$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer File: 1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer (raw, json) Hash identifier: uFvNbfawV5ZaO+ZuDvln03elfmQwsE2KNAdcZLALsKA= Subject key identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285843E05DFB5550630A25B23B9BE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Nov 2023 17:02:38 +0000 Certificate not after: Sun 15 Feb 2026 17:02:38 +0000 Subordinate resources: AS: 36466 IP: 199.180.216.0/22 IP: 208.71.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:e0:5d:fb:55:50:63:0a:25:b2:3b:9b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Nov 13 17:02:38 2023 GMT Not After : Feb 15 17:02:38 2026 GMT Subject: CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2b:21:12:6e:23:ab:f7:a5:ed:e2:87:85:80: 90:b8:a8:a3:71:66:bb:47:d0:12:ec:b3:f4:83:aa: a8:4e:a6:e4:a4:73:ac:bb:5a:bc:66:ee:05:e9:cc: 30:c8:e6:c4:29:ec:1a:8c:c9:a8:1f:53:a2:ca:28: 7b:eb:ee:02:b3:1c:f6:25:26:39:ec:e9:28:65:4d: 11:8d:32:9e:d4:98:7f:18:17:28:d7:b6:a7:09:50: 80:e2:f3:15:fb:85:69:23:95:e7:53:89:3e:7b:09: 57:3d:5e:f4:9f:5b:04:0b:3c:cd:f9:d9:1d:69:cd: 47:63:62:71:bf:cb:2d:13:9e:01:a3:6f:df:b2:f3: 86:bf:57:ba:19:a7:d5:b2:1d:91:a6:54:87:ab:ce: d1:e3:b9:6f:56:6b:a2:42:45:1f:28:50:cb:54:d7: a9:1c:47:f7:c7:6f:b4:88:a2:82:08:47:59:3f:98: ea:fa:7f:4a:80:b6:48:39:19:92:86:ec:91:25:4a: 61:64:5b:63:87:62:c5:6b:58:66:06:55:fe:9c:10: be:f9:a2:e8:71:28:80:dd:d5:10:52:05:47:9c:72: 05:c0:7e:25:ac:2b:1d:73:85:00:b1:90:7f:f2:ea: 28:e5:38:89:ea:f3:78:59:1b:b3:bc:61:52:2e:97: f8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 199.180.216.0/22 208.71.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36466 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7b:89:88:d4:8a:f8:0b:33:53:17:d4:e6:f9:8a:2e:bd:23: 49:dd:ba:02:7b:18:ec:f1:73:c6:a3:cf:0b:f8:b0:32:12:16: 12:f3:da:ad:0a:d5:0e:96:71:b6:90:d4:8d:85:49:b8:69:fe: 71:4f:10:92:fd:91:3d:31:c5:1f:04:2f:65:bb:69:69:de:90: e9:7b:d7:3d:d1:9c:a0:9f:6d:44:3d:90:cf:c3:82:b6:c1:ca: b7:ae:d0:4c:d9:f3:fb:31:bb:ea:de:92:60:61:d6:31:db:40: c9:95:c6:89:f5:39:fc:8a:f8:b7:30:2d:0e:2e:39:70:02:31: 6a:cd:ae:4a:45:12:70:64:e2:f8:04:bf:84:dc:6c:62:99:08: 49:08:7e:36:22:b2:b7:29:90:bd:6e:90:e4:11:de:e7:ea:75: 36:dc:a7:88:c8:62:e6:f8:74:af:63:27:ea:69:4b:9e:bf:ab: 08:21:0d:e9:77:87:12:c7:dd:b5:08:d6:7c:4d:65:3f:dd:26: c0:2d:08:59:c2:2b:b4:fb:f8:4d:35:0c:65:f8:0a:e4:95:4a: 93:bd:05:98:53:e7:aa:b8:61:18:d5:fb:4f:67:1e:47:bc:0e: c6:b6:94:80:73:92:c9:5c:89:c4:a8:9b:d4:fb:54:04:ee:6c: b2:24:85:eb -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEPgXftVUGMKJbI7m+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTExMzE3MDIzOFoXDTI2MDIxNTE3MDIzOFowLzEtMCsGA1UEAxMk MWNmYWUzYmEtMGY1My00MjhhLTkzZDgtNjg4NWM2NGMxZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SshEm4jq/el7eKHhYCQuKijcWa7R9AS7LP0 g6qoTqbkpHOsu1q8Zu4F6cwwyObEKewajMmoH1Oiyih76+4Csxz2JSY57OkoZU0R jTKe1Jh/GBco17anCVCA4vMV+4VpI5XnU4k+ewlXPV70n1sECzzN+dkdac1HY2Jx v8stE54Bo2/fsvOGv1e6GafVsh2RplSHq87R47lvVmuiQkUfKFDLVNepHEf3x2+0 iKKCCEdZP5jq+n9KgLZIORmShuyRJUphZFtjh2LFa1hmBlX+nBC++aLocSiA3dUQ UgVHnHIFwH4lrCsdc4UAsZB/8uoo5TiJ6vN4WRuzvGFSLpf4+QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFEEeBGESltCtWtPz7J6RPOfzHSIZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x Y2ZhZTNiYS0wZjUzLTQyOGEtOTNkOC02ODg1YzY0YzFmZDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzFjZmFlM2JhLTBmNTMtNDI4YS05 M2Q4LTY4ODVjNjRjMWZkOC8xY2ZhZTNiYS0wZjUzLTQyOGEtOTNkOC02ODg1YzY0 YzFmZDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHtNgDBALQR1wwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAI5yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAF17iYjUivgLM1MX1Ob5ii69I0ndugJ7GOzxc8aj zwv4sDISFhLz2q0K1Q6WcbaQ1I2FSbhp/nFPEJL9kT0xxR8EL2W7aWnekOl71z3R nKCfbUQ9kM/DgrbByreu0EzZ8/sxu+rekmBh1jHbQMmVxon1OfyK+LcwLQ4uOXAC MWrNrkpFEnBk4vgEv4TcbGKZCEkIfjYisrcpkL1ukOQR3ufqdTbcp4jIYub4dK9j J+ppS56/qwghDel3hxLH3bUI1nxNZT/dJsAtCFnCK7T7+E01DGX4CuSVSpO9BZhT 56q4YRjV+09nHke8Dsa2lIBzkslcicSom9T7VATubLIkhes= -----END CERTIFICATE-----Generated at Fri May 10 17:25:38 2024 by rpki-client on console-fra.rpki-client.org