$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer File: e97da778-a1f6-4dad-9d0a-d3a070010373.cer (raw, json) Hash identifier: ytMsuGe1LhTAblAl9KOL1YE3uXJydwddSEFVyGFyv0w= Subject key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858459791050EBBC5FD0AFF392020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Apr 2024 00:45:20 +0000 Certificate not after: Thu 23 Jul 2026 00:45:20 +0000 Subordinate resources: AS: 21538 IP: 192.131.134.0/24 IP: 2602:fc30::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:97:91:05:0e:bb:c5:fd:0a:ff:39:20:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Apr 19 00:45:20 2024 GMT Not After : Jul 23 00:45:20 2026 GMT Subject: CN=e97da778-a1f6-4dad-9d0a-d3a070010373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:a1:80:28:5a:92:ad:27:17:3d:50:45:9c: e4:7f:b6:63:cb:72:59:74:05:cb:1a:f7:31:a1:09: da:77:2d:3c:96:71:86:f8:0b:92:3f:58:4f:90:69: b5:e8:6a:f5:5d:f3:4e:16:23:72:90:79:1d:9a:c3: fa:dc:e8:7d:41:6d:d1:40:5e:f1:0a:a9:91:d5:48: ff:5d:a1:d7:02:e5:64:ab:c8:d2:38:a4:22:aa:c6: ea:bd:b3:df:a9:c2:ed:0c:ab:0c:4f:90:09:3a:4c: b0:28:3d:97:e1:98:85:a7:b9:52:09:4d:6d:c7:c7: e4:3f:47:61:47:49:dc:95:7c:6c:6d:e2:77:c7:be: fb:e4:63:aa:b2:26:d0:43:2f:23:63:26:cc:1a:c5: 77:b4:62:3b:61:fb:fd:bc:70:df:cc:96:f4:3a:c3: 8a:3c:12:1d:4e:66:a9:fc:3d:63:ec:8b:72:af:03: 31:e6:11:e1:33:f2:14:9a:21:fa:07:24:16:5b:a5: 54:83:98:70:20:62:93:82:3c:dc:1f:ce:6e:34:13: 05:4d:67:f1:e9:fa:2c:0e:c9:9b:a3:8c:5a:d5:46: 52:c2:2c:37:f3:13:13:6b:50:4c:c8:8f:82:04:7e: 48:96:06:e3:b3:ba:a2:c6:a9:15:7a:2b:42:be:49: 7f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.131.134.0/24 IPv6: 2602:fc30::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21538 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:28:23:80:fe:2e:62:8b:07:8e:8a:e8:24:38:a7:44:e5:8d: 60:b7:ab:dd:48:b5:f6:76:fb:80:ba:6a:d0:fd:19:9c:5a:4b: 7f:6f:35:25:bc:b6:b3:53:0c:61:e9:84:1a:30:92:70:f6:9a: 18:ec:4a:04:b5:c9:de:9c:9e:1b:8b:d4:2c:a5:52:94:c2:05: 1b:9b:df:cf:f6:30:92:f4:24:23:7b:be:c2:3e:5f:2c:a0:25: e1:ad:6b:08:ae:88:c9:b6:b5:67:1c:22:24:7e:cb:81:af:e9: e0:37:fc:ad:b7:0e:49:e2:4e:61:45:d2:4e:63:c4:f0:cd:b2: 94:fd:28:d3:29:56:fd:fb:fc:d2:cc:3e:aa:32:c0:50:76:bb: c7:ca:01:bb:5c:bc:b6:9f:41:24:bf:bd:6c:69:13:e3:e6:1d: dd:51:7b:ab:29:3f:88:1b:f1:7c:a7:ca:24:3a:2e:42:85:c6: 61:37:24:24:ea:b7:3a:a4:fa:68:99:9c:89:01:b1:bc:06:7c: 64:d2:e4:5c:9e:5f:de:2c:6e:59:c7:28:53:88:48:c6:53:0d: 7d:97:d1:c2:53:9a:35:5e:88:3d:98:1a:98:a7:67:27:9d:e1: 8c:b0:ef:c0:d9:37:f0:d5:11:52:2a:bb:bb:77:78:da:ef:cb: 5d:be:73:a4 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEWXkQUOu8X9Cv85ICAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDQxOTAwNDUyMFoXDTI2MDcyMzAwNDUyMFowLzEtMCsGA1UEAxMk ZTk3ZGE3NzgtYTFmNi00ZGFkLTlkMGEtZDNhMDcwMDEwMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfGhgChakq0nFz1QRZzkf7Zjy3JZdAXLGvcx oQnady08lnGG+AuSP1hPkGm16Gr1XfNOFiNykHkdmsP63Oh9QW3RQF7xCqmR1Uj/ XaHXAuVkq8jSOKQiqsbqvbPfqcLtDKsMT5AJOkywKD2X4ZiFp7lSCU1tx8fkP0dh R0nclXxsbeJ3x7775GOqsibQQy8jYybMGsV3tGI7Yfv9vHDfzJb0OsOKPBIdTmap /D1j7ItyrwMx5hHhM/IUmiH6ByQWW6VUg5hwIGKTgjzcH85uNBMFTWfx6fosDsmb o4xa1UZSwiw38xMTa1BMyI+CBH5Ilgbjs7qixqkVeitCvkl/awIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDLgtqaQaUIhIEC9SpDlkuCPHnuqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l OTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAwMTAzNzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2U5N2RhNzc4LWExZjYtNGRhZC05 ZDBhLWQzYTA3MDAxMDM3My9lOTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAw MTAzNzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADAg4YwDgQCAAIwCAMGBCYC/DAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlQiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC4oI4D+LmKLB46K6CQ4p0TljWC3 q91ItfZ2+4C6atD9GZxaS39vNSW8trNTDGHphBowknD2mhjsSgS1yd6cnhuL1Cyl UpTCBRub38/2MJL0JCN7vsI+XyygJeGtawiuiMm2tWccIiR+y4Gv6eA3/K23Dkni TmFF0k5jxPDNspT9KNMpVv37/NLMPqoywFB2u8fKAbtcvLafQSS/vWxpE+PmHd1R e6spP4gb8XynyiQ6LkKFxmE3JCTqtzqk+miZnIkBsbwGfGTS5FyeX94sblnHKFOI SMZTDX2X0cJTmjVeiD2YGpinZyed4Yyw78DZN/DVEVIqu7t3eNrvy12+c6Q= -----END CERTIFICATE-----Generated at Thu Apr 25 02:11:46 2024 by rpki-client on console-ams.rpki-client.org