$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer File: 7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer (raw, json) Hash identifier: Q7lVBRFPG6iED4OFdAOAkV2bD3o6tpAAZK6xsVMP7yE= Subject key identifier: 0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285843CB0BE475BF816FC3F50BCAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Nov 2023 01:45:15 +0000 Certificate not after: Sun 08 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 398898 IP: 23.168.16.0/24 IP: 2602:808:1000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:cb:0b:e4:75:bf:81:6f:c3:f5:0b:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Nov 6 01:45:15 2023 GMT Not After : Feb 8 01:45:15 2026 GMT Subject: CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:31:d4:49:e9:d5:68:69:57:d7:0c:9e:2f: 3d:c1:f5:db:ee:34:6a:12:e3:a5:02:32:b4:ed:7a: eb:48:b8:c6:5c:8f:d6:d3:e7:67:85:c8:f9:9e:e8: ee:cb:90:4a:4c:15:97:52:0e:a5:04:43:5e:5b:c7: 67:30:a9:15:51:58:ea:0d:85:03:1c:51:9d:9e:0d: 5e:b6:10:be:e7:44:84:c7:55:20:46:5a:58:20:ff: 5f:3e:87:f3:2a:3d:8a:ee:fd:28:46:cc:c4:ee:a3: 94:42:8a:c9:de:40:11:ab:c1:0b:90:2b:40:19:b8: da:4e:21:34:83:ac:35:ac:27:92:1c:d5:5a:70:2f: e7:c2:98:d3:48:93:b4:2f:be:c8:ba:48:ef:44:3d: ca:31:20:24:4b:7c:ef:c7:3a:d6:2d:41:02:12:87: 69:a5:b7:8d:e6:8e:24:6e:e3:41:3e:b2:28:34:e2: 0f:27:6b:d6:bc:bf:74:d4:86:60:26:7d:76:93:2f: dd:6e:f0:a1:76:2c:f3:b0:46:3b:53:c3:23:bb:c6: ac:03:25:fa:05:f9:67:4d:d4:6f:54:46:5e:48:ad: bd:ec:76:c7:8e:e8:a0:0f:06:a4:ff:3f:e3:b1:71: 9e:4f:ba:89:ca:46:84:14:ac:bc:35:67:06:30:ce: 3a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.168.16.0/24 IPv6: 2602:808:1000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398898 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:6c:86:87:2b:10:cf:b6:c1:d2:8d:28:dc:ee:92:d2:8b:11: 11:cd:30:d0:39:d2:ff:04:a3:d3:ec:a3:c6:52:35:c0:dd:ce: 63:26:13:ad:d5:93:a7:0b:32:49:e1:a5:51:a7:00:ef:0c:14: 1a:f5:4c:8e:3b:40:52:9d:6e:1a:f5:68:94:0c:21:f0:76:97: 30:f7:f1:53:65:a4:cf:79:52:63:05:34:bb:37:20:58:66:55: cd:51:50:d9:3b:4b:ff:25:54:46:20:10:6e:63:8b:53:b4:d4: 4a:da:2b:98:e7:e1:3c:0f:ae:21:9b:eb:68:f3:75:e3:44:2f: 91:03:02:79:e5:07:e6:a1:5a:70:8c:5d:31:54:b3:cc:8b:2b: c0:61:59:0d:2d:81:35:3e:a8:b7:0c:82:c7:c8:bc:84:8d:6b: 48:f0:21:7d:35:54:31:86:99:c1:bf:22:60:22:3c:5c:94:4f: 71:14:97:ca:5a:f8:fb:17:37:40:a4:55:a3:00:32:d0:c8:4b: 2e:3d:72:62:88:82:17:7a:3e:2f:98:b4:04:65:63:4e:3d:91: 90:75:a8:86:54:60:f1:f8:ff:46:4f:96:3b:b4:d2:94:dd:a0: 34:1c:9b:de:28:66:9b:3c:6f:11:41:6c:e6:46:be:be:f2:f9: 4a:29:c3:24 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEPLC+R1v4Fvw/ULysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTIzMTEwNjAxNDUxNVoXDTI2MDIwODAxNDUxNVowLzEtMCsGA1UEAxMk N2NjOWYzYmQtNzVkOC00MWE1LWJlYzgtMmU3YWY2NWY1Njg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Yx1Enp1WhpV9cMni89wfXb7jRqEuOlAjK0 7XrrSLjGXI/W0+dnhcj5nujuy5BKTBWXUg6lBENeW8dnMKkVUVjqDYUDHFGdng1e thC+50SEx1UgRlpYIP9fPofzKj2K7v0oRszE7qOUQorJ3kARq8ELkCtAGbjaTiE0 g6w1rCeSHNVacC/nwpjTSJO0L77IukjvRD3KMSAkS3zvxzrWLUECEodppbeN5o4k buNBPrIoNOIPJ2vWvL901IZgJn12ky/dbvChdizzsEY7U8Mju8asAyX6BflnTdRv VEZeSK297HbHjuigDwak/z/jsXGeT7qJykaEFKy8NWcGMM46ywIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAsJeVjezTYvJ0zRQxdsN8suBbrQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83 Y2M5ZjNiZC03NWQ4LTQxYTUtYmVjOC0yZTdhZjY1ZjU2ODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzdjYzlmM2JkLTc1ZDgtNDFhNS1i ZWM4LTJlN2FmNjVmNTY4Ny83Y2M5ZjNiZC03NWQ4LTQxYTUtYmVjOC0yZTdhZjY1 ZjU2ODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqBAwDgQCAAIwCAMGACYCCAgQMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYWMjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC1bIaHKxDPtsHSjSjc7pLSixER zTDQOdL/BKPT7KPGUjXA3c5jJhOt1ZOnCzJJ4aVRpwDvDBQa9UyOO0BSnW4a9WiU DCHwdpcw9/FTZaTPeVJjBTS7NyBYZlXNUVDZO0v/JVRGIBBuY4tTtNRK2iuY5+E8 D64hm+to83XjRC+RAwJ55QfmoVpwjF0xVLPMiyvAYVkNLYE1Pqi3DILHyLyEjWtI 8CF9NVQxhpnBvyJgIjxclE9xFJfKWvj7FzdApFWjADLQyEsuPXJiiIIXej4vmLQE ZWNOPZGQdaiGVGDx+P9GT5Y7tNKU3aA0HJveKGabPG8RQWzmRr6+8vlKKcMk -----END CERTIFICATE-----Generated at Tue Apr 23 18:43:19 2024 by rpki-client on console-fra.rpki-client.org