$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer File: d51877be-b85b-4cf7-ae49-18c7da88238f.cer (raw, json) Hash identifier: 9uDx8Tw2fg8vv4VAhUnlbD2J/KZ1xcxXqW3+V3tEFsU= Subject key identifier: 76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285845DCE1F97989C4DFECC5461800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 May 2024 20:39:13 +0000 Certificate not after: Sun 16 Aug 2026 20:39:13 +0000 Subordinate resources: AS: 19508 IP: 205.167.40.0/23 IP: 205.167.70.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Jul 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:dc:e1:f9:79:89:c4:df:ec:c5:46:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: May 13 20:39:13 2024 GMT Not After : Aug 16 20:39:13 2026 GMT Subject: CN=d51877be-b85b-4cf7-ae49-18c7da88238f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:82:de:71:fe:0d:f6:eb:40:95:4c:b6:e4:c6: f5:7c:ad:fb:60:c1:d4:2c:e8:57:a4:b4:e3:f1:e4: fc:45:aa:88:5e:59:c1:7c:5f:dc:b7:43:94:fa:66: a1:66:9a:f8:6b:68:03:9c:7c:0d:ce:41:dd:46:68: dc:28:73:e6:31:7a:c5:b1:ef:60:fa:7a:e1:2a:a0: 01:08:9e:47:33:0c:01:c0:b8:b7:37:99:5c:8e:bd: c9:51:c9:1a:1b:51:f0:22:59:e6:59:c1:dd:40:9a: 28:4b:85:46:27:07:95:86:f8:92:61:da:de:c3:1d: 96:6a:3e:2c:e0:f9:d0:be:c2:df:ba:77:29:61:4c: 02:62:ca:ee:10:2b:69:9c:d5:fd:0a:26:85:df:2e: 70:29:89:5b:49:01:f9:37:e4:bb:f3:f4:c8:98:db: ae:b3:b3:ae:35:c6:b1:13:9a:8c:3b:59:72:ad:83: 72:1d:43:88:3e:d8:eb:b6:54:be:cb:18:a3:49:3d: f0:a9:91:4d:2b:46:22:0d:3a:34:e0:2e:d5:7a:4d: 9f:ac:95:23:2b:5c:9d:0a:21:d1:82:f0:0c:01:8c: fe:a4:71:d4:21:ae:e5:ce:99:9b:50:38:6c:68:3f: 71:b3:b1:b6:35:b9:19:ca:bb:c6:c4:ae:c4:8e:3d: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 205.167.40.0/23 205.167.70.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19508 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b5:ed:ed:91:7c:70:5b:86:61:22:5a:7e:04:af:f5:25:be: ff:63:be:a6:28:30:6d:41:23:7f:72:b5:df:e0:93:03:39:8e: d8:e4:00:05:92:b3:87:b8:b9:47:ab:fd:ac:96:d4:70:af:48: f8:cb:eb:74:0d:84:18:28:2d:cf:a7:02:8e:82:59:23:64:79: 98:e7:b6:a5:58:64:f9:0f:27:11:be:9d:e4:4e:b1:09:15:1a: f6:68:33:3e:b8:06:04:20:36:01:da:19:89:c4:be:48:19:bc: 38:e4:47:72:ef:12:ff:07:49:74:4c:b8:0b:2a:47:cf:65:11: 76:e9:30:e6:ec:f4:39:e7:45:c9:ed:66:2e:ea:5c:d6:ee:25: 88:04:0f:f3:c8:69:29:92:cf:42:da:03:fb:fb:d9:09:66:9b: 44:34:87:bf:52:f8:06:d9:a4:a1:d5:c0:54:af:d9:53:07:c0: 45:6f:97:08:2d:0b:d5:c3:12:a4:3d:f4:10:f0:e2:72:3e:99: f4:ee:8a:69:08:60:de:26:be:f3:b5:ce:d3:4c:f1:be:b4:2f: 58:d3:f3:2f:ca:b1:52:2c:d2:8c:9a:32:d2:51:3e:80:1f:2f: dc:a5:c4:73:8c:c3:5b:06:f3:b6:71:36:9a:00:47:93:d1:d5: 9c:b6:e9:8e -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEXc4fl5icTf7MVGGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDUxMzIwMzkxM1oXDTI2MDgxNjIwMzkxM1owLzEtMCsGA1UEAxMk ZDUxODc3YmUtYjg1Yi00Y2Y3LWFlNDktMThjN2RhODgyMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgILecf4N9utAlUy25Mb1fK37YMHULOhXpLTj 8eT8RaqIXlnBfF/ct0OU+mahZpr4a2gDnHwNzkHdRmjcKHPmMXrFse9g+nrhKqAB CJ5HMwwBwLi3N5lcjr3JUckaG1HwIlnmWcHdQJooS4VGJweVhviSYdrewx2Waj4s 4PnQvsLfuncpYUwCYsruECtpnNX9CiaF3y5wKYlbSQH5N+S78/TImNuus7OuNcax E5qMO1lyrYNyHUOIPtjrtlS+yxijST3wqZFNK0YiDTo04C7Vek2frJUjK1ydCiHR gvAMAYz+pHHUIa7lzpmbUDhsaD9xs7G2NbkZyrvGxK7Ejj3YIQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFHb2Hzz3lSH1KmwmfzjBMj3UfjyXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k NTE4NzdiZS1iODViLTRjZjctYWU0OS0xOGM3ZGE4ODIzOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Q1MTg3N2JlLWI4NWItNGNmNy1h ZTQ5LTE4YzdkYTg4MjM4Zi9kNTE4NzdiZS1iODViLTRjZjctYWU0OS0xOGM3ZGE4 ODIzOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHNpygDBAHNp0YwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICTDQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAYrXt7ZF8cFuGYSJafgSv9SW+/2O+pigwbUEjf3K1 3+CTAzmO2OQABZKzh7i5R6v9rJbUcK9I+MvrdA2EGCgtz6cCjoJZI2R5mOe2pVhk +Q8nEb6d5E6xCRUa9mgzPrgGBCA2AdoZicS+SBm8OORHcu8S/wdJdEy4CypHz2UR dukw5uz0OedFye1mLupc1u4liAQP88hpKZLPQtoD+/vZCWabRDSHv1L4BtmkodXA VK/ZUwfARW+XCC0L1cMSpD30EPDicj6Z9O6KaQhg3ia+87XO00zxvrQvWNPzL8qx UizSjJoy0lE+gB8v3KXEc4zDWwbztnE2mgBHk9HVnLbpjg== -----END CERTIFICATE-----Generated at Sat Jun 29 19:33:14 2024 by rpki-client on console-fra.rpki-client.org