$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer File: e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer (raw, json) Hash identifier: Wiqj96AYp4nz4fweWovW9e2sFfgQsbw2svlHj0UQlWc= Subject key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285846FCE8A1926605CA4EE9469300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 Aug 2024 00:45:26 +0000 Certificate not after: Sat 28 Nov 2026 01:45:26 +0000 Subordinate resources: AS: 36666 IP: 67.43.224.0/20 IP: 67.215.0.0/20 IP: 68.168.112.0/20 IP: 72.10.160.0/20 IP: 74.120.220.0/22 IP: 173.209.32.0/19 IP: 2001:19c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:fc:e8:a1:92:66:05:ca:4e:e9:46:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Aug 25 00:45:26 2024 GMT Not After : Nov 28 01:45:26 2026 GMT Subject: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e3:72:35:66:67:ce:69:0a:48:da:0c:11:04: ad:72:d2:41:da:fc:7a:ca:c8:09:14:19:36:21:97: 84:6f:28:b8:01:36:77:fa:a8:ba:71:02:77:03:01: b8:7e:92:6b:f2:83:2f:f7:35:09:99:8e:b5:1f:97: 72:b1:0d:86:37:74:d2:56:f4:d3:0b:d7:39:48:fe: 63:2d:83:95:d2:ee:93:6a:c9:70:7d:ba:2b:de:f8: 88:e9:4b:4d:fb:8d:58:6a:92:c1:3c:c8:0c:c6:2a: 26:34:a9:43:e4:bb:16:0a:4a:21:f3:64:dc:cc:00: a6:e7:1d:fb:5b:ed:a2:68:56:9a:88:1c:04:85:9c: c2:17:22:a8:03:43:73:f6:c5:92:f8:87:dd:bc:1f: 33:97:ff:05:ae:07:0f:63:ff:f0:51:ee:05:19:f7: 76:ff:4c:c9:bf:b0:7e:3a:3e:5f:c2:21:5a:a9:3a: a1:ed:2c:a5:83:7a:11:cb:97:e4:3d:85:43:11:35: ed:fd:4f:03:6a:66:b6:47:4d:9c:83:5f:8f:64:58: 77:06:8c:90:6f:4c:2f:36:fc:33:a3:8d:fc:d0:43: 23:d0:f8:69:22:d4:0e:b7:62:1c:2e:40:ec:5d:b6: 13:01:6e:e5:39:17:2b:30:98:65:b3:25:d7:82:b5: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.224.0/20 67.215.0.0/20 68.168.112.0/20 72.10.160.0/20 74.120.220.0/22 173.209.32.0/19 IPv6: 2001:19c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36666 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e7:e4:e0:52:17:ca:78:89:14:d7:8e:87:b4:da:db:39:58: 2a:ba:25:fb:d0:44:d3:07:38:0f:65:a3:66:5f:18:c7:fd:47: 8f:9d:56:9e:67:98:af:e1:26:07:c9:da:63:e8:ea:3a:ee:cb: 15:5a:5a:ee:bc:c7:58:4a:2f:e3:64:1e:d2:f1:54:96:7c:d6: 55:70:5b:95:5a:26:93:1e:9f:06:85:8e:8f:d2:c2:0a:ee:05: 4c:e2:f1:98:31:2c:28:c1:c1:e5:85:b0:9b:40:79:2d:7a:ae: f7:4d:e4:dd:11:e3:2a:df:27:ac:ec:6b:dc:45:ea:2a:59:34: 60:d9:55:2d:28:8a:95:8d:f9:e2:6a:73:d7:c3:dc:c4:9a:40: 0a:35:3c:7f:69:53:00:69:3b:a5:f4:9a:53:c9:d4:ee:03:a1: 4d:9b:78:2b:36:82:eb:01:6e:42:ce:a8:bf:59:28:87:a5:89: 76:0a:8f:7e:ab:10:1c:16:57:00:54:a6:3a:61:78:55:7e:c2: df:00:af:db:df:4b:ee:3b:dc:4a:fe:e7:65:da:b9:60:c1:16: 09:98:ef:70:48:d2:09:b0:3e:95:41:90:64:e0:85:2f:99:34: 71:e9:32:5e:9b:11:d5:3d:32:db:95:c8:29:5b:6b:79:df:cc: 4d:31:c7:db -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEb86KGSZgXKTulGkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDgyNTAwNDUyNloXDTI2MTEyODAxNDUyNlowLzEtMCsGA1UEAxMk ZTBlMzM4YjktMmE2My00ZGZmLTkzNzEtYzhhOGU5MzUwZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhONyNWZnzmkKSNoMEQStctJB2vx6ysgJFBk2 IZeEbyi4ATZ3+qi6cQJ3AwG4fpJr8oMv9zUJmY61H5dysQ2GN3TSVvTTC9c5SP5j LYOV0u6Taslwfbor3viI6UtN+41YapLBPMgMxiomNKlD5LsWCkoh82TczACm5x37 W+2iaFaaiBwEhZzCFyKoA0Nz9sWS+IfdvB8zl/8FrgcPY//wUe4FGfd2/0zJv7B+ Oj5fwiFaqTqh7Sylg3oRy5fkPYVDETXt/U8Dama2R02cg1+PZFh3BoyQb0wvNvwz o4380EMj0PhpItQOt2IcLkDsXbYTAW7lORcrMJhlsyXXgrUzGQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFDQ1Fun6XCGrz/AfZbAxZ3GRET/KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l MGUzMzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4ZTkzNTBlZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2UwZTMzOGI5LTJhNjMtNGRmZi05 MzcxLWM4YThlOTM1MGVlYi9lMGUzMzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4ZTkz NTBlZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBARDK+ADBARD1wADBAREqHADBARICqADBAJKeNwD BAWt0SAwDQQCAAIwBwMFACABGcAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAI86 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGjn5OBSF8p4iRTXjoe02ts5WCq6JfvQRNMHOA9lo2ZfGMf9R4+d Vp5nmK/hJgfJ2mPo6jruyxVaWu68x1hKL+NkHtLxVJZ81lVwW5VaJpMenwaFjo/S wgruBUzi8ZgxLCjBweWFsJtAeS16rvdN5N0R4yrfJ6zsa9xF6ipZNGDZVS0oipWN +eJqc9fD3MSaQAo1PH9pUwBpO6X0mlPJ1O4DoU2beCs2gusBbkLOqL9ZKIeliXYK j36rEBwWVwBUpjpheFV+wt8Ar9vfS+473Er+52XauWDBFgmY73BI0gmwPpVBkGTg hS+ZNHHpMl6bEdU9MtuVyClba3nfzE0xx9s= -----END CERTIFICATE-----Generated at Fri Nov 22 16:01:59 2024 by rpki-client on console-fra.rpki-client.org