$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab.cer File: fa43a831-b765-4adf-a0f0-2882a5c07fab.cer (raw, json) Hash identifier: tw9EtvW383IZlHvITyLvneaymkODb/L2h7+xX5e8cxI= Subject key identifier: 9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858435A7F15BF35528440AECEAF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 Sep 2023 18:11:01 +0000 Certificate not after: Mon 29 Dec 2025 19:11:01 +0000 Subordinate resources: AS: 396842 IP: 23.135.160.0/24 IP: 199.193.60.0/22 IP: 2602:fe6c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:5a:7f:15:bf:35:52:84:40:ae:ce:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Sep 26 18:11:01 2023 GMT Not After : Dec 29 19:11:01 2025 GMT Subject: CN=fa43a831-b765-4adf-a0f0-2882a5c07fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:8c:5f:2c:67:14:4c:c6:6a:92:3b:ef:6c: bc:67:4a:fe:44:d8:9b:ca:13:54:70:96:77:d9:48: 0f:72:6f:04:3f:b7:2a:01:af:d6:8a:bf:66:21:2f: 05:93:b5:24:95:5d:ad:54:01:f6:13:6a:59:4a:8c: 40:65:45:e5:47:f6:3b:14:66:cc:6a:5a:86:c3:89: 71:55:11:c2:37:e0:a9:7e:e3:99:6c:d9:98:78:a6: 00:7d:74:63:94:b3:90:f9:85:6f:d3:f9:72:a2:ce: d0:ab:55:a2:e8:ad:96:6f:35:2d:48:19:fa:d3:86: b2:a5:f5:cc:a7:94:a3:cc:b0:c5:cd:fe:2a:80:fe: 11:c8:9b:8b:46:ac:90:d5:75:32:3d:60:e9:ab:21: af:ec:0d:b6:65:c1:5a:3e:97:38:2a:93:42:45:07: e5:d3:2e:c6:99:ab:c8:ad:d2:48:c5:ff:2a:44:eb: ac:b0:54:b7:d2:4a:cc:a7:7f:06:1f:3e:d4:8b:12: 36:7f:93:9f:73:5c:ad:83:b1:c5:d9:f5:56:96:95: 3f:1e:96:fe:67:1c:ff:60:a8:c8:47:5e:5e:b4:1c: da:46:19:70:26:fb:44:a8:2b:9b:6f:16:5a:7b:ea: 38:16:e4:5f:2e:45:65:15:5c:7a:4c:87:71:93:6e: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:35:79:44:C0:A9:CD:B1:60:B2:B5:B0:EB:CA:07:42:1D:14:DA:9C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fa43a831-b765-4adf-a0f0-2882a5c07fab/fa43a831-b765-4adf-a0f0-2882a5c07fab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.135.160.0/24 199.193.60.0/22 IPv6: 2602:fe6c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396842 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9f:a3:af:bb:5a:55:64:e5:1b:24:48:54:7e:1f:9c:c9:4d: 8e:c7:a6:6a:ce:c4:78:f5:fd:70:df:3e:f3:00:75:3c:5d:0f: db:1c:af:35:1c:1a:8c:39:72:4b:92:5f:b4:5c:b4:f3:96:ba: 9a:06:4d:12:37:aa:b3:61:35:0d:2a:d0:f6:ce:38:ce:c2:ec: b8:db:be:73:3f:ca:68:9d:e5:db:b3:98:3b:9d:45:8b:95:3e: 3b:5c:ac:32:21:da:7c:22:a7:af:16:56:51:58:7b:e5:99:18: 7f:b3:32:56:b0:3c:96:36:b0:71:e1:38:e4:9d:95:77:2a:6d: 02:11:04:ad:ca:81:fe:1d:cb:2f:02:ce:13:54:ce:42:d6:0c: 33:28:99:76:a1:e7:27:a9:b0:b4:9c:ab:f7:c1:f4:95:37:c7: 84:cb:64:5b:fe:0f:c3:fe:1f:f5:c8:57:e7:0c:b3:17:fb:e8: 8a:ae:32:f8:0c:d5:83:c5:5e:4f:63:6d:66:96:66:54:f2:ca: f9:89:ae:a4:5e:3d:9c:2d:49:0c:6b:bd:56:90:16:0a:b4:73: 0f:c3:03:15:26:8f:55:d4:63:36:6a:ce:33:df:63:fd:b6:89: ba:3f:32:ef:ee:b9:b7:ce:57:a9:ab:2d:5f:4c:e1:0f:0a:a1: 0f:67:58:57 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWENafxW/NVKEQK7OrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMDkyNjE4MTEwMVoXDTI1MTIyOTE5MTEwMVowLzEtMCsGA1UEAxMk ZmE0M2E4MzEtYjc2NS00YWRmLWEwZjAtMjg4MmE1YzA3ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqiMXyxnFEzGapI772y8Z0r+RNibyhNUcJZ3 2UgPcm8EP7cqAa/Wir9mIS8Fk7UklV2tVAH2E2pZSoxAZUXlR/Y7FGbMalqGw4lx VRHCN+CpfuOZbNmYeKYAfXRjlLOQ+YVv0/lyos7Qq1Wi6K2WbzUtSBn604aypfXM p5SjzLDFzf4qgP4RyJuLRqyQ1XUyPWDpqyGv7A22ZcFaPpc4KpNCRQfl0y7GmavI rdJIxf8qROussFS30krMp38GHz7UixI2f5Ofc1ytg7HF2fVWlpU/Hpb+Zxz/YKjI R15etBzaRhlwJvtEqCubbxZae+o4FuRfLkVlFVx6TIdxk25qLwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFJw1eUTAqc2xYLK1sOvKB0IdFNqcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m YTQzYTgzMS1iNzY1LTRhZGYtYTBmMC0yODgyYTVjMDdmYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ZhNDNhODMxLWI3NjUtNGFkZi1h MGYwLTI4ODJhNWMwN2ZhYi9mYTQzYTgzMS1iNzY1LTRhZGYtYTBmMC0yODgyYTVj MDdmYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXh6ADBALHwTwwDgQCAAIwCAMGBCYC/mwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYOKjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzn6Ovu1pVZOUbJEhU fh+cyU2Ox6ZqzsR49f1w3z7zAHU8XQ/bHK81HBqMOXJLkl+0XLTzlrqaBk0SN6qz YTUNKtD2zjjOwuy4275zP8poneXbs5g7nUWLlT47XKwyIdp8IqevFlZRWHvlmRh/ szJWsDyWNrBx4TjknZV3Km0CEQStyoH+HcsvAs4TVM5C1gwzKJl2oecnqbC0nKv3 wfSVN8eEy2Rb/g/D/h/1yFfnDLMX++iKrjL4DNWDxV5PY21mlmZU8sr5ia6kXj2c LUkMa71WkBYKtHMPwwMVJo9V1GM2as4z32P9tom6PzLv7rm3zlepqy1fTOEPCqEP Z1hX -----END CERTIFICATE-----Generated at Sat May 11 15:36:06 2024 by rpki-client on console-fra.rpki-client.org