$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer File: 1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer (raw, json) Hash identifier: zzHtUbiem6j5lEkWOgpqpU05nMUJS3j7kC3f6p4ZAbY= Subject key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858456F6AECE96888FCCE4C0C0200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Apr 2024 15:36:15 +0000 Certificate not after: Thu 05 Jun 2025 19:06:39 +0000 Subordinate resources: IP: 23.150.24.0/24 IP: 130.51.94.0/24 IP: 2602:299::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6f:6a:ec:e9:68:88:fc:ce:4c:0c:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 4 15:36:15 2024 GMT Not After : Jun 5 19:06:39 2025 GMT Subject: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fe:80:0c:27:95:74:6e:7b:8e:95:99:42:a3: 39:a2:a5:26:42:65:69:12:06:b4:54:bd:b0:47:4f: 4d:90:4b:9e:32:35:35:b6:ed:72:47:74:4a:0d:0f: 33:41:64:7c:56:f1:68:25:22:56:18:62:d8:5d:66: ef:d4:20:59:47:58:62:7a:a5:63:a3:a0:18:4a:52: c2:ba:92:8d:ec:d7:4a:1e:ed:a8:f8:93:b4:9f:2a: 56:23:34:02:87:45:e2:ff:42:65:eb:3b:e9:f3:21: 58:2f:58:5e:df:66:79:47:ba:c0:47:35:af:ed:75: 39:1e:35:1e:3c:31:16:90:4e:1d:33:09:81:03:f6: 50:a2:ee:a8:c6:15:b4:91:e0:15:c5:ff:4d:aa:16: 06:c6:6c:8d:a2:cb:1a:f3:1a:19:0a:1d:fc:d2:be: 5a:4b:9e:99:18:09:e6:fd:28:61:d5:8a:23:8b:c9: d1:9c:66:04:c3:e3:85:5b:77:50:ac:9c:37:97:ee: 33:e7:7a:4b:2c:97:4a:e0:4d:38:74:c3:32:cc:5a: 7a:7f:41:e8:d0:51:8d:1e:b3:6c:ed:36:0e:cd:bd: 60:c5:a0:d5:77:f1:ac:29:90:b5:bf:e6:46:87:b8: 6c:4b:d5:46:33:7c:2b:49:0b:b2:6a:f9:d7:12:50: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.150.24.0/24 130.51.94.0/24 IPv6: 2602:299::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:44:11:10:db:3a:5f:c4:78:11:b6:cb:fe:5f:21:cc:e0:15: 90:82:a1:e9:dc:e6:dc:25:ec:d5:2f:4d:e9:db:34:e2:69:2f: ce:1d:1c:89:38:51:57:40:e6:d1:b9:b9:2d:fa:dc:36:14:e6: 63:a4:01:d5:37:ce:de:cc:9f:6e:4c:d9:a0:27:7a:5a:be:fc: f2:a6:bd:cc:6c:96:f6:75:ac:6b:66:fb:0b:75:84:7b:89:c0: b7:c8:6f:2d:84:f7:91:05:4e:08:dd:de:d9:54:7c:59:82:b3: 30:30:8c:46:55:d7:be:40:43:7d:54:d0:93:31:01:f0:47:81: 9e:c4:ec:41:f9:8d:7e:99:f3:cd:0f:19:37:06:4b:ca:19:2e: cb:b4:bb:07:7a:57:1a:59:19:ed:78:c3:84:64:d8:d0:74:a0: 22:3e:da:35:c8:e1:bf:43:bc:17:18:b9:9d:89:4d:e5:06:75: 8a:1a:4b:09:7a:55:42:1e:ce:ed:6c:03:de:30:32:fc:21:3f: b3:1d:c4:43:8a:af:75:3a:0b:d5:05:19:8b:f1:72:69:3a:a6: 39:ba:fe:87:01:3e:95:39:09:3d:16:97:dc:7e:26:c6:45:a6: 3c:09:dc:70:fe:5f:69:f4:23:7d:70:d8:0a:e8:15:e4:73:d7: 3c:2c:53:8f -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEVvauzpaIj8zkwMAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDQwNDE1MzYxNVoXDTI1MDYwNTE5MDYzOVowLzEtMCsGA1UEAxMk MWQ4YzkxNjctZTgxNi00ODM0LThmY2MtZjhiMGY5M2ZlNmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf6ADCeVdG57jpWZQqM5oqUmQmVpEga0VL2w R09NkEueMjU1tu1yR3RKDQ8zQWR8VvFoJSJWGGLYXWbv1CBZR1hieqVjo6AYSlLC upKN7NdKHu2o+JO0nypWIzQCh0Xi/0Jl6zvp8yFYL1he32Z5R7rARzWv7XU5HjUe PDEWkE4dMwmBA/ZQou6oxhW0keAVxf9NqhYGxmyNossa8xoZCh380r5aS56ZGAnm /Shh1Yoji8nRnGYEw+OFW3dQrJw3l+4z53pLLJdK4E04dMMyzFp6f0Ho0FGNHrNs 7TYOzb1gxaDVd/GsKZC1v+ZGh7hsS9VGM3wrSQuyavnXElBAnwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFIpmWWa+QJECRfiUsshL0+GRxwzAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x ZDhjOTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIwZjkzZmU2YTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFkOGM5MTY3LWU4MTYtNDgzNC04 ZmNjLWY4YjBmOTNmZTZhMC8xZDhjOTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIwZjkz ZmU2YTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlhgDBACCM14wDgQCAAIwCAMGBCYCApkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9EERDbOl/EeBG2y/5fIczgFZCCoenc5twl7NUvTenbNOJpL84dHIk4 UVdA5tG5uS363DYU5mOkAdU3zt7Mn25M2aAnelq+/PKmvcxslvZ1rGtm+wt1hHuJ wLfIby2E95EFTgjd3tlUfFmCszAwjEZV175AQ31U0JMxAfBHgZ7E7EH5jX6Z880P GTcGS8oZLsu0uwd6VxpZGe14w4Rk2NB0oCI+2jXI4b9DvBcYuZ2JTeUGdYoaSwl6 VUIezu1sA94wMvwhP7MdxEOKr3U6C9UFGYvxcmk6pjm6/ocBPpU5CT0Wl9x+JsZF pjwJ3HD+X2n0I31w2AroFeRz1zwsU48= -----END CERTIFICATE-----Generated at Wed May 1 16:33:24 2024 by rpki-client on console-fra.rpki-client.org