$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer File: 4a39f160-9ce8-488c-8af5-e292b7a545c1.cer (raw, json) Hash identifier: qwjViom9HQozrYeyEtYUGeMLHcyjL4qLoUe/ArI8EMg= Subject key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285843F3C13163EF27AFE145862D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 20 Nov 2023 15:42:53 +0000 Certificate not after: Sun 22 Feb 2026 15:42:53 +0000 Subordinate resources: IP: 47.53.0.0/16 IP: 47.58.0.0 -- 47.73.255.255 IP: 131.150.144.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:f3:c1:31:63:ef:27:af:e1:45:86:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Nov 20 15:42:53 2023 GMT Not After : Feb 22 15:42:53 2026 GMT Subject: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:64:d2:8a:4c:04:d4:4f:d2:7e:d1:46:63: d4:e7:d3:fa:2a:3f:eb:9c:6b:a7:41:2d:9a:e3:1b: 05:d3:f8:ff:ae:08:a6:bd:dd:6e:54:18:56:2c:6f: 70:c4:52:68:cf:64:fe:f9:90:fa:44:2e:65:50:48: ef:34:e6:5a:8b:08:2a:e8:19:95:99:54:72:5a:e1: 01:07:53:21:de:18:e7:6d:91:21:28:ea:35:91:ea: 89:4f:b4:f5:c3:c3:07:b4:c6:42:1f:cb:10:97:1b: dc:f6:ee:18:ed:a7:82:6b:44:ee:cf:1b:fa:e5:78: 8c:da:3d:96:4f:f5:bf:a8:9a:11:15:ab:77:ee:5c: 02:b3:e8:e7:99:62:d0:11:fc:f5:10:b2:aa:ce:73: 61:68:eb:63:87:ba:38:de:4e:b1:18:8b:6b:0f:58: 51:65:3f:af:19:28:3e:44:35:44:3c:49:8a:b7:58: c4:7a:04:99:d3:7c:68:d6:e0:0e:62:ec:c8:e9:eb: a7:86:5e:c7:cf:e0:63:65:fe:40:a1:b0:87:8c:4f: 3a:12:96:cd:b6:1e:22:69:28:76:d0:00:a5:c1:22: b3:d5:c6:3a:cd:49:71:43:a5:01:8b:66:68:62:9e: 95:08:19:51:4a:4d:93:ff:cd:11:61:82:6d:0b:bf: a8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 47.53.0.0/16 47.58.0.0-47.73.255.255 131.150.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8d:dc:2c:85:25:d0:b1:0a:bd:b2:7d:68:35:60:cb:e4:cf: 79:38:b6:ce:2b:4d:a3:de:e9:05:68:28:f1:de:55:11:8a:37: 49:d1:49:9b:82:3a:81:f2:68:27:19:cc:d7:8e:e9:fb:d2:bf: fe:ac:55:cf:2d:98:b1:7c:87:30:41:49:85:85:e7:ba:13:0c: 0b:bd:6b:e2:78:ee:54:33:87:1e:1c:f2:2c:79:ab:c3:07:dc: d1:83:b7:82:4c:d9:69:1f:86:9e:0e:51:89:42:7a:66:3c:3a: 79:27:31:35:1e:2f:d4:3f:2f:76:5d:98:22:bc:ef:c7:c7:dc: 99:bb:95:56:86:0e:62:86:80:bd:78:0d:01:5f:76:31:b8:59: d2:2d:47:df:b3:9e:85:1a:4b:36:66:92:e4:4d:51:ce:08:b4: 33:11:e0:1f:bd:a3:d5:2b:88:2f:0e:45:d8:9b:06:51:b5:cd: f9:df:e3:33:95:48:b7:42:3c:ec:b4:00:bc:9e:14:75:5f:73: 44:cb:ec:c0:ef:8f:f5:e2:d3:46:5d:c8:85:b8:d2:29:a0:d9: f1:a1:5d:cb:2c:d2:73:ed:02:6d:29:62:ea:44:9d:02:2e:99: 2b:26:9e:f2:95:63:98:8a:32:db:75:89:8e:5c:f2:2b:29:a7: 91:e7:2e:54 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEPzwTFj7yev4UWGLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTEyMDE1NDI1M1oXDTI2MDIyMjE1NDI1M1owLzEtMCsGA1UEAxMk NGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0NWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcZk0opMBNRP0n7RRmPU59P6Kj/rnGunQS2a 4xsF0/j/rgimvd1uVBhWLG9wxFJoz2T++ZD6RC5lUEjvNOZaiwgq6BmVmVRyWuEB B1Mh3hjnbZEhKOo1keqJT7T1w8MHtMZCH8sQlxvc9u4Y7aeCa0Tuzxv65XiM2j2W T/W/qJoRFat37lwCs+jnmWLQEfz1ELKqznNhaOtjh7o43k6xGItrD1hRZT+vGSg+ RDVEPEmKt1jEegSZ03xo1uAOYuzI6eunhl7Hz+BjZf5AobCHjE86EpbNth4iaSh2 0AClwSKz1cY6zUlxQ6UBi2ZoYp6VCBlRSk2T/80RYYJtC7+oZQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFAlJMhrHSSJ/jXde3EemXcznNNOeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzRhMzlmMTYwLTljZTgtNDg4Yy04 YWY1LWUyOTJiN2E1NDVjMS80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdh NTQ1YzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwAvNTAKAwMBLzoDAwEvSAMEBIOWkDBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQApjdwshSXQsQq9sn1oNWDL5M95OLbOK02j3ukFaCjx3lURijdJ0UmbgjqB8mgn GczXjun70r/+rFXPLZixfIcwQUmFhee6EwwLvWvieO5UM4ceHPIseavDB9zRg7eC TNlpH4aeDlGJQnpmPDp5JzE1Hi/UPy92XZgivO/Hx9yZu5VWhg5ihoC9eA0BX3Yx uFnSLUffs56FGks2ZpLkTVHOCLQzEeAfvaPVK4gvDkXYmwZRtc353+MzlUi3Qjzs tAC8nhR1X3NEy+zA74/14tNGXciFuNIpoNnxoV3LLNJz7QJtKWLqRJ0CLpkrJp7y lWOYijLbdYmOXPIrKaeR5y5U -----END CERTIFICATE-----Generated at Sat May 11 15:32:34 2024 by rpki-client on console-ams.rpki-client.org