$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935.cer File: e48d3078-1b09-45c1-aa5b-24d202c19935.cer (raw, json) Hash identifier: a2j6n6+IetUgVRW99j4wLHbkcG/FCiLK9j0c14sFJr4= Subject key identifier: AC:7C:72:81:83:F7:06:0E:B3:88:E1:E4:4F:A4:A8:31:E0:55:9A:E6 Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F432858432012D381A1D502C6FA310600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/e48d3078-1b09-45c1-aa5b-24d202c19935.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Sep 2023 19:56:00 +0000 Certificate not after: Mon 08 Dec 2025 20:56:00 +0000 Subordinate resources: AS: 35865 IP: 131.153.250.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:20:12:d3:81:a1:d5:02:c6:fa:31:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Sep 5 19:56:00 2023 GMT Not After : Dec 8 20:56:00 2025 GMT Subject: CN=e48d3078-1b09-45c1-aa5b-24d202c19935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:21:63:28:98:af:47:b4:b2:77:0a:07:77:38: b7:21:5c:98:04:8e:bd:5b:e7:05:a7:b2:60:37:4c: c0:94:e3:f4:92:d8:62:fa:fc:87:e8:1b:e4:08:53: 5d:90:7f:11:1e:33:72:db:2a:48:8b:77:d9:c6:cf: d4:34:49:f4:a6:15:15:07:29:c1:00:cd:f4:f8:9e: cc:73:84:b9:58:ae:79:7c:7a:fd:96:b0:26:9f:61: 08:fa:61:e4:b7:6f:00:29:81:f9:00:00:cf:f7:51: 71:ba:60:6e:72:bc:8a:a2:4d:90:0a:0a:0d:f3:67: c3:94:2d:74:da:ff:fd:bf:d1:c6:17:80:40:c7:b5: 12:e8:d7:c5:6f:6d:88:fc:11:0c:84:31:b3:15:47: cd:e2:84:d7:0f:c9:4e:f0:97:df:6c:8d:a1:a9:3d: b5:b4:66:97:ca:f2:88:72:c5:6e:b7:d9:42:e0:c4: d8:c0:b4:af:29:98:61:c7:79:de:65:10:ae:ef:0e: 81:00:92:9d:bf:de:5a:1b:e7:16:9b:99:03:05:d7: 06:bf:1e:16:de:27:0b:b1:8f:b4:c5:db:9c:a4:1c: 2c:12:88:8e:5f:a6:06:17:54:be:ce:eb:11:ab:e3: 84:0d:ed:92:0c:5d:60:14:82:8c:5d:23:d5:0f:6a: fe:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:7C:72:81:83:F7:06:0E:B3:88:E1:E4:4F:A4:A8:31:E0:55:9A:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e48d3078-1b09-45c1-aa5b-24d202c19935/e48d3078-1b09-45c1-aa5b-24d202c19935.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 131.153.250.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35865 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:7b:27:e6:72:00:2a:ba:31:cc:8e:64:c9:71:16:80:1c:df: 9d:cc:cf:d5:9e:00:ba:6e:8a:e7:42:b3:4f:4c:29:65:29:17: 71:a6:57:65:cc:c9:2d:66:de:ad:5c:39:6f:01:a0:90:87:ba: eb:81:4f:ad:bb:f2:8a:26:5d:87:45:fe:f8:b2:18:6c:0e:4b: e1:af:cf:59:ea:23:ab:15:08:0e:4a:ea:11:7d:99:20:cd:65: 00:db:00:5a:f9:57:b6:18:b5:30:b6:00:1f:4d:d7:ae:cc:8f: cc:65:cc:13:22:c8:c8:1d:3f:3a:df:ae:bc:d3:93:b5:d6:48: 6d:d1:94:dd:a1:13:af:f3:ca:b8:66:3f:11:b4:f3:a4:1a:c9: 9d:07:5f:0b:c7:3d:27:f0:ff:00:36:f7:af:2f:8e:24:ce:a2: 49:71:ce:18:db:ee:07:91:de:f8:66:2b:ac:d0:b8:98:59:62: f8:1c:1a:ae:c2:2a:0e:61:86:2c:73:42:ce:3b:f8:ee:20:87: ad:3f:d5:49:e1:ee:e9:f4:47:01:2b:53:d3:53:14:93:71:0b: b8:9b:21:c3:f5:bd:9c:93:8d:77:0c:79:3b:a7:22:94:c2:62: a0:9f:98:79:4b:a2:7e:63:9f:79:ca:dc:bd:ba:b7:76:b3:f4: a6:5a:94:49 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEMgEtOBodUCxvoxBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDkwNTE5NTYwMFoXDTI1MTIwODIwNTYwMFowLzEtMCsGA1UEAxMk ZTQ4ZDMwNzgtMWIwOS00NWMxLWFhNWItMjRkMjAyYzE5OTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCFjKJivR7SydwoHdzi3IVyYBI69W+cFp7Jg N0zAlOP0kthi+vyH6BvkCFNdkH8RHjNy2ypIi3fZxs/UNEn0phUVBynBAM30+J7M c4S5WK55fHr9lrAmn2EI+mHkt28AKYH5AADP91FxumBucryKok2QCgoN82fDlC10 2v/9v9HGF4BAx7US6NfFb22I/BEMhDGzFUfN4oTXD8lO8JffbI2hqT21tGaXyvKI csVut9lC4MTYwLSvKZhhx3neZRCu7w6BAJKdv95aG+cWm5kDBdcGvx4W3icLsY+0 xducpBwsEoiOX6YGF1S+zusRq+OEDe2SDF1gFIKMXSPVD2r+fwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFKx8coGD9wYOs4jh5E+kqDHgVZrmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l NDhkMzA3OC0xYjA5LTQ1YzEtYWE1Yi0yNGQyMDJjMTk5MzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2U0OGQzMDc4LTFiMDktNDVjMS1h YTViLTI0ZDIwMmMxOTkzNS9lNDhkMzA3OC0xYjA5LTQ1YzEtYWE1Yi0yNGQyMDJj MTk5MzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGDmfowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIwZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF97J+ZyACq6McyOZMlxFoAc353Mz9WeALpuiudCs09MKWUp F3GmV2XMyS1m3q1cOW8BoJCHuuuBT6278oomXYdF/viyGGwOS+Gvz1nqI6sVCA5K 6hF9mSDNZQDbAFr5V7YYtTC2AB9N167Mj8xlzBMiyMgdPzrfrrzTk7XWSG3RlN2h E6/zyrhmPxG086QayZ0HXwvHPSfw/wA2968vjiTOoklxzhjb7geR3vhmK6zQuJhZ YvgcGq7CKg5hhixzQs47+O4gh60/1Unh7un0RwErU9NTFJNxC7ibIcP1vZyTjXcM eTunIpTCYqCfmHlLon5jn3nK3L26t3az9KZalEk= -----END CERTIFICATE-----Generated at Wed May 1 22:27:14 2024 by rpki-client on console-fra.rpki-client.org