$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.cer File: cd870e0a-cc0e-44e5-9569-1ea2c38048dc.cer (raw, json) Hash identifier: fdNpD5I7q2mkwfc4bbiY6fhQswS4O4W21SGb27+owHY= Subject key identifier: 74:AB:0D:8B:C7:D2:D7:51:CE:41:86:F2:28:99:0F:A5:10:01:67:1B Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285844D62FB2BC9565CFEAB51FC600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Feb 2024 18:18:14 +0000 Certificate not after: Fri 26 Dec 2025 13:02:09 +0000 Subordinate resources: AS: 19620 IP: 23.162.136.0/24 IP: 2602:f97f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d6:2f:b2:bc:95:65:cf:ea:b5:1f:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 9 18:18:14 2024 GMT Not After : Dec 26 13:02:09 2025 GMT Subject: CN=cd870e0a-cc0e-44e5-9569-1ea2c38048dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ec:89:bc:73:f9:20:33:24:0c:c2:54:21:b6: 20:cf:9e:a7:fc:c3:db:5b:0a:f3:72:4a:e0:81:df: 85:d3:6c:6f:25:68:40:53:5a:29:b4:c8:04:40:50: 13:f3:5d:91:89:2a:95:0c:01:cc:39:fb:ef:f1:8f: 97:d9:d8:28:ca:f2:ff:51:6a:51:2c:7f:ed:cd:0f: a8:3c:8b:10:49:27:ea:21:b8:13:ca:a7:1d:96:ed: 81:3a:28:98:fb:ee:4a:9b:0f:b0:b9:a9:f3:e0:57: 14:8d:94:15:1a:18:d5:59:6a:bf:7f:6c:56:94:ff: 85:f4:78:cf:4b:e3:8f:fc:7b:2d:59:a6:3e:22:0b: 12:d3:33:85:6d:19:79:d6:30:7e:df:ac:b8:7c:45: d1:9f:84:b0:92:0c:5f:24:c2:af:60:92:60:8f:97: 3a:a2:54:c4:3c:2d:58:32:56:a0:40:3a:0e:fe:4a: 97:26:00:83:77:7a:ac:44:ba:5c:d3:6f:61:21:22: 91:5a:f7:7d:10:55:37:d1:91:6e:15:47:e7:bc:3d: 8f:59:67:31:91:ec:d8:16:5e:52:64:e6:0b:f6:61: 2e:34:b5:bc:d6:55:75:05:7d:06:49:fe:5a:e2:58: 3e:b3:12:03:9c:3f:e4:6a:91:4f:49:e4:dd:f7:f1: 98:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AB:0D:8B:C7:D2:D7:51:CE:41:86:F2:28:99:0F:A5:10:01:67:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd870e0a-cc0e-44e5-9569-1ea2c38048dc/cd870e0a-cc0e-44e5-9569-1ea2c38048dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.162.136.0/24 IPv6: 2602:f97f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19620 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:fe:f0:f4:43:1d:d8:e2:e2:ed:23:59:52:57:c2:8a:84:6e: d6:fd:26:91:1f:8f:ce:c7:48:ed:81:5e:65:18:1c:98:83:53: 67:6f:4c:b3:fc:2a:00:ee:dc:d9:b0:79:9a:71:9b:e5:ce:38: 6b:5f:bf:0c:43:6c:c9:84:4f:7a:78:ab:4b:59:2f:ad:be:18: cc:1d:05:aa:25:cb:4e:58:a5:a3:b5:02:67:26:78:20:a8:05: b7:24:5d:52:6b:ac:93:c1:2d:8e:6f:dd:af:f9:0e:d0:98:87: 52:56:96:a5:54:cd:1d:23:2b:0f:85:4a:51:bd:46:87:ba:e3: 4b:4e:e9:16:41:71:9e:03:8a:ae:6f:4a:63:4c:b1:41:01:ef: 7f:86:3e:14:a6:78:e4:39:37:ff:01:83:33:be:d1:df:6e:21: e0:d6:e3:7c:bb:d7:94:b9:82:a3:c4:15:60:89:db:ff:81:58: 3d:2b:07:e2:77:00:d8:c4:7f:55:be:13:52:1f:dd:42:1f:2a: 8c:63:fd:23:83:e0:8d:00:8e:b1:60:fd:03:c5:1a:0d:eb:8d: 1e:a0:c3:d9:28:da:06:4b:57:47:c8:d7:c8:67:3d:20:7e:b2: 34:5d:87:ff:20:61:cc:fa:f4:79:d1:9f:50:6e:28:31:30:b5: fa:f2:8a:8a -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWETWL7K8lWXP6rUfxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDIwOTE4MTgxNFoXDTI1MTIyNjEzMDIwOVowLzEtMCsGA1UEAxMk Y2Q4NzBlMGEtY2MwZS00NGU1LTk1NjktMWVhMmMzODA0OGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeyJvHP5IDMkDMJUIbYgz56n/MPbWwrzckrg gd+F02xvJWhAU1optMgEQFAT812RiSqVDAHMOfvv8Y+X2dgoyvL/UWpRLH/tzQ+o PIsQSSfqIbgTyqcdlu2BOiiY++5Kmw+wuanz4FcUjZQVGhjVWWq/f2xWlP+F9HjP S+OP/HstWaY+IgsS0zOFbRl51jB+36y4fEXRn4SwkgxfJMKvYJJgj5c6olTEPC1Y MlagQDoO/kqXJgCDd3qsRLpc029hISKRWvd9EFU30ZFuFUfnvD2PWWcxkezYFl5S ZOYL9mEuNLW81lV1BX0GSf5a4lg+sxIDnD/kapFPSeTd9/GYAwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFHSrDYvH0tdRzkGG8iiZD6UQAWcbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j ZDg3MGUwYS1jYzBlLTQ0ZTUtOTU2OS0xZWEyYzM4MDQ4ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2NkODcwZTBhLWNjMGUtNDRlNS05 NTY5LTFlYTJjMzgwNDhkYy9jZDg3MGUwYS1jYzBlLTQ0ZTUtOTU2OS0xZWEyYzM4 MDQ4ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXoogwDgQCAAIwCAMGACYC+X8AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkykMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGr+8PRDHdji4u0jWVJXwoqEbtb9 JpEfj87HSO2BXmUYHJiDU2dvTLP8KgDu3NmweZpxm+XOOGtfvwxDbMmET3p4q0tZ L62+GMwdBaoly05YpaO1AmcmeCCoBbckXVJrrJPBLY5v3a/5DtCYh1JWlqVUzR0j Kw+FSlG9Roe640tO6RZBcZ4Diq5vSmNMsUEB73+GPhSmeOQ5N/8BgzO+0d9uIeDW 43y715S5gqPEFWCJ2/+BWD0rB+J3ANjEf1W+E1If3UIfKoxj/SOD4I0AjrFg/QPF Gg3rjR6gw9ko2gZLV0fI18hnPSB+sjRdh/8gYcz69HnRn1BuKDEwtfryioo= -----END CERTIFICATE-----Generated at Fri May 10 17:25:44 2024 by rpki-client on console-fra.rpki-client.org