$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83.cer File: 12e1088c-ebe4-47cb-a051-5344b3551a83.cer (raw, json) Hash identifier: Ty7aUd8F6M3+IQ7z8xDEnxmcEga28GnVcUcOKa2cse8= Subject key identifier: 8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858420EBAA64C82ABE34E68B4BC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 May 2023 22:02:39 +0000 Certificate not after: Mon 01 Sep 2025 22:02:39 +0000 Subordinate resources: AS: 13621 IP: 104.128.78.0/23 IP: 198.190.171.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:0e:ba:a6:4c:82:ab:e3:4e:68:b4:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 30 22:02:39 2023 GMT Not After : Sep 1 22:02:39 2025 GMT Subject: CN=12e1088c-ebe4-47cb-a051-5344b3551a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:88:e8:86:18:52:4e:35:4a:01:df:79:da: b6:ed:f7:b9:ec:9d:0d:d8:85:e0:f1:6c:1d:44:ea: 09:c6:28:3a:c8:3c:56:c8:00:87:c2:f4:33:19:98: a2:9f:ed:0a:d2:d2:2b:91:2a:88:9a:32:a5:d5:cd: a9:0a:d4:e9:a3:73:d4:f6:cc:59:34:81:8e:b8:e3: f9:19:1d:4e:28:a8:31:ca:23:dc:37:c0:48:bb:ed: e0:10:ea:2c:d9:df:e0:70:e7:ef:53:af:f4:cc:fb: 73:4c:5a:56:70:74:26:23:8f:8a:2a:bd:6b:9c:15: e1:6e:f7:48:00:8a:ef:9a:3d:cc:83:d2:4c:49:c2: 4f:f5:36:2c:49:e9:cf:9a:d6:b0:e4:89:5e:d6:ec: 1d:9a:f9:65:72:b9:84:f5:2f:cb:7e:77:f5:c5:38: 97:a0:2f:33:a1:e4:18:56:59:9d:48:6d:55:e2:96: 2b:19:ee:44:9c:f3:e2:a1:3f:d0:08:f9:5b:a6:52: 7b:b3:a7:d0:73:33:09:5f:c8:e9:b6:98:f2:06:fb: f4:41:02:30:9d:42:df:ee:53:b6:9a:a9:9c:a2:d6: 76:f6:53:d9:d9:1d:be:23:f9:55:75:79:78:5a:ba: 6a:ec:d0:cc:0f:64:a7:b3:3e:71:75:ec:a5:6a:cf: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:C2:F9:CF:26:95:00:81:79:BC:0B:85:CC:44:9F:BB:C5:B5:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/12e1088c-ebe4-47cb-a051-5344b3551a83/12e1088c-ebe4-47cb-a051-5344b3551a83.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 104.128.78.0/23 198.190.171.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13621 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:44:34:da:00:79:f4:a7:9c:f8:e1:a0:87:51:c8:16:36:3b: 7e:2d:b5:c4:61:f0:34:78:0c:dd:b9:b6:e5:d3:e3:4a:ca:f5: 43:82:c8:8e:49:6d:80:d2:d7:ff:83:ea:3d:88:64:8c:a9:ec: ae:09:12:15:d2:72:75:ff:e3:50:05:e2:81:9b:eb:53:b5:c6: 21:ba:75:7c:32:a6:26:47:43:bb:74:16:19:d3:d9:2f:d9:a8: 10:f6:e4:38:21:af:d4:d6:91:fd:e0:2d:a0:21:08:3f:32:53: eb:d2:aa:4b:31:cd:de:04:74:0c:eb:f1:90:3c:6e:ad:64:d9: f5:2a:bc:a0:22:67:ce:6d:85:69:a4:e2:2c:6b:04:a5:8c:f2: 48:a2:b9:4e:57:03:a9:c5:55:9d:ba:59:99:a6:e7:69:5d:39: d7:5c:ed:c0:a3:ca:c3:76:6f:22:d0:e4:af:13:de:c5:9c:a2: 85:dc:56:8d:78:e6:d4:55:d7:e5:dc:53:a1:54:05:f3:e9:67: 19:75:cb:53:f1:21:f3:b8:17:7f:be:24:2d:c1:65:23:fa:0e: ad:34:65:4c:bc:e3:19:d0:bc:d0:9a:19:23:42:1e:67:af:b8: c0:0e:82:27:72:2a:0d:ee:e6:8b:ce:5a:df:30:5c:10:a9:b5: 0c:21:ad:c0 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEIOuqZMgqvjTmi0vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUzMDIyMDIzOVoXDTI1MDkwMTIyMDIzOVowLzEtMCsGA1UEAxMk MTJlMTA4OGMtZWJlNC00N2NiLWEwNTEtNTM0NGIzNTUxYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYKI6IYYUk41SgHfedq27fe57J0N2IXg8Wwd ROoJxig6yDxWyACHwvQzGZiin+0K0tIrkSqImjKl1c2pCtTpo3PU9sxZNIGOuOP5 GR1OKKgxyiPcN8BIu+3gEOos2d/gcOfvU6/0zPtzTFpWcHQmI4+KKr1rnBXhbvdI AIrvmj3Mg9JMScJP9TYsSenPmtaw5Ile1uwdmvllcrmE9S/Lfnf1xTiXoC8zoeQY VlmdSG1V4pYrGe5EnPPioT/QCPlbplJ7s6fQczMJX8jptpjyBvv0QQIwnULf7lO2 mqmcotZ29lPZ2R2+I/lVdXl4Wrpq7NDMD2Snsz5xdeylas/6VwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFIoDwvnPJpUAgXm8C4XMRJ+7xbXOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x MmUxMDg4Yy1lYmU0LTQ3Y2ItYTA1MS01MzQ0YjM1NTFhODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzEyZTEwODhjLWViZTQtNDdjYi1h MDUxLTUzNDRiMzU1MWE4My8xMmUxMDg4Yy1lYmU0LTQ3Y2ItYTA1MS01MzQ0YjM1 NTFhODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAFogE4DBADGvqswGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICNTUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAREQ02gB59Kec+OGgh1HIFjY7fi21xGHwNHgM3bm2 5dPjSsr1Q4LIjkltgNLX/4PqPYhkjKnsrgkSFdJydf/jUAXigZvrU7XGIbp1fDKm JkdDu3QWGdPZL9moEPbkOCGv1NaR/eAtoCEIPzJT69KqSzHN3gR0DOvxkDxurWTZ 9Sq8oCJnzm2FaaTiLGsEpYzySKK5TlcDqcVVnbpZmabnaV0511ztwKPKw3ZvItDk rxPexZyihdxWjXjm1FXX5dxToVQF8+lnGXXLU/Eh87gXf74kLcFlI/oOrTRlTLzj GdC80JoZI0IeZ6+4wA6CJ3IqDe7mi85a3zBcEKm1DCGtwA== -----END CERTIFICATE-----Generated at Wed May 1 16:33:23 2024 by rpki-client on console-fra.rpki-client.org