$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer File: 9a9916d5-1144-4fea-8ee5-509e8d897b74.cer (raw, json) Hash identifier: +HC9tGXQ3fnc/RZnIJ5kxjEVg8HJ5f4ECzOa2pnxV8k= Subject key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285847960D78DDABE9DAB6E94C6E50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Oct 2024 21:18:21 +0000 Certificate not after: Fri 16 Oct 2026 00:45:19 +0000 Subordinate resources: AS: 14600 IP: 199.180.202.0/24 IP: 208.65.144.0/21 IP: 208.81.64.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:96:0d:78:dd:ab:e9:da:b6:e9:4c:6e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 18 21:18:21 2024 GMT Not After : Oct 16 00:45:19 2026 GMT Subject: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:f8:4b:2a:44:f3:9e:5a:84:2a:d7:67:d4: 5b:05:f6:0b:39:ef:8d:e9:18:fd:e5:15:23:11:b1: 16:7e:6b:23:28:24:19:39:6d:3e:94:19:69:e0:c7: 9b:18:35:a4:70:5d:cd:40:20:38:fb:59:db:c7:30: 93:cc:16:00:ad:fe:52:9d:0e:4f:7a:b4:37:e5:96: 99:d5:02:9d:f8:1b:d0:e7:d0:b5:92:fe:2b:cd:46: 92:6e:c5:9c:66:21:ed:46:b3:79:4c:34:c2:2c:91: ed:05:5a:60:78:6c:92:90:eb:2e:85:6a:c7:c5:6e: 30:53:ce:44:aa:df:eb:3a:d8:b9:ac:47:25:ed:bc: 28:a4:92:a1:e8:f4:8c:4b:cd:2a:79:76:47:82:a9: 14:9d:30:b5:a4:de:c0:12:f8:eb:49:6b:03:87:02: db:af:c5:a7:56:5c:9a:5c:f3:88:f6:61:0f:80:2e: 04:47:d8:88:42:bd:5a:5c:64:9a:64:f2:87:2f:fd: 80:11:5c:1f:b5:75:72:98:42:7f:15:77:28:d1:54: c2:4c:c8:22:10:91:a4:31:a3:48:bd:4d:90:e1:5d: bb:35:b8:0f:9b:82:2b:28:48:ea:6f:af:63:96:f0: c0:df:91:70:7a:93:76:1d:4b:3b:a6:7b:30:58:18: 93:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.180.202.0/24 208.65.144.0/21 208.81.64.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14600 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:37:e6:e8:35:54:0b:ec:10:c9:f9:c5:6a:3e:d5:14:c8:16: 2c:f2:33:0c:4f:92:17:05:23:a1:c6:db:67:be:07:d9:15:7d: a6:a1:e1:92:22:ec:c1:f5:04:d1:a4:05:94:5d:d8:47:df:52: 66:80:b8:83:56:fe:ee:8e:24:e3:14:0d:51:bd:e7:a2:e1:bd: 95:bd:51:bd:ab:5b:80:51:db:ac:43:0d:34:38:5a:57:a9:40: c1:62:2e:c3:1f:35:a3:b4:2e:ec:0a:c8:22:18:40:51:5b:bf: 57:39:1b:71:66:9a:7c:1c:e1:2c:b2:df:38:df:a0:6d:3f:43: 1c:b0:64:b4:a8:19:a2:a7:b1:76:e1:09:77:f8:30:0f:a2:78: 34:eb:85:64:fd:56:0b:86:91:81:de:44:a5:b2:4e:53:e9:e8: 89:11:39:7c:02:bf:69:d6:c7:e1:8a:2a:29:77:34:07:37:94: bb:00:4d:59:52:c5:e2:85:49:37:c4:51:6c:2c:4c:15:7e:76: 09:be:f2:f7:a3:7a:31:83:31:18:d8:4e:c9:39:c0:b0:7d:c9: 9c:21:22:31:d9:77:e8:14:af:ed:71:ad:d2:b3:0f:b2:96:b9: 45:40:f6:dd:8b:01:cf:3c:5b:1f:b2:bc:6b:4c:bb:e8:b2:7f: 5f:40:d5:66 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEeWDXjdq+natulMblAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTAxODIxMTgyMVoXDTI2MTAxNjAwNDUxOVowLzEtMCsGA1UEAxMk OWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3Yjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj34SypE855ahCrXZ9RbBfYLOe+N6Rj95RUj EbEWfmsjKCQZOW0+lBlp4MebGDWkcF3NQCA4+1nbxzCTzBYArf5SnQ5PerQ35ZaZ 1QKd+BvQ59C1kv4rzUaSbsWcZiHtRrN5TDTCLJHtBVpgeGySkOsuhWrHxW4wU85E qt/rOti5rEcl7bwopJKh6PSMS80qeXZHgqkUnTC1pN7AEvjrSWsDhwLbr8WnVlya XPOI9mEPgC4ER9iIQr1aXGSaZPKHL/2AEVwftXVymEJ/FXco0VTCTMgiEJGkMaNI vU2Q4V27NbgPm4IrKEjqb69jlvDA35FwepN2HUs7pnswWBiTrQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFLzWHn3lC7jexCwGCzLMfIB7KYKAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzlhOTkxNmQ1LTExNDQtNGZlYS04 ZWU1LTUwOWU4ZDg5N2I3NC85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4 OTdiNzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADHtMoDBAPQQZADBAPQUUAwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICOQgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASDfm6DVUC+wQyfnFaj7VFMgWLPIzDE+S FwUjocbbZ74H2RV9pqHhkiLswfUE0aQFlF3YR99SZoC4g1b+7o4k4xQNUb3nouG9 lb1RvatbgFHbrEMNNDhaV6lAwWIuwx81o7Qu7ArIIhhAUVu/VzkbcWaafBzhLLLf ON+gbT9DHLBktKgZoqexduEJd/gwD6J4NOuFZP1WC4aRgd5EpbJOU+noiRE5fAK/ adbH4YoqKXc0BzeUuwBNWVLF4oVJN8RRbCxMFX52Cb7y96N6MYMxGNhOyTnAsH3J nCEiMdl36BSv7XGt0rMPspa5RUD23YsBzzxbH7K8a0y76LJ/X0DVZg== -----END CERTIFICATE-----Generated at Fri Nov 22 17:31:34 2024 by rpki-client on console-ams.rpki-client.org