$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer File: 0605680b-ca76-43b6-81d9-2ac50993c59e.cer (raw, json) Hash identifier: 0BGVZeC8BzicO8TcWnJj5ItHlMiBRymaIkq1aP8petY= Subject key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285847213386D5D251B6B0B93AB2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Sep 2024 00:45:26 +0000 Certificate not after: Fri 11 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 11758 IP: 66.85.43.0/24 IP: 149.248.160.0/21 IP: 198.231.28.0/22 IP: 204.29.12.0/22 IP: 2607:f920::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:21:33:86:d5:d2:51:b6:b0:b9:3a:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 7 00:45:26 2024 GMT Not After : Dec 11 01:45:26 2026 GMT Subject: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:8a:d9:aa:d7:db:bc:14:30:e3:b8:4c:b2: 1b:14:dc:8d:84:6f:40:f3:65:90:88:4a:71:c9:4b: e9:fc:f5:36:70:3c:24:2f:24:ac:16:64:8c:68:85: 65:3f:52:ab:60:98:7d:16:eb:ea:98:69:0c:1d:60: 66:8b:31:17:eb:2c:72:19:95:94:27:74:6b:68:04: 19:cc:fb:3a:93:e9:3e:86:80:9d:e3:c1:bd:2f:23: 88:83:4c:a4:a1:b1:34:ff:b0:48:c0:49:25:3f:87: 8c:af:ca:9c:d0:bb:fd:71:15:03:63:2b:8d:e6:34: e4:f6:b4:ea:0d:b3:f3:a3:e6:94:b7:d8:a2:36:62: fb:1b:f7:5c:90:d5:3b:ba:03:42:14:a6:55:4d:37: a1:df:ef:b7:24:be:70:ed:4e:36:94:06:15:6d:48: f4:21:33:dd:02:f8:82:5b:28:03:34:74:20:3e:14: 30:7d:98:ba:70:d2:26:ad:72:89:33:2f:9e:c9:4c: d6:29:4b:d7:3b:c2:48:74:fd:af:cd:75:9d:ea:04: e4:bd:05:25:4f:73:cc:4e:3a:bc:30:6c:c5:36:62: ca:77:d8:ed:14:6b:d5:c6:3c:a6:cf:7c:95:df:2c: e2:f9:fc:9d:23:ee:a4:fb:0b:3f:e3:5e:14:23:fd: 7e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.85.43.0/24 149.248.160.0/21 198.231.28.0/22 204.29.12.0/22 IPv6: 2607:f920::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11758 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:11:07:ee:e3:32:b3:34:e2:f6:a0:fa:5a:bd:a0:19:4b:48: 52:07:6e:f0:25:ae:f9:48:43:61:ae:6b:98:fd:54:b8:83:0e: 5f:d4:58:8a:f9:83:d8:a6:9e:79:d5:e1:a3:b4:66:4f:60:a9: e2:46:74:a0:7c:8b:a6:bc:2a:cb:34:18:25:37:8c:7c:74:cd: ba:eb:e7:47:30:01:a6:6f:19:fe:c1:0c:8e:5d:d0:5d:c8:ae: 58:5f:f5:a8:71:96:3a:86:ba:c8:77:67:b7:5c:77:93:3b:18: 0b:22:0f:9b:6c:af:a8:e2:60:41:86:13:dd:5b:48:cf:bc:c1: 52:cb:97:91:dc:42:9b:57:61:d8:47:98:ca:55:5f:a1:d1:5a: dd:3f:bf:c6:0e:cb:1d:59:52:20:1e:52:b6:50:a6:5d:eb:22: b0:00:82:01:ec:20:32:2e:b9:07:fb:fc:8e:19:44:8f:4d:65: dc:3d:48:f9:c3:87:e0:a4:2d:64:c5:20:25:99:02:3d:df:ea: d5:bc:7a:17:f4:ad:c2:fd:da:fb:7a:7d:f8:76:9a:94:75:48: 84:c4:39:fe:85:1c:53:49:4a:c4:28:40:43:ed:48:b7:37:0a: 72:68:c3:bc:65:fa:27:27:de:e6:8f:9c:f4:72:07:b0:cb:da: 1b:81:fb:44 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEchM4bV0lG2sLk6ssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDkwNzAwNDUyNloXDTI2MTIxMTAxNDUyNlowLzEtMCsGA1UEAxMk MDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNjNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvKK2arX27wUMOO4TLIbFNyNhG9A82WQiEpx yUvp/PU2cDwkLySsFmSMaIVlP1KrYJh9FuvqmGkMHWBmizEX6yxyGZWUJ3RraAQZ zPs6k+k+hoCd48G9LyOIg0ykobE0/7BIwEklP4eMr8qc0Lv9cRUDYyuN5jTk9rTq DbPzo+aUt9iiNmL7G/dckNU7ugNCFKZVTTeh3++3JL5w7U42lAYVbUj0ITPdAviC WygDNHQgPhQwfZi6cNImrXKJMy+eyUzWKUvXO8JIdP2vzXWd6gTkvQUlT3PMTjq8 MGzFNmLKd9jtFGvVxjymz3yV3yzi+fydI+6k+ws/414UI/1+HQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFElIZsnYTdkUNfDQZ6gHWzCV+vRcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w NjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzA2MDU2ODBiLWNhNzYtNDNiNi04 MWQ5LTJhYzUwOTkzYzU5ZS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5 M2M1OWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBABCVSsDBAOV+KADBALG5xwDBALMHQwwDQQCAAIw BwMFACYH+SAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLe4wVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgBEH 7uMyszTi9qD6Wr2gGUtIUgdu8CWu+UhDYa5rmP1UuIMOX9RYivmD2KaeedXho7Rm T2Cp4kZ0oHyLprwqyzQYJTeMfHTNuuvnRzABpm8Z/sEMjl3QXciuWF/1qHGWOoa6 yHdnt1x3kzsYCyIPm2yvqOJgQYYT3VtIz7zBUsuXkdxCm1dh2EeYylVfodFa3T+/ xg7LHVlSIB5StlCmXesisACCAewgMi65B/v8jhlEj01l3D1I+cOH4KQtZMUgJZkC Pd/q1bx6F/Stwv3a+3p9+HaalHVIhMQ5/oUcU0lKxChAQ+1ItzcKcmjDvGX6Jyfe 5o+c9HIHsMvaG4H7RA== -----END CERTIFICATE-----Generated at Fri Nov 22 21:09:44 2024 by rpki-client on console-fra.rpki-client.org