$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer File: 04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.cer (raw, json) Hash identifier: +kiaLbqXtFhRl9NUokxFT/HPaQSutooDw1Kn4Qo0sf0= Subject key identifier: 71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858456F7B4EE91A9D4166D8AF2C60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Apr 2024 16:09:15 +0000 Certificate not after: Tue 07 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 14726 AS: 395168 IP: 130.51.68.0/22 IP: 148.59.142.0/24 IP: 148.59.240.0/23 IP: 158.51.201.0/24 IP: 2604:7e40::/32 IP: 2605:d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6f:7b:4e:e9:1a:9d:41:66:d8:af:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 4 16:09:15 2024 GMT Not After : Oct 7 00:45:16 2025 GMT Subject: CN=04d70e06-3aa0-4536-a3c7-ee27a8dde5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2d:31:b5:0e:47:b4:07:da:f1:88:b4:e6:a2: c6:f7:6c:b4:94:06:77:e6:35:b4:5f:d4:c0:79:6a: 49:bf:3c:b3:1d:27:ff:65:88:df:7a:81:f2:10:23: 5d:85:b4:57:65:c7:be:e2:94:08:b1:92:f7:6c:9a: 2c:c8:5f:d7:dc:67:6d:3a:7b:5a:4a:88:96:5c:56: 8f:67:8e:b1:37:33:4b:81:be:12:3d:ed:1f:d4:16: 08:8d:bd:1f:55:d9:0e:59:44:fa:90:59:28:ce:0b: e6:6d:04:61:3c:9d:d4:94:f1:a8:24:6b:17:37:37: e4:2a:f2:76:43:19:95:50:c6:2f:94:aa:ed:8a:a1: d8:1a:52:92:d2:18:fa:4c:3f:9d:e8:12:80:9c:bf: fa:6d:81:2a:3b:71:a2:38:2c:1f:84:c6:3e:1e:6b: df:70:57:0d:68:f6:24:5c:e8:2e:6c:8c:98:5a:ef: f6:7a:44:54:5c:da:08:81:44:d9:41:a3:ef:7e:0c: 27:d2:2d:7e:d6:52:91:d0:49:8c:ce:d7:a8:20:9b: 5d:a4:c6:5a:51:bc:c6:90:53:4c:4d:cb:16:7c:33: ec:ea:77:09:53:e6:47:12:98:e7:b0:46:ca:f8:d7: ad:39:05:c3:89:99:ef:3d:b7:02:d8:65:b7:4f:7b: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5D:86:B5:41:98:4D:51:6D:E9:C0:4A:98:5A:F7:88:C6:6A:25:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc/04d70e06-3aa0-4536-a3c7-ee27a8dde5fc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 130.51.68.0/22 148.59.142.0/24 148.59.240.0/23 158.51.201.0/24 IPv6: 2604:7e40::/32 2605:d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14726 395168 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fe:b0:22:9a:61:f9:63:51:b4:25:02:98:68:37:55:13:a3: f6:a0:6a:e0:19:a7:e8:a4:0c:b4:d5:4f:7d:85:1a:24:98:d2: 7f:5c:54:23:c0:5b:63:fa:15:2f:f0:f8:70:d3:ce:c7:cd:7d: f1:b3:cb:d4:bb:b2:a7:16:59:ee:8d:ed:b8:66:9c:44:b6:84: 4a:83:ab:e8:29:b5:a7:0b:f9:26:5a:29:80:88:66:5d:36:1e: 44:a0:54:6b:2d:18:f5:cb:6e:86:3b:45:15:b1:1e:0f:32:5b: 47:03:61:c3:30:57:ab:93:46:25:ec:bd:a3:bb:bb:8b:7f:4c: df:88:81:08:71:7a:cd:eb:53:04:cc:d9:9b:a4:2e:3f:7f:d4: 0f:4f:51:dc:fe:82:15:69:b8:bd:ed:b0:11:ec:c9:3d:ca:f6: e5:7d:a4:84:d9:58:50:10:ee:67:68:5c:f5:8c:9e:d2:57:26: f8:e9:12:50:ec:73:0d:90:64:89:ae:b8:b2:52:16:75:f3:f0: 4f:09:ab:38:7b:1b:22:63:f6:bb:ed:4a:5c:76:1b:65:5a:dd: ef:3d:48:0e:01:e1:0e:a8:e8:64:5c:44:2f:03:6d:f3:b1:31: 61:11:df:0f:c4:8b:92:d5:14:dc:71:1e:80:7b:a8:25:c5:f9: 33:fd:95:77 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEVve07pGp1BZtivLGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDQwNDE2MDkxNVoXDTI1MTAwNzAwNDUxNlowLzEtMCsGA1UEAxMk MDRkNzBlMDYtM2FhMC00NTM2LWEzYzctZWUyN2E4ZGRlNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4i0xtQ5HtAfa8Yi05qLG92y0lAZ35jW0X9TA eWpJvzyzHSf/ZYjfeoHyECNdhbRXZce+4pQIsZL3bJosyF/X3GdtOntaSoiWXFaP Z46xNzNLgb4SPe0f1BYIjb0fVdkOWUT6kFkozgvmbQRhPJ3UlPGoJGsXNzfkKvJ2 QxmVUMYvlKrtiqHYGlKS0hj6TD+d6BKAnL/6bYEqO3GiOCwfhMY+HmvfcFcNaPYk XOgubIyYWu/2ekRUXNoIgUTZQaPvfgwn0i1+1lKR0EmMzteoIJtdpMZaUbzGkFNM TcsWfDPs6ncJU+ZHEpjnsEbK+NetOQXDiZnvPbcC2GW3T3sX5QIDAQABo4IERzCC BEMwHQYDVR0OBBYEFHFdhrVBmE1RbenASpha94jGaiXgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w NGQ3MGUwNi0zYWEwLTQ1MzYtYTNjNy1lZTI3YThkZGU1ZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzA0ZDcwZTA2LTNhYTAtNDUzNi1h M2M3LWVlMjdhOGRkZTVmYy8wNGQ3MGUwNi0zYWEwLTQ1MzYtYTNjNy1lZTI3YThk ZGU1ZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MB4EAgABMBgDBAKCM0QDBACUO44DBAGUO/ADBACeM8kwFAQCAAIw DgMFACYEfkADBQAmBQ1AMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAjmGAgMGB6Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAJP6wIpph+WNRtCUCmGg3VROj9qBq4Bmn6KQMtNVPfYUaJJjSf1xU I8BbY/oVL/D4cNPOx8198bPL1LuypxZZ7o3tuGacRLaESoOr6Cm1pwv5JlopgIhm XTYeRKBUay0Y9ctuhjtFFbEeDzJbRwNhwzBXq5NGJey9o7u7i39M34iBCHF6zetT BMzZm6QuP3/UD09R3P6CFWm4ve2wEezJPcr25X2khNlYUBDuZ2hc9Yye0lcm+OkS UOxzDZBkia64slIWdfPwTwmrOHsbImP2u+1KXHYbZVrd7z1IDgHhDqjoZFxELwNt 87ExYRHfD8SLktUU3HEegHuoJcX5M/2Vdw== -----END CERTIFICATE-----Generated at Wed May 1 12:32:28 2024 by rpki-client on console-ams.rpki-client.org