$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer File: a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer (raw, json) Hash identifier: +f0LQGiAmkzhc2SJWoBquB4r0mfIU2PfITVixgExuJk= Subject key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858440A304D66C60F68A8B6598C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Nov 2023 16:34:33 +0000 Certificate not after: Mon 02 Mar 2026 16:34:33 +0000 Subordinate resources: AS: 398564 AS: 398655 AS: 398774 IP: 204.108.174.0/23 IP: 204.108.188.0/23 IP: 204.235.172.0/23 IP: 209.250.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:0a:30:4d:66:c6:0f:68:a8:b6:59:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Nov 28 16:34:33 2023 GMT Not After : Mar 2 16:34:33 2026 GMT Subject: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:54:81:14:88:fa:a8:69:ea:80:0d:f5:82:e0: 1d:57:6e:71:e4:2b:a5:95:02:2f:27:33:65:82:1c: 54:9b:f9:90:a3:04:b3:41:7d:3f:82:17:3d:39:fa: 8f:63:90:11:f7:76:6a:a8:28:98:ac:a0:50:ae:46: 47:0f:07:c9:db:e3:95:fc:0d:db:e8:a3:9d:f4:9e: 8c:85:30:23:9d:e2:7c:2e:9f:a3:c9:77:96:17:ab: 16:c6:a7:f1:cb:fe:2a:8a:74:b6:ed:f2:73:7e:53: 7d:cc:d0:29:33:15:94:74:92:96:5f:34:f4:34:9c: 07:95:06:d2:14:fc:d5:38:bd:bb:db:6f:e6:c0:8d: 2f:92:0d:03:83:fb:3d:f1:27:98:6c:7e:18:6c:d0: 2c:4b:d5:83:bf:27:7d:b4:42:19:44:83:0f:fe:d7: cd:c8:f2:e7:e6:01:d3:51:1c:94:1d:de:12:e6:82: 31:d3:33:3e:5a:9a:95:40:10:aa:cd:1e:33:1d:10: 42:65:2b:a7:f2:9c:41:a8:5e:0c:ab:75:52:7b:69: f5:72:9b:c9:af:47:37:06:72:90:0a:27:44:17:67: 6d:93:86:63:75:cd:c4:96:01:ff:7b:03:9e:7d:17: f4:f1:e0:66:aa:7c:05:6b:e8:db:6e:0b:2f:c5:af: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.108.174.0/23 204.108.188.0/23 204.235.172.0/23 209.250.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398564 398655 398774 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f5:c9:77:c5:7e:59:db:84:f2:29:4a:94:02:85:c3:ef:31: 15:48:51:3e:cf:d5:95:15:db:46:40:b9:bb:96:b9:0e:7b:55: e2:61:83:95:10:a0:bf:2d:e4:3d:02:33:e4:27:da:d1:3b:eb: 10:f7:54:4b:ec:2a:52:ee:27:80:0c:40:93:c5:78:d3:dc:ce: 8b:28:78:1c:1e:69:b4:c8:83:0b:88:c8:78:e0:8d:09:c2:48: b8:b3:33:eb:80:3a:28:55:82:ca:f6:ed:fb:d6:0e:03:b7:3a: 20:03:24:02:4e:8b:67:40:8b:d2:28:5a:28:06:49:80:62:63: b3:44:d1:ed:5a:d9:01:d7:fb:49:df:37:0e:77:c2:7a:12:ae: d7:5b:4a:19:e8:44:46:ec:c4:4f:21:4f:08:42:82:51:7c:5d: 38:52:6c:a6:41:13:b0:b0:01:0f:17:04:05:09:26:99:89:6b: 0a:8a:3a:b1:98:5c:3a:b2:cb:43:c1:50:18:32:c1:60:36:f8: 43:de:3b:c2:87:61:fe:4f:78:8b:14:04:20:90:50:2e:e1:09: 07:80:1a:54:50:02:ea:1d:84:50:52:f3:c2:6c:98:09:2b:21: 8d:87:d4:f2:62:29:27:c7:28:ad:1a:e7:a4:a8:ca:89:37:42: bd:39:82:e7 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEQKME1mxg9oqLZZjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTEyODE2MzQzM1oXDTI2MDMwMjE2MzQzM1owLzEtMCsGA1UEAxMk YTFmZmMxOTItZDRhOC00MTg5LWJhYjItY2U3YTM3ZWE2ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFSBFIj6qGnqgA31guAdV25x5CullQIvJzNl ghxUm/mQowSzQX0/ghc9OfqPY5AR93ZqqCiYrKBQrkZHDwfJ2+OV/A3b6KOd9J6M hTAjneJ8Lp+jyXeWF6sWxqfxy/4qinS27fJzflN9zNApMxWUdJKWXzT0NJwHlQbS FPzVOL2722/mwI0vkg0Dg/s98SeYbH4YbNAsS9WDvyd9tEIZRIMP/tfNyPLn5gHT URyUHd4S5oIx0zM+WpqVQBCqzR4zHRBCZSun8pxBqF4Mq3VSe2n1cpvJr0c3BnKQ CidEF2dtk4Zjdc3ElgH/ewOefRf08eBmqnwFa+jbbgsvxa+NXwIDAQABo4IENzCC BDMwHQYDVR0OBBYEFGi7rGaoB4uF5u2cAT3CNb3Sp6vzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h MWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdlYTY4M2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ExZmZjMTkyLWQ0YTgtNDE4OS1i YWIyLWNlN2EzN2VhNjgzYy9hMWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdl YTY4M2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAHMbK4DBAHMbLwDBAHM66wDBAXR+sAwJAYIKwYB BQUHAQgBAf8EFTAToBEwDwIDBhTkAgMGFT8CAwYVtjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAK9cl3xX5Z 24TyKUqUAoXD7zEVSFE+z9WVFdtGQLm7lrkOe1XiYYOVEKC/LeQ9AjPkJ9rRO+sQ 91RL7CpS7ieADECTxXjT3M6LKHgcHmm0yIMLiMh44I0Jwki4szPrgDooVYLK9u37 1g4DtzogAyQCTotnQIvSKFooBkmAYmOzRNHtWtkB1/tJ3zcOd8J6Eq7XW0oZ6ERG 7MRPIU8IQoJRfF04UmymQROwsAEPFwQFCSaZiWsKijqxmFw6sstDwVAYMsFgNvhD 3jvCh2H+T3iLFAQgkFAu4QkHgBpUUALqHYRQUvPCbJgJKyGNh9TyYiknxyitGuek qMqJN0K9OYLn -----END CERTIFICATE-----Generated at Fri May 10 17:25:42 2024 by rpki-client on console-fra.rpki-client.org