$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747.cer File: 3905609c-39ed-4063-a3a8-68871c079747.cer (raw, json) Hash identifier: J4WhZ14aUoAWZCwgtmjyEgujOX1MA0u2SuRS37CWRow= Subject key identifier: BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858440CC12BFC37B1B4460272B000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Nov 2023 14:38:03 +0000 Certificate not after: Tue 03 Mar 2026 14:38:03 +0000 Subordinate resources: IP: 216.245.146.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:0c:c1:2b:fc:37:b1:b4:46:02:72:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Nov 29 14:38:03 2023 GMT Not After : Mar 3 14:38:03 2026 GMT Subject: CN=3905609c-39ed-4063-a3a8-68871c079747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:3e:52:dd:89:c4:bb:e3:bb:6b:96:06:04: 73:b3:7c:1b:1c:83:8a:57:95:52:78:9a:25:a0:67: 84:4f:06:cd:65:a3:f8:2e:2f:18:5e:3b:56:64:e3: f3:54:5c:93:b1:e5:f1:8c:f7:3d:73:74:ea:98:0c: 3b:5a:4e:9d:ec:83:d9:b5:ae:7b:60:ea:be:d1:22: c1:9c:12:99:69:01:00:fb:13:a7:07:20:2f:c0:a1: f8:05:79:72:07:c3:33:00:99:17:94:c7:92:fc:9a: 25:2d:61:f6:91:3c:f1:5f:b4:fc:dc:3f:74:fc:6a: 08:f7:bc:12:41:c7:a9:db:0a:37:18:0e:df:40:81: c5:06:b2:8c:59:a8:00:c3:89:55:6c:37:42:9e:c1: 47:79:40:7a:8c:f6:a4:e0:2c:9b:db:64:22:e0:de: ab:b8:17:cd:a4:d6:37:19:9f:69:45:53:fd:fe:67: db:7b:14:91:96:55:39:b6:48:f7:8d:9a:e7:cc:a1: 7e:82:45:dd:46:48:73:77:75:e7:76:a7:99:03:16: 1b:d8:14:f6:dc:76:4c:c5:cd:9b:de:c8:c4:c3:c5: 06:e0:26:5c:b2:ff:28:74:76:2e:5a:3a:61:99:fd: 57:2b:04:73:82:c3:b1:cb:23:c6:5c:96:35:54:a7: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BC:F1:0A:4F:A5:AA:08:87:E1:FE:1D:E1:F4:24:F3:3E:86:35:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3905609c-39ed-4063-a3a8-68871c079747/3905609c-39ed-4063-a3a8-68871c079747.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 216.245.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:48:cd:8a:fb:35:0c:dd:3a:c6:52:6a:60:7c:2a:20:2e:cb: f2:13:38:60:81:b2:d6:62:af:0e:16:6d:76:14:97:e2:3f:23: 90:20:08:2d:e9:d3:6b:38:f6:4b:85:1d:b3:af:e1:56:8e:97: 8a:b9:72:91:2b:d2:7c:4a:32:b0:ea:d1:4b:8e:a9:f8:15:2f: b8:f9:cd:99:a4:99:86:5c:46:59:68:27:54:a8:a0:02:62:e6: 1c:b6:4a:24:00:39:20:8f:27:13:47:75:8e:3e:33:ff:40:47: 5e:ec:e0:a0:09:3e:d0:e3:04:c1:a8:04:3b:a4:dc:92:08:8b: 3e:69:fc:5e:b1:0c:0f:6a:a4:c5:f1:80:b1:90:c3:9e:c8:39: f6:31:3e:66:b9:bb:48:13:b9:77:bd:59:9b:c9:4f:67:c4:fb: 0e:6e:b4:2b:ec:94:96:2b:da:66:a0:1a:60:cb:ee:2e:60:4c: 02:3c:f8:d6:f6:d7:b6:c5:da:9b:2f:6c:a2:1e:ef:ca:99:aa: 28:ae:b5:31:5b:a5:0f:c5:7c:c6:fd:4d:32:af:49:39:50:74: 83:89:25:ea:2e:14:c2:00:ee:e9:31:68:c2:82:64:fe:f9:e1: 05:25:46:26:65:ca:49:d5:98:21:e1:b9:ff:9c:29:e6:0a:87: dc:81:0c:80 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEQMwSv8N7G0RgJysAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTEyOTE0MzgwM1oXDTI2MDMwMzE0MzgwM1owLzEtMCsGA1UEAxMk MzkwNTYwOWMtMzllZC00MDYzLWEzYTgtNjg4NzFjMDc5NzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOA+Ut2JxLvju2uWBgRzs3wbHIOKV5VSeJol oGeETwbNZaP4Li8YXjtWZOPzVFyTseXxjPc9c3TqmAw7Wk6d7IPZta57YOq+0SLB nBKZaQEA+xOnByAvwKH4BXlyB8MzAJkXlMeS/JolLWH2kTzxX7T83D90/GoI97wS Qcep2wo3GA7fQIHFBrKMWagAw4lVbDdCnsFHeUB6jPak4Cyb22Qi4N6ruBfNpNY3 GZ9pRVP9/mfbexSRllU5tkj3jZrnzKF+gkXdRkhzd3XndqeZAxYb2BT23HZMxc2b 3sjEw8UG4CZcsv8odHYuWjphmf1XKwRzgsOxyyPGXJY1VKdYoQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFLq88QpPpaoIh+H+HeH0JPM+hjXcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8z OTA1NjA5Yy0zOWVkLTQwNjMtYTNhOC02ODg3MWMwNzk3NDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzM5MDU2MDljLTM5ZWQtNDA2My1h M2E4LTY4ODcxYzA3OTc0Ny8zOTA1NjA5Yy0zOWVkLTQwNjMtYTNhOC02ODg3MWMw Nzk3NDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHY9ZIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgEjNivs1DN06xlJqYHwq IC7L8hM4YIGy1mKvDhZtdhSX4j8jkCAILenTazj2S4Uds6/hVo6XirlykSvSfEoy sOrRS46p+BUvuPnNmaSZhlxGWWgnVKigAmLmHLZKJAA5II8nE0d1jj4z/0BHXuzg oAk+0OMEwagEO6TckgiLPmn8XrEMD2qkxfGAsZDDnsg59jE+Zrm7SBO5d71Zm8lP Z8T7Dm60K+yUlivaZqAaYMvuLmBMAjz41vbXtsXamy9soh7vypmqKK61MVulD8V8 xv1NMq9JOVB0g4kl6i4UwgDu6TFowoJk/vnhBSVGJmXKSdWYIeG5/5wp5gqH3IEM gA== -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:10 2024 by rpki-client on console-ams.rpki-client.org