$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab.cer File: c11747a4-18b0-432b-af7c-5612a6efe7ab.cer (raw, json) Hash identifier: a8MxhxVwitgEQui8vv9k78yen5GwAOBKx9c2pRS/KCE= Subject key identifier: 3E:E7:76:10:FE:35:9E:E0:62:B7:3F:DE:62:40:8C:E2:71:45:48:85 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858474163B420137E2485D7C4A480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/c11747a4-18b0-432b-af7c-5612a6efe7ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Sep 2024 13:28:23 +0000 Certificate not after: Tue 22 Dec 2026 14:28:23 +0000 Subordinate resources: IP: 142.213.0.0/16 IP: 192.197.161.0 -- 192.197.164.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:41:63:b4:20:13:7e:24:85:d7:c4:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Sep 18 13:28:23 2024 GMT Not After : Dec 22 14:28:23 2026 GMT Subject: CN=c11747a4-18b0-432b-af7c-5612a6efe7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e1:5d:b7:95:db:51:58:ac:b5:9c:64:26:7e: b9:3c:a5:f9:fb:c8:fb:dc:86:3e:63:df:07:b9:ee: a6:d3:c9:b0:d0:fc:af:19:d6:12:c3:bd:ee:39:f1: 39:be:9e:11:7d:d7:2a:07:93:f2:ea:c2:42:4d:74: 06:2e:9e:43:6b:c3:45:ea:63:63:56:72:7c:58:12: 2a:1b:50:53:20:87:c0:44:f4:67:d8:a3:c3:bf:c6: d2:e2:3a:33:da:65:1d:33:bf:38:1c:65:9c:bc:99: 69:1f:a9:bc:3c:ea:0b:6a:e6:5f:f6:00:a8:b4:ed: 82:3d:2a:73:0b:a4:40:2c:94:e5:cb:50:51:30:7b: c5:76:8f:04:1d:5e:d1:55:de:d0:0b:86:d7:06:05: a1:ae:6b:6c:a5:10:6b:a6:f4:8e:5b:7c:55:3b:d4: 2d:85:70:9e:01:dc:6b:96:ed:2e:9e:03:67:fb:d7: 3d:7a:c5:41:0e:e6:64:67:4d:7d:53:45:2d:cf:ae: 44:60:07:16:02:fb:13:b8:54:ce:5b:be:da:97:ee: f3:6c:0f:db:aa:8a:7e:0c:01:03:c1:ed:1c:62:26: 15:bf:13:16:e5:97:53:92:0a:a4:3e:b4:a3:37:e2: d6:36:d7:44:64:de:29:5b:c1:1c:7c:2b:e7:8c:1b: 1c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E7:76:10:FE:35:9E:E0:62:B7:3F:DE:62:40:8C:E2:71:45:48:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c11747a4-18b0-432b-af7c-5612a6efe7ab/c11747a4-18b0-432b-af7c-5612a6efe7ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 142.213.0.0/16 192.197.161.0-192.197.164.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:61:a1:91:b5:04:97:72:39:27:44:4e:77:0b:e4:1f:ef:dc: 62:0b:61:9f:93:19:ba:a4:25:17:80:25:ba:69:5c:95:58:4a: 84:55:61:51:7c:7c:f6:29:7d:f5:86:1e:24:3c:ee:55:5b:01: f0:81:73:0a:7e:c3:4c:e3:8d:e9:56:31:f9:ce:15:81:4c:2c: 85:95:31:48:fa:7b:82:3f:49:aa:ac:70:a4:27:a5:ca:aa:d5: 7e:c9:ca:38:25:e7:3c:d8:23:1c:33:f5:57:16:cd:b9:ea:6a: 4c:b7:1b:45:bd:68:5b:a9:1e:a2:23:86:a6:50:7f:98:ba:f6: d6:2c:73:c6:82:0b:87:c9:d9:0e:51:b1:8e:4f:de:f0:65:d9: f0:c2:69:ff:45:29:ce:b0:b3:f7:ea:5a:ae:4e:1d:92:aa:01: e5:4d:b9:21:d3:62:9e:05:70:41:91:47:0a:f8:92:d6:a9:02: dc:aa:7b:60:a1:20:47:d7:6b:13:e9:e8:d5:6c:a7:75:58:7f: a1:0e:2c:d4:6d:6c:9d:2d:d6:03:88:8b:92:44:cf:43:7c:f1: 33:e7:f8:93:ea:1c:81:96:bb:23:81:3d:b2:9f:f0:0d:d7:98: f3:e6:43:b6:53:b2:71:8e:35:f9:80:39:33:00:09:2f:c1:a0: fe:02:b8:33 -----BEGIN CERTIFICATE----- MIIG+jCCBeKgAwIBAgIUAQ0Mn0MoWEdBY7QgE34khdfEpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MDkxODEzMjgyM1oXDTI2MTIyMjE0MjgyM1owLzEtMCsGA1UEAxMk YzExNzQ3YTQtMThiMC00MzJiLWFmN2MtNTYxMmE2ZWZlN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+Fdt5XbUVistZxkJn65PKX5+8j73IY+Y98H ue6m08mw0PyvGdYSw73uOfE5vp4RfdcqB5Py6sJCTXQGLp5Da8NF6mNjVnJ8WBIq G1BTIIfARPRn2KPDv8bS4joz2mUdM784HGWcvJlpH6m8POoLauZf9gCotO2CPSpz C6RALJTly1BRMHvFdo8EHV7RVd7QC4bXBgWhrmtspRBrpvSOW3xVO9QthXCeAdxr lu0ungNn+9c9esVBDuZkZ019U0Utz65EYAcWAvsTuFTOW77al+7zbA/bqop+DAED we0cYiYVvxMW5ZdTkgqkPrSjN+LWNtdEZN4pW8EcfCvnjBsckwIDAQABo4IEDDCC BAgwHQYDVR0OBBYEFD7ndhD+NZ7gYrc/3mJAjOJxRUiFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9j MTE3NDdhNC0xOGIwLTQzMmItYWY3Yy01NjEyYTZlZmU3YWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2MxMTc0N2E0LTE4YjAtNDMyYi1h ZjdjLTU2MTJhNmVmZTdhYi9jMTE3NDdhNC0xOGIwLTQzMmItYWY3Yy01NjEyYTZl ZmU3YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLAYIKwYBBQUH AQcBAf8EHTAbMBkEAgABMBMDAwCO1TAMAwQAwMWhAwQAwMWkMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFBh oZG1BJdyOSdETncL5B/v3GILYZ+TGbqkJReAJbppXJVYSoRVYVF8fPYpffWGHiQ8 7lVbAfCBcwp+w0zjjelWMfnOFYFMLIWVMUj6e4I/SaqscKQnpcqq1X7Jyjgl5zzY Ixwz9VcWzbnqaky3G0W9aFupHqIjhqZQf5i69tYsc8aCC4fJ2Q5RsY5P3vBl2fDC af9FKc6ws/fqWq5OHZKqAeVNuSHTYp4FcEGRRwr4ktapAtyqe2ChIEfXaxPp6NVs p3VYf6EOLNRtbJ0t1gOIi5JEz0N88TPn+JPqHIGWuyOBPbKf8A3XmPPmQ7ZTsnGO NfmAOTMACS/BoP4CuDM= -----END CERTIFICATE-----Generated at Tue Oct 22 17:23:28 2024 by rpki-client on console-fra.rpki-client.org