$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850.cer File: d3bf923d-6c9d-4713-887f-1f30075cf850.cer (raw, json) Hash identifier: sg7mIEXyiKy8vCuquP5WgmE7C4pe5jioskqfBwRfz5w= Subject key identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858462DAE8DC4284248C2758D5200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Jun 2024 19:16:06 +0000 Certificate not after: Mon 14 Sep 2026 19:16:06 +0000 Subordinate resources: AS: 32746 IP: 204.8.88.0/22 IP: 208.86.40.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Oct 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:2d:ae:8d:c4:28:42:48:c2:75:8d:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 11 19:16:06 2024 GMT Not After : Sep 14 19:16:06 2026 GMT Subject: CN=d3bf923d-6c9d-4713-887f-1f30075cf850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:f9:0f:f6:20:a3:d4:db:43:43:37:5a:be: 35:25:72:34:87:c9:13:38:42:6a:60:5c:9a:97:77: ba:a9:55:9b:c2:f8:59:fc:39:a9:65:c2:a6:29:63: 65:00:a8:05:92:37:df:26:13:7d:ae:4d:03:c6:1c: be:03:fc:08:c9:e9:2c:55:c7:e7:70:29:26:70:8f: 55:f7:23:c7:56:4d:a0:bb:f4:cd:dd:b5:8c:56:35: a4:0c:b2:e8:54:a4:16:40:ae:ee:0c:d9:c7:2a:ac: 11:91:94:04:2f:b9:07:03:06:1d:7c:15:21:f6:c3: e3:44:6d:5e:1c:39:2b:da:ae:4f:d7:95:53:33:cb: 47:81:bf:df:17:84:b3:17:4e:a4:cc:ea:e5:d2:c9: 37:d4:f0:4e:0e:51:15:55:9b:26:7a:eb:55:c6:69: 71:b8:87:22:17:d9:a2:8b:98:4e:dc:fd:af:fd:c0: da:37:6e:e6:28:98:d4:1e:3b:49:46:72:72:33:2d: de:54:09:18:2e:04:e4:1e:67:d8:b4:d4:35:a5:22: 4f:44:c4:64:06:fa:43:0a:14:58:71:d4:5b:d9:70: f2:e5:1f:8b:e8:cc:79:12:4c:e3:4e:b0:61:b1:e5: 28:1f:00:6a:a2:2f:74:4e:74:23:7e:30:56:06:1b: cd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7E:94:69:FB:8F:16:3F:CC:C9:25:52:54:45:FB:6D:BB:DA:C5:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3bf923d-6c9d-4713-887f-1f30075cf850/d3bf923d-6c9d-4713-887f-1f30075cf850.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.8.88.0/22 208.86.40.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32746 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1b:e1:2d:f6:5f:67:4a:13:f0:4a:40:1b:2a:87:df:c5:5a: af:d3:d5:8c:a2:4d:22:84:53:a3:b0:43:d1:69:91:35:96:97: b5:4f:a5:2b:5e:2d:fe:69:ee:e6:5c:9b:9e:49:91:8e:75:b2: 09:97:0d:3d:60:a3:58:22:1f:a5:f8:f8:5d:94:d2:d8:1e:97: 4a:90:a2:07:00:fc:1b:01:15:1d:8f:03:9e:d8:d8:60:c2:03: b5:64:d3:25:fb:d9:fd:a5:22:01:76:d0:39:d6:98:a3:2d:fa: f6:f2:b8:8d:b2:70:75:80:9e:f7:2a:44:d9:b8:e7:09:88:92: 8a:27:c1:54:e8:40:8a:2c:1d:9b:2d:9d:df:10:d8:64:71:55: d4:c4:59:fc:23:81:f2:41:4c:aa:91:28:f9:9d:da:13:fe:15: 0a:b6:0d:b1:de:bf:ee:87:2e:e4:f8:03:ce:24:30:b1:c3:8a: 32:47:5e:75:3d:dd:e9:aa:7e:6e:68:ea:7c:c9:51:7a:43:c4: 9b:e6:6a:33:81:ae:65:a5:68:89:e5:87:c1:72:ab:42:ee:f2: b6:d8:2e:ac:f8:ae:dd:06:ed:88:85:6f:db:32:83:28:c7:70: db:12:fc:4a:e5:6e:fe:4b:ff:f6:be:78:a6:26:c9:16:63:83: c6:06:fc:43 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEYtro3EKEJIwnWNUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDYxMTE5MTYwNloXDTI2MDkxNDE5MTYwNlowLzEtMCsGA1UEAxMk ZDNiZjkyM2QtNmM5ZC00NzEzLTg4N2YtMWYzMDA3NWNmODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEr5D/Ygo9TbQ0M3Wr41JXI0h8kTOEJqYFya l3e6qVWbwvhZ/DmpZcKmKWNlAKgFkjffJhN9rk0Dxhy+A/wIyeksVcfncCkmcI9V 9yPHVk2gu/TN3bWMVjWkDLLoVKQWQK7uDNnHKqwRkZQEL7kHAwYdfBUh9sPjRG1e HDkr2q5P15VTM8tHgb/fF4SzF06kzOrl0sk31PBODlEVVZsmeutVxmlxuIciF9mi i5hO3P2v/cDaN27mKJjUHjtJRnJyMy3eVAkYLgTkHmfYtNQ1pSJPRMRkBvpDChRY cdRb2XDy5R+L6Mx5EkzjTrBhseUoHwBqoi90TnQjfjBWBhvNkQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFFt+lGn7jxY/zMklUlRF+2272sW7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k M2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1Y2Y4NTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2QzYmY5MjNkLTZjOWQtNDcxMy04 ODdmLTFmMzAwNzVjZjg1MC9kM2JmOTIzZC02YzlkLTQ3MTMtODg3Zi0xZjMwMDc1 Y2Y4NTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALMCFgDBALQVigwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICf+owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAOBvhLfZfZ0oT8EpAGyqH38Var9PVjKJNIoRTo7BD 0WmRNZaXtU+lK14t/mnu5lybnkmRjnWyCZcNPWCjWCIfpfj4XZTS2B6XSpCiBwD8 GwEVHY8DntjYYMIDtWTTJfvZ/aUiAXbQOdaYoy369vK4jbJwdYCe9ypE2bjnCYiS iifBVOhAiiwdmy2d3xDYZHFV1MRZ/COB8kFMqpEo+Z3aE/4VCrYNsd6/7ocu5PgD ziQwscOKMkdedT3d6ap+bmjqfMlRekPEm+ZqM4GuZaVoieWHwXKrQu7yttgurPiu 3QbtiIVv2zKDKMdw2xL8SuVu/kv/9r54pibJFmODxgb8Qw== -----END CERTIFICATE-----Generated at Thu Oct 17 21:57:59 2024 by rpki-client on console-ams.rpki-client.org