$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer File: c9bd201b-ca94-46d6-909a-8b5b404b5361.cer (raw, json) Hash identifier: 5f+dCqLmdoKThWEivM9oEVODJVXvbAVRCyTMnFJqPUE= Subject key identifier: C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584731F3A09AF582C37424047A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Sep 2024 00:45:26 +0000 Certificate not after: Thu 17 Dec 2026 01:45:26 +0000 Subordinate resources: IP: 167.234.36.0/24 IP: 203.2.198.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:31:f3:a0:9a:f5:82:c3:74:24:04:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 13 00:45:26 2024 GMT Not After : Dec 17 01:45:26 2026 GMT Subject: CN=c9bd201b-ca94-46d6-909a-8b5b404b5361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:77:99:b0:a2:11:b6:fa:69:88:9f:a1:60: e0:ae:a1:48:c5:d9:ed:80:72:74:c5:6e:5f:fd:4a: a1:64:a1:b6:db:f8:01:d5:af:97:2b:9e:19:39:6a: 19:12:81:f7:f4:60:15:2d:53:fa:0b:96:f2:f1:bf: c5:ed:25:3a:9c:9e:da:fb:6c:2e:fa:c4:0f:73:09: c0:ec:e6:56:c8:c3:c8:f1:ad:4e:17:c6:66:95:ed: cd:dc:e4:a8:65:d7:71:bb:15:03:ae:09:3d:46:4c: 8c:b2:f0:cc:c3:09:62:c4:ff:a9:c6:3c:6f:2d:14: 88:32:50:7b:f2:66:38:05:8a:2b:0b:2a:b2:9a:4e: 17:f7:75:0e:b1:12:38:7a:82:df:df:1b:f3:8e:cc: 7a:6b:4a:db:b7:32:aa:e2:6b:19:da:a9:6b:3f:01: 6d:fd:6a:4e:0f:7a:8b:d6:26:e3:8c:93:51:d6:86: f5:a2:65:d0:8c:b1:3c:bf:80:21:d9:b7:da:20:ee: 1d:2f:4d:e5:6f:b8:fc:d1:27:32:b8:89:1a:a3:21: 6c:28:a7:0e:c1:6a:26:f7:84:60:03:d8:c1:18:31: 0e:69:c1:90:a8:82:92:d9:29:23:16:0b:16:d1:a8: cc:d1:c4:f0:81:21:98:f2:94:85:00:48:c6:f6:a7: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 167.234.36.0/24 203.2.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a4:38:13:8b:a2:b2:01:09:ca:8e:4f:f7:9e:2f:4e:76:8f: ad:a3:52:94:36:98:fe:82:11:ef:a3:44:7d:83:46:e2:75:a0: 30:e0:a6:bd:51:2f:1c:a9:73:1b:48:91:41:3c:21:2e:7e:19: 17:f4:be:28:1d:72:df:1a:ac:87:f2:d3:bd:45:b5:65:2c:a6: c9:d2:d5:3c:3e:0e:95:fb:49:fa:05:06:92:14:58:98:21:8d: 5f:8b:88:d9:a7:c2:e7:99:05:3f:63:66:1f:81:c2:aa:10:0c: 94:53:ee:ca:dc:93:0e:28:58:3a:92:cd:c0:2f:e1:d3:07:ac: 7e:72:ca:ea:ac:cc:06:87:dd:38:77:da:a0:9e:9a:e0:e2:03: c7:ae:de:88:f9:ee:5f:8a:96:06:8a:ae:36:aa:f8:bd:be:d0: 95:e2:bf:b2:b2:5f:77:b6:bf:06:fc:ff:76:02:5a:11:9d:46: 2e:69:15:cc:1f:ed:4d:78:ce:bf:c6:f7:80:98:4b:4c:84:cc: 0a:6f:93:07:1a:b0:ee:5d:aa:69:cf:f1:81:8a:1e:fd:6c:cc: 64:5c:1c:f1:de:cb:3f:62:37:89:cb:40:c5:c0:f2:bb:34:0a: 6a:f2:8d:22:20:89:46:69:9d:98:92:75:e2:6e:87:c1:76:da: 1a:aa:4f:ad -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEcx86Ca9YLDdCQEegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDkxMzAwNDUyNloXDTI2MTIxNzAxNDUyNlowLzEtMCsGA1UEAxMk YzliZDIwMWItY2E5NC00NmQ2LTkwOWEtOGI1YjQwNGI1MzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssR3mbCiEbb6aYifoWDgrqFIxdntgHJ0xW5f /UqhZKG22/gB1a+XK54ZOWoZEoH39GAVLVP6C5by8b/F7SU6nJ7a+2wu+sQPcwnA 7OZWyMPI8a1OF8Zmle3N3OSoZddxuxUDrgk9RkyMsvDMwwlixP+pxjxvLRSIMlB7 8mY4BYorCyqymk4X93UOsRI4eoLf3xvzjsx6a0rbtzKq4msZ2qlrPwFt/WpOD3qL 1ibjjJNR1ob1omXQjLE8v4Ah2bfaIO4dL03lb7j80ScyuIkaoyFsKKcOwWom94Rg A9jBGDEOacGQqIKS2SkjFgsW0ajM0cTwgSGY8pSFAEjG9qclTQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFME34SxLk3+mC58RWq/pnWL0hSIDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j OWJkMjAxYi1jYTk0LTQ2ZDYtOTA5YS04YjViNDA0YjUzNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2M5YmQyMDFiLWNhOTQtNDZkNi05 MDlhLThiNWI0MDRiNTM2MS9jOWJkMjAxYi1jYTk0LTQ2ZDYtOTA5YS04YjViNDA0 YjUzNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACn6iQDBADLAsYwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXqQ4E4uisgEJ yo5P954vTnaPraNSlDaY/oIR76NEfYNG4nWgMOCmvVEvHKlzG0iRQTwhLn4ZF/S+ KB1y3xqsh/LTvUW1ZSymydLVPD4OlftJ+gUGkhRYmCGNX4uI2afC55kFP2NmH4HC qhAMlFPuytyTDihYOpLNwC/h0wesfnLK6qzMBofdOHfaoJ6a4OIDx67eiPnuX4qW BoquNqr4vb7QleK/srJfd7a/Bvz/dgJaEZ1GLmkVzB/tTXjOv8b3gJhLTITMCm+T Bxqw7l2qac/xgYoe/WzMZFwc8d7LP2I3ictAxcDyuzQKavKNIiCJRmmdmJJ14m6H wXbaGqpPrQ== -----END CERTIFICATE-----Generated at Sat Nov 23 16:14:34 2024 by rpki-client on console-fra.rpki-client.org