$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer File: f240d902-7ba3-4aec-b663-471f0fabfe37.cer (raw, json) Hash identifier: fegpF9/vRGYJTrnRKjsGN+VO2BuQE+AcftVxUgJIovQ= Subject key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584766FEA22E8AF240CEC44E41A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Oct 2024 00:45:27 +0000 Certificate not after: Tue 05 Jan 2027 01:45:27 +0000 Subordinate resources: IP: 66.96.32.0/19 IP: 66.112.128.0/20 IP: 196.27.0.0/18 IP: 200.30.0.0/18 IP: 204.59.0.0/16 IP: 206.48.0.0/15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:66:fe:a2:2e:8a:f2:40:ce:c4:4e:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 2 00:45:27 2024 GMT Not After : Jan 5 01:45:27 2027 GMT Subject: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:26:a5:b7:e9:34:2f:29:86:95:d7:6e:fe: 32:1b:88:44:4e:ef:69:aa:5f:4c:e5:17:88:66:29: 4b:f0:4e:0a:91:ba:2b:4f:c6:2e:55:e8:f0:e7:d5: 9c:36:c1:8a:aa:d2:27:ae:09:74:1f:ab:ae:f9:98: f1:46:4b:e1:8a:c5:5d:e9:83:59:d9:80:05:68:91: 05:ad:04:85:8b:c3:6b:5a:84:da:4a:41:16:fa:dc: b6:34:2a:e2:8f:d0:ab:cc:bb:ed:d3:fd:e5:78:3e: 4c:94:b2:53:af:c2:b3:72:c9:ed:55:77:be:e0:05: 00:d3:f3:32:02:72:a3:3b:69:a1:4a:14:77:4e:22: e3:94:ca:28:2d:5c:fe:ba:f3:f7:cc:76:b8:ff:6f: 10:50:46:85:a4:6f:19:cd:54:37:44:ac:6f:10:e9: fd:02:6b:c8:37:7b:b5:4e:a2:0d:33:f8:7e:1d:27: 8e:5c:94:5b:f1:9f:6c:e2:ce:50:18:e2:cf:74:58: 97:24:d6:72:0c:e9:e0:c8:32:d7:7b:d3:7a:de:58: 9a:f1:7b:a7:b0:31:0b:43:5e:c3:e8:61:3e:41:7d: fe:f7:59:7e:0e:bb:b8:52:92:d9:83:c4:98:c6:48: d1:80:45:dd:59:6b:8d:ae:7a:a8:3b:31:f4:12:49: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.96.32.0/19 66.112.128.0/20 196.27.0.0/18 200.30.0.0/18 204.59.0.0/16 206.48.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e4:62:61:a3:4c:7f:a9:d1:81:2f:23:e0:02:4c:23:61:41: 38:d6:3c:09:21:b3:d3:b5:cf:a5:ab:42:51:3f:2a:87:0b:e8: d4:77:74:9a:60:7b:39:8e:47:c6:f0:a7:f6:65:ab:8d:ab:98: 97:89:bf:54:4d:86:6b:cc:8d:38:d5:20:6f:5c:42:c0:07:a5: 39:86:5c:5f:2c:ce:d8:32:39:bf:b3:48:38:ef:76:c6:bb:1e: d5:bb:ea:b1:b9:e2:bf:d6:39:84:f5:2d:d0:d0:c9:4a:1f:d4: cc:62:41:62:e2:08:70:9b:e2:55:3f:1f:0c:21:6c:f9:12:e3: 7e:ba:fb:e5:d5:78:14:f3:14:67:ba:30:b2:7e:fa:45:61:b1: 50:92:3c:9f:6d:f8:6c:90:10:3f:7c:09:ed:23:1f:57:df:e6: 13:53:63:22:23:ef:d1:b2:3e:7b:24:93:58:ec:f3:c9:e0:1e: c4:38:4a:c9:92:f3:7f:7e:c5:75:9d:ae:d0:4a:ee:b0:e1:1b: 15:64:4b:83:3d:76:4b:28:37:75:15:f2:16:80:02:ab:22:ab: 63:15:db:c9:a5:cf:f7:45:97:06:d2:c3:8e:5b:b0:73:1d:04: 95:ff:75:00:5a:1e:b2:f9:6a:fb:dc:a4:dd:9a:d2:e8:91:30: b3:bf:f6:4c -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEdm/qIuivJAzsROQaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTAwMjAwNDUyN1oXDTI3MDEwNTAxNDUyN1owLzEtMCsGA1UEAxMk ZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJmZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xUmpbfpNC8phpXXbv4yG4hETu9pql9M5ReI ZilL8E4KkborT8YuVejw59WcNsGKqtInrgl0H6uu+ZjxRkvhisVd6YNZ2YAFaJEF rQSFi8NrWoTaSkEW+ty2NCrij9CrzLvt0/3leD5MlLJTr8KzcsntVXe+4AUA0/My AnKjO2mhShR3TiLjlMooLVz+uvP3zHa4/28QUEaFpG8ZzVQ3RKxvEOn9AmvIN3u1 TqINM/h+HSeOXJRb8Z9s4s5QGOLPdFiXJNZyDOngyDLXe9N63lia8XunsDELQ17D 6GE+QX3+91l+Dru4UpLZg8SYxkjRgEXdWWuNrnqoOzH0EkmjAwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFORX1SgMCZwqfqilgLFv9rC6TPEeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m MjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2YyNDBkOTAyLTdiYTMtNGFlYy1i NjYzLTQ3MWYwZmFiZmUzNy9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZh YmZlMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMCgEAgABMCIDBAVCYCADBARCcIADBAbEGwADBAbIHgADAwDMOwMD Ac4wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEHkYmGjTH+p0YEvI+ACTCNhQTjWPAkhs9O1z6WrQlE/KocL 6NR3dJpgezmOR8bwp/Zlq42rmJeJv1RNhmvMjTjVIG9cQsAHpTmGXF8sztgyOb+z SDjvdsa7HtW76rG54r/WOYT1LdDQyUof1MxiQWLiCHCb4lU/HwwhbPkS4366++XV eBTzFGe6MLJ++kVhsVCSPJ9t+GyQED98Ce0jH1ff5hNTYyIj79GyPnskk1js88ng HsQ4SsmS839+xXWdrtBK7rDhGxVkS4M9dksoN3UV8haAAqsiq2MV28mlz/dFlwbS w45bsHMdBJX/dQBaHrL5avvcpN2a0uiRMLO/9kw= -----END CERTIFICATE-----Generated at Thu Nov 21 16:16:39 2024 by rpki-client on console-ams.rpki-client.org