$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d.cer File: 4cd0cdd0-b8da-4361-a3ad-3820021b7d3d.cer (raw, json) Hash identifier: Xb7aSem7zF2/F/9zOnR7IX3K7RRsHJhI46/ikTeD+Z4= Subject key identifier: 02:83:77:25:61:95:7A:B6:2B:68:80:A6:8E:C7:B3:82:58:17:8B:C5 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F432858461C8C46E679113C4740E43300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Jun 2024 15:58:17 +0000 Certificate not after: Tue 08 Sep 2026 15:58:17 +0000 Subordinate resources: AS: 398010 IP: 199.120.131.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:1c:8c:46:e6:79:11:3c:47:40:e4:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jun 5 15:58:17 2024 GMT Not After : Sep 8 15:58:17 2026 GMT Subject: CN=4cd0cdd0-b8da-4361-a3ad-3820021b7d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:57:0f:a1:b5:04:5a:7a:b0:82:5f:a1:6c:c4: b2:04:7d:15:0a:d5:41:fa:cc:bf:73:5f:04:19:a4: 3e:83:cd:da:ad:d9:a8:f7:54:10:3f:76:ef:16:80: ad:e7:37:61:92:ee:37:dd:fb:0c:5a:02:0c:d0:a3: 71:43:55:35:74:eb:de:c5:aa:63:95:34:2f:74:d3: 88:a6:64:d7:8a:ab:98:97:a5:82:9e:d9:1c:d8:cd: 6b:eb:ee:ab:5e:33:c7:22:65:4b:29:6a:33:d3:a6: b9:2a:96:47:2f:c4:36:94:55:28:b8:5d:d5:e0:f4: 42:a5:53:1e:b4:ab:e5:ed:cb:73:4b:ae:5f:b3:1a: ca:1e:e0:f6:54:5d:20:f0:ba:8c:ce:75:3d:c1:f2: 42:dd:07:d5:81:fc:83:98:9d:9b:0a:b9:db:ff:89: d7:bc:f1:ac:ae:73:87:5a:17:0f:a9:bb:1f:fd:ea: da:91:f0:46:38:16:16:d3:e1:ef:45:f6:fd:64:52: 4a:13:19:68:38:6f:21:8b:9a:1d:23:2c:d0:71:c4: 76:8c:dd:49:a1:4a:54:0b:4c:45:40:b4:ba:58:45: 60:51:96:b9:da:29:6a:70:c2:88:cb:fd:3e:16:6d: 1a:d6:a9:73:e4:cc:bb:6e:7a:cc:8b:dc:1a:18:b4: b9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:83:77:25:61:95:7A:B6:2B:68:80:A6:8E:C7:B3:82:58:17:8B:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d/4cd0cdd0-b8da-4361-a3ad-3820021b7d3d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 199.120.131.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398010 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:77:c0:e6:f0:34:90:76:ff:d4:74:6c:1c:6f:f4:f5:c2:89: d5:93:41:ac:ac:29:30:db:ce:53:b1:01:3a:a3:79:a7:2d:82: 6c:6a:af:99:95:40:b2:2c:0b:72:87:50:7d:b9:33:43:d4:15: 22:d5:1f:9a:55:b6:4e:c9:77:f5:06:ac:c6:c0:80:52:99:66: 35:0e:82:7b:ad:cc:18:34:98:5a:04:00:f8:4e:85:5a:ed:3b: 3c:ef:8a:bb:de:a5:12:5e:3c:47:c9:8e:01:4b:e5:46:fa:b1: 9e:02:2d:6f:14:1e:9f:6d:95:29:cc:37:9c:40:f5:14:1e:f3: a0:91:65:07:0a:45:06:92:61:12:49:6c:db:bc:20:2a:0b:d9: 9b:12:f8:1b:45:f7:69:3f:9f:ca:6d:02:60:5c:df:b5:9c:d1: c7:ad:2d:e7:e4:3d:68:7f:16:8a:5e:56:a8:33:1e:cc:fd:42: ac:ac:79:3d:2c:1d:25:06:df:52:c1:b2:3e:e1:b8:8f:05:49: cd:81:b6:07:1f:59:28:f0:34:2b:89:05:c4:52:0f:b1:3b:50: bb:bc:bd:65:a5:fe:91:eb:8d:c9:13:14:4c:81:f1:75:1c:59: b0:3d:83:3c:0f:45:3f:c4:87:37:5d:0c:da:49:ff:7d:4e:fb: 3a:31:2f:a9 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEYcjEbmeRE8R0DkMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDYwNTE1NTgxN1oXDTI2MDkwODE1NTgxN1owLzEtMCsGA1UEAxMk NGNkMGNkZDAtYjhkYS00MzYxLWEzYWQtMzgyMDAyMWI3ZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lcPobUEWnqwgl+hbMSyBH0VCtVB+sy/c18E GaQ+g83ardmo91QQP3bvFoCt5zdhku433fsMWgIM0KNxQ1U1dOvexapjlTQvdNOI pmTXiquYl6WCntkc2M1r6+6rXjPHImVLKWoz06a5KpZHL8Q2lFUouF3V4PRCpVMe tKvl7ctzS65fsxrKHuD2VF0g8LqMznU9wfJC3QfVgfyDmJ2bCrnb/4nXvPGsrnOH WhcPqbsf/erakfBGOBYW0+HvRfb9ZFJKExloOG8hi5odIyzQccR2jN1JoUpUC0xF QLS6WEVgUZa52ilqcMKIy/0+Fm0a1qlz5My7bnrMi9waGLS5KwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAKDdyVhlXq2K2iApo7Hs4JYF4vFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 Y2QwY2RkMC1iOGRhLTQzNjEtYTNhZC0zODIwMDIxYjdkM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzRjZDBjZGQwLWI4ZGEtNDM2MS1h M2FkLTM4MjAwMjFiN2QzZC80Y2QwY2RkMC1iOGRhLTQzNjEtYTNhZC0zODIwMDIx YjdkM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHeIMwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhK6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACJ3wObwNJB2/9R0bBxv9PXCidWTQaysKTDbzlOxATqjeact gmxqr5mVQLIsC3KHUH25M0PUFSLVH5pVtk7Jd/UGrMbAgFKZZjUOgnutzBg0mFoE APhOhVrtOzzvirvepRJePEfJjgFL5Ub6sZ4CLW8UHp9tlSnMN5xA9RQe86CRZQcK RQaSYRJJbNu8ICoL2ZsS+BtF92k/n8ptAmBc37Wc0cetLefkPWh/FopeVqgzHsz9 QqyseT0sHSUG31LBsj7huI8FSc2BtgcfWSjwNCuJBcRSD7E7ULu8vWWl/pHrjckT FEyB8XUcWbA9gzwPRT/EhzddDNpJ/31O+zoxL6k= -----END CERTIFICATE-----Generated at Wed Jun 26 08:16:30 2024 by rpki-client on console-ams.rpki-client.org