$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39.cer File: edc5356b-bdd4-426e-b060-cd4202d71d39.cer (raw, json) Hash identifier: sgfzTw+rcluXK/3KoEJQadINb/TgBlu54doQkXkiOrg= Subject key identifier: 30:9C:39:E3:D4:2F:62:21:85:BB:C5:B1:C2:8F:61:94:6A:DE:17:0A Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858439D94E181C5A90BA19E3A3D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/edc5356b-bdd4-426e-b060-cd4202d71d39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Oct 2023 18:54:05 +0000 Certificate not after: Thu 22 Jan 2026 19:54:05 +0000 Subordinate resources: IP: 204.135.0.0/16 IP: 206.223.30.0/24 IP: 2620:119:4000::/36 IP: 2620:1bc::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:9d:94:e1:81:c5:a9:0b:a1:9e:3a:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 20 18:54:05 2023 GMT Not After : Jan 22 19:54:05 2026 GMT Subject: CN=edc5356b-bdd4-426e-b060-cd4202d71d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:35:5f:1d:3e:23:50:f7:ff:62:57:6b:fe:8c: 5c:45:2b:c9:01:8f:b1:eb:9e:10:d1:fb:f9:e0:1e: df:a2:31:69:16:fe:af:06:f2:c7:20:80:69:d7:34: 1c:af:a0:ad:51:d2:5e:5f:bd:17:90:e5:33:6d:e4: 3b:65:ed:15:fd:42:ed:45:0d:b5:7c:19:f4:1a:eb: fc:79:fb:95:d7:50:ed:df:87:4f:4f:00:62:dc:00: 30:f5:b9:e5:4b:71:e6:20:82:a3:e3:31:44:ef:fb: 1c:01:1d:17:d9:d3:17:bb:01:bc:d7:96:f2:63:e8: 28:a8:e8:b3:a5:4c:71:17:82:3c:24:3b:e3:22:fc: 96:02:55:b1:0b:3f:21:80:8d:cf:05:1c:1a:ad:b4: a9:8f:50:fe:b2:55:5a:70:08:2f:ec:9f:8f:58:7b: 1e:b7:61:b9:6d:88:b2:72:57:4c:b1:e1:c3:7c:bc: be:9f:64:23:87:2f:d3:65:6b:85:8d:a9:1b:47:33: ae:fe:95:a6:86:67:fd:e9:74:e3:91:e7:ff:51:5b: 7b:b6:aa:50:73:fb:a8:b7:c7:0b:f6:51:85:ba:2f: e4:d8:e4:aa:3e:52:fb:54:86:96:e0:00:c0:96:2b: f1:6d:a4:33:ae:f5:b0:79:68:99:6c:e5:2b:53:60: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9C:39:E3:D4:2F:62:21:85:BB:C5:B1:C2:8F:61:94:6A:DE:17:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/edc5356b-bdd4-426e-b060-cd4202d71d39/edc5356b-bdd4-426e-b060-cd4202d71d39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 204.135.0.0/16 206.223.30.0/24 IPv6: 2620:119:4000::/36 2620:1bc::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c6:e5:58:26:8b:fd:95:08:3c:60:8d:11:ad:90:74:66:06: 87:5c:41:1b:14:02:63:c3:7b:95:02:e5:86:27:45:fe:b2:1e: 87:e7:65:f6:a9:ea:4b:97:51:86:0d:1b:bf:ce:08:8a:15:da: 32:26:b4:cf:2f:8b:04:58:89:f3:4a:1c:e7:7e:86:f9:99:4c: 42:72:c0:29:e0:c8:51:10:25:ab:b5:0c:7e:35:56:00:88:92: 8e:e2:14:41:1d:4c:f6:86:6e:e5:7e:69:90:92:6c:7e:e4:95: ab:32:41:14:00:a3:9c:1f:44:e5:2b:ad:55:b2:65:da:57:6e: ea:af:55:af:f2:28:9f:a7:c2:21:86:0d:ad:74:96:5e:ca:89: ed:69:a9:d0:75:74:42:ea:4c:20:6c:e9:36:f3:c2:b1:b5:6f: 92:36:19:c1:56:30:82:c2:cb:ae:c3:da:18:8e:bf:70:4a:17: 8f:91:91:fe:13:c4:6c:08:7e:e4:e2:33:91:b7:e3:33:de:75: 75:50:f5:c9:63:33:1b:fb:1d:ec:0b:f5:d7:f0:75:38:55:84: 1a:b7:19:09:fa:96:a5:2b:e8:78:43:9d:1e:48:b9:85:af:03: e7:75:76:53:28:5c:fe:29:2d:64:61:62:c0:55:2e:b1:fd:41: 3a:7f:1b:05 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEOdlOGBxakLoZ46PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTAyMDE4NTQwNVoXDTI2MDEyMjE5NTQwNVowLzEtMCsGA1UEAxMk ZWRjNTM1NmItYmRkNC00MjZlLWIwNjAtY2Q0MjAyZDcxZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjVfHT4jUPf/Yldr/oxcRSvJAY+x654Q0fv5 4B7fojFpFv6vBvLHIIBp1zQcr6CtUdJeX70XkOUzbeQ7Ze0V/ULtRQ21fBn0Guv8 efuV11Dt34dPTwBi3AAw9bnlS3HmIIKj4zFE7/scAR0X2dMXuwG815byY+goqOiz pUxxF4I8JDvjIvyWAlWxCz8hgI3PBRwarbSpj1D+slVacAgv7J+PWHset2G5bYiy cldMseHDfLy+n2Qjhy/TZWuFjakbRzOu/pWmhmf96XTjkef/UVt7tqpQc/uot8cL 9lGFui/k2OSqPlL7VIaW4ADAlivxbaQzrvWweWiZbOUrU2AL0wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDCcOePUL2IhhbvFscKPYZRq3hcKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l ZGM1MzU2Yi1iZGQ0LTQyNmUtYjA2MC1jZDQyMDJkNzFkMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2VkYzUzNTZiLWJkZDQtNDI2ZS1i MDYwLWNkNDIwMmQ3MWQzOS9lZGM1MzU2Yi1iZGQ0LTQyNmUtYjA2MC1jZDQyMDJk NzFkMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBEEAgABMAsDAwDMhwMEAM7fHjAVBAIAAjAPAwYEJiABGUADBQAm IAG8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE3G5Vgmi/2VCDxgjRGtkHRmBodcQRsUAmPDe5UC5YYnRf6y HofnZfap6kuXUYYNG7/OCIoV2jImtM8viwRYifNKHOd+hvmZTEJywCngyFEQJau1 DH41VgCIko7iFEEdTPaGbuV+aZCSbH7klasyQRQAo5wfROUrrVWyZdpXbuqvVa/y KJ+nwiGGDa10ll7Kie1pqdB1dELqTCBs6TbzwrG1b5I2GcFWMILCy67D2hiOv3BK F4+Rkf4TxGwIfuTiM5G34zPedXVQ9cljMxv7HewL9dfwdThVhBq3GQn6lqUr6HhD nR5IuYWvA+d1dlMoXP4pLWRhYsBVLrH9QTp/GwU= -----END CERTIFICATE-----Generated at Fri May 10 16:55:58 2024 by rpki-client on console-ams.rpki-client.org