$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer File: 3abca546-ca81-48f5-bdd4-8c111ba523ea.cer (raw, json) Hash identifier: EKk6yLRLUtGGjppiabhUAIAFJIiECZEg9gv118EWhNI= Subject key identifier: A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285846E3C878F72B3D693A0B9F5A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 Aug 2024 00:45:26 +0000 Certificate not after: Thu 19 Nov 2026 01:45:26 +0000 Subordinate resources: AS: 4595 IP: 152.160.0.0/16 IP: 199.181.158.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:e3:c8:78:f7:2b:3d:69:3a:0b:9f:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Aug 16 00:45:26 2024 GMT Not After : Nov 19 01:45:26 2026 GMT Subject: CN=3abca546-ca81-48f5-bdd4-8c111ba523ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:73:f8:5b:2b:2e:97:3f:4f:1e:e7:82:93: 29:63:12:15:77:96:0f:4e:a7:f6:cc:cf:a9:7a:fe: 8d:83:4c:d2:f6:c6:af:d1:5d:f0:c8:74:54:74:e8: 75:33:ea:d6:9e:fb:a8:21:96:74:d4:1d:74:fa:04: 84:af:97:2b:7a:4c:51:a9:66:ae:69:af:2e:ff:0a: 1a:26:24:8f:e3:4e:ce:75:21:87:53:3b:13:35:15: d8:88:54:99:47:1d:20:84:f2:53:f5:e6:f2:ef:69: 62:14:b2:dd:6a:47:71:fe:47:e9:a7:03:49:e3:05: ab:1a:83:39:f4:7b:c0:80:99:5c:2b:89:c5:dc:72: 4d:83:8d:8c:75:b8:d4:59:83:97:ff:b6:cb:3d:58: 1e:e0:a9:af:1a:8b:76:26:78:c7:76:34:c1:dd:21: 97:fd:ce:34:0b:27:12:cd:6b:de:03:66:c8:99:1d: 06:b8:fc:9f:27:36:52:98:95:43:fd:3e:cb:89:46: 90:ec:3a:aa:0f:31:d2:0d:a2:e7:76:e9:21:b5:26: c4:81:f4:d8:d6:6a:98:c8:0f:5b:60:5b:c8:73:b4: fd:c7:b2:55:a4:91:45:25:6f:fe:42:8b:20:7b:98: 65:c9:e5:68:c5:f9:6a:8b:c1:13:2c:7f:af:2e:78: 05:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 152.160.0.0/16 199.181.158.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4595 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:fe:64:64:8e:1b:a7:ae:83:80:ad:e4:92:51:7c:6f:df:87: f7:2c:ed:35:35:2a:17:27:71:5d:c4:99:06:48:46:51:1e:40: c7:9a:9a:26:41:c5:08:10:0f:60:fd:e0:18:b3:87:81:43:8f: ed:a0:aa:c9:c1:82:49:26:f2:9b:5d:2b:8e:5e:ed:12:4f:0f: fa:33:38:f3:c2:4d:00:4a:f4:80:18:98:2b:88:92:e2:57:b8: 12:6f:e4:6f:6a:f5:0f:af:c5:d8:3b:32:b8:a9:44:fc:45:5f: cc:f6:2c:0f:23:e3:87:b1:b1:66:18:15:b2:08:53:58:63:52: 23:c9:af:21:2c:0a:8a:a1:11:5e:3f:85:80:68:c8:b9:39:b1: d5:08:88:ec:62:26:80:2f:99:08:aa:56:25:e6:1d:a2:15:03: 1e:2d:13:24:5e:89:9e:0e:bb:2d:56:28:a5:73:83:f5:41:8f: 8e:57:cc:9d:f9:bb:12:5d:4a:63:7c:ad:9f:32:dd:d8:3a:d4: 35:65:b2:cb:96:88:c0:94:f1:e4:10:4b:86:5a:be:02:e5:f7: ee:84:d2:f1:af:45:b5:f6:72:d6:66:96:1b:6e:16:58:e7:20: 17:03:19:28:71:3a:b2:16:26:88:50:fc:02:f7:df:b6:65:f7: 5c:43:39:e1 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEbjyHj3Kz1pOgufWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MDgxNjAwNDUyNloXDTI2MTExOTAxNDUyNlowLzEtMCsGA1UEAxMk M2FiY2E1NDYtY2E4MS00OGY1LWJkZDQtOGMxMTFiYTUyM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvThz+FsrLpc/Tx7ngpMpYxIVd5YPTqf2zM+p ev6Ng0zS9sav0V3wyHRUdOh1M+rWnvuoIZZ01B10+gSEr5crekxRqWauaa8u/woa JiSP407OdSGHUzsTNRXYiFSZRx0ghPJT9eby72liFLLdakdx/kfppwNJ4wWrGoM5 9HvAgJlcK4nF3HJNg42MdbjUWYOX/7bLPVge4KmvGot2JnjHdjTB3SGX/c40CycS zWveA2bImR0GuPyfJzZSmJVD/T7LiUaQ7DqqDzHSDaLndukhtSbEgfTY1mqYyA9b YFvIc7T9x7JVpJFFJW/+Qosge5hlyeVoxflqi8ETLH+vLngFXwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFKGBGWPVYPV1p6kN9KIgY1Bm6cmwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8z YWJjYTU0Ni1jYTgxLTQ4ZjUtYmRkNC04YzExMWJhNTIzZWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzNhYmNhNTQ2LWNhODEtNDhmNS1i ZGQ0LThjMTExYmE1MjNlYS8zYWJjYTU0Ni1jYTgxLTQ4ZjUtYmRkNC04YzExMWJh NTIzZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCYoAMEAce1njAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgIR8zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBJ/mRkjhunroOAreSSUXxv34f3LO01NSoXJ3FdxJkG SEZRHkDHmpomQcUIEA9g/eAYs4eBQ4/toKrJwYJJJvKbXSuOXu0STw/6Mzjzwk0A SvSAGJgriJLiV7gSb+RvavUPr8XYOzK4qUT8RV/M9iwPI+OHsbFmGBWyCFNYY1Ij ya8hLAqKoRFeP4WAaMi5ObHVCIjsYiaAL5kIqlYl5h2iFQMeLRMkXomeDrstViil c4P1QY+OV8yd+bsSXUpjfK2fMt3YOtQ1ZbLLlojAlPHkEEuGWr4C5ffuhNLxr0W1 9nLWZpYbbhZY5yAXAxkocTqyFiaIUPwC99+2ZfdcQznh -----END CERTIFICATE-----Generated at Thu Nov 21 16:24:05 2024 by rpki-client on console-ams.rpki-client.org