$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa.cer File: 0af55262-eca7-4517-9ccb-1a0296435eaa.cer (raw, json) Hash identifier: GSEffGNdXlP+chcHB3HgPB5GguW+tZWIycBbb9h0+hM= Subject key identifier: BD:69:18:99:02:C4:51:38:94:2D:5F:E2:77:19:AA:02:2A:18:E3:CA Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F432858460CEFE5C4929C9A3779D48B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/0af55262-eca7-4517-9ccb-1a0296435eaa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 May 2024 01:46:05 +0000 Certificate not after: Thu 03 Sep 2026 01:46:05 +0000 Subordinate resources: AS: 399700 IP: 66.97.168.0/24 IP: 162.33.184.0/22 IP: 185.212.5.0/24 IP: 2602:fc73::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:0c:ef:e5:c4:92:9c:9a:37:79:d4:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: May 31 01:46:05 2024 GMT Not After : Sep 3 01:46:05 2026 GMT Subject: CN=0af55262-eca7-4517-9ccb-1a0296435eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3b:17:43:47:54:cd:7d:75:14:5b:f0:89:c5: 35:69:9c:ae:01:52:56:9d:54:a1:8a:98:95:ed:d4: e4:07:fd:83:e4:3d:4a:24:16:47:fc:3f:aa:2a:b0: 5d:b3:39:09:2a:6a:b6:1d:31:a4:99:08:7d:1d:33: 5b:37:13:c1:c4:31:50:65:c0:7f:64:d5:ee:75:b4: 01:77:49:56:5c:ba:46:bc:19:b9:cc:e5:ee:b9:38: 9b:ed:77:a5:f0:ab:d2:69:13:09:87:5f:85:74:df: b2:63:a6:5c:f4:16:5b:c9:c6:28:4c:08:32:6d:0b: 5a:68:6c:dd:11:99:a7:b0:6b:f7:a7:b6:40:c9:40: 8c:de:58:3a:9a:fc:1e:28:ff:4c:9b:15:97:b0:da: 89:77:77:b4:7d:1d:19:94:69:70:36:83:c8:d1:bb: c1:ab:ff:a9:36:a7:c5:ca:d8:d6:a5:be:e3:d6:2b: 00:66:7e:e0:29:a3:67:dd:62:c5:f5:51:f8:9b:5f: a9:0f:b5:92:c8:b3:a0:ba:7c:84:11:4f:5b:35:74: 10:24:f8:9a:75:66:60:d0:0a:49:3e:74:11:38:09: 12:81:f6:09:64:d9:4f:f4:69:d8:38:e5:e6:d7:c8: 51:4b:36:96:e9:27:25:da:ce:fa:10:17:16:6b:13: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:69:18:99:02:C4:51:38:94:2D:5F:E2:77:19:AA:02:2A:18:E3:CA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0af55262-eca7-4517-9ccb-1a0296435eaa/0af55262-eca7-4517-9ccb-1a0296435eaa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 66.97.168.0/24 162.33.184.0/22 185.212.5.0/24 IPv6: 2602:fc73::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399700 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:11:78:54:30:6b:58:4f:00:a9:13:95:3a:27:04:e4:a4:6b: e8:bc:53:c9:a1:c0:ac:c9:71:5e:85:4f:c3:95:bb:55:d6:3c: 1b:d2:60:50:5d:26:57:0a:90:69:e6:c2:b8:33:f7:b8:62:49: 66:e7:82:56:28:1d:2a:1f:fa:0f:8f:12:be:c7:a8:56:0c:56: 78:9b:a5:2d:d6:6b:6b:dd:2f:e5:94:dc:35:50:4d:f0:1b:a8: bb:2b:34:c2:df:84:b5:13:16:fb:6f:69:33:f1:3b:77:15:e9: 2d:ac:2d:21:ea:88:cc:72:f0:2a:ce:5c:a3:30:b2:fb:ee:ba: a0:dc:bb:e2:5a:ee:95:bd:72:26:0d:08:95:6a:95:88:e3:1c: 95:0f:d6:cb:fb:23:aa:fa:d7:f4:84:ab:f2:7f:7c:4d:bb:07: 20:53:b8:51:c5:37:a7:44:3c:9c:d5:17:af:4b:75:31:45:62: 0f:09:f7:e1:1b:34:f6:47:ee:4a:00:3f:5f:9a:61:35:d6:fb: 95:64:07:09:c8:8b:f1:e3:dd:e9:ec:eb:b4:41:1b:3c:2b:a0: af:77:32:72:ac:55:dd:bd:87:0e:25:11:58:8e:db:05:3a:12: 72:0d:ff:5b:42:02:a4:87:f1:08:23:55:59:57:7e:ae:d4:af: 59:df:a0:11 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEYM7+XEkpyaN3nUiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDUzMTAxNDYwNVoXDTI2MDkwMzAxNDYwNVowLzEtMCsGA1UEAxMk MGFmNTUyNjItZWNhNy00NTE3LTljY2ItMWEwMjk2NDM1ZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDsXQ0dUzX11FFvwicU1aZyuAVJWnVShipiV 7dTkB/2D5D1KJBZH/D+qKrBdszkJKmq2HTGkmQh9HTNbNxPBxDFQZcB/ZNXudbQB d0lWXLpGvBm5zOXuuTib7Xel8KvSaRMJh1+FdN+yY6Zc9BZbycYoTAgybQtaaGzd EZmnsGv3p7ZAyUCM3lg6mvweKP9MmxWXsNqJd3e0fR0ZlGlwNoPI0bvBq/+pNqfF ytjWpb7j1isAZn7gKaNn3WLF9VH4m1+pD7WSyLOgunyEEU9bNXQQJPiadWZg0ApJ PnQROAkSgfYJZNlP9GnYOOXm18hRSzaW6Scl2s76EBcWaxPOjQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFL1pGJkCxFE4lC1f4ncZqgIqGOPKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w YWY1NTI2Mi1lY2E3LTQ1MTctOWNjYi0xYTAyOTY0MzVlYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzBhZjU1MjYyLWVjYTctNDUxNy05 Y2NiLTFhMDI5NjQzNWVhYS8wYWY1NTI2Mi1lY2E3LTQ1MTctOWNjYi0xYTAyOTY0 MzVlYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBABCYagDBAKiIbgDBAC51AUwDgQCAAIwCAMGBCYC /HMAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYZVDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaEXhUMGtY TwCpE5U6JwTkpGvovFPJocCsyXFehU/DlbtV1jwb0mBQXSZXCpBp5sK4M/e4Yklm 54JWKB0qH/oPjxK+x6hWDFZ4m6Ut1mtr3S/llNw1UE3wG6i7KzTC34S1Exb7b2kz 8Tt3FektrC0h6ojMcvAqzlyjMLL77rqg3LviWu6VvXImDQiVapWI4xyVD9bL+yOq +tf0hKvyf3xNuwcgU7hRxTenRDyc1RevS3UxRWIPCffhGzT2R+5KAD9fmmE11vuV ZAcJyIvx493p7Ou0QRs8K6CvdzJyrFXdvYcOJRFYjtsFOhJyDf9bQgKkh/EII1VZ V36u1K9Z36AR -----END CERTIFICATE-----Generated at Wed Jun 26 08:16:29 2024 by rpki-client on console-ams.rpki-client.org