$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d.cer File: cadf002a-d081-4e51-89c4-f7121259516d.cer (raw, json) Hash identifier: LijPYFt9irCI7dFL4jSPkj6K+dzhQc3hLoQifzZNRz4= Subject key identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847B25F186ED43113A556514540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Oct 2024 00:45:26 +0000 Certificate not after: Mon 01 Feb 2027 01:45:26 +0000 Subordinate resources: IP: 166.66.0.0/16 IP: 192.206.29.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b2:5f:18:6e:d4:31:13:a5:56:51:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 29 00:45:26 2024 GMT Not After : Feb 1 01:45:26 2027 GMT Subject: CN=cadf002a-d081-4e51-89c4-f7121259516d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:fe:16:17:bb:56:90:4c:7f:cc:62:26:1b: 07:2e:eb:3c:69:6e:ae:73:e6:25:24:4e:23:8d:d3: 09:64:9f:f1:83:95:6d:17:10:71:a9:c5:ef:ae:b0: d4:cf:63:69:d5:b3:95:5f:83:aa:ed:9a:04:99:d1: 07:17:dc:56:56:61:ba:41:e2:83:04:11:24:71:59: 73:2f:a8:25:59:ee:7c:23:47:8e:97:56:2b:83:77: d7:38:24:15:2c:05:1e:ae:03:2f:f7:c1:c0:57:95: 62:0f:0b:af:88:21:17:ce:fc:93:06:28:1e:c6:be: eb:6a:6f:89:0e:ee:91:12:da:65:0f:43:f6:d5:a2: b5:d3:a4:d7:7e:fa:f0:df:80:d5:c8:94:c4:1c:51: 7f:99:2b:f3:67:39:08:d1:b4:53:a3:2f:3d:92:20: 38:4e:5e:c8:3b:cb:e0:33:08:2b:69:c7:05:87:94: c9:6c:0d:e1:08:35:d4:c0:fd:20:83:f6:57:a9:3d: 07:44:fa:57:3b:8a:60:be:8c:e1:8b:2b:04:1b:a9: bc:bc:a2:59:a7:61:d3:9c:c6:dc:67:de:8a:f1:31: d8:51:cb:1c:6d:1a:ae:73:2f:a6:a6:21:62:4f:e0: 26:5b:f6:b7:6e:6a:a5:f8:ce:f9:ef:7f:f0:9e:57: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:48:53:AD:AE:45:A5:A0:ED:99:48:94:6B:C0:67:D2:A3:43:1D:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cadf002a-d081-4e51-89c4-f7121259516d/cadf002a-d081-4e51-89c4-f7121259516d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 166.66.0.0/16 192.206.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:00:f0:69:16:25:bb:47:7f:ee:ae:8e:5c:89:e6:76:5b:d3: 91:f2:bf:08:9e:fd:b2:5a:7e:92:86:9b:55:2c:d7:c0:cb:c1: 61:8b:e9:13:bd:a9:c5:b6:6c:33:09:70:de:67:f4:6a:1b:39: ea:b7:df:3e:9e:89:92:ad:ef:3b:21:35:46:a1:3b:6a:fb:34: 42:7a:b6:06:e7:91:de:6a:55:14:c8:70:6f:43:a6:9a:bb:b0: 33:7a:2b:e6:a0:c6:72:2b:f2:a7:ba:8f:e0:bd:2e:18:3b:4e: e5:52:07:ea:3d:38:3d:96:24:57:17:00:21:af:22:a2:4f:3f: ba:91:0f:1b:03:96:6f:fd:76:40:41:5f:78:29:95:de:e2:81: 7f:ec:0b:43:f3:40:10:13:4c:79:b6:ed:5f:21:30:d0:48:c7: 34:8c:5d:b5:6c:fc:a9:11:b7:1a:4a:e7:43:b8:99:04:92:43: ba:18:a6:38:4a:c2:82:4c:ef:6e:5b:a4:a9:31:76:c1:84:af: 62:b1:d5:e5:35:f0:09:f2:e5:30:6a:c6:9f:94:ee:bd:39:9a: 28:91:7d:d6:64:bc:2a:80:eb:4d:cf:49:37:17:2c:9b:f0:8d: a5:2d:0b:94:4b:7e:b2:91:a3:4b:cf:e6:d7:8d:86:2d:b3:d3: d6:cf:e7:d4 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEeyXxhu1DETpVZRRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAyOTAwNDUyNloXDTI3MDIwMTAxNDUyNlowLzEtMCsGA1UEAxMk Y2FkZjAwMmEtZDA4MS00ZTUxLTg5YzQtZjcxMjEyNTk1MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhn+Fhe7VpBMf8xiJhsHLus8aW6uc+YlJE4j jdMJZJ/xg5VtFxBxqcXvrrDUz2Np1bOVX4Oq7ZoEmdEHF9xWVmG6QeKDBBEkcVlz L6glWe58I0eOl1Yrg3fXOCQVLAUergMv98HAV5ViDwuviCEXzvyTBigexr7ram+J Du6REtplD0P21aK106TXfvrw34DVyJTEHFF/mSvzZzkI0bRToy89kiA4Tl7IO8vg MwgraccFh5TJbA3hCDXUwP0gg/ZXqT0HRPpXO4pgvozhiysEG6m8vKJZp2HTnMbc Z96K8THYUcscbRqucy+mpiFiT+AmW/a3bmql+M7573/wnleYTwIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFLpIU62uRaWg7ZlIlGvAZ9KjQx2tMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j YWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1OTUxNmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NhZGYwMDJhLWQwODEtNGU1MS04 OWM0LWY3MTIxMjU5NTE2ZC9jYWRmMDAyYS1kMDgxLTRlNTEtODljNC1mNzEyMTI1 OTUxNmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCmQgMEAMDOHTBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBGAPBpFiW7R3/u ro5cieZ2W9OR8r8Inv2yWn6ShptVLNfAy8Fhi+kTvanFtmwzCXDeZ/RqGznqt98+ nomSre87ITVGoTtq+zRCerYG55HealUUyHBvQ6aau7AzeivmoMZyK/Knuo/gvS4Y O07lUgfqPTg9liRXFwAhryKiTz+6kQ8bA5Zv/XZAQV94KZXe4oF/7AtD80AQE0x5 tu1fITDQSMc0jF21bPypEbcaSudDuJkEkkO6GKY4SsKCTO9uW6SpMXbBhK9isdXl NfAJ8uUwasaflO69OZookX3WZLwqgOtNz0k3Fyyb8I2lLQuUS36ykaNLz+bXjYYt s9PWz+fU -----END CERTIFICATE-----Generated at Thu Nov 21 16:22:12 2024 by rpki-client on console-ams.rpki-client.org