$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1.cer File: bffdabcb-09d5-4804-be56-5d34d53f6cf1.cer (raw, json) Hash identifier: gZWvSl0sFqFywKsxYvFFUQjhB2r80pgBDAdsnkWhOVk= Subject key identifier: E9:BA:08:1A:5A:39:0B:9C:D1:4B:B3:27:DF:89:C5:94:8C:F1:0D:AE Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285845BEA69973D42FBDA1C9B343C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/bffdabcb-09d5-4804-be56-5d34d53f6cf1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 May 2024 00:45:20 +0000 Certificate not after: Thu 06 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 395277 IP: 192.101.143.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:be:a6:99:73:d4:2f:bd:a1:c9:b3:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 3 00:45:20 2024 GMT Not After : Aug 6 00:45:20 2026 GMT Subject: CN=bffdabcb-09d5-4804-be56-5d34d53f6cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:be:2d:14:aa:1a:4a:b3:78:2a:b6:f7:6b: e1:86:8a:d8:5b:cc:3c:f0:9d:fa:88:e6:39:22:a0: 6c:77:3f:4e:57:25:f9:ac:7f:0f:ee:07:e4:95:7f: ca:f7:b5:d9:8f:3a:82:fa:fb:ab:fa:84:ee:fc:0e: f6:57:9b:d3:95:bf:58:0c:ee:f9:a6:11:7e:12:d3: 85:d3:30:8b:fe:83:95:2f:bc:d1:22:7e:88:c3:be: 88:c4:17:bc:16:36:0f:6e:42:f9:9e:fe:eb:c4:87: 40:8f:13:9c:21:85:c0:2e:06:05:85:4a:f8:f2:43: c3:7b:f8:aa:a6:6b:31:4b:7e:52:a5:54:84:6d:5c: 8b:46:6a:fb:e7:c9:50:9d:dc:67:7c:6e:fd:e3:03: 0d:b7:69:c8:d0:00:12:44:4a:25:3e:a7:45:4b:52: b9:c8:7f:cd:36:f9:98:26:08:b4:9d:85:1a:ab:82: 3d:ef:c1:4c:0b:4a:18:9a:5c:db:e0:55:84:6b:d4: 0a:d9:6e:02:23:fc:2c:b6:fa:fc:22:3b:1e:10:99: 23:b2:59:6a:c0:9c:f3:f6:77:2b:63:57:c3:05:d9: aa:5a:3a:b4:af:98:6d:0a:a0:b3:cc:16:6e:a1:bd: 42:7a:8f:09:7e:d6:31:37:de:41:7a:63:dc:e7:7a: 2f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BA:08:1A:5A:39:0B:9C:D1:4B:B3:27:DF:89:C5:94:8C:F1:0D:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bffdabcb-09d5-4804-be56-5d34d53f6cf1/bffdabcb-09d5-4804-be56-5d34d53f6cf1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.101.143.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395277 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:3a:32:fc:88:de:dc:1d:10:fe:59:51:fd:f4:f6:76:1d:0c: 11:1a:8b:e4:bd:f3:4b:a7:94:3b:0f:70:39:89:79:2f:88:9a: 7f:c3:4f:96:70:41:73:7f:07:c9:e6:a7:7b:1f:3e:e8:2c:97: be:fd:07:fd:c3:22:0a:1b:75:0a:b0:1d:2c:c9:7f:7e:fe:00: db:f7:41:23:0b:31:4d:bf:c7:e8:1c:cd:b9:ed:7a:5b:45:e3: eb:f0:7a:50:4a:9c:a6:6e:88:01:82:95:9b:66:b9:b3:01:39: 46:47:f0:4e:50:ae:8d:b9:f6:1e:ba:08:48:aa:40:95:44:62: d6:6b:b5:1b:b8:a2:66:78:4e:75:e7:72:05:d1:a0:28:ff:53: 7f:70:43:db:e6:10:b2:33:d7:61:f7:d4:49:d7:f2:96:6d:6f: 91:a1:88:77:74:83:4b:1b:f3:b7:3f:57:a9:89:fa:93:d9:4d: cc:22:1d:76:37:68:9c:1e:7f:f2:26:cb:e6:3b:e9:b0:46:f1: da:84:20:ac:0f:c8:0d:da:71:ba:f4:aa:fe:90:4d:de:06:c8: ec:46:74:b8:8a:a8:fb:df:34:29:26:96:60:60:cf:2e:91:e9: db:25:71:a9:d1:98:b7:5a:00:ce:5e:19:a5:8d:21:73:c1:21: 86:11:c8:cf -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEW+pplz1C+9ocmzQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDUwMzAwNDUyMFoXDTI2MDgwNjAwNDUyMFowLzEtMCsGA1UEAxMk YmZmZGFiY2ItMDlkNS00ODA0LWJlNTYtNWQzNGQ1M2Y2Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrq+LRSqGkqzeCq292vhhorYW8w88J36iOY5 IqBsdz9OVyX5rH8P7gfklX/K97XZjzqC+vur+oTu/A72V5vTlb9YDO75phF+EtOF 0zCL/oOVL7zRIn6Iw76IxBe8FjYPbkL5nv7rxIdAjxOcIYXALgYFhUr48kPDe/iq pmsxS35SpVSEbVyLRmr758lQndxnfG794wMNt2nI0AASREolPqdFS1K5yH/NNvmY Jgi0nYUaq4I978FMC0oYmlzb4FWEa9QK2W4CI/wstvr8IjseEJkjsllqwJzz9ncr Y1fDBdmqWjq0r5htCqCzzBZuob1Ceo8JftYxN95BemPc53ovewIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFOm6CBpaOQuc0UuzJ9+JxZSM8Q2uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i ZmZkYWJjYi0wOWQ1LTQ4MDQtYmU1Ni01ZDM0ZDUzZjZjZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2JmZmRhYmNiLTA5ZDUtNDgwNC1i ZTU2LTVkMzRkNTNmNmNmMS9iZmZkYWJjYi0wOWQ1LTQ4MDQtYmU1Ni01ZDM0ZDUz ZjZjZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAZY8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BggNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI06MvyI3twdEP5ZUf309nYdDBEai+S980unlDsPcDmJeS+I mn/DT5ZwQXN/B8nmp3sfPugsl779B/3DIgobdQqwHSzJf37+ANv3QSMLMU2/x+gc zbnteltF4+vwelBKnKZuiAGClZtmubMBOUZH8E5Qro259h66CEiqQJVEYtZrtRu4 omZ4TnXncgXRoCj/U39wQ9vmELIz12H31EnX8pZtb5GhiHd0g0sb87c/V6mJ+pPZ TcwiHXY3aJwef/Imy+Y76bBG8dqEIKwPyA3acbr0qv6QTd4GyOxGdLiKqPvfNCkm lmBgzy6R6dslcanRmLdaAM5eGaWNIXPBIYYRyM8= -----END CERTIFICATE-----Generated at Fri May 3 01:49:21 2024 by rpki-client on console-fra.rpki-client.org