$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer File: 1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer (raw, json) Hash identifier: pB9t0Q60rJtzz3hsHtcHwYl5YmIK4q6G8pqRvnTvBj4= Subject key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858426B2BEE65E3374AE0FA06EB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Jul 2023 00:45:16 +0000 Certificate not after: Sun 05 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 394840 IP: 67.219.189.0 -- 67.219.191.255 IP: 199.34.12.0/23 IP: 2607:bd80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:6b:2b:ee:65:e3:37:4a:e0:fa:06:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 3 00:45:16 2023 GMT Not After : Oct 5 00:45:16 2025 GMT Subject: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:02:13:34:8d:4e:e5:09:ee:1d:03:81:51:b4: f8:8e:8d:88:6a:16:2b:3d:8a:e8:48:0d:65:27:6a: 13:7a:0f:fb:72:af:28:93:c1:57:a7:a0:bd:88:86: 71:68:54:7a:3e:6e:53:8f:5d:2a:e2:ed:1e:72:c6: 9d:76:95:fd:d7:6d:6e:bc:8a:45:bc:89:45:11:8d: c7:c0:34:99:e5:3b:b9:af:93:66:33:a1:b7:16:ab: 82:17:be:2d:86:87:57:61:d8:a7:ad:cb:2c:80:30: 07:cb:ba:32:6d:42:b0:6a:be:e7:85:07:91:60:61: fa:33:9f:34:06:2a:43:13:3a:0e:34:d8:99:e4:8d: 89:a7:a0:40:e5:37:8a:37:dc:86:b8:81:6d:00:24: 32:16:b6:c5:0f:6e:94:01:1c:9f:fe:c1:ce:9b:a5: d8:a0:8e:0e:f6:b3:cb:d1:9a:87:b4:39:b3:64:b1: 73:1b:7f:91:c2:33:a4:cd:64:f0:0d:4a:29:a3:4e: ff:a7:b3:a2:3c:07:63:88:b5:82:47:12:1a:70:78: 9a:55:83:8b:73:4f:dd:0d:8c:e8:b7:2b:8f:9d:22: 91:7b:02:fe:bd:f5:c1:e0:ec:3f:47:c5:cb:1f:13: 32:47:56:90:38:07:27:f8:86:1c:7a:51:1f:6b:7f: dc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 67.219.189.0-67.219.191.255 199.34.12.0/23 IPv6: 2607:bd80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394840 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9b:a9:09:d3:76:ab:61:af:41:1e:0d:96:91:5b:62:e4:e3: 51:9f:e3:31:a8:7b:e1:6c:cf:86:71:ac:f1:0d:99:1c:81:b4: 6f:c8:60:9d:f5:93:fe:47:14:8f:3f:a8:8d:ed:c8:d6:42:f5: 99:21:b9:db:5d:57:aa:9c:c9:07:2e:0e:24:79:a2:4e:f5:2a: bc:51:65:9d:58:bb:6e:3d:64:22:67:12:bf:37:98:c9:d1:4a: 55:a3:24:e9:d1:f2:c7:e1:af:d4:b3:53:bc:79:df:18:be:a2: 77:93:43:00:ab:b6:e2:86:3a:c9:4e:74:ac:bd:ec:cf:0e:b9: c7:f9:c5:3b:d1:0c:46:c7:ea:d7:38:2f:bd:54:7e:9c:0d:38: ff:82:1b:d4:f6:93:c8:9c:9a:43:26:ca:13:91:6c:07:ed:d5: 7a:99:dc:7b:02:92:42:db:2b:51:d9:d7:6f:8d:9c:1f:58:7a: cd:bb:1f:01:74:98:5d:c9:fc:73:93:00:55:8f:45:d4:cd:6b: d9:fa:41:42:d1:88:83:d9:d4:1c:40:0c:2f:79:bd:85:5c:be: 3f:06:03:8b:98:97:dd:1d:ca:b9:f5:c7:72:0f:ec:58:1e:72: 5b:36:42:8b:da:19:c1:5a:12:46:96:5d:0a:31:c1:87:06:37: 26:a3:06:02 -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWEJrK+5l4zdK4PoG6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDcwMzAwNDUxNloXDTI1MTAwNTAwNDUxNlowLzEtMCsGA1UEAxMk MWYwNDk2YTgtMGNhOS00NWVjLTgyMGYtOGU4OGMzNmU1OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygITNI1O5QnuHQOBUbT4jo2IahYrPYroSA1l J2oTeg/7cq8ok8FXp6C9iIZxaFR6Pm5Tj10q4u0ecsaddpX9121uvIpFvIlFEY3H wDSZ5Tu5r5NmM6G3FquCF74thodXYdinrcssgDAHy7oybUKwar7nhQeRYGH6M580 BipDEzoONNiZ5I2Jp6BA5TeKN9yGuIFtACQyFrbFD26UARyf/sHOm6XYoI4O9rPL 0ZqHtDmzZLFzG3+RwjOkzWTwDUopo07/p7OiPAdjiLWCRxIacHiaVYOLc0/dDYzo tyuPnSKRewL+vfXB4Ow/R8XLHxMyR1aQOAcn+IYcelEfa3/cJwIDAQABo4IEODCC BDQwHQYDVR0OBBYEFAXZspaCJ735DffvUTqo0KvFodWMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8x ZjA0OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4YzM2ZTU4YjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzFmMDQ5NmE4LTBjYTktNDVlYy04 MjBmLThlODhjMzZlNThiMC8xZjA0OTZhOC0wY2E5LTQ1ZWMtODIwZi04ZTg4YzM2 ZTU4YjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBoEAgABMBQwDAMEAEPbvQMEBkPbgAMEAcciDDANBAIAAjAHAwUA Jge9gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGBlgwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASZupCdN2 q2GvQR4NlpFbYuTjUZ/jMah74WzPhnGs8Q2ZHIG0b8hgnfWT/kcUjz+oje3I1kL1 mSG5211XqpzJBy4OJHmiTvUqvFFlnVi7bj1kImcSvzeYydFKVaMk6dHyx+Gv1LNT vHnfGL6id5NDAKu24oY6yU50rL3szw65x/nFO9EMRsfq1zgvvVR+nA04/4Ib1PaT yJyaQybKE5FsB+3VepncewKSQtsrUdnXb42cH1h6zbsfAXSYXcn8c5MAVY9F1M1r 2fpBQtGIg9nUHEAML3m9hVy+PwYDi5iX3R3KufXHcg/sWB5yWzZCi9oZwVoSRpZd CjHBhwY3JqMGAg== -----END CERTIFICATE-----Generated at Wed May 1 15:59:54 2024 by rpki-client on console-ams.rpki-client.org