$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa.cer File: e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa.cer (raw, json) Hash identifier: kvY6vhzTlPQMxg+/obcaFDIwh/2kW+h5qY2mtkOF2Bs= Subject key identifier: 4D:AB:D8:38:36:75:44:BD:9F:6A:96:78:95:D7:58:CF:0F:E0:4A:16 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858441AF8CA3B025168E1C8562100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Dec 2023 16:51:26 +0000 Certificate not after: Sun 08 Mar 2026 15:51:26 +0000 Subordinate resources: AS: 14810 IP: 198.137.154.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:1a:f8:ca:3b:02:51:68:e1:c8:56:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 4 16:51:26 2023 GMT Not After : Mar 8 15:51:26 2026 GMT Subject: CN=e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:b6:64:42:ad:41:0f:cf:16:c8:a5:df:aa: 77:33:bf:47:d6:f3:d1:4a:8f:00:f1:78:a0:0b:42: cf:9a:c4:1c:da:eb:d6:c6:c3:26:3b:2d:78:5f:f0: 28:6c:20:9b:22:59:d9:26:b5:9e:9f:1d:c3:9a:1b: 55:9e:14:57:75:4d:5f:5a:2d:73:bd:f4:54:9e:5f: 49:c4:5c:af:f2:17:a0:cd:65:a8:83:e2:30:4f:7e: 0e:29:d0:6a:ef:d1:db:df:21:c5:2f:2d:70:71:01: f7:bb:d4:31:cf:24:71:ca:f9:86:8e:3b:55:56:87: 6c:34:20:7b:a8:7c:7b:e3:57:4a:de:f7:25:28:de: 15:ca:ab:6c:67:b1:2a:12:01:5e:9c:77:75:98:f6: 17:b8:84:e0:b2:d8:21:ae:58:f1:e1:b6:4a:e3:d5: f0:5e:0f:ee:13:ad:d9:0c:1b:b8:74:2b:78:b2:77: 34:1d:9a:e8:2e:36:5b:a1:2d:59:e0:3e:d7:77:5b: 81:5a:d3:8d:ab:2c:f9:87:96:72:25:24:d4:dd:0b: bc:ed:4b:31:48:71:48:3a:c9:48:77:ca:93:7f:82: 84:1c:bf:63:65:03:83:c1:81:14:c3:e1:c4:a0:55: 3e:2b:a6:e7:82:1d:cd:e5:07:c7:10:04:24:98:02: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AB:D8:38:36:75:44:BD:9F:6A:96:78:95:D7:58:CF:0F:E0:4A:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa/e8cc2e22-5ea2-44c9-b2f7-5d0b6a53fdaa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 198.137.154.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14810 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:26:fc:f3:cf:d8:53:21:5d:cc:05:f7:de:a1:60:98:5e:48: 7d:fa:ce:3d:20:65:bf:3b:91:e9:a3:a8:90:7e:f9:38:19:54: e6:b2:d7:c7:2d:48:73:a3:af:7d:f0:97:e9:32:12:09:87:fa: 97:5c:89:64:a3:f0:a7:c8:6f:26:3d:40:4f:05:a2:d4:27:54: 28:8a:29:a0:6d:43:a8:de:1a:d8:4f:ee:54:9f:95:83:f9:46: e6:17:db:cd:4a:6c:d0:22:1a:8f:d4:ec:3e:96:31:1b:25:06: 2b:e3:e5:e3:45:92:64:37:2f:c2:74:27:47:12:7c:1b:f3:22: 99:97:7a:44:24:ba:6c:ab:e8:6b:e1:9d:e5:27:c7:0e:1c:21: 71:57:56:8f:f0:9e:bd:f2:82:03:70:1a:b3:28:79:eb:90:da: e0:b7:35:f1:56:4a:5a:6d:49:8d:a0:57:70:04:c8:e6:ca:11: 21:78:87:99:37:04:a1:20:db:8c:2a:06:5b:7b:1e:86:06:06: 89:cd:ef:fd:ee:79:ba:c1:cc:ea:17:b4:05:c6:e0:d5:b4:65: e4:dc:2d:57:cf:b5:45:7c:63:bd:21:ba:d4:32:0d:f6:ac:7c: 7e:57:82:a1:74:e9:61:54:31:49:70:23:69:22:99:9c:b4:f2: 86:bb:8d:60 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEQa+Mo7AlFo4chWIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTIwNDE2NTEyNloXDTI2MDMwODE1NTEyNlowLzEtMCsGA1UEAxMk ZThjYzJlMjItNWVhMi00NGM5LWIyZjctNWQwYjZhNTNmZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydC2ZEKtQQ/PFsil36p3M79H1vPRSo8A8Xig C0LPmsQc2uvWxsMmOy14X/AobCCbIlnZJrWenx3DmhtVnhRXdU1fWi1zvfRUnl9J xFyv8hegzWWog+IwT34OKdBq79Hb3yHFLy1wcQH3u9QxzyRxyvmGjjtVVodsNCB7 qHx741dK3vclKN4VyqtsZ7EqEgFenHd1mPYXuITgstghrljx4bZK49XwXg/uE63Z DBu4dCt4snc0HZroLjZboS1Z4D7Xd1uBWtONqyz5h5ZyJSTU3Qu87UsxSHFIOslI d8qTf4KEHL9jZQODwYEUw+HEoFU+K6bngh3N5QfHEAQkmAJ6WwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFE2r2Dg2dUS9n2qWeJXXWM8P4EoWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l OGNjMmUyMi01ZWEyLTQ0YzktYjJmNy01ZDBiNmE1M2ZkYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2U4Y2MyZTIyLTVlYTItNDRjOS1i MmY3LTVkMGI2YTUzZmRhYS9lOGNjMmUyMi01ZWEyLTQ0YzktYjJmNy01ZDBiNmE1 M2ZkYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGiZowGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC OdowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAKyb888/YUyFdzAX33qFgmF5IffrOPSBlvzuR6aOokH75OBlU 5rLXxy1Ic6OvffCX6TISCYf6l1yJZKPwp8hvJj1ATwWi1CdUKIopoG1DqN4a2E/u VJ+Vg/lG5hfbzUps0CIaj9TsPpYxGyUGK+Pl40WSZDcvwnQnRxJ8G/MimZd6RCS6 bKvoa+Gd5SfHDhwhcVdWj/CevfKCA3Aasyh565Da4Lc18VZKWm1JjaBXcATI5soR IXiHmTcEoSDbjCoGW3sehgYGic3v/e55usHM6he0Bcbg1bRl5NwtV8+1RXxjvSG6 1DIN9qx8fleCoXTpYVQxSXAjaSKZnLTyhruNYA== -----END CERTIFICATE-----Generated at Fri May 10 16:55:57 2024 by rpki-client on console-ams.rpki-client.org