$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4.cer File: 42e7c483-059a-47b9-840d-d56605959cf4.cer (raw, json) Hash identifier: sgZ3qQmUlGPxf+IDM8vv/2bJ704LAZnWj+oRvHSBypQ= Subject key identifier: 92:75:35:DA:EA:B7:48:13:97:A9:D2:20:9E:EB:DF:12:DE:CD:C9:99 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584723FE370D05BAFCB13854FB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Sep 2024 00:45:27 +0000 Certificate not after: Sat 12 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 398114 IP: 204.62.199.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:23:fe:37:0d:05:ba:fc:b1:38:54:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 8 00:45:27 2024 GMT Not After : Dec 12 01:45:27 2026 GMT Subject: CN=42e7c483-059a-47b9-840d-d56605959cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:8e:9e:1b:8a:e9:e1:7c:71:0e:bd:7b:fa: 79:d0:59:60:f7:cb:4c:d5:88:c2:9a:b8:ae:57:4b: 76:5e:00:67:d6:88:cc:a5:4d:c2:53:e8:0a:d7:da: 20:79:4f:6a:06:69:c6:35:dc:58:e0:56:07:70:40: a8:64:6a:8f:d1:84:51:93:5c:a5:94:90:bb:71:df: df:23:7a:35:ff:7a:e5:9b:1b:9e:50:2e:be:b8:bc: d6:fb:85:da:ea:f0:49:07:4c:5d:30:08:81:48:eb: f6:ea:ad:6f:e8:e7:e1:0e:f6:3b:aa:2c:03:aa:9d: 03:bc:a6:25:17:90:a0:0d:78:ce:3f:b5:1b:df:e9: 54:e5:ad:a5:f2:94:8b:61:99:fb:7f:ad:5e:66:0d: bc:87:de:85:bd:56:27:35:5d:39:ec:bc:c7:eb:f7: 42:6f:17:74:e4:47:da:02:5f:0b:3d:fd:e8:c1:ff: 9b:4e:e9:d1:bd:bf:a9:ea:d9:79:13:b0:25:da:43: 94:72:75:b4:6d:dd:3a:7d:80:1b:36:b0:3b:7f:16: 91:5d:4b:3e:d3:67:ed:07:78:71:8f:83:3f:c2:a3: 24:30:d4:ca:c1:f5:38:8a:48:cb:48:6a:27:7d:f1: 02:6d:c4:85:cb:5d:16:15:83:a6:d3:63:7d:8e:77: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:75:35:DA:EA:B7:48:13:97:A9:D2:20:9E:EB:DF:12:DE:CD:C9:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42e7c483-059a-47b9-840d-d56605959cf4/42e7c483-059a-47b9-840d-d56605959cf4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.62.199.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398114 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:02:0f:0a:0c:6b:2d:f4:0b:5a:d8:1e:5b:b5:31:13:ca:a3: e7:5d:05:94:22:4d:fe:51:36:32:fe:cc:37:2a:01:5e:20:a3: 43:58:2a:e0:c5:20:7d:51:b2:63:99:ee:07:4a:23:fe:69:4c: 43:56:26:92:27:2c:a7:f2:2e:51:25:86:7c:4b:ab:6c:8f:2e: 22:71:ff:02:99:ac:86:89:fe:b5:3f:d8:02:4a:17:e3:92:9d: 5d:dc:3e:fc:4d:30:a5:5d:da:29:7f:de:01:1f:dc:55:43:89: 44:6e:b7:a5:34:d2:ff:07:5f:34:d7:5f:44:a0:8f:f6:22:93: 6a:8e:74:21:0e:51:92:62:6c:f6:43:32:46:38:81:0b:4d:5b: 68:f3:b9:46:dd:6f:4b:cf:fc:6c:72:28:ca:51:a2:42:7b:d4: b3:89:00:fb:fc:96:8a:26:2b:25:fa:29:ec:d2:2e:f6:42:0c: 24:39:11:bd:41:8f:59:b2:8d:a8:bf:44:8b:90:3d:84:7f:03: e6:41:01:5f:89:6b:0e:e2:81:3b:86:6c:0f:a0:82:c6:a1:f7: 6d:ec:ba:32:49:42:10:85:66:36:15:d1:e0:f0:8e:b4:92:95: 91:65:85:57:ad:e9:a8:84:84:66:09:6e:5f:57:4a:b6:aa:6f: 99:d1:e6:a0 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEcj/jcNBbr8sThU+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDkwODAwNDUyN1oXDTI2MTIxMjAxNDUyN1owLzEtMCsGA1UEAxMk NDJlN2M0ODMtMDU5YS00N2I5LTg0MGQtZDU2NjA1OTU5Y2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquqOnhuK6eF8cQ69e/p50Flg98tM1YjCmriu V0t2XgBn1ojMpU3CU+gK19ogeU9qBmnGNdxY4FYHcECoZGqP0YRRk1yllJC7cd/f I3o1/3rlmxueUC6+uLzW+4Xa6vBJB0xdMAiBSOv26q1v6OfhDvY7qiwDqp0DvKYl F5CgDXjOP7Ub3+lU5a2l8pSLYZn7f61eZg28h96FvVYnNV057LzH6/dCbxd05Efa Al8LPf3owf+bTunRvb+p6tl5E7Al2kOUcnW0bd06fYAbNrA7fxaRXUs+02ftB3hx j4M/wqMkMNTKwfU4ikjLSGonffECbcSFy10WFYOm02N9jnfzXQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJJ1Ndrqt0gTl6nSIJ7r3xLezcmZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80 MmU3YzQ4My0wNTlhLTQ3YjktODQwZC1kNTY2MDU5NTljZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQyZTdjNDgzLTA1OWEtNDdiOS04 NDBkLWQ1NjYwNTk1OWNmNC80MmU3YzQ4My0wNTlhLTQ3YjktODQwZC1kNTY2MDU5 NTljZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMPscwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhMiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFkCDwoMay30C1rYHlu1MRPKo+ddBZQiTf5RNjL+zDcqAV4g o0NYKuDFIH1RsmOZ7gdKI/5pTENWJpInLKfyLlElhnxLq2yPLiJx/wKZrIaJ/rU/ 2AJKF+OSnV3cPvxNMKVd2il/3gEf3FVDiURut6U00v8HXzTXX0Sgj/Yik2qOdCEO UZJibPZDMkY4gQtNW2jzuUbdb0vP/GxyKMpRokJ71LOJAPv8loomKyX6KezSLvZC DCQ5Eb1Bj1myjai/RIuQPYR/A+ZBAV+Jaw7igTuGbA+ggsah923sujJJQhCFZjYV 0eDwjrSSlZFlhVet6aiEhGYJbl9XSraqb5nR5qA= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:15 2024 by rpki-client on console-ams.rpki-client.org