$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.cer File: e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.cer (raw, json) Hash identifier: imNXuh7d0UuqENWT9PfvWc5WVr8NjDTujAXaZDAWrT0= Subject key identifier: F3:74:EC:C0:46:EC:23:1A:2A:E1:0E:EC:4C:C7:D2:B3:D6:3D:6C:78 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285843FC807FBD262DADD62E1BA280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Nov 2023 18:54:49 +0000 Certificate not after: Wed 25 Feb 2026 18:54:49 +0000 Subordinate resources: IP: 192.197.128.0/24 IP: 199.185.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:fc:80:7f:bd:26:2d:ad:d6:2e:1b:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Nov 23 18:54:49 2023 GMT Not After : Feb 25 18:54:49 2026 GMT Subject: CN=e4e79c76-1a66-4449-a2b2-acc3c7eee9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:25:45:48:7f:f8:4d:d5:2b:35:9f:69:9b: 94:a7:f8:05:ec:f2:08:3d:18:39:91:ce:b7:76:7d: d5:5d:a0:89:e8:6e:b2:e0:ed:59:ca:96:b3:d6:f4: ef:09:c0:99:be:bd:b3:25:60:e3:30:b4:64:92:56: 7d:15:f9:11:87:75:02:d5:23:17:29:88:cd:7d:01: 05:bc:1e:a4:b1:a3:a2:8b:e1:b6:30:ec:f3:8e:00: 45:36:3c:57:97:8a:06:44:62:68:80:97:ee:1c:6e: 7b:64:92:e7:fb:64:9c:d9:84:90:8c:07:67:25:27: 72:ce:84:a8:26:b3:77:09:25:69:e2:f5:8b:b8:8f: 08:1a:6e:91:01:9b:da:9f:64:c8:6a:d5:8d:35:f2: de:89:c2:0f:69:a4:5a:c8:93:c9:17:21:e1:fa:51: d4:1c:51:24:5b:ba:f6:a4:4e:ba:d2:97:ef:45:3f: 27:47:e4:3e:d6:58:4a:af:e2:70:61:22:44:e1:a9: 18:28:8b:46:db:15:89:1c:09:2c:43:b0:6f:0c:5a: ed:af:48:0d:b1:f3:d4:37:0a:41:68:01:eb:45:eb: cd:3a:d3:e0:4b:ea:98:ee:d6:89:c0:a8:ab:ae:d9: 45:36:ca:cd:ee:58:ce:fd:79:22:c3:eb:cc:67:2e: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:74:EC:C0:46:EC:23:1A:2A:E1:0E:EC:4C:C7:D2:B3:D6:3D:6C:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab/e4e79c76-1a66-4449-a2b2-acc3c7eee9ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.197.128.0/24 199.185.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:77:5c:96:ba:a0:d8:cf:71:a9:f7:13:3b:cc:2a:5b:74:7d: e2:e0:10:3f:a2:59:93:ba:c8:3d:1a:8b:de:81:04:c6:d3:41: db:be:12:a7:bd:56:9b:98:c4:7e:12:c8:42:5b:c9:77:ac:18: e5:c9:25:3a:9f:7f:0f:e8:23:57:d9:e7:10:a4:0a:df:65:1a: 06:bc:ef:84:30:15:c7:43:ce:38:b1:33:1d:69:15:57:ef:26: 2d:15:15:6a:9e:2d:ec:72:44:2e:fc:14:06:cd:11:aa:a9:b1: 61:59:fa:cb:8b:a5:8b:f2:a6:20:00:04:c8:87:c6:a5:26:2c: 0f:02:8c:d8:dd:60:99:b4:29:77:f6:a7:f0:5f:a3:a6:7b:02: 37:bf:97:e0:f2:e4:1b:4c:02:8b:95:40:f2:f0:57:b1:2a:f2: 54:24:cc:1f:b7:6f:0d:44:d8:40:b6:13:8d:ff:e7:80:91:db: c5:a2:0f:9c:92:7e:43:59:c5:d3:72:96:85:75:02:12:42:9a: 27:58:c3:44:bb:98:60:e7:67:40:94:97:03:7d:c6:ef:8c:fc: 80:36:0b:ca:b4:17:fd:b4:68:51:8c:bd:44:6e:30:56:87:08: b0:a6:6c:6c:af:c1:85:00:21:5c:0b:eb:63:98:c4:6c:4a:a8: dc:51:c6:ac -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEP8gH+9Ji2t1i4booAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTEyMzE4NTQ0OVoXDTI2MDIyNTE4NTQ0OVowLzEtMCsGA1UEAxMk ZTRlNzljNzYtMWE2Ni00NDQ5LWEyYjItYWNjM2M3ZWVlOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+QlRUh/+E3VKzWfaZuUp/gF7PIIPRg5kc63 dn3VXaCJ6G6y4O1Zypaz1vTvCcCZvr2zJWDjMLRkklZ9FfkRh3UC1SMXKYjNfQEF vB6ksaOii+G2MOzzjgBFNjxXl4oGRGJogJfuHG57ZJLn+2Sc2YSQjAdnJSdyzoSo JrN3CSVp4vWLuI8IGm6RAZvan2TIatWNNfLeicIPaaRayJPJFyHh+lHUHFEkW7r2 pE660pfvRT8nR+Q+1lhKr+JwYSJE4akYKItG2xWJHAksQ7BvDFrtr0gNsfPUNwpB aAHrRevNOtPgS+qY7taJwKirrtlFNsrN7ljO/Xkiw+vMZy6kvQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFPN07MBG7CMaKuEO7EzH0rPWPWx4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l NGU3OWM3Ni0xYTY2LTQ0NDktYTJiMi1hY2MzYzdlZWU5YWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2U0ZTc5Yzc2LTFhNjYtNDQ0OS1h MmIyLWFjYzNjN2VlZTlhYi9lNGU3OWM3Ni0xYTY2LTQ0NDktYTJiMi1hY2MzYzdl ZWU5YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAxYADBAXHuSAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjHdclrqg2M9x qfcTO8wqW3R94uAQP6JZk7rIPRqL3oEExtNB274Sp71Wm5jEfhLIQlvJd6wY5ckl Op9/D+gjV9nnEKQK32UaBrzvhDAVx0POOLEzHWkVV+8mLRUVap4t7HJELvwUBs0R qqmxYVn6y4uli/KmIAAEyIfGpSYsDwKM2N1gmbQpd/an8F+jpnsCN7+X4PLkG0wC i5VA8vBXsSryVCTMH7dvDUTYQLYTjf/ngJHbxaIPnJJ+Q1nF03KWhXUCEkKaJ1jD RLuYYOdnQJSXA33G74z8gDYLyrQX/bRoUYy9RG4wVocIsKZsbK/BhQAhXAvrY5jE bEqo3FHGrA== -----END CERTIFICATE-----Generated at Sat May 11 15:36:01 2024 by rpki-client on console-fra.rpki-client.org