$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer File: 693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer (raw, json) Hash identifier: 8xrBO+4Eu15i/f58e+qmNwDle2bapKjSruBdyjS0BIY= Subject key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285846741D108E0C440ACE49C0A230 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Jul 2024 00:45:20 +0000 Certificate not after: Sat 10 Oct 2026 00:45:20 +0000 Subordinate resources: IP: 72.250.176.0/20 IP: 2607:19c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jul 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:74:1d:10:8e:0c:44:0a:ce:49:c0:a2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 7 00:45:20 2024 GMT Not After : Oct 10 00:45:20 2026 GMT Subject: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:72:7b:e5:57:bb:cc:96:9e:19:f3:0b:f3: 52:b6:d8:cf:32:f9:54:96:a6:67:a6:17:2d:91:f6: ca:02:aa:fc:03:6b:2a:c0:ab:1c:4f:06:5a:24:ba: c8:7a:bd:ce:c5:e9:94:78:f5:cd:40:8a:d6:94:3a: 7a:f7:db:1b:13:66:4b:45:6d:b3:07:17:49:ce:f0: 4a:4f:96:d8:f0:f0:a2:ac:05:66:28:f6:38:8a:ab: 99:34:32:b9:db:51:5e:17:fe:18:63:6d:0c:ce:6b: 9f:68:24:9f:f1:a0:e7:36:e6:c7:11:ba:3b:39:85: 7c:6d:eb:1d:a0:33:37:fa:3d:b4:0e:1d:a6:34:92: ee:84:72:7f:f1:0a:7b:c1:e4:cf:de:9a:a1:c0:bc: 45:4a:80:d3:1d:de:3b:f4:12:d3:13:bf:04:6a:9f: 3b:5a:5c:02:bf:d0:38:46:a7:33:36:71:b7:6a:43: 8b:a3:fc:34:93:13:d8:e2:eb:c6:4b:95:e2:7d:f2: 97:1e:23:5e:e5:4c:96:cd:2b:2c:92:a4:68:05:10: 28:e3:18:d0:75:97:ec:f3:f0:5e:2d:03:9e:08:09: 30:d1:70:70:8f:0a:ab:aa:37:dd:50:49:9b:19:bd: ab:bd:ca:db:aa:58:aa:2f:8d:e7:49:3d:43:05:8b: 82:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 72.250.176.0/20 IPv6: 2607:19c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f1:50:50:b1:97:37:4a:6c:05:a0:f4:a1:f8:59:90:c5:b0: 09:a7:98:43:c5:a2:88:63:94:d4:e8:0b:14:7a:62:b3:80:81: fb:e8:a2:27:37:7e:09:18:5b:4f:f6:f2:ce:07:e2:ed:10:7d: d3:f6:05:e5:d9:b8:0c:81:f4:4e:23:c4:f0:0f:71:87:dc:7e: f2:f9:3c:40:1f:87:3f:34:a8:b7:ec:f3:60:68:fa:b4:7c:31: d6:27:dd:b7:a4:89:4d:12:a3:aa:4d:15:fd:92:f6:1f:77:09: f8:ab:f9:68:fd:bf:20:1a:0b:2c:47:2c:d9:ac:c1:48:4f:fb: 25:0a:60:cb:60:f4:59:88:11:ef:27:52:af:05:eb:2f:93:32: d2:6a:6b:10:60:64:f9:60:17:a6:ce:cd:fc:2b:98:53:1e:c2: ea:f8:40:1e:cf:54:da:2e:cb:eb:4f:1c:24:3d:3f:34:6c:7b: d6:4f:7e:23:db:84:bc:12:21:0d:e9:c1:e9:79:cf:a1:c1:a4: 61:fd:62:2d:9b:ce:1c:e1:42:a2:a0:b4:11:ae:b9:40:eb:ba: 6f:ba:4f:f1:24:fc:a7:d0:22:73:b7:2f:cd:01:31:26:02:01: 9c:a8:47:3d:85:ec:03:6d:1d:10:10:f6:5f:1c:73:b2:e3:c2: d3:13:1d:1c -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEZ0HRCODEQKzknAojAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDcwNzAwNDUyMFoXDTI2MTAxMDAwNDUyMFowLzEtMCsGA1UEAxMk NjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4ZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0tye+VXu8yWnhnzC/NSttjPMvlUlqZnphct kfbKAqr8A2sqwKscTwZaJLrIer3OxemUePXNQIrWlDp699sbE2ZLRW2zBxdJzvBK T5bY8PCirAVmKPY4iquZNDK521FeF/4YY20MzmufaCSf8aDnNubHEbo7OYV8besd oDM3+j20Dh2mNJLuhHJ/8Qp7weTP3pqhwLxFSoDTHd479BLTE78Eap87WlwCv9A4 RqczNnG3akOLo/w0kxPY4uvGS5XiffKXHiNe5UyWzSsskqRoBRAo4xjQdZfs8/Be LQOeCAkw0XBwjwqrqjfdUEmbGb2rvcrbqliqL43nST1DBYuC2wIDAQABo4IEDjCC BAowHQYDVR0OBBYEFAQ7kSZDWuU9uSE1vxjGNtDanUGnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzY5M2JmNzcyLWIxYzItNGYyZi05 NzZjLTUyOGI2ZjFkOGUxNi82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYx ZDhlMTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARI+rAwDQQCAAIwBwMFACYHGcAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA XfFQULGXN0psBaD0ofhZkMWwCaeYQ8WiiGOU1OgLFHpis4CB++iiJzd+CRhbT/by zgfi7RB90/YF5dm4DIH0TiPE8A9xh9x+8vk8QB+HPzSot+zzYGj6tHwx1ifdt6SJ TRKjqk0V/ZL2H3cJ+Kv5aP2/IBoLLEcs2azBSE/7JQpgy2D0WYgR7ydSrwXrL5My 0mprEGBk+WAXps7N/CuYUx7C6vhAHs9U2i7L608cJD0/NGx71k9+I9uEvBIhDenB 6XnPocGkYf1iLZvOHOFCoqC0Ea65QOu6b7pP8ST8p9Aic7cvzQExJgIBnKhHPYXs A20dEBD2XxxzsuPC0xMdHA== -----END CERTIFICATE-----Generated at Fri Jul 26 15:59:17 2024 by rpki-client on console-fra.rpki-client.org