$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer File: 2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer (raw, json) Hash identifier: AlwLGYpfjTogYUKoRkGejusqrPZhAlR6RE6llmD23KY= Subject key identifier: 5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285847616940886DB24D9EFD5253FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Sep 2024 00:45:25 +0000 Certificate not after: Sun 03 Jan 2027 01:45:25 +0000 Subordinate resources: AS: 394947 IP: 172.83.86.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:61:69:40:88:6d:b2:4d:9e:fd:52:53:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 30 00:45:25 2024 GMT Not After : Jan 3 01:45:25 2027 GMT Subject: CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:29:f5:5b:87:83:93:82:d0:9a:23:2a:59: 65:23:54:a2:30:4b:5b:76:5c:85:03:96:7f:20:d2: 45:fa:32:a3:34:39:27:20:f9:b8:37:17:a6:6d:6c: b6:2e:2a:ce:ee:1a:43:27:ca:b2:bb:d7:9d:26:7f: 44:bb:d1:22:53:c9:89:0e:33:0e:dc:47:58:9c:68: 25:dd:21:70:2a:f0:4e:45:6e:80:1a:6f:f7:79:15: 2e:91:83:c7:52:17:cb:e5:74:8e:18:8e:75:5d:50: 59:88:ca:da:b5:29:c6:ac:79:0a:8b:a1:bd:07:80: 8a:60:e0:25:9d:92:8b:51:84:52:db:24:a5:de:62: 4e:3e:b1:87:03:69:e9:77:8d:0d:78:2f:64:bb:d0: 26:d0:5a:38:15:1d:e3:51:2c:43:38:9e:53:09:b3: 4c:63:c4:91:c3:ec:4f:be:0d:46:67:6f:44:95:06: 61:56:21:0f:cd:cc:29:e9:82:7e:57:53:0f:6b:80: f2:e3:8d:14:a1:96:19:2d:fd:71:73:02:ed:68:02: 95:5b:e6:a8:5b:7e:74:53:ec:1d:1c:fe:a5:55:60: 48:f6:2a:07:09:10:73:fd:7a:46:8b:38:a8:a4:c3: 66:da:34:00:2a:10:8a:33:b3:6f:61:96:c1:65:6a: 85:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 172.83.86.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394947 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:eb:5f:ef:c0:ea:7f:02:c5:bf:72:99:a5:c3:b5:88:14:07: 69:3b:16:34:f4:34:32:b8:70:da:ef:fb:8a:74:9b:fe:2d:c6: f8:fe:d9:60:6b:a2:7c:4d:86:4a:df:10:19:1c:e9:f6:7f:4c: 23:1a:75:1d:b2:a3:28:97:1b:5e:f0:e3:48:bc:58:04:bf:47: 45:26:c4:f1:de:11:84:9b:5f:c4:1d:f4:31:8e:55:d6:85:c8: c7:28:f6:77:48:cd:03:22:20:b1:e6:96:a9:84:84:94:61:90: 86:eb:3f:d4:98:e1:a9:2f:54:63:97:ea:e6:83:a8:4c:2f:d1: 54:c4:e5:2c:75:2e:e8:a7:aa:db:96:e5:78:fd:34:fa:f7:d8: 37:09:fb:1d:b6:0c:04:42:ed:aa:50:d0:30:7c:f0:be:31:4c: c9:0c:12:55:40:a5:37:f1:f5:83:1b:c2:c6:8a:e9:ec:6d:b1: e4:ac:98:f7:b4:ca:cd:82:42:69:54:bf:22:e3:bb:5b:c5:50: 8c:55:36:89:f9:6e:a2:45:fc:51:53:bd:ac:c9:6b:90:bc:f0: d9:45:2a:a0:48:70:ec:66:e5:c5:99:7e:70:b7:f7:ad:e7:ba: 2b:47:c2:3d:19:ae:1a:e6:15:d7:58:05:16:e0:3b:48:37:43: 27:f5:e2:3d -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEdhaUCIbbJNnv1SU/owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDkzMDAwNDUyNVoXDTI3MDEwMzAxNDUyNVowLzEtMCsGA1UEAxMk MmU4MWFiMTctZTllYy00MjIzLWJhNWUtZDZlMjZhNjljZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpMp9VuHg5OC0JojKlllI1SiMEtbdlyFA5Z/ INJF+jKjNDknIPm4NxembWy2LirO7hpDJ8qyu9edJn9Eu9EiU8mJDjMO3EdYnGgl 3SFwKvBORW6AGm/3eRUukYPHUhfL5XSOGI51XVBZiMratSnGrHkKi6G9B4CKYOAl nZKLUYRS2ySl3mJOPrGHA2npd40NeC9ku9Am0Fo4FR3jUSxDOJ5TCbNMY8SRw+xP vg1GZ29ElQZhViEPzcwp6YJ+V1MPa4Dy440UoZYZLf1xcwLtaAKVW+aoW350U+wd HP6lVWBI9ioHCRBz/XpGiziopMNm2jQAKhCKM7NvYZbBZWqFMQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFF55rYho5O4R8+Tbbo/O4DC+/dW9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y ZTgxYWIxNy1lOWVjLTQyMjMtYmE1ZS1kNmUyNmE2OWNkOWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzJlODFhYjE3LWU5ZWMtNDIyMy1i YTVlLWQ2ZTI2YTY5Y2Q5ZS8yZTgxYWIxNy1lOWVjLTQyMjMtYmE1ZS1kNmUyNmE2 OWNkOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGsU1YwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgbDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABXrX+/A6n8Cxb9ymaXDtYgUB2k7FjT0NDK4cNrv+4p0m/4t xvj+2WBronxNhkrfEBkc6fZ/TCMadR2yoyiXG17w40i8WAS/R0UmxPHeEYSbX8Qd 9DGOVdaFyMco9ndIzQMiILHmlqmEhJRhkIbrP9SY4akvVGOX6uaDqEwv0VTE5Sx1 LuinqtuW5Xj9NPr32DcJ+x22DARC7apQ0DB88L4xTMkMElVApTfx9YMbwsaK6ext seSsmPe0ys2CQmlUvyLju1vFUIxVNon5bqJF/FFTvazJa5C88NlFKqBIcOxm5cWZ fnC3963nuitHwj0ZrhrmFddYBRbgO0g3Qyf14j0= -----END CERTIFICATE-----Generated at Fri Nov 22 08:06:23 2024 by rpki-client on console-ams.rpki-client.org