$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer File: bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.cer (raw, json) Hash identifier: 50xZjbf0awkNvye2xOhq9eb98IJruMK3KH2k6xiWKQk= Subject key identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858456550B6EC843ADC8FEEC87480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Apr 2024 00:45:20 +0000 Certificate not after: Sun 05 Jul 2026 00:45:20 +0000 Subordinate resources: AS: 54013 IP: 198.231.26.0/23 IP: 204.75.157.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:65:50:b6:ec:84:3a:dc:8f:ee:c8:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 1 00:45:20 2024 GMT Not After : Jul 5 00:45:20 2026 GMT Subject: CN=bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:1a:3d:07:49:22:02:3d:f9:4c:22:6c:b5: 19:6d:17:ef:5f:6f:05:6a:84:6f:04:c9:ba:26:4c: fd:47:29:5f:ec:03:9c:61:91:d3:0d:b4:5c:55:4d: 4f:ca:f4:0d:d3:c9:00:dc:88:98:09:7a:ec:26:a7: ba:42:6f:34:ff:6a:27:02:d6:e5:23:07:94:12:cb: 22:f9:d3:f1:78:24:e0:36:cc:30:f7:bf:ad:6d:ab: 85:df:cb:96:a3:bb:f3:bb:05:aa:70:40:93:89:c7: f0:8f:72:b5:aa:e0:4d:a2:17:65:37:25:46:c5:07: 3f:a2:6f:e1:37:c9:e2:43:e2:cb:1c:5c:c1:be:9e: bd:31:00:ad:3f:8b:ee:28:24:eb:75:f8:72:1c:4c: e6:5d:bc:97:1c:cc:7f:23:28:bc:2b:4a:41:ba:a0: ca:e3:e6:60:09:a2:00:af:6f:35:27:6d:e1:96:ee: b9:a8:c7:3c:8c:7d:75:c5:04:f8:c6:d5:e9:6c:af: f6:78:a4:aa:64:97:3c:05:55:f0:1b:b8:0e:15:bd: 45:e7:b8:12:ab:fb:82:7d:58:79:07:80:6c:7f:77: ad:ef:8b:b8:ef:4d:89:a7:a6:4b:f5:46:d0:75:27: ea:3d:68:f2:1f:9d:2c:d9:f0:31:ad:de:a8:00:66: 8e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:91:FF:BF:89:94:07:2D:ED:2D:AF:9A:B1:96:60:5D:17:0E:43:D1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1/bacf3e3d-d2dc-4d1f-9e02-e407d9f6a7b1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 198.231.26.0/23 204.75.157.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54013 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:49:50:79:96:5b:21:6b:98:12:36:bd:f2:b2:1c:50:dd:d7: 0d:7b:b9:1c:41:de:d1:df:ca:aa:92:c1:d3:68:25:34:9c:bf: fb:8d:10:0f:1d:1f:4c:72:1c:96:22:65:b0:42:5f:c5:ab:c8: 0f:68:2e:60:3f:a5:9c:33:54:89:d1:fa:ee:22:29:69:8a:0c: ae:91:b8:46:f0:2a:08:bf:a9:f4:9b:b2:f9:99:8d:77:25:ca: 74:e3:ac:c3:9a:c4:d3:86:7f:92:df:e7:18:0a:62:29:2d:86: 6e:8b:94:cc:90:1f:f3:63:6e:fe:b2:3a:6d:fb:18:9a:f2:47: 9c:3d:ae:63:d1:7f:05:9b:55:03:38:79:54:96:9c:5d:b3:06: f6:18:17:a7:20:ed:51:b1:ec:e7:b0:3a:17:9c:19:f7:0e:38: 66:9d:ea:41:c6:2e:42:b7:22:86:16:ab:e9:df:97:69:cb:1b: fb:5f:bd:71:59:58:16:4f:2b:ab:1c:ec:36:23:f4:5a:06:9e: 24:bc:b7:90:0d:4f:8a:bf:6a:9f:35:c1:a8:5c:b6:ee:b7:48: c2:f4:1b:98:2c:24:49:0a:03:b1:0b:c9:be:a0:1a:54:96:1c: e5:a8:d4:13:5c:36:7c:79:7e:2d:1c:01:e1:4f:41:1b:29:87: ff:07:bb:30 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEVlULbshDrcj+7IdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDQwMTAwNDUyMFoXDTI2MDcwNTAwNDUyMFowLzEtMCsGA1UEAxMk YmFjZjNlM2QtZDJkYy00ZDFmLTllMDItZTQwN2Q5ZjZhN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlkaPQdJIgI9+UwibLUZbRfvX28FaoRvBMm6 Jkz9Rylf7AOcYZHTDbRcVU1PyvQN08kA3IiYCXrsJqe6Qm80/2onAtblIweUEssi +dPxeCTgNsww97+tbauF38uWo7vzuwWqcECTicfwj3K1quBNohdlNyVGxQc/om/h N8niQ+LLHFzBvp69MQCtP4vuKCTrdfhyHEzmXbyXHMx/Iyi8K0pBuqDK4+ZgCaIA r281J23hlu65qMc8jH11xQT4xtXpbK/2eKSqZJc8BVXwG7gOFb1F57gSq/uCfVh5 B4Bsf3et74u4702Jp6ZL9UbQdSfqPWjyH50s2fAxrd6oAGaO1QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFDGR/7+JlAct7S2vmrGWYF0XDkPRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9i YWNmM2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3ZDlmNmE3YjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2JhY2YzZTNkLWQyZGMtNGQxZi05 ZTAyLWU0MDdkOWY2YTdiMS9iYWNmM2UzZC1kMmRjLTRkMWYtOWUwMi1lNDA3ZDlm NmE3YjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHG5xoDBADMS50wGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANL9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAhJUHmWWyFrmBI2vfKyHFDd1w17uRxB3tHfyqqS wdNoJTScv/uNEA8dH0xyHJYiZbBCX8WryA9oLmA/pZwzVInR+u4iKWmKDK6RuEbw Kgi/qfSbsvmZjXclynTjrMOaxNOGf5Lf5xgKYikthm6LlMyQH/Njbv6yOm37GJry R5w9rmPRfwWbVQM4eVSWnF2zBvYYF6cg7VGx7OewOhecGfcOOGad6kHGLkK3IoYW q+nfl2nLG/tfvXFZWBZPK6sc7DYj9FoGniS8t5ANT4q/ap81wahctu63SML0G5gs JEkKA7ELyb6gGlSWHOWo1BNcNnx5fi0cAeFPQRsph/8HuzA= -----END CERTIFICATE-----Generated at Sat May 4 01:54:01 2024 by rpki-client on console-ams.rpki-client.org