$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer File: 4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer (raw, json) Hash identifier: x4O2CQezsjqSMvD985bxTP3fTL0J6wC6j99o0jXLgp8= Subject key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858442F2062E9E9D9CDB74B236E38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 Dec 2023 22:07:23 +0000 Certificate not after: Sun 15 Mar 2026 21:07:23 +0000 Subordinate resources: IP: 142.207.0.0/16 IP: 199.175.105.0/24 IP: 204.239.83.0 -- 204.239.86.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:2f:20:62:e9:e9:d9:cd:b7:4b:23:6e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 11 22:07:23 2023 GMT Not After : Mar 15 21:07:23 2026 GMT Subject: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9b:55:db:bf:21:36:1b:94:a7:fb:c2:d9:9b: 88:fa:6a:00:1e:8d:83:eb:6a:2d:04:62:85:4c:26: 72:b9:09:82:bc:fe:fe:a8:9c:18:2d:2c:81:e7:b7: 44:94:df:e7:44:cf:75:c2:df:e0:fd:34:2e:ae:6c: 4b:d0:a9:0a:a0:79:66:95:c6:5d:da:cf:98:af:b4: 29:6f:cc:b4:7d:29:40:e8:6a:34:05:3a:9f:73:d8: 2c:ca:02:bc:8a:56:98:d3:cf:86:49:1b:e5:d4:65: f0:28:a9:d8:36:74:b9:45:ac:3b:f1:94:b8:f8:a3: 40:70:b2:86:1a:72:f9:01:4b:ff:c1:6d:95:a4:aa: 50:6e:53:57:4d:6d:e5:c6:cc:df:fd:bb:4a:0c:7a: c3:84:76:23:3e:28:fd:ce:f1:98:84:71:00:58:90: 38:14:e8:d8:b6:f0:48:5b:0e:36:bb:02:71:43:12: 82:ca:b8:ed:53:ce:c9:28:0d:00:6e:61:7b:bf:e9: b6:11:07:16:c0:55:a6:37:1c:51:2e:4f:2c:59:7f: e6:b1:58:10:82:0d:f3:1b:eb:bd:bf:b7:ee:d0:8f: 69:ea:72:1c:07:7d:f2:e0:17:0b:c7:34:72:dd:7d: 4b:3b:35:00:bd:e0:f2:68:05:38:0b:fe:b5:11:71: d7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 142.207.0.0/16 199.175.105.0/24 204.239.83.0-204.239.86.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:56:06:e6:09:cc:59:e8:7b:75:bc:12:d0:e3:25:04:ea:29: 76:08:99:ab:b4:16:56:07:26:b7:44:26:15:0f:8e:ee:8a:49: 5a:6b:73:36:cf:81:c7:eb:c5:8b:3c:ef:08:6b:b1:d2:fa:4f: 32:15:10:a3:d2:1c:24:aa:78:0d:1b:6d:c3:45:47:2c:ec:cd: ee:4a:81:69:37:d3:dc:a3:ce:0b:1e:03:66:04:ad:c7:f1:b3: e0:93:a5:6f:33:ce:a5:e8:98:43:3d:12:7b:ad:b4:3e:86:35: 4d:ad:90:ae:a9:b7:07:d1:53:3c:ef:75:6a:d1:a3:0a:0e:05: 5f:5e:ae:8f:d8:82:53:7a:cb:fd:b3:4c:cb:a8:41:8f:2e:29: ff:92:0b:17:80:6f:c7:92:ab:b0:4b:65:32:02:15:0c:0f:e3: 9c:b9:90:28:51:fe:2c:5a:45:7e:84:1f:c5:03:d5:34:53:e1: 5b:13:e9:65:e4:23:08:a2:63:6f:46:52:0d:80:c4:40:bc:6e: b0:c6:25:60:46:74:39:aa:d6:6d:5a:e2:3d:b6:c0:44:5b:35: 41:37:1c:54:66:93:8e:c9:71:39:b2:da:18:0c:46:24:d6:14: c5:64:be:ec:f8:bd:48:7f:2b:b0:7a:32:fa:4c:44:eb:de:08: 5e:1c:b9:95 -----BEGIN CERTIFICATE----- MIIHADCCBeigAwIBAgIUAQ0Mn0MoWEQvIGLp6dnNt0sjbjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTIxMTIyMDcyM1oXDTI2MDMxNTIxMDcyM1owLzEtMCsGA1UEAxMk NGQxMGFjNjctZDhmZi00ZTJlLTkyZTktOTliOGFhMjcxOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZtV278hNhuUp/vC2ZuI+moAHo2D62otBGKF TCZyuQmCvP7+qJwYLSyB57dElN/nRM91wt/g/TQurmxL0KkKoHlmlcZd2s+Yr7Qp b8y0fSlA6Go0BTqfc9gsygK8ilaY08+GSRvl1GXwKKnYNnS5Raw78ZS4+KNAcLKG GnL5AUv/wW2VpKpQblNXTW3lxszf/btKDHrDhHYjPij9zvGYhHEAWJA4FOjYtvBI Ww42uwJxQxKCyrjtU87JKA0AbmF7v+m2EQcWwFWmNxxRLk8sWX/msVgQgg3zG+u9 v7fu0I9p6nIcB33y4BcLxzRy3X1LOzUAveDyaAU4C/61EXHXFwIDAQABo4IEEjCC BA4wHQYDVR0OBBYEFC+EX0Osk4Fv+lSVFyr2tqdDCDb5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80 ZDEwYWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4YWEyNzE4ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzRkMTBhYzY3LWQ4ZmYtNGUyZS05 MmU5LTk5YjhhYTI3MThlZi80ZDEwYWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4YWEy NzE4ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMgYIKwYBBQUH AQcBAf8EIzAhMB8EAgABMBkDAwCOzwMEAMevaTAMAwQAzO9TAwQAzO9WMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAHBWBuYJzFnoe3W8EtDjJQTqKXYImau0FlYHJrdEJhUPju6KSVprczbPgcfr xYs87whrsdL6TzIVEKPSHCSqeA0bbcNFRyzsze5KgWk309yjzgseA2YErcfxs+CT pW8zzqXomEM9EnuttD6GNU2tkK6ptwfRUzzvdWrRowoOBV9ero/YglN6y/2zTMuo QY8uKf+SCxeAb8eSq7BLZTICFQwP45y5kChR/ixaRX6EH8UD1TRT4VsT6WXkIwii Y29GUg2AxEC8brDGJWBGdDmq1m1a4j22wERbNUE3HFRmk47JcTmy2hgMRiTWFMVk vuz4vUh/K7B6MvpMROveCF4cuZU= -----END CERTIFICATE-----Generated at Fri May 10 17:25:40 2024 by rpki-client on console-fra.rpki-client.org