$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer File: a234649d-ab49-458b-a5e3-7765fe7a066c.cer (raw, json) Hash identifier: 2xGSgD7ub4qVqjNK7uEqxP+0YNsALnDsCSuKxMNRg+w= Subject key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584473C12065BB0BACFACB4FD040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Jan 2024 12:06:13 +0000 Certificate not after: Wed 04 Feb 2026 08:16:19 +0000 Subordinate resources: AS: 27010 IP: 23.165.184.0/24 IP: 2602:f9f6::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Dec 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:73:c1:20:65:bb:0b:ac:fa:cb:4f:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 5 12:06:13 2024 GMT Not After : Feb 4 08:16:19 2026 GMT Subject: CN=a234649d-ab49-458b-a5e3-7765fe7a066c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d9:fe:91:f8:86:6a:db:bb:41:a0:84:33:ce: e3:0c:1e:37:dc:10:d1:6c:75:74:27:e1:2a:06:2b: c4:23:1d:64:26:c1:93:03:1c:bf:cc:63:83:83:82: 28:f5:78:4f:97:a3:01:f8:17:71:1b:ae:d2:09:c1: 3e:07:f9:8c:a3:32:ae:ab:d6:a5:0d:90:5b:ae:81: 48:b4:37:51:95:c3:c1:2e:d2:4e:dc:31:21:3c:7a: eb:53:45:1a:8b:12:b9:12:51:17:e3:73:79:91:59: c3:d3:07:09:a7:44:c4:a4:90:c3:b5:8a:5b:80:ef: 34:f6:c8:f2:13:0a:57:4b:83:20:8e:8b:a4:f9:03: c9:bd:80:ab:ae:88:55:97:ea:34:f6:89:15:1e:19: de:1a:fd:13:40:0f:ef:db:d8:09:f5:19:b3:b2:f0: 72:2b:f0:2b:1b:b5:89:be:e0:0e:36:51:8b:f1:a2: 32:b1:34:83:11:4b:32:13:92:d5:26:6a:e0:1e:b1: 19:bd:26:c0:bc:78:ca:7a:d6:3f:1d:91:cb:2a:13: 9a:01:b2:bf:1d:10:de:53:15:94:8b:72:b7:b2:14: a5:b3:a3:be:a3:62:71:f9:76:e2:0e:71:e0:e7:32: da:af:d4:5e:14:f5:f3:5d:f3:1b:2e:bf:cc:70:d8: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.165.184.0/24 IPv6: 2602:f9f6::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27010 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:08:75:72:5c:b2:09:f6:d4:08:54:7c:dc:88:a5:de:33:3d: 3e:cf:7f:5f:9c:37:9e:51:95:61:90:2f:0f:43:79:2d:f4:03: b1:75:c4:3f:80:3d:8b:8f:11:cc:2f:13:82:7d:b5:e6:e6:ef: 26:4e:f5:2b:16:9b:a9:b3:73:27:0b:5b:79:de:91:a9:c9:86: 4e:bc:4a:8d:47:0c:ef:8d:b7:e1:ef:22:da:f0:08:89:db:c6: a8:18:9d:8c:f8:55:58:9f:98:43:01:31:7d:51:0a:18:7c:5e: b7:e4:4d:e4:ce:54:80:fe:2c:7d:8e:e5:7e:8f:04:28:c6:a8: 8d:39:e1:21:f7:a6:55:b6:fd:c0:b0:72:3c:ba:9f:d0:f9:3d: 79:d5:40:b9:66:f5:9b:df:b8:e9:b9:9a:5f:cd:88:85:dc:22: 5f:8d:38:a2:69:29:38:a8:dd:04:5d:4b:99:94:28:69:16:46: 01:5b:eb:9d:4d:51:b2:ab:af:3e:0d:f4:bf:2d:46:b3:0d:94: a0:f2:f9:aa:ba:91:37:07:aa:f6:a0:6c:73:03:31:95:85:42: 4e:4f:4b:7f:e7:86:5a:69:fc:37:97:95:27:7c:f0:f2:48:08: 78:5a:e1:b4:aa:38:28:0a:0d:f0:ab:73:d8:f9:52:a1:f1:ac: 26:b1:6f:09 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWERzwSBluwus+stP0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDEwNTEyMDYxM1oXDTI2MDIwNDA4MTYxOVowLzEtMCsGA1UEAxMk YTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2EwNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdn+kfiGatu7QaCEM87jDB433BDRbHV0J+Eq BivEIx1kJsGTAxy/zGODg4Io9XhPl6MB+BdxG67SCcE+B/mMozKuq9alDZBbroFI tDdRlcPBLtJO3DEhPHrrU0UaixK5ElEX43N5kVnD0wcJp0TEpJDDtYpbgO809sjy EwpXS4Mgjouk+QPJvYCrrohVl+o09okVHhneGv0TQA/v29gJ9RmzsvByK/ArG7WJ vuAONlGL8aIysTSDEUsyE5LVJmrgHrEZvSbAvHjKetY/HZHLKhOaAbK/HRDeUxWU i3K3shSls6O+o2Jx+XbiDnHg5zLar9ReFPXzXfMbLr/McNhBlQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJ8D5xpfQoLJ3uwLoR+QSPRXfaGZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h MjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2EyMzQ2NDlkLWFiNDktNDU4Yi1h NWUzLTc3NjVmZTdhMDY2Yy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3 YTA2NmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXpbgwDgQCAAIwCAMGBCYC+fYAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmmCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG4IdXJcsgn21AhUfNyIpd4zPT7P f1+cN55RlWGQLw9DeS30A7F1xD+APYuPEcwvE4J9tebm7yZO9SsWm6mzcycLW3ne kanJhk68So1HDO+Nt+HvItrwCInbxqgYnYz4VVifmEMBMX1RChh8XrfkTeTOVID+ LH2O5X6PBCjGqI054SH3plW2/cCwcjy6n9D5PXnVQLlm9ZvfuOm5ml/NiIXcIl+N OKJpKTio3QRdS5mUKGkWRgFb651NUbKrrz4N9L8tRrMNlKDy+aq6kTcHqvagbHMD MZWFQk5PS3/nhlpp/DeXlSd88PJICHha4bSqOCgKDfCrc9j5UqHxrCaxbwk= -----END CERTIFICATE-----Generated at Tue Dec 10 17:16:03 2024 by rpki-client on console-fra.rpki-client.org