$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer File: d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer (raw, json) Hash identifier: WGxvyhaMKLN2UlD6Vbcw9iXSNwOqLXNSoea+z4R4Go8= Subject key identifier: 83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285845D7C6C01B46418B49A211B680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 May 2024 00:45:19 +0000 Certificate not after: Sat 15 Aug 2026 00:45:19 +0000 Subordinate resources: IP: 23.149.248.0/24 IP: 149.112.53.0/24 IP: 2602:fa90::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jul 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d7:c6:c0:1b:46:41:8b:49:a2:11:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 12 00:45:19 2024 GMT Not After : Aug 15 00:45:19 2026 GMT Subject: CN=d8ea1081-bccb-41d5-b0fe-1b9724cced3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:d4:ff:61:ea:f1:09:67:74:99:6c:75:bb: 52:c5:29:53:dc:53:d5:64:33:e6:21:df:d7:f6:46: e3:db:b0:49:4d:03:cd:a3:1a:c7:d5:5d:8e:0a:49: 54:f8:1c:70:ef:67:35:2f:ba:5f:d5:08:df:0b:46: 8d:97:21:1d:01:62:e5:69:19:4c:e4:34:06:54:47: af:96:82:bd:a5:6f:ec:81:f5:8c:df:a3:77:5e:c3: 10:76:4d:9c:1a:c2:92:a6:01:79:4d:d4:c4:03:77: 77:2d:83:df:60:6a:cd:33:1d:74:05:84:b7:e0:29: a0:bd:11:11:1e:57:db:ac:29:4d:48:0a:41:dd:37: c9:1b:ad:7e:fc:75:59:38:0b:75:ef:4c:bd:7c:8e: 09:0b:0e:8f:9c:d0:1f:53:7b:a7:93:37:67:3c:53: 55:bd:37:36:38:37:b8:dd:c5:c4:2d:ec:cc:36:76: d7:d3:a7:fd:64:2d:1b:da:6c:6b:db:58:17:81:2b: 9e:e8:25:d6:3f:b9:ff:6c:c0:b0:ba:e2:e2:47:fc: be:35:72:1a:98:a8:8e:c2:ae:4b:b1:2e:f2:e4:c9: 6d:56:59:b5:53:89:69:45:b8:35:a6:9e:63:3c:d0: e9:89:1c:5c:e1:f1:66:03:18:34:64:4c:88:8f:a1: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.149.248.0/24 149.112.53.0/24 IPv6: 2602:fa90::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:05:44:1d:ce:74:4c:41:a3:2c:01:8c:94:b9:a0:06:f0:85: 8b:45:a5:79:1c:77:8c:7f:0f:c2:ab:48:4a:6e:a8:00:dc:55: 00:44:66:7b:b5:a2:a5:cc:97:ce:c3:b8:7f:d5:be:ab:9f:62: 55:98:99:75:15:df:64:0f:df:3e:88:69:79:f7:a1:fb:a8:1a: 4a:bd:a0:43:c0:13:d0:62:2d:fc:75:06:f7:e5:d2:ff:c8:2e: 4b:4d:bd:d8:63:2a:e5:48:26:91:ed:cf:d6:4e:4b:3c:71:e9: 83:8f:00:3c:bb:e6:0a:42:50:4d:63:d2:5c:31:ab:9d:ea:49: 3b:85:34:11:21:83:5e:d3:c2:a4:ec:41:2c:ba:bd:ff:b6:02: 13:ec:37:03:b8:84:f9:c9:bc:ca:ae:f1:7d:b9:d6:ee:99:5c: f9:ed:6f:ed:54:9f:2f:88:68:4e:0b:1c:f5:d7:b5:4d:41:6b: fd:b2:ab:c9:a3:23:c1:51:f5:7a:e6:be:f2:45:cc:97:33:bc: 65:38:a2:69:ff:9b:fa:ae:94:83:fb:0f:3d:20:18:b8:f9:ce: 3d:04:d1:a8:f9:56:f4:13:91:04:9c:e1:77:f1:46:3b:5a:cb: fa:25:f4:b2:38:d9:dc:46:19:04:dc:3f:64:aa:3b:30:6e:d2: b0:c6:1d:18 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEXXxsAbRkGLSaIRtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDUxMjAwNDUxOVoXDTI2MDgxNTAwNDUxOVowLzEtMCsGA1UEAxMk ZDhlYTEwODEtYmNjYi00MWQ1LWIwZmUtMWI5NzI0Y2NlZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwODU/2Hq8QlndJlsdbtSxSlT3FPVZDPmId/X 9kbj27BJTQPNoxrH1V2OCklU+Bxw72c1L7pf1QjfC0aNlyEdAWLlaRlM5DQGVEev loK9pW/sgfWM36N3XsMQdk2cGsKSpgF5TdTEA3d3LYPfYGrNMx10BYS34CmgvRER HlfbrClNSApB3TfJG61+/HVZOAt170y9fI4JCw6PnNAfU3unkzdnPFNVvTc2ODe4 3cXELezMNnbX06f9ZC0b2mxr21gXgSue6CXWP7n/bMCwuuLiR/y+NXIamKiOwq5L sS7y5MltVlm1U4lpRbg1pp5jPNDpiRxc4fFmAxg0ZEyIj6GxNwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFINmz3vf10Bscg5VPwJemM0N48z4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k OGVhMTA4MS1iY2NiLTQxZDUtYjBmZS0xYjk3MjRjY2VkM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q4ZWExMDgxLWJjY2ItNDFkNS1i MGZlLTFiOTcyNGNjZWQzZi9kOGVhMTA4MS1iY2NiLTQxZDUtYjBmZS0xYjk3MjRj Y2VkM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlfgDBACVcDUwDgQCAAIwCAMGBCYC+pAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYFRB3OdExBoywBjJS5oAbwhYtFpXkcd4x/D8KrSEpuqADcVQBEZnu1 oqXMl87DuH/VvqufYlWYmXUV32QP3z6IaXn3ofuoGkq9oEPAE9BiLfx1Bvfl0v/I LktNvdhjKuVIJpHtz9ZOSzxx6YOPADy75gpCUE1j0lwxq53qSTuFNBEhg17TwqTs QSy6vf+2AhPsNwO4hPnJvMqu8X251u6ZXPntb+1Uny+IaE4LHPXXtU1Ba/2yq8mj I8FR9XrmvvJFzJczvGU4omn/m/qulIP7Dz0gGLj5zj0E0aj5VvQTkQSc4XfxRjta y/ol9LI42dxGGQTcP2SqOzBu0rDGHRg= -----END CERTIFICATE-----Generated at Fri Jul 26 15:59:29 2024 by rpki-client on console-fra.rpki-client.org