$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5.cer File: e8b1c892-1844-46b1-8572-70740f2673f5.cer (raw, json) Hash identifier: L7vpRQY1zwmNpf0Uwo6D0mlaHlD2L6oYqz+Sit3yccE= Subject key identifier: 68:2B:51:72:49:55:98:F9:87:14:C6:9C:BF:90:3A:DB:D5:40:A5:94 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285841E483475474FAAB0D96BE1CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/e8b1c892-1844-46b1-8572-70740f2673f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Wed 07 May 2025 19:06:39 +0000 Subordinate resources: AS: 55243 IP: 198.148.6.0/23 IP: 199.119.164.0/22 IP: 2620:26:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:47:54:74:fa:ab:0d:96:be:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 7 19:06:39 2025 GMT Subject: CN=e8b1c892-1844-46b1-8572-70740f2673f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:1c:fc:9e:86:65:ac:7f:a9:3f:60:e8:51: 8f:68:12:7e:b0:17:04:ec:c4:db:16:c7:73:57:22: 03:8f:9a:3b:3c:c6:14:f2:13:01:0b:64:99:b7:b3: fb:0b:f5:f4:21:d5:6f:28:3b:8b:2e:e7:fe:a5:93: 3b:d0:71:87:11:04:c9:15:63:31:5d:a1:51:ed:8f: 1a:0e:cd:44:a1:e7:5e:12:a3:78:21:e1:15:79:ef: 6c:dc:b9:12:1a:ef:11:79:25:be:9a:59:0f:40:11: 0c:bc:9c:7a:6a:d3:9f:12:aa:00:8b:a4:78:bb:28: 27:6a:84:70:df:ef:b7:b2:6b:a8:a2:c2:a1:6d:5e: 58:0d:b4:8c:7c:67:20:6e:7c:d4:fd:50:96:96:fe: 82:1f:8c:d1:49:9e:dd:b0:db:35:e4:f4:89:d5:f0: bc:42:c4:fd:08:07:e4:cf:e7:57:0a:dc:96:07:b9: 30:d1:28:c7:99:79:2f:f8:74:4f:4c:73:09:46:e1: d4:39:24:dc:7f:dc:6c:9f:63:6d:f4:c4:de:b1:70: 9c:66:9c:32:6c:96:95:3b:b6:56:57:63:c7:95:11: cb:ca:d2:ea:07:60:ac:84:ee:8c:86:79:b5:69:bd: 97:b9:b5:43:66:b2:ed:f2:64:08:a2:bd:96:31:7a: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2B:51:72:49:55:98:F9:87:14:C6:9C:BF:90:3A:DB:D5:40:A5:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/e8b1c892-1844-46b1-8572-70740f2673f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 198.148.6.0/23 199.119.164.0/22 IPv6: 2620:26:c000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55243 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:61:48:6e:82:54:ca:8d:83:ca:95:f1:4a:75:21:30:d3:40: 20:a8:c0:e2:34:7b:8e:e9:14:d8:76:ec:ce:be:f3:f0:ac:cc: 5e:37:15:c8:a5:12:72:e6:dd:ca:4b:61:10:02:2b:26:6f:d6: 20:10:bd:c4:84:34:06:33:f8:86:8f:bc:d0:24:ce:0f:2a:1e: 2f:85:bb:c5:f0:50:a7:7c:6b:87:bb:88:bc:98:e1:b2:99:b7: 4c:95:7e:2a:9d:d5:07:c3:5c:71:82:8b:e0:b5:9c:7d:a9:4a: 40:db:bb:c6:20:b1:1d:be:8e:89:f3:4a:e6:c0:e4:6b:f5:f7: 78:b3:4c:1b:e8:5a:8c:f2:40:ef:b7:e5:81:68:d7:bd:81:3a: d4:55:6c:50:96:de:44:5d:44:22:3e:d7:ed:bf:cb:f0:be:18: f3:a9:35:c2:26:5c:8e:fa:de:7d:bf:d9:cc:4b:81:00:a3:e3: 32:ee:72:e9:bb:57:a2:bd:a9:60:f2:fe:84:c6:41:76:2b:4a: b3:b2:60:2f:32:de:5e:5c:69:42:d7:88:8d:d1:96:aa:a7:7f: 8f:d4:86:9f:bd:57:e2:24:59:ec:16:c3:9b:a7:87:54:76:6b: 36:53:4a:6f:3e:00:a5:0e:dd:bc:e8:ac:f6:e7:af:d3:8e:f6: 65:4b:66:50 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEHkg0dUdPqrDZa+HMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUwNzE5MDYzOVowLzEtMCsGA1UEAxMk ZThiMWM4OTItMTg0NC00NmIxLTg1NzItNzA3NDBmMjY3M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp58c/J6GZax/qT9g6FGPaBJ+sBcE7MTbFsdz VyIDj5o7PMYU8hMBC2SZt7P7C/X0IdVvKDuLLuf+pZM70HGHEQTJFWMxXaFR7Y8a Ds1EoedeEqN4IeEVee9s3LkSGu8ReSW+mlkPQBEMvJx6atOfEqoAi6R4uygnaoRw 3++3smuoosKhbV5YDbSMfGcgbnzU/VCWlv6CH4zRSZ7dsNs15PSJ1fC8QsT9CAfk z+dXCtyWB7kw0SjHmXkv+HRPTHMJRuHUOSTcf9xsn2Nt9MTesXCcZpwybJaVO7ZW V2PHlRHLytLqB2CshO6Mhnm1ab2XubVDZrLt8mQIor2WMXqJ7wIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFGgrUXJJVZj5hxTGnL+QOtvVQKWUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l OGIxYzg5Mi0xODQ0LTQ2YjEtODU3Mi03MDc0MGYyNjczZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U4YjFjODkyLTE4NDQtNDZiMS04 NTcyLTcwNzQwZjI2NzNmNS9lOGIxYzg5Mi0xODQ0LTQ2YjEtODU3Mi03MDc0MGYy NjczZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAHGlAYDBALHd6QwDwQCAAIwCQMHBCYgACbAADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA18swVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXGFIboJUyo2DypXx SnUhMNNAIKjA4jR7jukU2Hbszr7z8KzMXjcVyKUScubdykthEAIrJm/WIBC9xIQ0 BjP4ho+80CTODyoeL4W7xfBQp3xrh7uIvJjhspm3TJV+Kp3VB8NccYKL4LWcfalK QNu7xiCxHb6OifNK5sDka/X3eLNMG+hajPJA77flgWjXvYE61FVsUJbeRF1EIj7X 7b/L8L4Y86k1wiZcjvrefb/ZzEuBAKPjMu5y6btXor2pYPL+hMZBditKs7JgLzLe XlxpQteIjdGWqqd/j9SGn71X4iRZ7BbDm6eHVHZrNlNKbz4ApQ7dvOis9uev0472 ZUtmUA== -----END CERTIFICATE-----Generated at Thu Apr 25 22:42:01 2024 by rpki-client on console-fra.rpki-client.org