$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer File: e0b35546-769e-41a6-987e-2a9732555de4.cer (raw, json) Hash identifier: A9qX1jq3TFfBXGD/TmMUn+PHH3NWb/jBjuprBRDRf7s= Subject key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584657232F2C5244CBA6A6894800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Jun 2024 15:39:14 +0000 Certificate not after: Mon 23 Feb 2026 01:45:15 +0000 Subordinate resources: IP: 23.146.72.0/24 IP: 23.162.120.0/24 IP: 64.49.44.0/22 IP: 2602:faac::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:57:23:2f:2c:52:44:cb:a6:a6:89:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 26 15:39:14 2024 GMT Not After : Feb 23 01:45:15 2026 GMT Subject: CN=e0b35546-769e-41a6-987e-2a9732555de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fb:5f:a4:c4:c4:6e:84:54:5f:de:df:64:2e: 7c:6c:e9:11:38:13:d2:34:fd:9a:8e:06:8c:44:52: b7:5a:a6:7e:22:bf:5a:4a:d3:3c:9c:ab:0a:04:48: 61:ea:8a:e0:49:ac:be:d8:b5:a5:cd:43:96:f5:26: 44:51:99:09:bc:17:cb:b0:cc:33:c2:41:e6:b6:4d: aa:b0:8a:6e:f7:15:da:4b:03:45:27:7c:dc:01:10: 58:69:bc:76:8e:98:e2:65:0f:4d:56:be:0f:53:6c: 5e:c5:03:91:3d:89:f6:b4:12:66:d5:bb:33:b8:a9: a4:f1:36:25:75:f1:00:67:cb:a1:b7:8e:6a:f4:19: 67:3d:d6:c1:de:7f:88:01:f1:23:44:4e:62:68:30: bd:fe:6e:54:61:90:ff:7e:38:ce:fc:dc:6a:19:ec: 29:06:21:fe:68:a2:67:af:99:c4:c0:a5:2f:98:86: 8c:c2:60:df:2e:a6:16:8e:b9:48:49:f7:b5:47:c7: 00:a6:31:c3:c5:1e:97:b7:0e:7d:2a:35:3d:27:05: ec:bd:f0:34:d0:41:45:7b:d7:ad:05:f4:49:97:4f: 0e:80:1c:0b:13:0e:18:22:fc:de:e9:32:16:16:e1: f2:c8:86:4d:9b:8d:12:94:3e:05:1a:b2:96:c1:05: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.146.72.0/24 23.162.120.0/24 64.49.44.0/22 IPv6: 2602:faac::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6d:6a:d7:16:5f:88:b6:96:ee:82:54:c7:e6:52:3b:28:64: 0f:c7:fa:41:48:64:ca:8f:79:66:92:de:e5:da:ca:14:50:00: 81:5c:fa:ae:36:f7:55:b1:fd:d7:1b:b4:f5:c8:09:ee:87:08: 31:34:74:c9:ac:a9:68:ee:59:af:b7:87:f4:a3:65:11:5f:3a: c8:8f:23:33:3b:4a:b8:8a:76:9c:7b:d3:31:d8:83:67:2f:b8: 6e:27:c0:0b:d9:3f:e3:ac:62:c9:cf:f4:dd:dd:7a:43:56:39: ba:6b:f6:a7:cc:80:18:b6:60:23:59:bb:97:87:e7:20:c2:c0: 28:af:80:38:7a:1a:91:ff:38:d7:0f:ae:7d:42:71:46:cf:de: f9:5c:ab:38:2a:7b:74:e4:74:6a:67:b2:02:e7:8a:89:a4:8e: 2c:e7:84:d0:39:25:08:48:41:b2:53:d7:04:56:57:31:43:ac: 1c:88:ef:26:f2:b6:b7:f2:50:6b:33:32:d1:69:81:7d:2d:43: b3:d0:11:ad:00:58:e7:b9:32:80:43:78:0c:93:11:9b:07:41: ba:fa:bc:a1:01:8b:8d:50:23:33:8a:c5:db:bb:84:7b:b9:4a: 9b:42:02:b2:e5:69:c8:30:4f:5f:39:ad:ca:74:96:58:d1:3f: 86:b0:c9:26 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEZXIy8sUkTLpqaJSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDYyNjE1MzkxNFoXDTI2MDIyMzAxNDUxNVowLzEtMCsGA1UEAxMk ZTBiMzU1NDYtNzY5ZS00MWE2LTk4N2UtMmE5NzMyNTU1ZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPtfpMTEboRUX97fZC58bOkROBPSNP2ajgaM RFK3WqZ+Ir9aStM8nKsKBEhh6orgSay+2LWlzUOW9SZEUZkJvBfLsMwzwkHmtk2q sIpu9xXaSwNFJ3zcARBYabx2jpjiZQ9NVr4PU2xexQORPYn2tBJm1bszuKmk8TYl dfEAZ8uht45q9BlnPdbB3n+IAfEjRE5iaDC9/m5UYZD/fjjO/NxqGewpBiH+aKJn r5nEwKUvmIaMwmDfLqYWjrlISfe1R8cApjHDxR6Xtw59KjU9JwXsvfA00EFFe9et BfRJl08OgBwLEw4YIvze6TIWFuHyyIZNm40SlD4FGrKWwQXuFQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFP32F6WBfLMYt+MR/7D839PszAioMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l MGIzNTU0Ni03NjllLTQxYTYtOTg3ZS0yYTk3MzI1NTVkZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2UwYjM1NTQ2LTc2OWUtNDFhNi05 ODdlLTJhOTczMjU1NWRlNC9lMGIzNTU0Ni03NjllLTQxYTYtOTg3ZS0yYTk3MzI1 NTVkZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXkkgDBAAXongDBAJAMSwwDgQCAAIwCAMGBCYC +qwAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADhtatcWX4i2lu6CVMfmUjsoZA/H+kFIZMqPeWaS3uXayhRQ AIFc+q4291Wx/dcbtPXICe6HCDE0dMmsqWjuWa+3h/SjZRFfOsiPIzM7SriKdpx7 0zHYg2cvuG4nwAvZP+OsYsnP9N3dekNWObpr9qfMgBi2YCNZu5eH5yDCwCivgDh6 GpH/ONcPrn1CcUbP3vlcqzgqe3TkdGpnsgLniomkjiznhNA5JQhIQbJT1wRWVzFD rByI7ybytrfyUGszMtFpgX0tQ7PQEa0AWOe5MoBDeAyTEZsHQbr6vKEBi41QIzOK xdu7hHu5SptCArLlacgwT185rcp0lljRP4awySY= -----END CERTIFICATE-----Generated at Fri Nov 22 07:02:24 2024 by rpki-client on console-fra.rpki-client.org