$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer File: 876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer (raw, json) Hash identifier: i1FkWFlWnLkiG/EBKM9Jzbyw7Fae6eyct8TcMtOkoAo= Subject key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F432858465DA438A4937D9BAAA4183DE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 28 Jun 2024 23:34:04 +0000 Certificate not after: Thu 01 Oct 2026 23:34:04 +0000 Subordinate resources: AS: 11236 IP: 208.70.128.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Sep 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:5d:a4:38:a4:93:7d:9b:aa:a4:18:3d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jun 28 23:34:04 2024 GMT Not After : Oct 1 23:34:04 2026 GMT Subject: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:95:17:2d:41:3f:2c:91:aa:7e:2f:a2:73:79: 65:56:4e:6c:a2:1a:bc:97:72:c2:a3:d7:8b:ba:e4: b8:8c:10:e8:c1:ca:08:aa:10:ac:f6:22:b8:d4:e2: 23:b6:f8:c2:82:e5:e6:5a:fe:26:1a:ff:ae:30:51: 1e:6f:c4:51:eb:e4:a5:cf:0c:b0:39:90:04:90:d4: c1:6b:14:2b:18:60:b4:fc:c2:16:91:41:c3:0c:11: 50:d7:98:a4:e1:40:b4:26:a1:78:e6:00:bf:e3:3d: ad:5b:c1:c2:1a:7c:5d:1a:91:72:d2:39:02:a8:c9: 6e:e7:25:f4:a6:a0:28:28:43:47:80:da:b2:44:2e: 64:74:ad:2e:71:34:ab:ff:f8:c9:24:5b:43:a7:86: c3:18:b1:03:f6:de:73:9d:36:e0:a3:0f:fa:25:45: 86:3f:62:bc:22:e7:41:76:4a:1c:e3:1d:36:c8:f4: 6f:fe:ee:c1:44:ac:55:68:3a:67:4d:59:6a:c1:e5: 0c:a1:74:a8:cb:bc:0c:89:66:eb:bb:dc:ed:60:a0: 89:f7:b1:04:c8:e4:ec:cb:f9:e9:d2:ec:73:51:e9: b5:4d:ea:88:a3:3c:19:29:26:81:6f:7f:26:9e:c0: 73:04:f1:03:00:d8:5e:c9:47:69:4e:e8:d6:ad:3b: b7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 208.70.128.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11236 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:2b:f0:33:db:84:93:3f:c4:d3:91:83:8e:7f:d7:d9:73:8e: 69:8f:67:a9:b2:6a:a8:20:b3:a4:83:10:9e:24:98:65:1c:10: 32:09:d7:a8:a7:0f:20:49:25:0b:86:ee:15:5f:aa:2b:a5:5b: 1e:f4:3e:33:87:e6:7e:85:42:40:1e:61:0f:21:76:23:c0:3c: 42:11:db:eb:01:21:d7:4b:dc:56:e5:6b:f9:a9:9e:96:28:16: 3a:6f:80:74:17:09:ce:a3:f6:b8:71:bb:74:52:3f:8a:87:ec: 6b:38:bd:f9:20:88:f6:29:f4:e0:32:9b:b7:ce:20:df:7d:ef: f9:0a:5c:f4:97:a8:01:ff:00:5c:39:e0:ec:33:24:9a:6d:f7: bd:55:5b:d9:09:6d:9f:32:b9:02:78:c4:69:40:1c:e5:77:2b: 5a:42:b1:2c:8d:0b:70:64:45:3e:8a:41:a3:29:7b:09:d6:66: cd:d5:cb:d5:5f:2c:c6:44:d9:78:5d:5b:e3:d4:ec:9d:f1:1b: 79:02:6d:ba:14:41:e1:26:7b:4e:93:52:81:b5:90:41:a8:f0: 28:f2:07:6f:d3:7b:27:6f:66:9e:55:72:78:5f:5f:25:10:58: 7f:79:a4:0c:fc:fa:45:28:fa:70:b8:4b:99:14:d0:a9:08:d6: b2:04:22:86 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEZdpDikk32bqqQYPeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDYyODIzMzQwNFoXDTI2MTAwMTIzMzQwNFowLzEtMCsGA1UEAxMk ODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFmZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpUXLUE/LJGqfi+ic3llVk5sohq8l3LCo9eL uuS4jBDowcoIqhCs9iK41OIjtvjCguXmWv4mGv+uMFEeb8RR6+SlzwywOZAEkNTB axQrGGC0/MIWkUHDDBFQ15ik4UC0JqF45gC/4z2tW8HCGnxdGpFy0jkCqMlu5yX0 pqAoKENHgNqyRC5kdK0ucTSr//jJJFtDp4bDGLED9t5znTbgow/6JUWGP2K8IudB dkoc4x02yPRv/u7BRKxVaDpnTVlqweUMoXSoy7wMiWbru9ztYKCJ97EEyOTsy/np 0uxzUem1TeqIozwZKSaBb38mnsBzBPEDANheyUdpTujWrTu3ewIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFBNhokwIZLw5M+RIXNYw54qqmqRhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84 NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1Lzg3NmJiNWE0LTcxZTUtNDk3Zi1h NGE0LWViM2YxYThhZmQxYy84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4 YWZkMWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQRoAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC K+QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAeSvwM9uEkz/E05GDjn/X2XOOaY9nqbJqqCCzpIMQniSYZRwQ MgnXqKcPIEklC4buFV+qK6VbHvQ+M4fmfoVCQB5hDyF2I8A8QhHb6wEh10vcVuVr +ameligWOm+AdBcJzqP2uHG7dFI/iofsazi9+SCI9in04DKbt84g333v+Qpc9Jeo Af8AXDng7DMkmm33vVVb2QltnzK5AnjEaUAc5XcrWkKxLI0LcGRFPopBoyl7CdZm zdXL1V8sxkTZeF1b49TsnfEbeQJtuhRB4SZ7TpNSgbWQQajwKPIHb9N7J29mnlVy eF9fJRBYf3mkDPz6RSj6cLhLmRTQqQjWsgQihg== -----END CERTIFICATE-----Generated at Mon Sep 16 17:53:51 2024 by rpki-client on console-ams.rpki-client.org