$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer File: 34247a70-c93d-4065-9548-762da5a386ba.cer (raw, json) Hash identifier: uR+aqQz+Mpzchd4BVvIai04EWLA15ryEAbEqI05nNDk= Subject key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858447F2497A33E2EB197BBC8F580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Jan 2024 14:00:32 +0000 Certificate not after: Wed 21 Jan 2026 13:34:24 +0000 Subordinate resources: AS: 40072 IP: 72.162.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:7f:24:97:a3:3e:2e:b1:97:bb:c8:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 9 14:00:32 2024 GMT Not After : Jan 21 13:34:24 2026 GMT Subject: CN=34247a70-c93d-4065-9548-762da5a386ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:fd:f7:4f:3c:f4:f7:6a:a3:7b:c9:be:7f: 0a:b7:a2:c2:9b:5f:2e:3d:e4:3d:60:2f:b7:18:88: e8:2a:a1:f3:30:11:9e:e1:9a:cc:d5:2d:7d:9a:48: 6d:3a:1a:f0:26:5e:d3:0d:53:be:b2:65:73:bd:c0: 5b:34:af:27:0a:00:4d:04:05:93:e1:d5:ff:81:67: 6d:df:fa:6f:76:eb:60:e8:55:61:24:be:6f:d3:88: 57:3c:5a:f3:32:7b:26:03:6b:3a:e7:a1:26:08:cf: b0:16:ae:69:43:eb:7d:8f:d9:12:4e:f9:ad:6b:b2: 6f:08:70:f3:5e:79:59:84:a0:64:c7:6d:bf:8e:8f: a6:ec:32:eb:00:3b:f0:26:1c:23:fe:9e:cc:91:cb: cc:94:c8:08:93:5b:6b:7b:b8:ab:48:a6:ca:56:f0: 38:42:bd:a8:50:ac:18:0d:43:46:d5:7a:f2:5f:93: e7:b8:c3:c1:b5:bb:39:43:2d:dc:28:e6:bc:f9:6e: 20:f3:e5:c0:5f:2e:76:1b:53:5f:89:17:9a:cb:af: 75:0a:32:b7:b9:8f:92:31:e1:cd:b7:25:f7:11:85: 86:14:24:81:15:d6:dc:cd:2e:dd:93:fd:92:e8:08: 46:a6:f6:86:d4:0f:b0:e1:f5:09:b4:e5:f6:98:77: af:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 72.162.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40072 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:4a:c9:2d:c7:58:65:60:79:88:8e:87:d7:ce:e3:f4:28:18: c7:01:fc:fc:d9:e5:98:ef:db:c1:1e:dd:5b:5a:4c:4b:e3:81: cb:7a:f5:f7:1e:31:9e:0c:21:f9:ce:91:29:65:49:c5:a3:14: 31:a3:da:85:2f:52:98:05:58:8f:b1:fd:fc:14:dc:6d:e1:4a: 41:1c:a2:d7:a3:80:ef:64:d4:98:22:3d:b3:d6:86:c8:69:d6: 42:7f:8a:9e:1e:28:b4:a7:29:d6:72:1d:42:24:b9:13:c8:12: b7:62:c5:7a:40:5a:a8:d5:18:02:08:19:9a:19:e3:d7:95:eb: 9f:60:7c:ae:f2:4c:3b:d5:66:c4:f5:9a:a7:36:f1:3d:87:16: bd:de:3c:7e:22:67:43:5d:18:1d:50:0b:37:59:e2:31:6f:12: 08:7f:a8:98:ad:53:15:43:ec:e6:29:a6:46:d1:f8:b2:3d:f4: cf:e2:58:e6:84:77:5f:0f:c7:c3:bd:d5:ad:e3:5c:ec:f7:97: 37:70:69:f0:f8:6d:70:30:00:56:81:ac:0a:54:cb:04:3c:b6: 2c:55:e9:ce:13:bd:52:c8:bd:a3:77:03:6a:92:53:36:66:d7: bc:3a:22:96:6f:e0:1f:0e:1b:24:31:c5:6a:8c:d4:81:11:6d: d6:c9:6a:3d -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWER/JJejPi6xl7vI9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDEwOTE0MDAzMloXDTI2MDEyMTEzMzQyNFowLzEtMCsGA1UEAxMk MzQyNDdhNzAtYzkzZC00MDY1LTk1NDgtNzYyZGE1YTM4NmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliz990889Pdqo3vJvn8Kt6LCm18uPeQ9YC+3 GIjoKqHzMBGe4ZrM1S19mkhtOhrwJl7TDVO+smVzvcBbNK8nCgBNBAWT4dX/gWdt 3/pvdutg6FVhJL5v04hXPFrzMnsmA2s656EmCM+wFq5pQ+t9j9kSTvmta7JvCHDz XnlZhKBkx22/jo+m7DLrADvwJhwj/p7MkcvMlMgIk1tre7irSKbKVvA4Qr2oUKwY DUNG1XryX5PnuMPBtbs5Qy3cKOa8+W4g8+XAXy52G1NfiReay691CjK3uY+SMeHN tyX3EYWGFCSBFdbczS7dk/2S6AhGpvaG1A+w4fUJtOX2mHevmwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFKbBG9a3JVrQpMGbn/eFItGTYUmCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z NDI0N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJkYTVhMzg2YmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzM0MjQ3YTcwLWM5M2QtNDA2NS05 NTQ4LTc2MmRhNWEzODZiYS8zNDI0N2E3MC1jOTNkLTQwNjUtOTU0OC03NjJkYTVh Mzg2YmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwBIojAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA nIgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAeErJLcdYZWB5iI6H187j9CgYxwH8/NnlmO/bwR7dW1pMS+OB y3r19x4xngwh+c6RKWVJxaMUMaPahS9SmAVYj7H9/BTcbeFKQRyi16OA72TUmCI9 s9aGyGnWQn+Knh4otKcp1nIdQiS5E8gSt2LFekBaqNUYAggZmhnj15Xrn2B8rvJM O9VmxPWapzbxPYcWvd48fiJnQ10YHVALN1niMW8SCH+omK1TFUPs5immRtH4sj30 z+JY5oR3Xw/Hw73VreNc7PeXN3Bp8PhtcDAAVoGsClTLBDy2LFXpzhO9Usi9o3cD apJTNmbXvDoilm/gHw4bJDHFaozUgRFt1slqPQ== -----END CERTIFICATE-----Generated at Sat May 11 15:35:56 2024 by rpki-client on console-fra.rpki-client.org