$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer File: 8e5312d0-770c-4d40-8042-53d0eadc436b.cer (raw, json) Hash identifier: GHZp4/UR0EXzmoSdD6CUeXyQBJpLGa7OXxTgs1PT0X0= Subject key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858452EF9A065F81CBB4E8075BF90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 Mar 2024 13:36:14 +0000 Certificate not after: Mon 15 Jun 2026 13:36:14 +0000 Subordinate resources: IP: 192.135.209.0/24 IP: 192.150.150.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:2e:f9:a0:65:f8:1c:bb:4e:80:75:bf:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Mar 12 13:36:14 2024 GMT Not After : Jun 15 13:36:14 2026 GMT Subject: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:dc:f2:4e:15:90:97:3f:4d:8b:90:8f:7d: 98:87:2a:cc:c1:e4:8f:a5:6e:88:dd:c4:1f:20:0b: ee:41:76:c8:61:58:2f:57:f6:cd:37:a6:a5:08:2c: 38:c3:c4:04:0b:c3:ac:36:5f:c0:3c:fe:48:b5:07: b1:a7:e0:89:d6:6b:0e:eb:4d:e3:f7:02:f6:ac:a5: 62:5a:ae:3f:3a:8b:e0:c3:4a:c3:f3:16:79:98:83: 7f:e8:5f:61:cb:50:0a:99:6b:c9:e4:c7:92:ae:3b: 67:f5:d6:cf:ee:c2:37:28:2a:23:ed:96:f9:f9:24: be:37:bc:8b:52:9a:0b:43:ef:a5:63:08:75:75:15: 63:77:23:d8:25:cd:0b:7c:ba:2e:4a:a9:41:6e:20: a0:9a:c3:06:2c:f9:58:b3:b5:cd:dd:64:75:e9:06: 56:fa:c0:a4:25:48:c5:bf:75:ab:e0:bd:7c:47:d1: a4:5c:c0:5e:da:09:7e:4c:55:3d:b9:dc:3a:4d:26: d6:92:70:02:fc:db:90:7a:8d:31:db:ef:89:15:ac: f1:91:8d:a4:9d:15:86:9e:2e:65:ce:6e:fd:37:a3: c7:5e:55:f2:64:ef:ea:7a:de:45:de:32:3e:c3:0b: 0c:98:e3:a1:29:a7:dd:d9:6a:1a:b6:4b:8f:4e:1b: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 192.135.209.0/24 192.150.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:39:26:0c:71:1f:a9:ae:4b:21:4b:4e:80:17:0a:3e:75:28: 0f:06:2d:a2:f0:b8:de:9c:b3:65:8f:9c:ba:dd:e1:35:39:3d: 5c:66:4a:a4:f4:93:d8:51:48:fb:3a:36:82:70:59:ff:29:d3: 7a:86:61:ea:e5:0e:ae:88:f7:e0:7b:48:e0:cb:87:94:51:e9: 1a:77:7b:40:2c:6c:4a:46:b5:81:5d:75:b8:52:0c:cd:cc:c3: 9e:bd:68:9c:fc:51:ba:f1:09:06:25:29:05:3d:73:31:aa:49: 6d:61:da:7e:b7:9a:7d:48:67:41:e5:91:61:cb:fe:b2:5b:82: 9f:e1:cc:d5:1e:18:25:13:be:d9:3b:c1:3e:ba:0c:56:92:72: 72:19:19:b3:da:30:7b:0c:f0:0e:c3:8c:b0:b5:f7:41:1c:a3: 47:04:81:e5:cd:55:d7:fe:b7:38:73:77:5d:9d:3c:c5:1f:28: 6c:e8:ac:e5:13:0d:cc:12:1f:eb:bb:da:90:d6:70:3c:47:da: 0e:12:c1:65:9b:eb:a2:8b:f1:40:99:b4:58:64:58:41:ca:fb: 54:28:0d:74:77:6a:1f:44:e4:60:37:ad:7a:aa:c5:12:0a:a7: 78:64:b9:cc:4c:91:d3:fa:31:da:e9:04:09:d1:8a:6f:de:ae: e2:7b:8c:4f -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEUu+aBl+By7ToB1v5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTI0MDMxMjEzMzYxNFoXDTI2MDYxNTEzMzYxNFowLzEtMCsGA1UEAxMk OGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0MzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy13c8k4VkJc/TYuQj32YhyrMweSPpW6I3cQf IAvuQXbIYVgvV/bNN6alCCw4w8QEC8OsNl/APP5ItQexp+CJ1msO603j9wL2rKVi Wq4/Oovgw0rD8xZ5mIN/6F9hy1AKmWvJ5MeSrjtn9dbP7sI3KCoj7Zb5+SS+N7yL UpoLQ++lYwh1dRVjdyPYJc0LfLouSqlBbiCgmsMGLPlYs7XN3WR16QZW+sCkJUjF v3Wr4L18R9GkXMBe2gl+TFU9udw6TSbWknAC/NuQeo0x2++JFazxkY2knRWGni5l zm79N6PHXlXyZO/qet5F3jI+wwsMmOOhKafd2WoatkuPThv/zwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFD92ib0MF/djw1MY0om1Ckc31okOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84 ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhlNTMxMmQwLTc3MGMtNGQ0MC04 MDQyLTUzZDBlYWRjNDM2Yi84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFk YzQzNmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAh9EDBADAlpYwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAzkmDHEfqa5L IUtOgBcKPnUoDwYtovC43pyzZY+cut3hNTk9XGZKpPST2FFI+zo2gnBZ/ynTeoZh 6uUOroj34HtI4MuHlFHpGnd7QCxsSka1gV11uFIMzczDnr1onPxRuvEJBiUpBT1z MapJbWHafreafUhnQeWRYcv+sluCn+HM1R4YJRO+2TvBProMVpJychkZs9owewzw DsOMsLX3QRyjRwSB5c1V1/63OHN3XZ08xR8obOis5RMNzBIf67vakNZwPEfaDhLB ZZvroovxQJm0WGRYQcr7VCgNdHdqH0TkYDeteqrFEgqneGS5zEyR0/ox2ukECdGK b96u4nuMTw== -----END CERTIFICATE-----Generated at Thu May 2 03:28:40 2024 by rpki-client on console-ams.rpki-client.org