$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b.cer File: a0ac972f-89d5-4709-bd00-5907e762ff2b.cer (raw, json) Hash identifier: dXcg9NgM3YZFwdUgr49ER9xZSdkBICv6v+eGC1oibuQ= Subject key identifier: 0C:0B:1B:70:0A:DD:A3:AD:88:40:A2:46:07:B6:87:0F:C2:15:A1:FA Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285846BE7D38C9282B4D6E14C15800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/a0ac972f-89d5-4709-bd00-5907e762ff2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Aug 2024 16:08:54 +0000 Certificate not after: Thu 05 Nov 2026 17:08:54 +0000 Subordinate resources: AS: 401264 IP: 23.185.152.0/24 IP: 2602:f856::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:be:7d:38:c9:28:2b:4d:6e:14:c1:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Aug 2 16:08:54 2024 GMT Not After : Nov 5 17:08:54 2026 GMT Subject: CN=a0ac972f-89d5-4709-bd00-5907e762ff2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:0c:68:3f:cc:36:f1:93:04:1d:0d:49:01: 4c:cf:24:4b:b8:8d:75:2c:97:6e:1b:40:29:32:c9: 5f:c8:d1:bc:bd:16:c3:17:78:11:e1:43:88:c7:4f: 3c:3c:e0:4f:c8:60:9c:3e:40:ad:b8:8e:84:8e:82: ee:8f:af:cc:ac:ba:1d:bf:48:92:22:af:82:1e:6b: 88:27:a1:a2:09:ca:4f:2b:8b:ef:93:8e:d1:f8:55: 74:4b:30:71:07:ab:61:b9:78:b6:12:d0:d0:00:3a: c8:1f:b0:a2:98:15:9e:19:3c:3a:20:2e:0a:d1:6a: 47:5b:bf:64:50:fc:b0:c9:84:3d:3c:c3:9b:83:8f: da:dd:a5:70:46:c8:be:11:80:7a:9c:ad:d4:c6:2a: 67:c0:5c:db:00:8c:a8:98:1e:71:35:50:e0:ca:ef: a9:ad:8b:f2:59:e7:0f:4b:5f:69:5c:ef:ec:df:59: c7:9c:39:78:17:d2:b0:ea:c2:97:0a:32:a2:28:f1: 7b:bc:f1:bc:58:4b:9a:80:75:f1:73:8b:18:3a:16: 9b:b4:ac:65:06:82:ca:b1:23:e2:09:c9:aa:ef:6f: 31:02:93:dd:37:7a:c4:ad:66:a4:3a:a9:79:da:46: b5:3b:08:d1:ee:9f:9e:15:2e:66:8d:31:87:02:2d: 3d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:1B:70:0A:DD:A3:AD:88:40:A2:46:07:B6:87:0F:C2:15:A1:FA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a0ac972f-89d5-4709-bd00-5907e762ff2b/a0ac972f-89d5-4709-bd00-5907e762ff2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.185.152.0/24 IPv6: 2602:f856::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401264 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:52:5c:1f:03:bc:41:a0:85:92:b7:66:92:9c:5e:9d:d7:cf: 5e:09:cb:84:a8:d8:69:5c:4f:21:23:65:22:6a:27:4b:b2:a7: 7e:dc:76:bc:04:14:85:e3:d2:a8:bc:ca:14:33:1d:c1:7c:17: 61:b7:f9:2d:50:d7:14:a3:a8:27:a9:3e:e0:7c:f4:e0:ff:61: 42:1c:4a:01:e8:43:47:33:97:be:9b:e8:fb:f3:69:32:27:23: a9:c4:0c:33:e0:51:99:fd:7a:33:05:49:25:f7:70:59:c1:b3: 16:3e:4c:7c:67:f3:91:ba:7e:f3:a7:51:12:3a:18:a1:68:5f: 89:d4:1d:66:03:0e:58:49:fa:cd:6b:23:0e:ab:24:b9:5e:fa: 29:11:de:98:22:ac:09:90:45:6e:a0:90:a5:47:44:07:4d:5b: 52:9f:bf:e6:9f:22:bd:5a:5e:f7:2f:a8:19:c0:88:d3:57:95: 22:d7:84:f5:2c:51:d1:1d:c9:13:87:00:4e:b4:47:6d:76:fa: 5e:3b:77:b9:c1:53:35:a4:97:c6:71:80:17:aa:4d:4a:b2:54: f5:fa:3c:37:67:94:c1:fa:ca:31:00:9b:be:6e:5f:d9:05:9b: 60:73:22:11:44:ba:e1:b9:d2:65:3a:4b:40:f7:dd:4b:45:7f: c5:00:62:64 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEa+fTjJKCtNbhTBWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDgwMjE2MDg1NFoXDTI2MTEwNTE3MDg1NFowLzEtMCsGA1UEAxMk YTBhYzk3MmYtODlkNS00NzA5LWJkMDAtNTkwN2U3NjJmZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUgMaD/MNvGTBB0NSQFMzyRLuI11LJduG0Ap MslfyNG8vRbDF3gR4UOIx088POBPyGCcPkCtuI6EjoLuj6/MrLodv0iSIq+CHmuI J6GiCcpPK4vvk47R+FV0SzBxB6thuXi2EtDQADrIH7CimBWeGTw6IC4K0WpHW79k UPywyYQ9PMObg4/a3aVwRsi+EYB6nK3UxipnwFzbAIyomB5xNVDgyu+prYvyWecP S19pXO/s31nHnDl4F9Kw6sKXCjKiKPF7vPG8WEuagHXxc4sYOhabtKxlBoLKsSPi Ccmq728xApPdN3rErWakOql52ka1OwjR7p+eFS5mjTGHAi09ZQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAwLG3AK3aOtiECiRge2hw/CFaH6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h MGFjOTcyZi04OWQ1LTQ3MDktYmQwMC01OTA3ZTc2MmZmMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2EwYWM5NzJmLTg5ZDUtNDcwOS1i ZDAwLTU5MDdlNzYyZmYyYi9hMGFjOTcyZi04OWQ1LTQ3MDktYmQwMC01OTA3ZTc2 MmZmMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXuZgwDgQCAAIwCAMGACYC+FYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYfcDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDUlwfA7xBoIWSt2aSnF6d189e CcuEqNhpXE8hI2UiaidLsqd+3Ha8BBSF49KovMoUMx3BfBdht/ktUNcUo6gnqT7g fPTg/2FCHEoB6ENHM5e+m+j782kyJyOpxAwz4FGZ/XozBUkl93BZwbMWPkx8Z/OR un7zp1ESOhihaF+J1B1mAw5YSfrNayMOqyS5XvopEd6YIqwJkEVuoJClR0QHTVtS n7/mnyK9Wl73L6gZwIjTV5Ui14T1LFHRHckThwBOtEdtdvpeO3e5wVM1pJfGcYAX qk1KslT1+jw3Z5TB+soxAJu+bl/ZBZtgcyIRRLrhudJlOktA991LRX/FAGJk -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:35 2024 by rpki-client on console-ams.rpki-client.org