$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer File: e85794f9-a8df-4d59-8974-f686e8987f1b.cer (raw, json) Hash identifier: LffcIAuDFRZd2JF5TYqqWntGkiL9oA0IQ+3XkF0x52E= Subject key identifier: 42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584389674AE5CFD33D17514AD1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Oct 2023 13:26:04 +0000 Certificate not after: Thu 15 Jan 2026 14:26:04 +0000 Subordinate resources: IP: 205.237.8.0 -- 205.237.19.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:89:67:4a:e5:cf:d3:3d:17:51:4a:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 13 13:26:04 2023 GMT Not After : Jan 15 14:26:04 2026 GMT Subject: CN=e85794f9-a8df-4d59-8974-f686e8987f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:a4:a3:49:2f:f0:e9:b4:85:9f:90:38:e9: 94:dc:6f:6e:70:f0:f9:41:0f:7b:e1:82:26:4b:e1: 89:8d:62:d0:01:f3:7f:1f:e6:71:8b:f5:bc:c7:70: a7:ec:f5:d6:52:26:2b:ba:20:84:2b:a0:10:66:c6: 56:0c:6f:e7:a4:7d:0b:7d:64:64:cc:37:4f:7c:5d: 4e:cb:ab:d3:e5:5e:42:1a:25:cc:8d:ca:5d:78:ee: 23:af:ca:1c:6f:c2:d0:70:c5:2f:4f:2d:69:e0:fa: 57:f6:89:b2:61:fe:c9:0f:dd:dc:bd:a5:f3:e4:84: ab:4d:d2:00:54:41:1b:89:53:f6:15:36:37:db:0b: 06:d6:83:ec:14:ff:91:8c:31:6e:00:e1:94:df:76: 83:d6:b6:c3:af:50:c9:64:4d:1f:56:20:42:a2:b9: ef:49:4e:2e:d3:6f:3a:d7:cd:df:1c:f0:17:6e:61: 2b:75:b9:74:bd:24:ee:28:3f:fa:83:06:0e:cc:0a: a6:48:c4:5a:7f:79:47:04:ff:4e:96:a8:b6:66:c9: f0:9b:64:09:b8:3e:f8:7b:33:53:77:6b:56:f1:11: 59:be:07:75:ed:56:38:02:51:44:f3:13:ee:5e:91: 8f:c1:21:0d:9c:71:e2:a1:dd:e8:4a:8c:53:b0:8e: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 205.237.8.0-205.237.19.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:6c:6a:8d:de:55:e8:78:86:7f:34:f6:f3:6e:b3:37:1b:22: 0b:4b:a9:06:92:03:f3:95:e6:00:33:e0:f9:6b:1d:b9:5d:d6: c5:28:97:a3:2d:ad:0c:07:79:25:64:80:cf:1b:07:bd:45:de: 5b:75:26:bb:9f:a3:3c:df:e9:41:5e:ec:87:88:12:ac:5f:d5: b1:e3:5d:7e:24:c3:14:d1:c2:a8:63:a9:f8:a4:85:e2:fa:5a: ea:58:6b:ab:f0:10:36:60:3e:90:18:84:b8:df:02:13:9b:4d: 71:57:cf:4d:b4:d8:8c:a5:3b:1f:4c:50:84:55:a7:dc:ea:52: 7d:58:3e:66:81:92:d5:bc:4e:3c:db:aa:dc:f3:83:a7:3b:be: 28:44:8b:ba:a2:75:d3:89:ef:3e:91:0e:fb:f3:5a:68:3b:de: c9:0b:21:42:80:82:d4:f9:4a:4a:81:91:48:e3:62:2a:9a:8f: b5:45:5c:6f:5c:db:cf:7b:cd:d0:f5:b2:ca:84:ca:80:eb:f5: b9:ac:bf:47:6a:31:29:d9:c6:09:65:ba:29:d1:cc:7d:a9:d1: 1b:00:d1:f5:a2:e6:4e:e9:1c:ca:68:b2:cc:4b:72:6f:f5:bf: 90:f5:ce:da:06:3b:07:dd:fc:4f:a1:04:12:59:6b:5a:91:c2: c0:2b:0c:51 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEOJZ0rlz9M9F1FK0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTAxMzEzMjYwNFoXDTI2MDExNTE0MjYwNFowLzEtMCsGA1UEAxMk ZTg1Nzk0ZjktYThkZi00ZDU5LTg5NzQtZjY4NmU4OTg3ZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzCko0kv8Om0hZ+QOOmU3G9ucPD5QQ974YIm S+GJjWLQAfN/H+Zxi/W8x3Cn7PXWUiYruiCEK6AQZsZWDG/npH0LfWRkzDdPfF1O y6vT5V5CGiXMjcpdeO4jr8ocb8LQcMUvTy1p4PpX9omyYf7JD93cvaXz5ISrTdIA VEEbiVP2FTY32wsG1oPsFP+RjDFuAOGU33aD1rbDr1DJZE0fViBCornvSU4u0286 183fHPAXbmErdbl0vSTuKD/6gwYOzAqmSMRaf3lHBP9Olqi2Zsnwm2QJuD74ezNT d2tW8RFZvgd17VY4AlFE8xPuXpGPwSENnHHiod3oSoxTsI7mXQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFEIt9K+vk7xCxhxDe5wW+OfjyetSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l ODU3OTRmOS1hOGRmLTRkNTktODk3NC1mNjg2ZTg5ODdmMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2U4NTc5NGY5LWE4ZGYtNGQ1OS04 OTc0LWY2ODZlODk4N2YxYi9lODU3OTRmOS1hOGRmLTRkNTktODk3NC1mNjg2ZTg5 ODdmMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEA83tCAMEAs3tEDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADbGqN3lXo eIZ/NPbzbrM3GyILS6kGkgPzleYAM+D5ax25XdbFKJejLa0MB3klZIDPGwe9Rd5b dSa7n6M83+lBXuyHiBKsX9Wx411+JMMU0cKoY6n4pIXi+lrqWGur8BA2YD6QGIS4 3wITm01xV89NtNiMpTsfTFCEVafc6lJ9WD5mgZLVvE4826rc84OnO74oRIu6onXT ie8+kQ7781poO97JCyFCgILU+UpKgZFI42Iqmo+1RVxvXNvPe83Q9bLKhMqA6/W5 rL9HajEp2cYJZbop0cx9qdEbANH1ouZO6RzKaLLMS3Jv9b+Q9c7aBjsH3fxPoQQS WWtakcLAKwxR -----END CERTIFICATE-----Generated at Sat May 11 15:32:44 2024 by rpki-client on console-ams.rpki-client.org