$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer File: 23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.cer (raw, json) Hash identifier: 044z2Ay4ZDg5F8qT1uKAs4zxsO0SvAUoc7ZKyQsN6Sk= Subject key identifier: 04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285843B98FBCEED1E6AD2D8488BD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Oct 2023 19:26:22 +0000 Certificate not after: Sun 01 Feb 2026 20:26:22 +0000 Subordinate resources: IP: 192.197.51.0/24 IP: 205.236.8.0 -- 205.236.12.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:b9:8f:bc:ee:d1:e6:ad:2d:84:88:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 30 19:26:22 2023 GMT Not After : Feb 1 20:26:22 2026 GMT Subject: CN=23efff99-5db1-4d09-b0dc-f7f2f0fed4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4e:8d:be:fc:c7:5f:0e:93:f2:4c:3c:27:11: 0d:05:8f:96:ac:88:85:75:89:4c:13:75:1c:ba:f2: 5b:41:1d:72:36:f4:5d:1a:ae:34:79:85:5f:e7:9a: 27:45:67:b0:f0:c1:69:0b:01:fd:25:ac:61:48:6d: d6:5c:42:a2:a6:0e:1f:95:63:27:9b:27:02:d3:20: 75:00:29:1e:ce:d2:2e:a1:08:38:f9:9f:60:3b:7d: d8:cf:81:9b:ca:4d:63:4a:db:8e:4f:ef:da:ea:c5: 93:ee:f4:ef:cb:eb:8d:6d:01:9d:24:be:4f:aa:83: ef:87:3f:bf:c5:b2:ed:ec:70:31:45:13:e9:85:50: 20:9d:21:e0:3f:0e:3e:ee:7a:6a:d5:48:b0:7f:ae: 83:3c:b9:72:9c:77:bf:84:b8:53:ba:80:0d:2f:c5: 39:c9:82:81:60:22:bc:d2:b8:22:43:8a:7d:99:d0: 9e:97:32:e6:58:1c:0d:7d:83:c2:21:27:f4:37:fa: 29:c2:12:4a:f2:a2:3a:dc:53:6a:d1:95:9e:fe:91: 13:fb:ad:b0:de:3e:5b:75:c4:54:34:dd:d1:34:b7: 1f:f5:a3:61:f5:0a:61:75:25:ec:07:96:96:1f:71: 41:66:5d:27:a0:bb:02:49:d3:ca:5d:75:d7:3e:5b: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:39:E0:A9:66:86:79:27:47:2C:9E:63:F1:89:48:DF:88:51:E7:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd/23efff99-5db1-4d09-b0dc-f7f2f0fed4fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.197.51.0/24 205.236.8.0-205.236.12.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:00:34:d4:de:c3:ab:67:1c:49:54:6c:5b:b1:51:ac:d1:7b: 72:6a:ea:9a:8b:9b:0a:c6:6b:37:5b:a1:e8:ae:ef:90:38:b5: 6e:d6:19:03:00:44:40:37:e7:76:d1:95:72:aa:0d:6d:d9:fc: e4:55:6f:12:40:1c:ee:7f:8d:6f:8d:22:12:80:c9:3e:17:9c: 12:c2:7a:79:e7:ac:1d:37:ac:66:bf:9b:66:24:6d:ad:dd:c2: 8a:08:0f:c0:ba:8d:11:bb:75:8e:b6:23:73:16:a1:d9:4c:4c: a0:da:56:68:24:ef:45:6f:f9:a4:dd:8b:70:1d:15:b6:5b:cc: de:b0:b5:73:44:56:1e:2c:2c:d9:3f:39:be:41:23:af:ba:46: f1:9f:f3:7d:07:54:e4:31:d5:13:2b:d2:51:c9:d2:fa:cb:b4: 3f:61:59:29:b9:13:92:47:0d:71:70:b1:18:70:c3:2f:f5:55: e2:bb:33:52:3d:52:7e:6e:84:d6:d0:b1:43:18:85:4e:01:ee: 42:d3:6b:55:8e:37:eb:3c:1c:f0:cf:b2:9f:bf:8e:31:58:5d: ee:49:64:53:84:ec:07:75:d5:30:7b:92:d9:d4:69:0e:9d:e7: f4:66:8c:38:08:6a:61:58:13:78:50:4d:21:de:91:48:41:33: 90:f4:b3:c5 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEO5j7zu0eatLYSIvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTAzMDE5MjYyMloXDTI2MDIwMTIwMjYyMlowLzEtMCsGA1UEAxMk MjNlZmZmOTktNWRiMS00ZDA5LWIwZGMtZjdmMmYwZmVkNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok6NvvzHXw6T8kw8JxENBY+WrIiFdYlME3Uc uvJbQR1yNvRdGq40eYVf55onRWew8MFpCwH9JaxhSG3WXEKipg4flWMnmycC0yB1 ACkeztIuoQg4+Z9gO33Yz4Gbyk1jStuOT+/a6sWT7vTvy+uNbQGdJL5PqoPvhz+/ xbLt7HAxRRPphVAgnSHgPw4+7npq1Uiwf66DPLlynHe/hLhTuoANL8U5yYKBYCK8 0rgiQ4p9mdCelzLmWBwNfYPCISf0N/opwhJK8qI63FNq0ZWe/pET+62w3j5bdcRU NN3RNLcf9aNh9QphdSXsB5aWH3FBZl0noLsCSdPKXXXXPlvJRwIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFAQ54KlmhnknRyyeY/GJSN+IUeeSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y M2VmZmY5OS01ZGIxLTRkMDktYjBkYy1mN2YyZjBmZWQ0ZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzIzZWZmZjk5LTVkYjEtNGQwOS1i MGRjLWY3ZjJmMGZlZDRmZC8yM2VmZmY5OS01ZGIxLTRkMDktYjBkYy1mN2YyZjBm ZWQ0ZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADAxTMwDAMEA83sCAMEAM3sDDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQ ADTU3sOrZxxJVGxbsVGs0Xtyauqai5sKxms3W6Horu+QOLVu1hkDAERAN+d20ZVy qg1t2fzkVW8SQBzuf41vjSISgMk+F5wSwnp556wdN6xmv5tmJG2t3cKKCA/Auo0R u3WOtiNzFqHZTEyg2lZoJO9Fb/mk3YtwHRW2W8zesLVzRFYeLCzZPzm+QSOvukbx n/N9B1TkMdUTK9JRydL6y7Q/YVkpuROSRw1xcLEYcMMv9VXiuzNSPVJ+boTW0LFD GIVOAe5C02tVjjfrPBzwz7Kfv44xWF3uSWRThOwHddUwe5LZ1GkOnef0Zow4CGph WBN4UE0h3pFIQTOQ9LPF -----END CERTIFICATE-----Generated at Sat May 11 15:32:28 2024 by rpki-client on console-ams.rpki-client.org