$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer File: 86906b9d-26ff-4ce8-b900-62739db43657.cer (raw, json) Hash identifier: XtAetBgpBng/qfAtkw6+C5u4cjcOrkAVvPdn+o3Zk7A= Subject key identifier: 5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285847457E6A1CC4752179ADD56D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Sep 2024 00:45:26 +0000 Certificate not after: Thu 24 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 33253 IP: 204.10.124.0/22 IP: 204.16.224.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:45:7e:6a:1c:c4:75:21:79:ad:d5:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 20 00:45:26 2024 GMT Not After : Dec 24 01:45:26 2026 GMT Subject: CN=86906b9d-26ff-4ce8-b900-62739db43657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ed:15:85:a8:02:d5:4f:fc:da:6b:f9:13:5c: 19:cf:ed:1c:5c:d7:33:b6:94:6e:5e:a2:4e:7b:1a: 4a:b5:93:81:37:81:74:4a:12:75:25:d2:fb:37:b4: 5a:f7:d9:8d:4e:5d:dd:e2:84:e5:3a:83:75:84:c8: dc:53:49:a2:03:cc:2a:3f:48:9c:e6:81:fe:ab:5c: ea:8e:c9:c4:a2:24:a3:80:30:64:e4:c6:6d:42:4e: 4f:c5:af:76:a8:c3:7d:be:9d:ab:ff:52:43:a4:03: 23:92:ef:7e:6a:1d:0c:fd:68:2e:5d:1f:54:68:1e: b0:4a:d4:02:6d:00:86:fe:4e:a8:e5:07:ce:27:76: 1e:f7:c6:92:f6:21:0a:7b:2a:88:f3:a3:8e:64:d2: 4e:20:02:5e:35:74:43:4e:07:07:c1:8a:50:91:85: 00:b5:32:1f:16:f9:75:0b:1f:b5:a5:64:d2:e5:4b: 37:06:c1:38:bd:b4:35:19:25:f6:62:d6:19:14:b6: 03:73:c5:45:70:11:45:68:db:ed:d7:84:dd:d6:9f: fb:7b:d2:bc:f8:ea:62:5a:b9:9a:bf:53:4a:2b:1b: b4:23:4b:13:0e:af:ea:82:6d:cc:84:3b:23:03:83: f3:5e:93:19:12:c2:d3:cc:0d:b1:86:c5:3d:94:7b: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.10.124.0/22 204.16.224.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33253 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:33:ca:11:ab:c7:65:70:f9:7b:ea:cb:34:fc:c5:f9:4d:9c: 81:6f:91:5c:17:b8:52:84:ee:b5:d8:2e:d3:b3:1a:d8:90:49: 03:30:a4:7b:05:33:38:8e:61:bd:dc:6f:c1:89:90:c3:11:dc: 6d:1e:c3:83:64:0f:e1:5f:d4:e2:3c:5c:4a:d1:5c:8e:76:c4: 29:22:11:d8:b6:8c:de:3a:5f:f8:35:00:6d:b4:f3:64:28:59: 5d:92:55:07:d1:b7:a7:7e:d4:0e:8a:dc:fe:f1:3c:52:98:cc: 4e:c5:6d:8e:99:06:01:77:83:84:22:25:ea:e9:95:1b:44:8c: 32:f3:21:fc:37:0d:9d:bf:f2:b6:37:05:a0:db:cb:34:3e:36: ea:03:c1:71:eb:30:eb:60:b1:89:a7:4d:71:cc:1b:0b:70:51: 3e:e9:a7:31:64:1d:7f:71:40:e7:d7:83:8d:f9:ab:af:cb:ca: 48:6c:fe:5b:d6:a3:03:03:45:d1:f8:4a:e0:1c:86:47:e9:15: e2:f4:be:c5:e5:03:13:e8:37:ac:9d:23:ad:ad:b6:7c:78:ac: ab:38:c7:72:cd:7c:20:37:5f:4f:65:e4:00:80:10:8f:0c:d7: 8d:cc:5f:47:cd:12:48:7d:78:b4:77:fa:26:b5:d3:a7:0a:39: 61:f6:ae:91 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEdFfmocxHUhea3VbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDkyMDAwNDUyNloXDTI2MTIyNDAxNDUyNlowLzEtMCsGA1UEAxMk ODY5MDZiOWQtMjZmZi00Y2U4LWI5MDAtNjI3MzlkYjQzNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9u0VhagC1U/82mv5E1wZz+0cXNcztpRuXqJO expKtZOBN4F0ShJ1JdL7N7Ra99mNTl3d4oTlOoN1hMjcU0miA8wqP0ic5oH+q1zq jsnEoiSjgDBk5MZtQk5Pxa92qMN9vp2r/1JDpAMjku9+ah0M/WguXR9UaB6wStQC bQCG/k6o5QfOJ3Ye98aS9iEKeyqI86OOZNJOIAJeNXRDTgcHwYpQkYUAtTIfFvl1 Cx+1pWTS5Us3BsE4vbQ1GSX2YtYZFLYDc8VFcBFFaNvt14Td1p/7e9K8+OpiWrma v1NKKxu0I0sTDq/qgm3MhDsjA4PzXpMZEsLTzA2xhsU9lHvDaQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFFuU6G9ckwtZ8M+arAl5lc7tlj+hMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 NjkwNmI5ZC0yNmZmLTRjZTgtYjkwMC02MjczOWRiNDM2NTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg2OTA2YjlkLTI2ZmYtNGNlOC1i OTAwLTYyNzM5ZGI0MzY1Ny84NjkwNmI5ZC0yNmZmLTRjZTgtYjkwMC02MjczOWRi NDM2NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALMCnwDBALMEOAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAIHlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHMzyhGrx2Vw+XvqyzT8xflNnIFvkVwXuFKE7rXY LtOzGtiQSQMwpHsFMziOYb3cb8GJkMMR3G0ew4NkD+Ff1OI8XErRXI52xCkiEdi2 jN46X/g1AG2082QoWV2SVQfRt6d+1A6K3P7xPFKYzE7FbY6ZBgF3g4QiJerplRtE jDLzIfw3DZ2/8rY3BaDbyzQ+NuoDwXHrMOtgsYmnTXHMGwtwUT7ppzFkHX9xQOfX g435q6/Lykhs/lvWowMDRdH4SuAchkfpFeL0vsXlAxPoN6ydI62ttnx4rKs4x3LN fCA3X09l5ACAEI8M143MX0fNEkh9eLR3+ia106cKOWH2rpE= -----END CERTIFICATE-----Generated at Sat Nov 23 17:05:17 2024 by rpki-client on console-ams.rpki-client.org