$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer File: 52a20e5a-3a5d-4417-92d7-250e134c6d09.cer (raw, json) Hash identifier: uZMo1qWiBnEVtWch7JtE6xxawvX0V9h2LH+eBs6tPNE= Subject key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285841E4834846CACB4E674D145640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Wed 14 May 2025 19:06:39 +0000 Subordinate resources: AS: 35860 IP: 63.133.208.0/22 IP: 74.119.52.0/22 IP: 192.149.254.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:48:46:ca:cb:4e:67:4d:14:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 14 19:06:39 2025 GMT Subject: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:25:5e:53:38:06:24:c8:8d:30:f5:59:be: 20:05:68:7b:a2:21:00:6a:d9:6e:c1:d9:20:f4:73: 21:eb:f8:eb:84:f0:12:f9:4e:67:7c:8d:e6:e8:4a: 13:96:67:34:11:6d:eb:60:54:58:96:4d:07:44:95: 71:52:43:b0:9c:e0:f8:74:95:31:84:54:37:05:b6: fd:dd:f9:60:f9:9c:59:45:ab:3f:9f:9f:d2:44:7e: e7:04:4b:c2:94:56:04:91:f9:95:26:8e:17:16:ba: 40:b9:f9:b2:6d:e0:0d:00:a5:92:d3:19:2c:86:75: b7:65:0c:aa:33:61:78:5c:fe:35:e2:8b:cb:c8:2f: 8c:5f:6d:8e:32:9f:3c:40:0f:e6:1c:53:3e:c3:90: a4:ae:6d:64:83:d7:47:f0:27:3c:d4:c1:98:c5:af: 2d:c0:cf:7b:40:59:62:14:54:50:2c:b5:aa:82:2d: 21:4a:ce:57:06:f0:73:6c:5f:e3:da:74:78:e5:5c: c6:75:b7:3f:20:ac:03:12:f1:85:b9:c6:a1:65:82: 0c:63:fd:be:6e:d0:cd:ee:ea:c1:f4:27:ae:dd:2b: 7c:cc:7a:4c:fe:02:32:e7:69:59:c6:d8:2f:2a:c8: 0e:5f:65:a2:1b:a8:09:5c:c3:59:dc:bf:21:5c:65: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/22 74.119.52.0/22 192.149.254.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35860 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6f:8d:9f:c6:bc:ca:cb:38:c3:89:04:c7:d6:52:ca:01:46: 3a:2c:3b:61:4e:2a:f0:40:c8:1b:33:08:cb:27:2a:b3:66:19: ed:86:a2:56:1f:88:2c:4d:ec:cc:3f:6e:34:54:85:df:98:48: b3:fe:4b:50:68:7a:be:ed:b1:dd:4b:94:68:ec:2f:70:96:74: 21:0a:fd:25:e6:3a:c1:78:28:05:2f:96:df:25:df:ff:55:6b: c5:5a:52:cc:aa:bd:50:ef:b3:93:65:02:74:82:85:fa:7a:4d: 7d:9a:bd:a4:b9:cb:2b:12:cc:4e:c5:b1:28:cc:0c:2e:db:07: 4c:c2:31:0d:9e:84:86:2e:40:90:96:9f:15:f7:6b:60:15:85: bb:8e:a3:92:5d:a5:96:2d:fe:0e:1b:ac:ec:f3:c3:ec:d5:3d: 3f:41:0a:e9:8f:ac:86:ee:ad:3b:77:b0:6b:78:e3:a8:00:9d: 69:1f:c0:b7:e3:f1:6c:e4:dd:aa:35:4c:63:fc:17:cb:3f:e8: 0e:72:be:86:1e:25:96:91:d2:8d:ff:bb:ae:f6:32:ad:31:52: a5:08:97:6d:7a:ed:9c:7a:32:99:e7:eb:e1:9a:9a:94:cd:28: a7:db:ed:0f:8a:12:e2:f7:54:f9:cc:97:98:e0:5d:b7:61:91: d6:78:60:f0 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEHkg0hGystOZ00UVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUxNDE5MDYzOVowLzEtMCsGA1UEAxMk NTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL4lXlM4BiTIjTD1Wb4gBWh7oiEAatluwdkg 9HMh6/jrhPAS+U5nfI3m6EoTlmc0EW3rYFRYlk0HRJVxUkOwnOD4dJUxhFQ3Bbb9 3flg+ZxZRas/n5/SRH7nBEvClFYEkfmVJo4XFrpAufmybeANAKWS0xkshnW3ZQyq M2F4XP414ovLyC+MX22OMp88QA/mHFM+w5Ckrm1kg9dH8Cc81MGYxa8twM97QFli FFRQLLWqgi0hSs5XBvBzbF/j2nR45VzGdbc/IKwDEvGFucahZYIMY/2+btDN7urB 9Ceu3St8zHpM/gIy52lZxtgvKsgOX2WiG6gJXMNZ3L8hXGUX4wIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFBykVGiXzO3sxoad8DTU1/qXMGJwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81 MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzUyYTIwZTVhLTNhNWQtNDQxNy05 MmQ3LTI1MGUxMzRjNmQwOS81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0 YzZkMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAI/hdADBAJKdzQDBAHAlf4wGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAIwUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABhvjZ/GvMrLOMOJBMfWUsoBRjosO2FO KvBAyBszCMsnKrNmGe2GolYfiCxN7Mw/bjRUhd+YSLP+S1Boer7tsd1LlGjsL3CW dCEK/SXmOsF4KAUvlt8l3/9Va8VaUsyqvVDvs5NlAnSChfp6TX2avaS5yysSzE7F sSjMDC7bB0zCMQ2ehIYuQJCWnxX3a2AVhbuOo5JdpZYt/g4brOzzw+zVPT9BCumP rIburTt3sGt446gAnWkfwLfj8Wzk3ao1TGP8F8s/6A5yvoYeJZaR0o3/u672Mq0x UqUIl2167Zx6Mpnn6+GampTNKKfb7Q+KEuL3VPnMl5jgXbdhkdZ4YPA= -----END CERTIFICATE-----Generated at Fri May 3 15:17:52 2024 by rpki-client on console-ams.rpki-client.org