$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e.cer File: 0605680b-ca76-43b6-81d9-2ac50993c59e.cer (raw, json) Hash identifier: Jlp7RZjJSJbBnbm+HSadhsPYcE2i73tvXrlhVJWM+sQ= Subject key identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858421D00C68ACC7B6340B6AE9480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Jun 2023 00:45:16 +0000 Certificate not after: Sun 07 Sep 2025 00:45:16 +0000 Subordinate resources: AS: 11758 IP: 66.85.43.0/24 IP: 149.248.160.0/21 IP: 198.231.28.0/22 IP: 204.29.12.0/22 IP: 2607:f920::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:1d:00:c6:8a:cc:7b:63:40:b6:ae:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 5 00:45:16 2023 GMT Not After : Sep 7 00:45:16 2025 GMT Subject: CN=0605680b-ca76-43b6-81d9-2ac50993c59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:8a:d9:aa:d7:db:bc:14:30:e3:b8:4c:b2: 1b:14:dc:8d:84:6f:40:f3:65:90:88:4a:71:c9:4b: e9:fc:f5:36:70:3c:24:2f:24:ac:16:64:8c:68:85: 65:3f:52:ab:60:98:7d:16:eb:ea:98:69:0c:1d:60: 66:8b:31:17:eb:2c:72:19:95:94:27:74:6b:68:04: 19:cc:fb:3a:93:e9:3e:86:80:9d:e3:c1:bd:2f:23: 88:83:4c:a4:a1:b1:34:ff:b0:48:c0:49:25:3f:87: 8c:af:ca:9c:d0:bb:fd:71:15:03:63:2b:8d:e6:34: e4:f6:b4:ea:0d:b3:f3:a3:e6:94:b7:d8:a2:36:62: fb:1b:f7:5c:90:d5:3b:ba:03:42:14:a6:55:4d:37: a1:df:ef:b7:24:be:70:ed:4e:36:94:06:15:6d:48: f4:21:33:dd:02:f8:82:5b:28:03:34:74:20:3e:14: 30:7d:98:ba:70:d2:26:ad:72:89:33:2f:9e:c9:4c: d6:29:4b:d7:3b:c2:48:74:fd:af:cd:75:9d:ea:04: e4:bd:05:25:4f:73:cc:4e:3a:bc:30:6c:c5:36:62: ca:77:d8:ed:14:6b:d5:c6:3c:a6:cf:7c:95:df:2c: e2:f9:fc:9d:23:ee:a4:fb:0b:3f:e3:5e:14:23:fd: 7e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:48:66:C9:D8:4D:D9:14:35:F0:D0:67:A8:07:5B:30:95:FA:F4:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0605680b-ca76-43b6-81d9-2ac50993c59e/0605680b-ca76-43b6-81d9-2ac50993c59e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.85.43.0/24 149.248.160.0/21 198.231.28.0/22 204.29.12.0/22 IPv6: 2607:f920::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11758 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e8:32:b9:92:ff:f7:ef:b0:20:47:86:69:d6:13:c6:37:97: 39:cd:87:37:4f:ba:ec:8d:ab:fb:63:ec:44:c5:c4:1d:ae:e7: 59:70:3e:e2:95:12:29:72:e4:57:89:8d:65:b2:cb:b9:07:d7: 83:94:d8:e5:59:ca:59:b7:d5:4b:7b:5a:72:5c:32:9a:62:0c: 0d:94:a7:aa:b2:37:55:c0:5b:5f:cf:26:05:c2:69:b2:97:33: 88:05:30:c8:da:5a:08:7c:ca:12:c8:c0:86:f5:2a:fa:01:fb: be:83:94:41:ce:c5:cf:f5:d1:68:9f:a3:9b:20:8f:b3:0f:5e: 22:7f:8c:0d:c9:5e:d7:41:2a:61:0b:0f:b2:ca:60:8d:da:95: f1:65:db:d1:4a:ae:cf:2a:d6:37:3a:57:0e:7e:e8:a7:34:f0: e9:10:97:fa:3f:22:4a:6f:e0:0e:94:b1:bf:7f:84:8e:8f:2b: 67:88:47:84:ad:3e:4d:48:0e:4c:e0:91:c2:fe:7f:57:cb:8c: ba:e6:67:8e:9c:cd:f7:ff:0f:f8:90:d6:b2:5e:d7:1c:5f:e7: fe:8e:77:93:28:fe:c3:09:b3:ee:f3:54:4a:82:cd:bc:20:11: 88:52:7b:8c:09:d0:36:79:f3:ec:d2:3f:df:91:69:db:a8:6f: 95:68:9d:0c -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEIdAMaKzHtjQLaulIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDYwNTAwNDUxNloXDTI1MDkwNzAwNDUxNlowLzEtMCsGA1UEAxMk MDYwNTY4MGItY2E3Ni00M2I2LTgxZDktMmFjNTA5OTNjNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvKK2arX27wUMOO4TLIbFNyNhG9A82WQiEpx yUvp/PU2cDwkLySsFmSMaIVlP1KrYJh9FuvqmGkMHWBmizEX6yxyGZWUJ3RraAQZ zPs6k+k+hoCd48G9LyOIg0ykobE0/7BIwEklP4eMr8qc0Lv9cRUDYyuN5jTk9rTq DbPzo+aUt9iiNmL7G/dckNU7ugNCFKZVTTeh3++3JL5w7U42lAYVbUj0ITPdAviC WygDNHQgPhQwfZi6cNImrXKJMy+eyUzWKUvXO8JIdP2vzXWd6gTkvQUlT3PMTjq8 MGzFNmLKd9jtFGvVxjymz3yV3yzi+fydI+6k+ws/414UI/1+HQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFElIZsnYTdkUNfDQZ6gHWzCV+vRcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w NjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5M2M1OWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzA2MDU2ODBiLWNhNzYtNDNiNi04 MWQ5LTJhYzUwOTkzYzU5ZS8wNjA1NjgwYi1jYTc2LTQzYjYtODFkOS0yYWM1MDk5 M2M1OWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBABCVSsDBAOV+KADBALG5xwDBALMHQwwDQQCAAIw BwMFACYH+SAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLe4wVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZ+gy uZL/9++wIEeGadYTxjeXOc2HN0+67I2r+2PsRMXEHa7nWXA+4pUSKXLkV4mNZbLL uQfXg5TY5VnKWbfVS3taclwymmIMDZSnqrI3VcBbX88mBcJpspcziAUwyNpaCHzK EsjAhvUq+gH7voOUQc7Fz/XRaJ+jmyCPsw9eIn+MDcle10EqYQsPsspgjdqV8WXb 0UquzyrWNzpXDn7opzTw6RCX+j8iSm/gDpSxv3+Ejo8rZ4hHhK0+TUgOTOCRwv5/ V8uMuuZnjpzN9/8P+JDWsl7XHF/n/o53kyj+wwmz7vNUSoLNvCARiFJ7jAnQNnnz 7NI/35Fp26hvlWidDA== -----END CERTIFICATE-----Generated at Wed May 1 12:32:28 2024 by rpki-client on console-ams.rpki-client.org