$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366.cer File: 8818451e-2b15-4de5-89f9-f3d1cb4d7366.cer (raw, json) Hash identifier: 542nF3Ws0eNXF/3nzms1dPdV9j1O1m4TPPT4YkptlYQ= Subject key identifier: 9E:7C:F0:C6:2D:14:2D:7E:6D:BE:76:F6:20:E1:3E:1D:95:7B:2A:CD Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285846BCB2E089E9BD9BB6FD8072C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/8818451e-2b15-4de5-89f9-f3d1cb4d7366.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Aug 2024 00:45:24 +0000 Certificate not after: Thu 05 Nov 2026 01:45:24 +0000 Subordinate resources: IP: 23.148.216.0/24 IP: 2607:2cc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:bc:b2:e0:89:e9:bd:9b:b6:fd:80:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 2 00:45:24 2024 GMT Not After : Nov 5 01:45:24 2026 GMT Subject: CN=8818451e-2b15-4de5-89f9-f3d1cb4d7366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e2:98:f0:0f:ec:5d:d9:35:06:6e:4f:99:a4: 6a:6c:85:76:6f:77:64:09:d2:fe:ef:e0:6e:b2:c1: 3e:14:00:59:cb:8d:32:cc:24:37:b3:56:b3:6f:b8: 97:1f:62:74:08:67:18:00:61:35:b7:26:81:29:61: 96:15:a1:0a:87:88:54:0d:cc:19:8c:8c:c2:62:31: 72:68:68:ee:ea:ef:05:60:8a:e5:6b:25:fe:f4:2c: 4d:30:12:9e:8f:ad:c0:11:ab:dd:1b:0b:59:9a:69: 47:a3:67:f1:46:6b:37:fa:83:16:6e:de:ae:d6:1f: 37:db:bc:26:af:87:22:66:2f:36:51:0b:77:30:1a: c2:9e:ac:d8:3f:f4:fe:ef:44:75:7f:f3:f4:5a:af: c1:ed:eb:80:9d:2f:d2:35:ab:93:03:a0:f6:13:5f: b0:a3:e8:47:95:b0:ad:8f:70:81:1c:6c:3c:23:b0: 52:00:1e:73:5a:f4:b0:99:47:f2:e2:57:a3:2c:64: ec:1d:36:c2:e8:01:14:de:8f:10:b0:ea:4f:09:bd: d8:01:ce:92:e3:19:28:eb:73:91:77:fb:3c:78:d9: c9:25:49:34:e8:70:df:f2:ae:84:05:aa:c0:be:e6: 27:5e:83:2c:53:f9:11:31:66:1f:dd:a9:f8:5a:72: 8d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:F0:C6:2D:14:2D:7E:6D:BE:76:F6:20:E1:3E:1D:95:7B:2A:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/8818451e-2b15-4de5-89f9-f3d1cb4d7366.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.148.216.0/24 IPv6: 2607:2cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e2:41:66:58:d0:49:e7:b8:12:e3:1e:2d:26:32:bd:b6:0b: c1:ea:13:72:b2:51:2b:af:49:86:f3:78:2c:fa:49:2a:11:36: 77:fb:16:9b:94:e8:84:27:68:cd:70:13:e4:10:d1:10:31:dc: 69:8a:a4:09:15:1b:1d:1a:66:9f:b7:81:90:b7:22:93:7a:a3: 4b:86:79:30:01:eb:e4:e5:34:81:cd:99:f4:95:64:92:42:13: 25:76:b8:01:e2:d6:e5:77:b1:36:e5:7a:9e:e2:11:f8:5a:eb: 79:2d:eb:66:d2:4f:17:cf:4f:f0:f7:bd:42:51:8d:26:58:72: 25:1f:b5:af:f4:47:ec:c2:e0:30:83:32:50:da:99:f0:46:85: 5b:6d:04:25:98:5f:89:c6:6f:90:52:79:9e:d2:30:b9:34:bc: 02:00:50:8f:94:84:05:7d:6e:40:0a:32:03:27:2a:06:d1:34: 09:e5:d7:52:21:b7:fe:29:cf:ab:25:26:a3:92:4f:59:0f:9b: 6d:5a:bf:a8:1e:76:9b:80:5e:0f:90:97:66:58:c6:18:85:36: 6a:6d:bc:51:3e:e3:66:f3:bc:ca:57:61:a6:99:ed:2d:c7:47: 52:ec:ca:a3:0f:67:9a:a2:40:71:6d:8e:09:51:f8:05:1c:9b: c8:07:4a:46 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEa8suCJ6b2btv2AcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDgwMjAwNDUyNFoXDTI2MTEwNTAxNDUyNFowLzEtMCsGA1UEAxMk ODgxODQ1MWUtMmIxNS00ZGU1LTg5ZjktZjNkMWNiNGQ3MzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOKY8A/sXdk1Bm5PmaRqbIV2b3dkCdL+7+Bu ssE+FABZy40yzCQ3s1azb7iXH2J0CGcYAGE1tyaBKWGWFaEKh4hUDcwZjIzCYjFy aGju6u8FYIrlayX+9CxNMBKej63AEavdGwtZmmlHo2fxRms3+oMWbt6u1h8327wm r4ciZi82UQt3MBrCnqzYP/T+70R1f/P0Wq/B7euAnS/SNauTA6D2E1+wo+hHlbCt j3CBHGw8I7BSAB5zWvSwmUfy4lejLGTsHTbC6AEU3o8QsOpPCb3YAc6S4xko63OR d/s8eNnJJUk06HDf8q6EBarAvuYnXoMsU/kRMWYf3an4WnKNJQIDAQABo4IEDjCC BAowHQYDVR0OBBYEFJ588MYtFC1+bb529iDhPh2VeyrNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 ODE4NDUxZS0yYjE1LTRkZTUtODlmOS1mM2QxY2I0ZDczNjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg4MTg0NTFlLTJiMTUtNGRlNS04 OWY5LWYzZDFjYjRkNzM2Ni84ODE4NDUxZS0yYjE1LTRkZTUtODlmOS1mM2QxY2I0 ZDczNjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXlNgwDQQCAAIwBwMFACYHLMAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA ceJBZljQSee4EuMeLSYyvbYLweoTcrJRK69JhvN4LPpJKhE2d/sWm5TohCdozXAT 5BDREDHcaYqkCRUbHRpmn7eBkLcik3qjS4Z5MAHr5OU0gc2Z9JVkkkITJXa4AeLW 5XexNuV6nuIR+FrreS3rZtJPF89P8Pe9QlGNJlhyJR+1r/RH7MLgMIMyUNqZ8EaF W20EJZhficZvkFJ5ntIwuTS8AgBQj5SEBX1uQAoyAycqBtE0CeXXUiG3/inPqyUm o5JPWQ+bbVq/qB52m4BeD5CXZljGGIU2am28UT7jZvO8yldhppntLcdHUuzKow9n mqJAcW2OCVH4BRybyAdKRg== -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:16 2024 by rpki-client on console-fra.rpki-client.org