$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer File: 5e2da88f-6029-42b9-b598-2623343a3150.cer (raw, json) Hash identifier: lE5O5F0BfzkmbJ4syIM9VLCV7MnhhSaVnT2b4Pl3u1I= Subject key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858447D24E7E220AF8D162E16EEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Jan 2024 20:49:32 +0000 Certificate not after: Sun 12 Apr 2026 19:49:32 +0000 Subordinate resources: AS: 68 AS: 79 AS: 550 AS: 1829 AS: 1839 IP: 128.165.0.0/16 IP: 130.55.0.0/16 IP: 138.98.0.0/16 IP: 141.111.0.0/16 IP: 192.12.184.0/24 IP: 192.12.208.0/24 IP: 192.43.188.0/24 IP: 192.52.70.0/24 IP: 192.65.95.0/24 IP: 204.121.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:7d:24:e7:e2:20:af:8d:16:2e:16:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 8 20:49:32 2024 GMT Not After : Apr 12 19:49:32 2026 GMT Subject: CN=5e2da88f-6029-42b9-b598-2623343a3150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:ed:84:c3:2c:52:7e:e7:9a:5f:2a:d3:58: b9:52:29:da:4f:00:a0:0f:24:10:fb:f9:e2:1c:d5: e5:45:2f:8e:29:f3:43:e8:67:a6:67:b5:0c:6d:6a: 45:66:64:8d:15:f0:6b:51:61:a4:fe:4b:ec:12:61: 68:93:73:5d:09:2a:40:2c:89:fa:19:e2:de:aa:8f: 1f:b8:10:83:06:5a:f4:ec:0f:c6:33:e5:04:0f:a8: cd:d9:ca:9c:68:8a:1d:86:d9:07:09:3e:37:d5:41: a9:21:14:b9:6b:62:81:f4:ab:24:5e:d8:d9:2e:59: 72:41:43:f7:b4:fa:83:c7:3e:8f:45:02:ff:e5:87: 08:ef:7c:ec:b9:a8:83:d5:8c:e0:e3:31:d6:58:06: 80:a3:30:a6:6f:e3:79:5d:35:9b:33:e0:dd:1e:e0: d1:8a:7f:e4:08:81:0e:5b:73:19:85:b0:3d:37:43: c6:7d:3d:a0:a7:c9:73:f4:a6:3a:9a:15:e7:27:99: 6f:8c:d3:4a:5a:42:97:ac:d5:a0:ad:4e:1b:c1:e8: 6b:be:3f:83:1f:32:03:2c:69:88:12:04:fb:c3:78: b1:08:bc:79:c3:f4:a7:6d:f8:7e:99:7b:73:75:bd: 7a:de:4c:b3:26:aa:a1:8e:78:a4:fc:e5:d0:97:97: 40:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 128.165.0.0/16 130.55.0.0/16 138.98.0.0/16 141.111.0.0/16 192.12.184.0/24 192.12.208.0/24 192.43.188.0/24 192.52.70.0/24 192.65.95.0/24 204.121.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 68 79 550 1829 1839 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:db:72:07:57:22:16:5c:e5:db:fd:c7:42:00:a8:10:be:88: 12:8e:3e:b5:b2:ac:0c:fd:8d:0b:69:43:35:4e:67:67:3b:77: c7:67:d4:e9:91:06:f4:87:de:07:5d:d8:03:82:40:7e:99:92: d2:3b:74:1a:02:12:e5:f6:8f:3f:6b:71:0d:7a:4e:f4:8d:ff: 71:5c:d5:41:19:02:79:92:52:f6:b8:c5:2c:bc:9d:f1:5d:84: 67:20:ae:11:29:88:8c:f1:a2:e6:f3:76:cd:28:98:7d:aa:1e: 5b:13:e8:50:36:dc:b5:e5:6a:da:f9:15:51:eb:f6:ab:c8:30: 85:45:6a:1a:64:c1:7c:f1:f3:6a:44:87:1c:69:e1:36:07:8e: 9f:0b:30:67:93:51:68:61:b9:b7:ce:7e:9f:b2:f8:7a:ca:75: 1d:c9:d1:89:eb:19:aa:c5:4f:20:69:23:66:c4:bf:88:9d:b3: 7d:6a:ce:68:fe:9f:4e:e4:7b:13:07:2e:d0:1e:73:9b:e0:3d: e5:d2:38:1a:45:17:96:16:1c:95:11:92:8d:67:84:03:6a:d1: a0:c0:97:74:44:7b:0f:38:7f:b5:28:d1:a8:70:53:23:6a:09: f6:0c:17:64:17:cb:85:ec:15:27:ae:cc:85:2a:1d:d2:54:dc: 57:b4:41:ac -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWER9JOfiIK+NFi4W7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDEwODIwNDkzMloXDTI2MDQxMjE5NDkzMlowLzEtMCsGA1UEAxMk NWUyZGE4OGYtNjAyOS00MmI5LWI1OTgtMjYyMzM0M2EzMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16PthMMsUn7nml8q01i5UinaTwCgDyQQ+/ni HNXlRS+OKfND6GemZ7UMbWpFZmSNFfBrUWGk/kvsEmFok3NdCSpALIn6GeLeqo8f uBCDBlr07A/GM+UED6jN2cqcaIodhtkHCT431UGpIRS5a2KB9KskXtjZLllyQUP3 tPqDxz6PRQL/5YcI73zsuaiD1Yzg4zHWWAaAozCmb+N5XTWbM+DdHuDRin/kCIEO W3MZhbA9N0PGfT2gp8lz9KY6mhXnJ5lvjNNKWkKXrNWgrU4bwehrvj+DHzIDLGmI EgT7w3ixCLx5w/Snbfh+mXtzdb163kyzJqqhjnik/OXQl5dAzwIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFHyyKIT90FsUjv2HNP2mE/rMOSawMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81 ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQzYTMxNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzVlMmRhODhmLTYwMjktNDJiOS1i NTk4LTI2MjMzNDNhMzE1MC81ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQz YTMxNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwUAYIKwYBBQUH AQcBAf8EQTA/MD0EAgABMDcDAwCApQMDAII3AwMAimIDAwCNbwMEAMAMuAMEAMAM 0AMEAMArvAMEAMA0RgMEAMBBXwMDAMx5MCcGCCsGAQUFBwEIAQH/BBgwFqAUMBIC AUQCAU8CAgImAgIHJQICBy8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPdtyB1ciFlzl2/3HQgCoEL6IEo4+ tbKsDP2NC2lDNU5nZzt3x2fU6ZEG9IfeB13YA4JAfpmS0jt0GgIS5faPP2txDXpO 9I3/cVzVQRkCeZJS9rjFLLyd8V2EZyCuESmIjPGi5vN2zSiYfaoeWxPoUDbcteVq 2vkVUev2q8gwhUVqGmTBfPHzakSHHGnhNgeOnwswZ5NRaGG5t85+n7L4esp1HcnR iesZqsVPIGkjZsS/iJ2zfWrOaP6fTuR7Ewcu0B5zm+A95dI4GkUXlhYclRGSjWeE A2rRoMCXdER7Dzh/tSjRqHBTI2oJ9gwXZBfLhewVJ67MhSod0lTcV7RBrA== -----END CERTIFICATE-----Generated at Sat May 11 15:32:35 2024 by rpki-client on console-ams.rpki-client.org