5YzctY2VkOC00Y2MyLWIzZDUtYWRmMTg1OWE4MDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhukcT/mPewZ2KKrvsjU9OaQ4S1aVRbFZtUm 6Zrd+4Y7mECSV7+rp0/nRgDRyp21keotS2RYZug8s12JoChdpUgOV+g1nUetBS35 qz8oVjsSFtf5BPjvkrbEY7GneShyiuoUuRZbv4OdI5CXxmRTnYj+a0nkga18Q56e 8GMqec4iYwvbtinISn/OXqr/m09uBYZk+ciRMPtclDkC/L4aaqsg1uPXoGt3Ae+x rkTjCUDgbCZmSHHsIa5fy+YduAiapbQQtUI56atcAL73seXhEKx+3JYocfzYMyyo 2+3iM0viwCeBgvKqmJOqJ6U4DOU3Pi+3ZTyXrazyzB8SIvmphwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFFrNv7lwgKSq8464WCkRQQec7v3XMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9k MTJmZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYxODU5YTgwOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2QxMmZmOWM3LWNlZDgtNGNjMi1i M2Q1LWFkZjE4NTlhODA4Yy9kMTJmZjljNy1jZWQ4LTRjYzItYjNkNS1hZGYxODU5 YTgwOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAJowbgDBAPMmvgwDgQCAAIwCAMGACYgASFQMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYIGzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYDFcd7lco/ygE2gm+ FN0GNHjgTzjBEsq9xAaMQSpwpmDBmwzZJnpzd5aDOifevKnsfP1HzOYfT7TRfwZB m+mlQ0V9quAl/YQNO7nCYAVpnbXhjTTepHaxuJxXPpKcmT/PYUyMFMrcOq0Dzz// 2GvP/He1UfnJZMHQqOYeiIk8ZJMfHXaZZykaqQA36aoOdhV8UGLi4iJOH25qNumO 8f22uXxsenJw8KUcPlrIkeaG3NlyWNZbdruHhrESqCW6q38WaKL6Pzkq8RpcHOsm GupScA1ZyUbeM8CgWhpNIsq7PJecMQmMg++7+3Z50Ho8Y9f/VR3TkTf47aCnxKJT sP2i -----END CERTIFICATE-----Generated at Thu Apr 25 22:41:53 2024 by rpki-client on console-fra.rpki-client.org