$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.cer File: fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.cer (raw, json) Hash identifier: 98/6dCAuwXBGQZkJIO4IhfTHgQ740zZWgwUZTj0PJgE= Subject key identifier: 27:30:F6:19:D6:E3:7B:08:E5:F5:22:6A:12:8F:21:C6:56:81:C2:4E Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285844746807A1C0EE5F372701F540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Jan 2024 17:42:31 +0000 Certificate not after: Thu 09 Apr 2026 16:42:31 +0000 Subordinate resources: AS: 54196 IP: 65.38.106.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:74:68:07:a1:c0:ee:5f:37:27:01:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 5 17:42:31 2024 GMT Not After : Apr 9 16:42:31 2026 GMT Subject: CN=fcafd4be-2865-4c0e-8cf0-831bdd0ecaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:d8:5d:5a:21:d3:5d:76:c7:9f:a5:6a:a0: 10:3c:92:b2:2a:12:01:f1:a4:b5:47:02:ea:a7:71: 93:e1:a5:69:ba:7f:16:a0:2e:a9:3e:33:9b:83:d7: 53:91:87:14:b2:52:7c:80:98:32:55:e0:96:00:0b: 6f:b4:8b:25:96:2f:60:99:05:c4:84:61:28:50:a4: ec:94:88:23:02:a8:4d:5b:68:2f:73:c3:60:bd:e8: 0d:d7:eb:c8:17:ba:e5:05:f3:93:11:74:8b:b2:19: 34:67:35:89:c9:0e:7a:ef:3f:de:ae:d3:c3:0f:ec: 18:25:57:47:67:0c:38:ea:e6:39:ba:63:e8:f8:d9: 84:0e:b4:e2:32:ba:20:8f:61:a6:fe:9e:a6:99:46: 78:06:75:60:ea:93:e0:33:89:1a:30:57:70:9e:6c: 40:29:c6:b6:4d:7a:fa:79:9b:34:b3:19:70:9b:6f: 50:d5:4e:41:17:57:ee:39:3b:f5:1f:b2:22:73:07: f0:65:f1:3d:59:27:1c:a9:b6:09:86:92:cc:8f:e4: 37:a5:e4:03:23:26:46:85:c3:37:fb:be:80:b6:ae: 10:24:46:28:06:c1:37:f9:5a:dc:39:96:6b:37:40: d7:92:d5:4f:4a:ef:95:aa:89:96:2a:b9:55:42:1b: aa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:30:F6:19:D6:E3:7B:08:E5:F5:22:6A:12:8F:21:C6:56:81:C2:4E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 65.38.106.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54196 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:1e:d7:5f:bf:a6:27:c0:b9:0c:df:6d:55:a3:ad:63:ce:2a: 89:59:a8:be:14:ba:78:83:e5:5a:55:62:a4:d6:da:b9:48:d6: 4b:d8:ff:8d:72:0f:27:83:d6:93:61:db:8f:d2:1d:d7:bd:aa: f2:3d:48:8a:44:3f:be:3d:f6:e9:26:5c:a2:b4:0e:fc:99:0f: 5d:94:cb:92:83:8f:71:b0:f9:94:48:69:4a:1a:c2:76:cd:82: 8d:67:2b:fd:7a:57:54:c0:70:52:0c:1a:ee:90:d3:fe:2e:d8: 59:ac:9c:60:fc:9e:82:0e:b6:d0:3f:3a:84:6a:dd:07:99:e0: 86:69:c6:4d:4b:c6:9a:62:90:6c:c9:9b:6a:b5:f6:eb:42:12: 0c:84:71:64:f5:cc:09:a7:f9:38:9f:74:e3:a4:75:20:2f:11: 12:4c:c8:1b:76:67:3c:a4:5d:03:1c:63:3d:e4:23:9d:1b:5f: 00:66:8b:ab:a8:e9:e5:cd:d2:91:b7:24:cd:bc:d8:ac:82:0a: 78:15:f6:f4:71:15:50:b0:b0:ef:18:81:c9:ac:75:55:92:5d: 6f:e6:d0:f2:8e:9f:92:c3:f1:ec:47:18:48:62:ba:c0:47:23: 69:bb:ce:9d:c1:c0:f2:7a:58:0e:f6:30:f6:39:7d:c5:19:d7: 19:17:da:48 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWER0aAehwO5fNycB9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDEwNTE3NDIzMVoXDTI2MDQwOTE2NDIzMVowLzEtMCsGA1UEAxMk ZmNhZmQ0YmUtMjg2NS00YzBlLThjZjAtODMxYmRkMGVjYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAvYXVoh0112x5+laqAQPJKyKhIB8aS1RwLq p3GT4aVpun8WoC6pPjObg9dTkYcUslJ8gJgyVeCWAAtvtIslli9gmQXEhGEoUKTs lIgjAqhNW2gvc8NgvegN1+vIF7rlBfOTEXSLshk0ZzWJyQ567z/ertPDD+wYJVdH Zww46uY5umPo+NmEDrTiMrogj2Gm/p6mmUZ4BnVg6pPgM4kaMFdwnmxAKca2TXr6 eZs0sxlwm29Q1U5BF1fuOTv1H7IicwfwZfE9WSccqbYJhpLMj+Q3peQDIyZGhcM3 +76Atq4QJEYoBsE3+VrcOZZrN0DXktVPSu+VqomWKrlVQhuqzwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCcw9hnW43sI5fUiahKPIcZWgcJOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m Y2FmZDRiZS0yODY1LTRjMGUtOGNmMC04MzFiZGQwZWNhYWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ZjYWZkNGJlLTI4NjUtNGMwZS04 Y2YwLTgzMWJkZDBlY2FhZC9mY2FmZDRiZS0yODY1LTRjMGUtOGNmMC04MzFiZGQw ZWNhYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABBJmowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANO0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACse11+/pifAuQzfbVWjrWPOKolZqL4UuniD5VpVYqTW2rlI 1kvY/41yDyeD1pNh24/SHde9qvI9SIpEP7499ukmXKK0DvyZD12Uy5KDj3Gw+ZRI aUoawnbNgo1nK/16V1TAcFIMGu6Q0/4u2FmsnGD8noIOttA/OoRq3QeZ4IZpxk1L xppikGzJm2q19utCEgyEcWT1zAmn+TifdOOkdSAvERJMyBt2ZzykXQMcYz3kI50b XwBmi6uo6eXN0pG3JM282KyCCngV9vRxFVCwsO8YgcmsdVWSXW/m0PKOn5LD8exH GEhiusBHI2m7zp3BwPJ6WA72MPY5fcUZ1xkX2kg= -----END CERTIFICATE-----Generated at Sat May 11 15:36:06 2024 by rpki-client on console-fra.rpki-client.org