$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer File: 5599678a-c6a8-4921-aa0a-62a64b2f1631.cer (raw, json) Hash identifier: xY/Pdq9cqr2M7maD9fnrfQZcX1AaIeKGwrpW8QXH0tw= Subject key identifier: A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285845B5F65A25533E6B190273D2C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Apr 2024 22:03:45 +0000 Certificate not after: Sun 02 Aug 2026 22:03:45 +0000 Subordinate resources: AS: 398437 IP: 170.39.36.0/22 IP: 2602:fd39::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Jun 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b5:f6:5a:25:53:3e:6b:19:02:73:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Apr 29 22:03:45 2024 GMT Not After : Aug 2 22:03:45 2026 GMT Subject: CN=5599678a-c6a8-4921-aa0a-62a64b2f1631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:17:db:5d:b8:9d:dd:65:09:4c:ca:1c:fe: b1:26:7d:63:2c:8b:45:dd:3f:fe:ef:81:28:e1:df: 5f:73:49:93:5f:b2:dd:36:f7:19:67:59:15:57:f0: cc:0b:bb:7c:3a:72:1d:a8:a1:cd:91:3e:7f:fd:78: aa:90:71:28:39:65:2a:b0:07:0f:4c:3b:bd:bd:d2: 0b:b4:3e:24:d3:43:9a:49:5a:3b:fd:0c:6d:2c:f9: 0b:b9:37:6e:a5:6b:a9:62:b9:cb:2a:b2:3e:f3:03: 9e:cb:82:da:50:78:71:55:08:66:5d:60:78:6d:71: e4:ee:3a:d1:d0:ce:b2:d7:d0:56:c4:b7:d1:63:c2: f6:32:26:63:a7:17:43:57:db:d0:c0:7e:20:3e:e9: a8:71:78:e4:4e:fb:79:ca:aa:6a:89:5e:57:39:59: 66:3f:87:a2:00:57:fa:53:25:fe:b2:a2:08:1f:7f: a7:6c:64:c3:56:e9:52:55:48:0f:1c:16:67:85:ab: 4a:f4:1e:5f:da:c5:9b:13:5c:e8:4a:74:a2:24:f3: 29:bc:ed:97:47:9f:cf:12:00:b4:9d:23:00:75:d5: b9:0e:a6:ec:b6:00:6f:ea:67:59:a7:86:4f:d9:21: b4:b8:f7:3f:8b:94:95:aa:4e:07:3f:09:2d:3a:c1: 2e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 170.39.36.0/22 IPv6: 2602:fd39::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398437 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8e:64:42:48:82:ba:3e:b5:e3:b4:cd:e6:c4:1f:08:ee:6c: 48:7a:81:22:f1:26:5a:06:81:34:eb:a8:93:05:c1:db:42:e0: 0b:5f:1d:1a:62:52:00:94:6e:54:b9:23:b8:1b:21:74:2b:b6: 55:31:01:5d:82:99:c7:4d:91:61:01:3e:ba:5f:02:97:c8:6e: 10:d2:34:7b:2f:0c:8b:82:31:15:79:09:9d:84:e5:77:db:f5: 8c:00:75:71:54:8b:00:0e:bc:c9:44:cd:7e:3f:9e:ee:6c:e1: ff:eb:9b:52:f5:d9:c0:2a:f2:a7:2f:4a:12:af:5d:8f:44:e6: aa:eb:51:f8:50:97:dd:81:2f:4d:68:90:3a:07:cd:9c:a2:fb: 3b:07:9c:b8:cf:28:cd:c2:dc:e9:65:27:8d:d9:ca:9c:9b:58: a4:23:89:cc:b4:34:e8:96:3d:4e:81:1c:a5:3d:a9:3f:1d:0d: d4:bc:1a:45:46:0d:63:c9:67:9c:00:f3:a7:fa:4e:69:91:fa: 2a:12:27:b4:6d:c0:e1:1c:4d:a4:74:62:b8:a2:4c:fc:d4:40: 4d:8a:bd:86:f6:c0:52:62:d6:99:31:87:3e:a6:65:9e:be:d2: 54:48:f3:74:01:f4:32:97:bc:c6:30:d4:01:9a:d8:c3:a9:63: 69:98:2e:ef -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEW19lolUz5rGQJz0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDQyOTIyMDM0NVoXDTI2MDgwMjIyMDM0NVowLzEtMCsGA1UEAxMk NTU5OTY3OGEtYzZhOC00OTIxLWFhMGEtNjJhNjRiMmYxNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5gX2124nd1lCUzKHP6xJn1jLItF3T/+74Eo 4d9fc0mTX7LdNvcZZ1kVV/DMC7t8OnIdqKHNkT5//XiqkHEoOWUqsAcPTDu9vdIL tD4k00OaSVo7/QxtLPkLuTdupWupYrnLKrI+8wOey4LaUHhxVQhmXWB4bXHk7jrR 0M6y19BWxLfRY8L2MiZjpxdDV9vQwH4gPumocXjkTvt5yqpqiV5XOVlmP4eiAFf6 UyX+sqIIH3+nbGTDVulSVUgPHBZnhatK9B5f2sWbE1zoSnSiJPMpvO2XR5/PEgC0 nSMAddW5DqbstgBv6mdZp4ZP2SG0uPc/i5SVqk4HPwktOsEubwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKdXpLEyhc9DLg5Uby8as5deEkBcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 NTk5Njc4YS1jNmE4LTQ5MjEtYWEwYS02MmE2NGIyZjE2MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzU1OTk2NzhhLWM2YTgtNDkyMS1h YTBhLTYyYTY0YjJmMTYzMS81NTk5Njc4YS1jNmE4LTQ5MjEtYWEwYS02MmE2NGIy ZjE2MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKqJyQwDgQCAAIwCAMGBCYC/TkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYUZTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmjmRCSIK6PrXjtM3mxB8I7mxI eoEi8SZaBoE066iTBcHbQuALXx0aYlIAlG5UuSO4GyF0K7ZVMQFdgpnHTZFhAT66 XwKXyG4Q0jR7LwyLgjEVeQmdhOV32/WMAHVxVIsADrzJRM1+P57ubOH/65tS9dnA KvKnL0oSr12PROaq61H4UJfdgS9NaJA6B82covs7B5y4zyjNwtzpZSeN2cqcm1ik I4nMtDTolj1OgRylPak/HQ3UvBpFRg1jyWecAPOn+k5pkfoqEie0bcDhHE2kdGK4 okz81EBNir2G9sBSYtaZMYc+pmWevtJUSPN0AfQyl7zGMNQBmtjDqWNpmC7v -----END CERTIFICATE-----Generated at Wed Jun 26 08:16:30 2024 by rpki-client on console-ams.rpki-client.org