$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1.cer File: 1f1cdae5-b041-4993-963d-6f855f74efa1.cer (raw, json) Hash identifier: siUmG5cL2or0pTX+tkCY9rYwlDY+d5lbvl+2nqbGj/Y= Subject key identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858444ABEBA224EC85C606DB2D780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Dec 2023 19:33:15 +0000 Certificate not after: Fri 06 Mar 2026 10:13:33 +0000 Subordinate resources: AS: 54082 IP: 23.168.104.0/24 IP: 2607:8040::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:4a:be:ba:22:4e:c8:5c:60:6d:b2:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 21 19:33:15 2023 GMT Not After : Mar 6 10:13:33 2026 GMT Subject: CN=1f1cdae5-b041-4993-963d-6f855f74efa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e0:ad:32:17:ab:9f:a8:4f:1a:1e:f1:65:7e: 6f:ce:8b:96:a3:64:81:fd:4f:e4:91:c8:74:2e:a4: 83:58:53:5c:cc:4c:2c:a2:22:5b:e5:f4:9a:06:d1: 81:28:dd:e8:69:5d:ba:41:36:f9:db:e7:2c:76:85: aa:2f:9e:07:4d:72:4f:27:cd:f6:91:0b:a1:3b:4a: 00:b1:a4:b9:68:a8:be:e6:8b:c2:13:7a:6d:22:7b: d0:19:0d:ba:b4:71:fa:32:08:ca:39:8f:b5:a6:6f: c2:56:87:0c:6b:e5:99:f8:da:88:7c:91:f8:e1:bf: b2:28:20:38:66:30:64:fa:ea:fe:95:02:02:ba:af: 15:3c:74:2c:00:51:05:99:76:62:b5:7c:d2:94:92: 42:e5:d6:16:c4:3a:50:46:7c:6a:2d:23:63:1d:5b: 7c:d1:2d:18:9e:34:02:a8:e6:e8:71:eb:b5:2d:8b: c6:53:a8:46:8b:69:e6:df:a6:bc:11:03:84:7a:64: 50:a6:15:25:8d:d7:26:be:18:d2:db:bd:52:d5:95: 4a:50:ef:48:19:93:16:bc:6b:78:17:ea:70:ad:3b: 23:93:40:55:81:ea:de:b4:be:bd:1e:a4:51:cd:43: 12:c0:6e:68:8f:45:a6:97:1c:68:8c:6f:c6:39:8f: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A4:0D:8F:72:F2:B1:37:64:7A:4B:F7:58:E7:87:77:5C:A5:BE:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f1cdae5-b041-4993-963d-6f855f74efa1/1f1cdae5-b041-4993-963d-6f855f74efa1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.168.104.0/24 IPv6: 2607:8040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54082 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ca:c3:3f:79:24:93:32:46:a7:50:d7:34:82:a4:68:82:1e: a4:06:09:8c:bb:0b:c4:b6:01:bc:39:ef:22:9a:6d:73:47:b6: 6c:44:ec:46:3e:c2:e8:5a:01:82:d8:6f:df:2e:65:0a:59:b6: 95:3c:3e:64:35:e9:9c:05:26:6d:d7:f5:72:4e:0f:0a:65:16: c0:bd:48:e4:12:61:3b:37:af:3c:0d:19:17:24:8e:8a:38:40: bd:de:b4:eb:48:72:ea:56:26:60:cd:90:4a:85:b8:71:a9:19: 48:9f:4e:57:4a:66:29:7a:a0:5a:11:e6:ce:9e:c2:a0:3e:7b: 17:0a:ac:5e:14:29:a1:3b:a7:aa:c9:71:f0:46:9d:64:48:2e: fb:f5:0b:d7:25:c0:9a:63:d3:2e:b6:e2:bc:9a:de:f7:c7:d7: 92:4b:5c:f7:94:81:77:b0:95:43:69:c4:33:32:39:53:e6:58: 3e:d9:c0:28:99:1d:33:72:00:6e:f9:39:7a:bf:50:f0:6a:20: 35:97:1b:87:d6:34:a6:4f:57:72:40:e3:51:19:52:ea:c4:c7: a8:3b:a1:cc:35:80:92:49:40:ed:3b:c0:10:68:fd:71:88:c5: de:bc:82:70:a7:d6:04:c3:ea:4d:1a:8f:9e:f7:2c:b4:37:34: c5:63:19:06 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWERKvroiTshcYG2y14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTIyMTE5MzMxNVoXDTI2MDMwNjEwMTMzM1owLzEtMCsGA1UEAxMk MWYxY2RhZTUtYjA0MS00OTkzLTk2M2QtNmY4NTVmNzRlZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uCtMhern6hPGh7xZX5vzouWo2SB/U/kkch0 LqSDWFNczEwsoiJb5fSaBtGBKN3oaV26QTb52+csdoWqL54HTXJPJ832kQuhO0oA saS5aKi+5ovCE3ptInvQGQ26tHH6MgjKOY+1pm/CVocMa+WZ+NqIfJH44b+yKCA4 ZjBk+ur+lQICuq8VPHQsAFEFmXZitXzSlJJC5dYWxDpQRnxqLSNjHVt80S0YnjQC qOboceu1LYvGU6hGi2nm36a8EQOEemRQphUljdcmvhjS271S1ZVKUO9IGZMWvGt4 F+pwrTsjk0BVgeretL69HqRRzUMSwG5oj0WmlxxojG/GOY/KNwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFD6kDY9y8rE3ZHpL91jnh3dcpb6TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8x ZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3NGVmYTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzFmMWNkYWU1LWIwNDEtNDk5My05 NjNkLTZmODU1Zjc0ZWZhMS8xZjFjZGFlNS1iMDQxLTQ5OTMtOTYzZC02Zjg1NWY3 NGVmYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXqGgwDQQCAAIwBwMFACYHgEAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANNCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIfKwz95JJMyRqdQ1zSCpGiCHqQG CYy7C8S2Abw57yKabXNHtmxE7EY+wuhaAYLYb98uZQpZtpU8PmQ16ZwFJm3X9XJO DwplFsC9SOQSYTs3rzwNGRckjoo4QL3etOtIcupWJmDNkEqFuHGpGUifTldKZil6 oFoR5s6ewqA+excKrF4UKaE7p6rJcfBGnWRILvv1C9clwJpj0y624rya3vfH15JL XPeUgXewlUNpxDMyOVPmWD7ZwCiZHTNyAG75OXq/UPBqIDWXG4fWNKZPV3JA41EZ UurEx6g7ocw1gJJJQO07wBBo/XGIxd68gnCn1gTD6k0aj573LLQ3NMVjGQY= -----END CERTIFICATE-----Generated at Fri May 10 16:55:45 2024 by rpki-client on console-ams.rpki-client.org