$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4.cer File: d0df77c4-4a94-461b-9582-441eb75796a4.cer (raw, json) Hash identifier: A0Qid7h6DGcjlz0Y4fWGjgnHDctPcuBfdDT6QkDXi5A= Subject key identifier: DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858441E2604067B28F3E23D131100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Dec 2023 20:09:59 +0000 Certificate not after: Mon 09 Mar 2026 19:09:59 +0000 Subordinate resources: IP: 192.139.35.0/24 IP: 206.108.10.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:1e:26:04:06:7b:28:f3:e2:3d:13:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 5 20:09:59 2023 GMT Not After : Mar 9 19:09:59 2026 GMT Subject: CN=d0df77c4-4a94-461b-9582-441eb75796a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d5:d4:1a:a1:19:40:46:f1:e3:8f:77:ee:7e: cc:f8:68:b2:7e:50:ef:85:e2:82:ca:8f:ab:72:e0: b9:2d:6f:e0:95:9e:3d:a7:42:a9:85:68:a0:cb:35: 4c:9e:d8:68:3d:8d:c1:70:5a:68:a0:56:0b:1d:c5: 6c:72:3c:d6:a1:3d:d2:09:8f:bd:71:c3:89:a7:19: eb:85:84:b2:0b:4a:b9:26:17:2d:fd:20:16:b1:63: 91:a8:b3:f5:c9:2b:c3:52:7b:b1:95:8f:dc:1a:73: e6:09:b3:bd:b1:09:76:e6:7e:d9:37:a8:97:ec:b7: cf:4e:cb:02:e3:a0:fc:f5:d5:22:8d:d5:f6:11:81: 0c:50:d7:25:1d:d7:b2:12:71:82:3d:c8:c7:bb:97: e1:b5:3b:a7:fa:d0:54:e1:dc:c2:70:f9:d6:99:ca: 36:8a:27:6f:91:78:aa:ce:19:09:ae:a3:5d:db:a3: 5b:ac:a4:89:a4:b2:0c:5a:ea:43:d6:db:e4:9e:01: d3:04:de:70:f5:38:1d:90:dc:0f:08:10:f5:33:6a: 5b:b3:5a:78:9e:06:91:e1:de:9e:d5:12:2e:ac:b6: cb:1b:3f:48:16:80:f9:cb:fd:d6:e2:6e:44:09:9c: 5c:1c:ae:6d:d3:5d:19:47:22:ad:76:28:06:0d:13: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:61:E4:DF:36:71:36:8A:15:61:50:4B:93:78:46:05:F0:7B:C9:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0df77c4-4a94-461b-9582-441eb75796a4/d0df77c4-4a94-461b-9582-441eb75796a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.139.35.0/24 206.108.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:bb:df:c9:7d:bc:3d:c0:e1:ff:8d:01:19:d0:89:30:a6:37: 0d:d4:ec:4d:46:b0:91:69:d9:04:c5:7c:38:02:09:05:ef:61: dd:bc:75:f1:8d:55:04:81:5b:1f:d5:ce:3d:3b:8a:ec:84:af: 8a:62:64:53:c3:d0:ff:27:3c:dd:fb:c7:d1:6a:52:93:ff:6c: 05:d9:53:12:37:99:b4:fd:4c:bf:fe:b0:3e:3e:13:c6:77:05: e0:ff:1e:d7:d7:15:3f:ec:27:b6:c4:b6:50:23:3f:7c:68:d0: ee:5c:1d:f8:79:cf:46:f4:ae:7d:ab:78:65:88:ad:7d:69:6e: 75:9b:09:4a:40:01:39:5f:ab:c0:57:26:94:c4:28:16:83:7b: bc:41:50:14:5a:77:0a:63:74:8a:7c:4e:6c:ed:0d:94:66:a1: 7a:00:31:5e:0c:10:21:cd:89:39:1a:7b:8c:ee:1c:f6:25:de: e6:fd:33:17:9c:4c:26:5c:71:84:21:cb:66:91:4d:72:92:09: c1:4f:e4:fd:9c:18:e4:28:c8:8d:bc:5e:11:a5:9d:7b:2c:87: 4f:bd:5d:d2:a3:0b:0d:9c:43:0d:cb:d3:71:85:da:f0:36:29: 75:49:26:c8:d6:99:6d:ea:19:3f:f3:23:95:ec:4b:68:32:c0: 70:fa:c2:a1 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEQeJgQGeyjz4j0TEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTIwNTIwMDk1OVoXDTI2MDMwOTE5MDk1OVowLzEtMCsGA1UEAxMk ZDBkZjc3YzQtNGE5NC00NjFiLTk1ODItNDQxZWI3NTc5NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidXUGqEZQEbx44937n7M+GiyflDvheKCyo+r cuC5LW/glZ49p0KphWigyzVMnthoPY3BcFpooFYLHcVscjzWoT3SCY+9ccOJpxnr hYSyC0q5Jhct/SAWsWORqLP1ySvDUnuxlY/cGnPmCbO9sQl25n7ZN6iX7LfPTssC 46D89dUijdX2EYEMUNclHdeyEnGCPcjHu5fhtTun+tBU4dzCcPnWmco2iidvkXiq zhkJrqNd26NbrKSJpLIMWupD1tvkngHTBN5w9TgdkNwPCBD1M2pbs1p4ngaR4d6e 1RIurLbLGz9IFoD5y/3W4m5ECZxcHK5t010ZRyKtdigGDRMfbwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFNph5N82cTaKFWFQS5N4RgXwe8n8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k MGRmNzdjNC00YTk0LTQ2MWItOTU4Mi00NDFlYjc1Nzk2YTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2QwZGY3N2M0LTRhOTQtNDYxYi05 NTgyLTQ0MWViNzU3OTZhNC9kMGRmNzdjNC00YTk0LTQ2MWItOTU4Mi00NDFlYjc1 Nzk2YTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAiyMDBAHObAowVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXLvfyX28PcDh /40BGdCJMKY3DdTsTUawkWnZBMV8OAIJBe9h3bx18Y1VBIFbH9XOPTuK7ISvimJk U8PQ/yc83fvH0WpSk/9sBdlTEjeZtP1Mv/6wPj4TxncF4P8e19cVP+wntsS2UCM/ fGjQ7lwd+HnPRvSufat4ZYitfWludZsJSkABOV+rwFcmlMQoFoN7vEFQFFp3CmN0 inxObO0NlGahegAxXgwQIc2JORp7jO4c9iXe5v0zF5xMJlxxhCHLZpFNcpIJwU/k /ZwY5CjIjbxeEaWdeyyHT71d0qMLDZxDDcvTcYXa8DYpdUkmyNaZbeoZP/MjlexL aDLAcPrCoQ== -----END CERTIFICATE-----Generated at Fri May 10 16:55:52 2024 by rpki-client on console-ams.rpki-client.org