$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer File: 0afa673e-ceeb-4048-b2ab-93cad45814ac.cer (raw, json) Hash identifier: 8RBB6Al1W+MhXP4XCK+HXXp+x55Aw+ynnNkK7mMYBgs= Subject key identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285843B7635354003935BA0BCF7AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Oct 2023 00:45:15 +0000 Certificate not after: Sun 01 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 400532 IP: 206.209.107.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:b7:63:53:54:00:39:35:ba:0b:cf:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 30 00:45:15 2023 GMT Not After : Feb 1 01:45:15 2026 GMT Subject: CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:44:83:21:58:e9:79:0d:0b:5b:51:13:bd:55: 28:6b:fc:40:85:fe:7e:7f:3b:b4:db:23:e0:fb:e1: 51:92:51:4d:66:30:fc:43:ce:ec:99:69:d1:bd:1a: 3a:aa:eb:8d:7a:57:0c:80:01:60:43:e5:fa:2d:5a: 3a:b8:f1:63:c6:e8:a6:5f:fc:ba:06:d8:3f:c3:70: 16:b6:cd:3b:27:94:0a:54:9c:1c:87:6f:ae:da:b7: e3:e2:55:f7:ec:d3:4d:8e:ba:fd:f2:5c:fa:51:78: ea:7c:7b:73:70:17:e6:e6:42:f2:c1:97:32:55:9e: 00:b7:91:01:47:9a:95:44:43:aa:8c:aa:aa:9d:f9: 71:88:36:bb:74:de:31:1b:90:0e:4c:4e:1a:66:e7: b3:4e:60:00:b7:58:10:1c:21:42:33:a9:19:2c:e2: 8e:82:08:1f:b5:65:ad:94:ac:df:d0:1d:59:34:fd: 83:45:a0:0c:28:0f:48:e5:53:63:11:fc:6d:3d:8e: cc:c3:c0:34:bd:cd:f4:e6:14:89:ee:d0:00:b2:53: 2a:0e:17:1d:18:66:c1:b4:94:cb:a6:f4:c0:dd:e7: ee:2a:d6:e2:0b:74:89:9b:c1:14:6e:c7:92:f7:0e: c4:01:ad:93:fa:2c:11:fd:0c:94:2c:91:8f:aa:b1: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 206.209.107.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400532 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:88:44:63:0c:97:58:9c:e4:db:10:55:38:31:ee:08:35:9d: 37:b5:f1:fd:eb:e0:12:da:57:b9:3e:a1:f6:be:30:40:31:95: aa:c5:7c:2a:20:97:41:c4:1c:2d:66:cb:da:68:9a:86:c7:cc: a5:3a:11:8c:69:d0:7e:07:8c:34:5f:a0:9f:b8:05:c2:da:0f: 51:25:9c:fd:6a:c9:f2:9b:78:62:31:7a:08:62:9d:4d:36:d8: bb:03:c5:02:80:d4:74:3f:87:d6:80:03:47:c1:23:35:7e:21: 4f:4e:36:02:49:00:f8:92:d9:bc:ab:e9:1c:67:a7:d0:b2:3c: 3a:c1:db:4a:c0:83:5e:4b:da:b0:66:23:e4:e5:10:99:c8:92: 5d:99:29:c5:20:11:81:7e:16:cc:d0:05:1f:6d:88:71:9d:62: a4:79:65:12:bc:98:a5:38:41:c9:08:d4:fd:d1:b5:c5:0e:91: 6f:4a:1f:f8:bb:9c:09:e3:63:30:2d:93:e9:0f:93:a3:96:5b: 40:b7:3a:5d:36:02:07:24:97:0f:07:3f:3c:39:08:b2:de:f4: dc:0c:64:b9:ec:1c:85:ce:a4:25:b3:ff:91:44:da:6f:5c:c6: 89:ea:d5:f2:d9:d8:ad:aa:86:67:29:ab:92:b6:36:c2:99:d9: 71:62:8e:a6 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEO3Y1NUADk1ugvPesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTAzMDAwNDUxNVoXDTI2MDIwMTAxNDUxNVowLzEtMCsGA1UEAxMk MGFmYTY3M2UtY2VlYi00MDQ4LWIyYWItOTNjYWQ0NTgxNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUSDIVjpeQ0LW1ETvVUoa/xAhf5+fzu02yPg ++FRklFNZjD8Q87smWnRvRo6quuNelcMgAFgQ+X6LVo6uPFjxuimX/y6Btg/w3AW ts07J5QKVJwch2+u2rfj4lX37NNNjrr98lz6UXjqfHtzcBfm5kLywZcyVZ4At5EB R5qVREOqjKqqnflxiDa7dN4xG5AOTE4aZuezTmAAt1gQHCFCM6kZLOKOgggftWWt lKzf0B1ZNP2DRaAMKA9I5VNjEfxtPY7Mw8A0vc305hSJ7tAAslMqDhcdGGbBtJTL pvTA3efuKtbiC3SJm8EUbseS9w7EAa2T+iwR/QyULJGPqrEh3wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFL1RL0i3AIwsG9iaM0t2TrRYBdhnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8w YWZhNjczZS1jZWViLTQwNDgtYjJhYi05M2NhZDQ1ODE0YWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzBhZmE2NzNlLWNlZWItNDA0OC1i MmFiLTkzY2FkNDU4MTRhYy8wYWZhNjczZS1jZWViLTQwNDgtYjJhYi05M2NhZDQ1 ODE0YWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADO0WswGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhyUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGGIRGMMl1ic5NsQVTgx7gg1nTe18f3r4BLaV7k+ofa+MEAx larFfCogl0HEHC1my9pomobHzKU6EYxp0H4HjDRfoJ+4BcLaD1ElnP1qyfKbeGIx eghinU022LsDxQKA1HQ/h9aAA0fBIzV+IU9ONgJJAPiS2byr6Rxnp9CyPDrB20rA g15L2rBmI+TlEJnIkl2ZKcUgEYF+FszQBR9tiHGdYqR5ZRK8mKU4QckI1P3RtcUO kW9KH/i7nAnjYzAtk+kPk6OWW0C3Ol02Agcklw8HPzw5CLLe9NwMZLnsHIXOpCWz /5FE2m9cxonq1fLZ2K2qhmcpq5K2NsKZ2XFijqY= -----END CERTIFICATE-----Generated at Wed May 1 15:59:53 2024 by rpki-client on console-ams.rpki-client.org