$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer File: dd89d034-c049-4b11-917d-e035f703312f.cer (raw, json) Hash identifier: fYAGUIRarTJ2IzvHjDsQ7MoPN+D0XCcRQsvjHGljl5c= Subject key identifier: FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285843C48F9DF596668A58C5B6B4A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Nov 2023 18:00:00 +0000 Certificate not after: Thu 05 Feb 2026 19:00:00 +0000 Subordinate resources: AS: 13394 IP: 204.63.214.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:c4:8f:9d:f5:96:66:8a:58:c5:b6:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Nov 3 18:00:00 2023 GMT Not After : Feb 5 19:00:00 2026 GMT Subject: CN=dd89d034-c049-4b11-917d-e035f703312f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:04:9d:76:c6:fd:ab:8e:cd:d9:bd:e0:2b:05: 51:8e:5e:e7:ec:24:e0:4b:e1:6e:2a:e5:a2:42:f2: 19:be:71:26:b9:0b:44:13:33:05:55:65:e8:b9:a7: ac:0e:33:00:be:e3:7c:56:e7:06:a7:b2:cb:0e:dd: 73:12:84:94:85:be:36:24:1f:cd:bf:f7:45:62:b8: 5a:33:ca:36:00:dd:a9:14:d5:1c:3f:10:18:30:c3: 1a:36:41:df:a4:3a:10:c6:60:d9:1f:09:76:7d:50: 56:6f:57:f6:ae:31:d3:c1:b7:81:35:f6:8d:0e:53: 3f:94:6b:8e:bf:50:82:26:f9:95:5c:ed:2e:98:66: cf:92:b9:50:dc:ab:d1:a2:88:41:c4:d8:e7:d2:20: 93:0a:d4:1f:69:b9:e6:92:93:9e:48:30:0f:5d:eb: 95:5f:29:e8:4a:5b:1b:ee:dd:c4:86:7c:4f:fc:bb: 0d:90:27:d3:90:59:69:fa:ca:46:bc:43:aa:90:86: 72:80:60:d5:2a:4e:4c:0b:73:88:77:e6:5e:70:09: aa:53:87:cf:10:da:ee:38:c7:c6:f6:42:af:46:ca: 21:65:0e:d9:03:7c:66:b1:22:60:a7:71:27:6d:ee: bd:dd:52:8a:64:46:ad:ad:86:28:c9:60:5b:69:98: 45:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.63.214.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13394 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:22:2f:d7:49:27:5b:f4:a2:29:6d:cd:46:84:9a:9b:1a:8b: 94:86:10:7a:8d:ac:2f:45:fa:96:8d:ac:cb:23:7e:9d:0f:e2: bf:b7:99:fe:9b:61:71:65:a1:bc:99:df:d9:29:c3:9d:da:26: 6b:25:9d:6e:f4:4b:cf:e6:4e:e3:cf:57:c6:d3:e3:92:5e:52: 3e:97:aa:d7:b8:48:7b:dc:8a:68:e7:2f:ac:89:59:a2:d3:18: 27:c8:6f:75:51:90:df:63:2a:ed:30:40:fe:ae:7e:d6:89:23: 57:62:54:96:78:5f:ee:35:24:66:b6:88:81:e7:17:f0:0e:08: 77:f2:61:ef:3f:7c:29:c3:f5:ce:fb:5b:5b:36:33:6e:65:52: d4:af:3c:ad:a7:40:22:c7:14:e9:f0:15:c0:65:2f:2f:9e:c7: f2:36:f8:53:1b:c1:7a:4e:3f:95:3a:54:6e:bb:a7:6c:46:a1: b5:6f:ec:59:49:f7:f1:f9:9d:ab:98:d6:ac:52:39:80:a0:64: 87:89:45:9d:34:4b:1a:a2:bb:66:8e:e5:55:ba:bf:0b:5a:69: 6a:aa:1d:50:87:73:5f:45:f0:64:2e:e2:9c:40:b1:54:63:34: ba:cc:82:15:df:c3:83:ab:c2:19:3b:fa:c0:0f:1b:53:8f:80: 17:11:94:ab -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEPEj531lmaKWMW2tKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTEwMzE4MDAwMFoXDTI2MDIwNTE5MDAwMFowLzEtMCsGA1UEAxMk ZGQ4OWQwMzQtYzA0OS00YjExLTkxN2QtZTAzNWY3MDMzMTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgSddsb9q47N2b3gKwVRjl7n7CTgS+FuKuWi QvIZvnEmuQtEEzMFVWXouaesDjMAvuN8VucGp7LLDt1zEoSUhb42JB/Nv/dFYrha M8o2AN2pFNUcPxAYMMMaNkHfpDoQxmDZHwl2fVBWb1f2rjHTwbeBNfaNDlM/lGuO v1CCJvmVXO0umGbPkrlQ3KvRoohBxNjn0iCTCtQfabnmkpOeSDAPXeuVXynoSlsb 7t3EhnxP/LsNkCfTkFlp+spGvEOqkIZygGDVKk5MC3OId+ZecAmqU4fPENruOMfG 9kKvRsohZQ7ZA3xmsSJgp3Enbe693VKKZEatrYYoyWBbaZhFsQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFP0tNszs7gDcKWQmqHwvrOYfDrH4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9k ZDg5ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1ZjcwMzMxMmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2RkODlkMDM0LWMwNDktNGIxMS05 MTdkLWUwMzVmNzAzMzEyZi9kZDg5ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1Zjcw MzMxMmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHMP9YwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC NFIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAOyIv10knW/SiKW3NRoSamxqLlIYQeo2sL0X6lo2syyN+nQ/i v7eZ/pthcWWhvJnf2SnDndomayWdbvRLz+ZO489XxtPjkl5SPpeq17hIe9yKaOcv rIlZotMYJ8hvdVGQ32Mq7TBA/q5+1okjV2JUlnhf7jUkZraIgecX8A4Id/Jh7z98 KcP1zvtbWzYzbmVS1K88radAIscU6fAVwGUvL57H8jb4UxvBek4/lTpUbrunbEah tW/sWUn38fmdq5jWrFI5gKBkh4lFnTRLGqK7Zo7lVbq/C1ppaqodUIdzX0XwZC7i nECxVGM0usyCFd/Dg6vCGTv6wA8bU4+AFxGUqw== -----END CERTIFICATE-----Generated at Fri May 10 16:55:52 2024 by rpki-client on console-ams.rpki-client.org