$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer File: efead3cb-1d38-407f-ba06-8e276b067238.cer (raw, json) Hash identifier: 1IvwXPHmVV6vVpiwed9VLwe9pW38kF730IoETJhTs7Q= Subject key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584687A7D97F272C26799998CA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 14 Jul 2024 00:45:20 +0000 Certificate not after: Sat 17 Oct 2026 00:45:20 +0000 Subordinate resources: AS: 63421 IP: 192.107.237.0/24 IP: 205.251.146.0/23 IP: 216.238.188.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:87:a7:d9:7f:27:2c:26:79:99:98:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 14 00:45:20 2024 GMT Not After : Oct 17 00:45:20 2026 GMT Subject: CN=efead3cb-1d38-407f-ba06-8e276b067238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:8c:b8:d3:1e:cb:1c:d8:d3:83:f9:98:43: e9:1a:5f:c5:e1:5e:7d:31:a3:04:72:c3:f8:1c:66: 67:a1:a5:4c:eb:fd:09:5d:cb:0d:77:dd:89:25:a0: 3c:39:e5:93:3f:b1:34:3b:44:49:c2:6b:6d:35:08: 99:67:f2:5a:44:95:4a:7b:0b:6e:73:29:39:d0:0b: ec:61:2e:1b:47:5f:ac:d5:83:30:a2:b1:08:5e:40: 03:a0:9b:02:6d:aa:63:7a:be:fb:3f:33:8e:0b:5f: 29:e5:c9:22:da:86:a5:a1:b0:bf:b6:ee:58:aa:7a: af:cc:ba:f8:8a:0a:ba:d9:e8:07:8e:78:4f:82:90: 9f:17:48:63:75:69:55:a2:6e:c0:71:04:44:b3:22: de:af:5d:82:4b:06:7e:d6:de:e9:c8:ed:6d:9f:91: 49:24:74:5f:29:a3:4d:f0:11:d2:be:61:ae:16:99: 92:89:6f:d9:a8:b0:22:03:c5:73:5c:76:4f:74:1f: 43:35:67:7a:64:7c:d2:9f:9e:43:ff:f2:68:4b:7b: ce:f4:e9:f7:5a:7d:77:8d:95:27:b7:35:bb:63:77: bc:d8:fb:b4:67:49:22:5b:c8:48:58:49:7a:78:6f: b6:ae:18:71:f2:56:36:fd:72:93:6d:ec:a1:b7:60: 52:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.107.237.0/24 205.251.146.0/23 216.238.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63421 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:60:aa:c3:73:50:44:96:da:a4:bb:9c:8e:4c:c2:56:d4:04: b0:56:cb:b4:44:f2:1b:c0:5d:23:84:3d:73:5e:60:1b:90:ca: 16:a9:30:af:9c:6e:e1:c5:0c:31:24:c4:37:24:8d:44:bf:83: 88:f7:4d:f7:98:86:8b:3d:81:c2:4c:33:32:c5:44:63:6c:8e: 72:c0:d3:9b:3d:da:21:53:b0:e2:1f:cc:fb:67:bd:b6:3b:97: cb:21:d2:f0:4d:c5:3e:97:b5:71:f0:5f:92:7c:6c:5a:de:ed: 6f:89:57:9d:12:69:b1:49:07:9d:86:0a:74:92:d3:e4:4f:f8: 38:5a:3c:79:af:ce:45:56:ae:b7:30:78:50:6a:cd:f9:f1:85: da:77:d2:36:39:d2:f5:e5:49:a8:a3:a7:58:8e:ef:93:ed:5f: c5:3f:c6:1f:ac:75:79:d3:4d:2a:da:9c:14:71:b3:4b:c9:ed: fb:b4:e7:fa:dd:93:1c:b0:5e:25:cf:0f:ba:39:39:e3:58:45: f4:42:ba:1e:ea:59:e7:3f:93:49:5b:27:eb:17:6e:bc:3e:c8: 92:1c:bc:48:5b:17:2a:5e:07:ad:1e:16:84:bc:ac:b4:a5:ef: b2:8b:74:da:e0:fe:9f:4b:46:16:38:3c:86:08:ca:bb:67:59: a1:ed:bb:94 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEaHp9l/JywmeZmYyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDcxNDAwNDUyMFoXDTI2MTAxNzAwNDUyMFowLzEtMCsGA1UEAxMk ZWZlYWQzY2ItMWQzOC00MDdmLWJhMDYtOGUyNzZiMDY3MjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIqMuNMeyxzY04P5mEPpGl/F4V59MaMEcsP4 HGZnoaVM6/0JXcsNd92JJaA8OeWTP7E0O0RJwmttNQiZZ/JaRJVKewtucyk50Avs YS4bR1+s1YMworEIXkADoJsCbapjer77PzOOC18p5cki2oalobC/tu5YqnqvzLr4 igq62egHjnhPgpCfF0hjdWlVom7AcQREsyLer12CSwZ+1t7pyO1tn5FJJHRfKaNN 8BHSvmGuFpmSiW/ZqLAiA8VzXHZPdB9DNWd6ZHzSn55D//JoS3vO9On3Wn13jZUn tzW7Y3e82Pu0Z0kiW8hIWEl6eG+2rhhx8lY2/XKTbeyht2BSXwIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFDT52o3N31+AolX19miLT0cgwQPSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l ZmVhZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3NmIwNjcyMzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2VmZWFkM2NiLTFkMzgtNDA3Zi1i YTA2LThlMjc2YjA2NzIzOC9lZmVhZDNjYi0xZDM4LTQwN2YtYmEwNi04ZTI3NmIw NjcyMzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADAa+0DBAHN+5IDBALY7rwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAPe9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAxgqsNzUESW2qS7nI5MwlbUBLBWy7RE 8hvAXSOEPXNeYBuQyhapMK+cbuHFDDEkxDckjUS/g4j3TfeYhos9gcJMMzLFRGNs jnLA05s92iFTsOIfzPtnvbY7l8sh0vBNxT6XtXHwX5J8bFre7W+JV50SabFJB52G CnSS0+RP+DhaPHmvzkVWrrcweFBqzfnxhdp30jY50vXlSaijp1iO75PtX8U/xh+s dXnTTSranBRxs0vJ7fu05/rdkxywXiXPD7o5OeNYRfRCuh7qWec/k0lbJ+sXbrw+ yJIcvEhbFypeB60eFoS8rLSl77KLdNrg/p9LRhY4PIYIyrtnWaHtu5Q= -----END CERTIFICATE-----Generated at Thu Nov 21 15:30:18 2024 by rpki-client on console-fra.rpki-client.org