$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer File: 1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer (raw, json) Hash identifier: iJMaPsGO4tH0ZsekRqwLy/uMHN2we96cmAOeCebdWDA= Subject key identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858451FA363C94975C7C7441559C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 Mar 2024 01:45:20 +0000 Certificate not after: Wed 10 Jun 2026 00:45:20 +0000 Subordinate resources: AS: 394854 IP: 162.120.94.0/24 IP: 209.188.101.0/24 IP: 2607:21c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:a3:63:c9:49:75:c7:c7:44:15:59:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 7 01:45:20 2024 GMT Not After : Jun 10 00:45:20 2026 GMT Subject: CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:31:32:6a:4b:40:78:cd:69:49:1a:b5:c2: 8d:b9:77:6c:4c:17:bf:68:46:fa:4e:65:b8:a3:e6: e2:7d:6a:a4:75:5c:0e:13:9b:07:53:f3:fe:8b:8c: 52:1d:f7:2d:e8:4d:9a:b1:c0:d6:a8:03:2c:4a:dd: fb:39:0e:d9:b5:9f:de:b3:79:a4:47:b7:e2:a0:ff: 78:be:46:65:a9:1b:5d:6e:99:3f:e9:4e:5d:9b:87: ed:13:5f:bd:f1:f5:ac:66:0d:e6:c0:a1:98:00:a9: 78:71:5a:4a:9b:c1:c8:d2:1c:db:13:5e:c5:84:f7: 84:cb:4a:cc:af:e9:35:6e:90:91:03:e8:e2:8b:e9: 8d:b4:d4:8e:00:2d:59:88:87:75:d3:b4:01:45:1f: c7:b0:26:ec:54:ce:f9:28:fc:d3:40:53:c8:c0:c3: ae:28:aa:92:07:3c:9d:c8:57:9b:6d:93:4f:44:59: 39:06:53:aa:83:fa:5c:28:b2:e9:9c:12:d4:43:ef: 76:28:4c:98:f1:57:30:a2:86:17:60:46:bb:54:01: bc:48:a3:b9:4f:75:1b:58:07:d1:cc:4d:28:58:ff: ce:e9:40:0a:04:d9:96:da:59:76:30:db:a4:90:bc: 04:a7:a6:6e:72:bf:18:e6:88:36:f9:db:e6:d0:89: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 162.120.94.0/24 209.188.101.0/24 IPv6: 2607:21c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394854 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f2:f7:3d:d4:89:fd:87:88:d9:fd:d8:df:48:1e:85:16:10: 28:af:ec:d8:d1:66:11:58:ff:12:6a:3a:6c:6a:77:3f:0d:ee: d8:34:0d:49:ec:80:0d:cc:15:aa:3c:8b:8d:7a:ad:03:3a:43: c7:93:ed:ed:0b:8e:df:4b:7c:06:b7:e8:42:fa:ea:10:6d:3e: d2:23:21:26:0a:e2:58:e2:43:75:65:c6:86:5a:e5:3d:46:b5: b9:a2:a1:30:80:a5:64:d9:0d:1e:71:0d:23:bf:6f:84:26:d6: 1a:1d:13:8c:c2:ed:ee:07:63:aa:26:d8:5e:24:4f:bd:f5:84: e9:80:db:77:8a:3f:10:da:72:f7:d8:4a:98:ac:44:b0:e8:13: 8c:27:9e:55:91:6c:69:af:96:78:e5:bf:a7:cf:05:01:7d:61: 62:4a:4d:f6:e2:cd:cb:a7:04:5f:0f:ac:49:0a:c0:70:eb:d5: 81:8f:fc:c1:21:9b:44:e5:37:09:a6:96:a0:ac:15:12:d4:89: f3:42:64:21:01:ea:c8:ac:8d:73:9b:61:f9:c5:8d:e8:e1:fb: 8e:1f:3b:9b:f6:b4:0e:71:2b:5c:c6:54:a3:09:7f:7f:af:b2: 12:d1:9d:d4:24:e4:43:a4:23:33:ac:87:ac:ca:0c:38:b8:39: 34:59:16:e7 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEUfo2PJSXXHx0QVWcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDMwNzAxNDUyMFoXDTI2MDYxMDAwNDUyMFowLzEtMCsGA1UEAxMk MWMxN2MxZDEtNzU5NS00NzdlLWFhY2ItZjhlZjQyYzRiYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicsxMmpLQHjNaUkatcKNuXdsTBe/aEb6TmW4 o+bifWqkdVwOE5sHU/P+i4xSHfct6E2ascDWqAMsSt37OQ7ZtZ/es3mkR7fioP94 vkZlqRtdbpk/6U5dm4ftE1+98fWsZg3mwKGYAKl4cVpKm8HI0hzbE17FhPeEy0rM r+k1bpCRA+jii+mNtNSOAC1ZiId107QBRR/HsCbsVM75KPzTQFPIwMOuKKqSBzyd yFebbZNPRFk5BlOqg/pcKLLpnBLUQ+92KEyY8VcwooYXYEa7VAG8SKO5T3UbWAfR zE0oWP/O6UAKBNmW2ll2MNukkLwEp6Zucr8Y5og2+dvm0ImGGwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFK3W/PjZ8DHUUuCpbY/7sbNge49eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x YzE3YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVmNDJjNGJhOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFjMTdjMWQxLTc1OTUtNDc3ZS1h YWNiLWY4ZWY0MmM0YmE4ZS8xYzE3YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVmNDJj NGJhOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBACieF4DBADRvGUwDQQCAAIwBwMFACYHIcAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBgZmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADDy9z3Uif2HiNn92N9I HoUWECiv7NjRZhFY/xJqOmxqdz8N7tg0DUnsgA3MFao8i416rQM6Q8eT7e0Ljt9L fAa36EL66hBtPtIjISYK4ljiQ3VlxoZa5T1GtbmioTCApWTZDR5xDSO/b4Qm1hod E4zC7e4HY6om2F4kT731hOmA23eKPxDacvfYSpisRLDoE4wnnlWRbGmvlnjlv6fP BQF9YWJKTfbizcunBF8PrEkKwHDr1YGP/MEhm0TlNwmmlqCsFRLUifNCZCEB6sis jXObYfnFjejh+44fO5v2tA5xK1zGVKMJf3+vshLRndQk5EOkIzOsh6zKDDi4OTRZ Fuc= -----END CERTIFICATE-----Generated at Wed May 1 15:59:54 2024 by rpki-client on console-ams.rpki-client.org