$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer File: 91b93de6-6446-4623-a181-5425af4f85cb.cer (raw, json) Hash identifier: R9Gpff9Skt8Whm3W0y2PdWKqgLtiKdUBKssNW88dlDU= Subject key identifier: FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285844D70D9B2EAD70D061075B4400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 Feb 2024 01:45:20 +0000 Certificate not after: Fri 15 May 2026 00:45:20 +0000 Subordinate resources: AS: 36459 IP: 140.82.112.0/20 IP: 143.55.64.0/20 IP: 192.30.252.0/22 IP: 2606:50c0::/32 IP: 2620:112:3000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d7:0d:9b:2e:ad:70:d0:61:07:5b:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Feb 10 01:45:20 2024 GMT Not After : May 15 00:45:20 2026 GMT Subject: CN=91b93de6-6446-4623-a181-5425af4f85cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:62:c0:82:10:dd:9b:d7:8c:12:3b:12:f2: c8:4e:26:90:48:48:b8:cb:bc:c0:b0:b1:6e:9b:c6: cc:87:34:1f:f5:41:3a:0b:ba:b7:0a:ce:11:23:b2: fa:ea:e4:cf:0e:6c:22:27:7d:28:ae:0e:62:fc:a1: 4a:db:14:14:8c:88:bd:f5:78:c3:e0:79:e7:f1:9c: 23:88:1c:6f:d0:ca:f8:7b:6b:1d:0b:8d:26:ee:f1: 6f:79:24:dd:4d:68:23:2b:1e:11:7a:31:4c:a0:06: ab:46:26:7a:0e:e8:12:9e:e6:4f:0a:8b:1f:40:48: 45:e5:6b:0f:93:90:49:bd:5e:2a:d4:b0:eb:fb:59: c8:3d:39:d4:2b:9e:36:bf:50:8a:4f:22:83:7e:75: be:44:d9:99:14:4d:43:23:0d:45:c6:5a:e4:fa:ca: 1b:a0:fd:35:c2:22:24:d2:e8:5e:e3:35:a0:4a:a1: 9f:ee:a8:4f:ac:3d:5c:c9:da:9c:ec:0e:46:29:e7: 9d:e6:e2:a8:87:3a:ef:79:b7:f6:c7:d6:67:57:24: d3:71:11:e4:75:ae:f9:85:cc:d2:92:2b:6e:b8:d6: 77:37:65:24:a1:0d:0c:57:c1:a5:39:2e:ca:7f:75: 95:45:40:8c:7b:a3:d3:c1:96:cd:ee:ca:ab:31:d4: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 140.82.112.0/20 143.55.64.0/20 192.30.252.0/22 IPv6: 2606:50c0::/32 2620:112:3000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36459 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:46:03:ea:5c:07:d8:d4:cd:b1:fa:53:62:f5:3d:a2:e1:81: 51:3c:67:16:9f:d8:da:5b:c4:a4:39:6c:14:9f:81:0b:53:f5: aa:04:33:8a:55:6c:0c:0b:61:a7:08:bd:c1:3a:63:1e:dd:ac: 55:e7:c7:00:9d:d1:fe:71:a4:3a:b6:7c:6e:c8:30:e0:18:23: ed:57:5c:29:a1:a7:a2:dd:23:e6:ac:28:c5:a3:e0:41:77:b9: 47:ea:1f:ee:6f:81:ec:9f:86:b0:e5:74:dd:97:02:54:c1:a5: 9e:a1:51:7a:4c:2f:9c:6c:bf:f1:50:36:bf:c3:6b:ad:a8:61: 15:be:69:bd:0b:c7:32:28:f5:1f:3c:46:f6:09:62:30:95:3c: 7c:0f:31:73:35:53:12:2a:43:83:b8:0f:a3:e5:a9:b6:c9:75: 95:ca:58:07:ce:c0:bd:b7:a6:d5:9c:b9:b5:93:5c:7f:98:00: c0:6f:34:c3:c3:35:96:5a:b2:a0:46:91:38:c0:34:93:f4:e5: 1a:64:70:4b:01:77:d4:8a:3f:18:13:71:f8:cf:ca:04:0e:d1: c1:36:ea:ba:b5:3e:14:62:6c:59:5f:4d:ea:ae:a4:c7:5c:18: e5:a1:38:eb:01:0d:ed:23:97:08:bc:e8:74:1a:c2:65:28:dd: e6:3d:8e:13 -----BEGIN CERTIFICATE----- MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWETXDZsurXDQYQdbRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDIxMDAxNDUyMFoXDTI2MDUxNTAwNDUyMFowLzEtMCsGA1UEAxMk OTFiOTNkZTYtNjQ0Ni00NjIzLWExODEtNTQyNWFmNGY4NWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj9iwIIQ3ZvXjBI7EvLITiaQSEi4y7zAsLFu m8bMhzQf9UE6C7q3Cs4RI7L66uTPDmwiJ30org5i/KFK2xQUjIi99XjD4Hnn8Zwj iBxv0Mr4e2sdC40m7vFveSTdTWgjKx4RejFMoAarRiZ6DugSnuZPCosfQEhF5WsP k5BJvV4q1LDr+1nIPTnUK542v1CKTyKDfnW+RNmZFE1DIw1Fxlrk+soboP01wiIk 0uhe4zWgSqGf7qhPrD1cydqc7A5GKeed5uKohzrvebf2x9ZnVyTTcRHkda75hczS kituuNZ3N2UkoQ0MV8GlOS7Kf3WVRUCMe6PTwZbN7sqrMdQb0QIDAQABo4IEPzCC BDswHQYDVR0OBBYEFP8XxOkGWkUC5XLAqX49WQjGJNPXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 MWI5M2RlNi02NDQ2LTQ2MjMtYTE4MS01NDI1YWY0Zjg1Y2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzkxYjkzZGU2LTY0NDYtNDYyMy1h MTgxLTU0MjVhZjRmODVjYi85MWI5M2RlNi02NDQ2LTQ2MjMtYTE4MS01NDI1YWY0 Zjg1Y2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMBgEAgABMBIDBASMUnADBASPN0ADBALAHvwwFgQCAAIwEAMFACYG UMADBwQmIAESMAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAI5rMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ADFGA+pcB9jUzbH6U2L1PaLhgVE8Zxaf2NpbxKQ5bBSfgQtT9aoEM4pVbAwLYacI vcE6Yx7drFXnxwCd0f5xpDq2fG7IMOAYI+1XXCmhp6LdI+asKMWj4EF3uUfqH+5v geyfhrDldN2XAlTBpZ6hUXpML5xsv/FQNr/Da62oYRW+ab0LxzIo9R88RvYJYjCV PHwPMXM1UxIqQ4O4D6PlqbbJdZXKWAfOwL23ptWcubWTXH+YAMBvNMPDNZZasqBG kTjANJP05RpkcEsBd9SKPxgTcfjPygQO0cE26rq1PhRibFlfTequpMdcGOWhOOsB De0jlwi86HQawmUo3eY9jhM= -----END CERTIFICATE-----Generated at Fri May 3 01:49:09 2024 by rpki-client on console-fra.rpki-client.org