$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer File: e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer (raw, json) Hash identifier: RcXBbTwLW73O6YsAH13rEiaSfRwxKW80y5MJDZVM4mw= Subject key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858470ADE0D3BBB60183928827A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Aug 2024 00:45:26 +0000 Certificate not after: Thu 03 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 40888 IP: 162.247.112.0/21 IP: 168.235.224.0/20 IP: 209.133.224.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:0a:de:0d:3b:bb:60:18:39:28:82:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 30 00:45:26 2024 GMT Not After : Dec 3 01:45:26 2026 GMT Subject: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e1:df:c7:a4:81:80:2b:8f:04:4a:02:5b:cb: 8e:6b:44:dd:03:53:41:01:61:a7:9b:87:f0:6f:41: f0:a8:7f:a9:eb:4b:58:a2:15:97:fd:37:99:b8:ee: 8e:6a:f2:65:f4:1a:d1:7f:a1:4a:63:8e:21:56:c3: 7e:5d:ad:f2:8b:ad:9d:00:32:76:cc:03:45:fe:67: cb:09:81:f1:a2:ab:ba:ba:48:f0:ce:2b:36:b2:69: 20:ee:ec:71:65:83:d7:05:47:95:51:42:53:ad:4e: a9:9d:df:1c:5b:09:bf:29:68:22:ff:92:7c:a2:33: 15:23:2c:f1:95:bf:ca:e5:46:65:cf:96:e5:4d:19: f7:43:5f:a8:1b:e1:ba:9e:0a:48:78:5a:c3:64:0e: 42:20:13:f5:b8:74:aa:f6:b4:53:7c:de:63:06:9f: 8b:ea:ed:ac:1f:91:0c:c4:36:5f:a2:2c:ef:50:bc: e3:a4:50:30:2e:7b:2e:f5:9e:bd:55:13:d4:4e:0f: 96:13:b8:1b:d7:72:80:f8:37:92:38:2f:c3:73:ac: fb:83:7a:d3:4c:34:11:88:9f:20:8c:66:f4:83:a9: f0:c3:2c:08:3d:9e:c6:75:8c:b6:0d:25:7f:bd:09: 44:af:fe:54:b3:cf:2c:4e:08:fc:ea:1a:d2:eb:f0: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 162.247.112.0/21 168.235.224.0/20 209.133.224.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40888 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:cf:d4:40:6b:6f:b5:20:56:89:8e:5e:5c:f8:09:7c:b5:a2: 2f:d5:0d:5a:0a:df:48:de:a3:63:0f:0d:9d:a8:d1:54:49:0f: 1b:d9:0d:67:3d:15:31:37:b5:0d:4b:15:99:9d:19:ef:4b:23: 06:e0:b7:5b:ca:db:cf:ca:a6:4d:d6:4e:f2:be:db:a2:ca:22: b6:fe:5b:59:21:27:c3:63:9f:38:9f:12:f8:71:8f:8f:aa:f2: 7d:26:d9:f2:c9:05:db:78:51:39:fc:8f:10:27:81:bc:b2:6d: 58:1d:89:7f:1d:02:fd:3f:3b:9f:2a:81:d0:f4:5a:87:59:0c: b2:8a:74:23:7c:cb:5b:63:44:16:fa:4c:ec:b2:8c:51:98:ae: 8a:bf:fa:7b:b2:c4:f4:e7:0f:e3:69:5d:8e:f6:24:f8:92:a2: f2:76:f4:2b:4c:e1:9b:ba:a5:47:54:34:b3:4e:e3:f5:bf:da: b0:af:8a:9e:e2:d5:4a:08:f1:0e:56:00:75:7b:b0:86:d4:2c: 3c:af:d2:c9:54:42:41:88:a1:27:84:a8:e6:e1:27:2b:3a:c5: 73:b9:08:9a:82:3f:67:a2:f1:b4:cb:09:6a:a5:5e:f9:97:4a: d7:87:0e:f9:a2:6b:f7:44:47:42:a2:0c:03:13:ea:4f:46:20: 36:27:fe:28 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEcK3g07u2AYOSiCeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDgzMDAwNDUyNloXDTI2MTIwMzAxNDUyNlowLzEtMCsGA1UEAxMk ZTQwN2M4ZmQtYjgwOC00MWQxLWFmNWUtYTg4ZDJkZDU1NmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+Hfx6SBgCuPBEoCW8uOa0TdA1NBAWGnm4fw b0HwqH+p60tYohWX/TeZuO6OavJl9BrRf6FKY44hVsN+Xa3yi62dADJ2zANF/mfL CYHxoqu6ukjwzis2smkg7uxxZYPXBUeVUUJTrU6pnd8cWwm/KWgi/5J8ojMVIyzx lb/K5UZlz5blTRn3Q1+oG+G6ngpIeFrDZA5CIBP1uHSq9rRTfN5jBp+L6u2sH5EM xDZfoizvULzjpFAwLnsu9Z69VRPUTg+WE7gb13KA+DeSOC/Dc6z7g3rTTDQRiJ8g jGb0g6nwwywIPZ7GdYy2DSV/vQlEr/5Us88sTgj86hrS6/DQMQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFDmIVhNRKAE1NwK6FXYmClIDmD4CMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l NDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRkNTU2ZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U0MDdjOGZkLWI4MDgtNDFkMS1h ZjVlLWE4OGQyZGQ1NTZmOS9lNDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRk NTU2ZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAOi93ADBASo6+ADBAXRheAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAJ+4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFHP1EBrb7UgVomOXlz4CXy1oi/VDVoK 30jeo2MPDZ2o0VRJDxvZDWc9FTE3tQ1LFZmdGe9LIwbgt1vK28/Kpk3WTvK+26LK Irb+W1khJ8NjnzifEvhxj4+q8n0m2fLJBdt4UTn8jxAngbyybVgdiX8dAv0/O58q gdD0WodZDLKKdCN8y1tjRBb6TOyyjFGYroq/+nuyxPTnD+NpXY72JPiSovJ29CtM 4Zu6pUdUNLNO4/W/2rCvip7i1UoI8Q5WAHV7sIbULDyv0slUQkGIoSeEqObhJys6 xXO5CJqCP2ei8bTLCWqlXvmXSteHDvmia/dER0KiDAMT6k9GIDYn/ig= -----END CERTIFICATE-----Generated at Thu Nov 21 15:30:16 2024 by rpki-client on console-fra.rpki-client.org