$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151.cer File: 2654343f-7862-4859-8638-b9c2008b3151.cer (raw, json) Hash identifier: 2ZXjI2esc2iBQ3hCo8uER14MMsxVIyXwQ8SMwbGje/Y= Subject key identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285844C20B8FD349CB4BD561E5ED80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Feb 2024 13:09:15 +0000 Certificate not after: Mon 20 Apr 2026 20:31:02 +0000 Subordinate resources: IP: 23.170.200.0/24 IP: 2602:f99f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:c2:0b:8f:d3:49:cb:4b:d5:61:e5:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 2 13:09:15 2024 GMT Not After : Apr 20 20:31:02 2026 GMT Subject: CN=2654343f-7862-4859-8638-b9c2008b3151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:41:c8:37:d1:0d:7f:5d:56:1a:17:0b:af: 87:cb:bd:54:93:98:9c:b6:fb:6d:20:52:2a:b4:8f: c5:54:c1:f8:a4:91:a0:64:97:ab:67:7e:22:d9:0d: 0a:49:c2:75:f0:58:90:9f:22:f5:09:24:15:a2:c5: e4:fa:2c:96:23:89:c5:10:00:2a:56:cd:72:79:79: d8:ce:73:6b:9f:6e:b9:72:f6:64:6a:a7:c2:6c:43: 23:83:74:29:4e:ce:30:54:04:37:ee:b6:ca:bb:eb: 75:d7:cb:99:fb:4a:26:3e:50:ee:13:b9:b0:96:53: c4:1e:b3:d9:05:75:94:80:98:4b:7c:33:10:cb:b1: 88:44:06:db:39:83:ed:07:24:ca:2b:c4:b2:6e:b0: 21:68:b3:0d:1f:b5:07:39:46:ca:82:d3:fc:0f:76: d0:58:61:8f:cd:67:0d:66:8d:da:e5:4a:66:ee:d9: e6:73:73:ef:6e:da:fd:c2:7e:a7:ec:a8:58:53:1d: 08:7d:7e:79:ae:7d:9c:f3:7e:fa:0d:db:c7:26:6f: 3e:e7:0e:4f:74:23:eb:7f:64:c7:b5:92:4a:3e:ec: d3:f2:03:78:ed:82:bd:4a:99:f8:1c:9c:89:62:95: ed:ee:84:c2:94:e3:e0:80:5a:49:f5:5c:b4:00:05: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:10:55:77:F2:2C:93:5C:37:1F:20:18:49:C4:47:18:65:2D:82:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2654343f-7862-4859-8638-b9c2008b3151/2654343f-7862-4859-8638-b9c2008b3151.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.170.200.0/24 IPv6: 2602:f99f::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a7:10:3d:2e:c8:a8:59:db:e7:cd:5e:2f:b1:6c:b8:74:d7: b0:b0:c1:3e:e7:94:81:9b:1d:0f:94:92:11:6d:a8:f2:b4:d7: 7f:7e:45:ec:5a:f7:4b:b5:70:3d:0f:b1:a1:e8:d0:38:b0:c1: 6e:a0:eb:ad:26:78:8d:74:77:f3:7a:b7:cf:0e:10:9b:f6:81: 16:be:55:b7:8a:07:d4:86:dc:2d:24:cb:af:19:c3:4f:f5:75: fd:3a:cd:7a:1d:92:07:a8:f9:27:b5:82:d0:be:d6:6e:ae:b0: ee:49:2c:26:41:6e:c6:46:f3:b2:b0:fe:85:bf:b9:3d:14:91: ea:f6:fd:bc:b7:65:cb:24:4d:f8:90:73:c1:55:2d:5d:f4:15: 07:97:55:06:07:b1:27:a1:ec:2e:ac:f4:a6:55:d0:25:3b:9c: ec:03:07:fb:6f:2d:6c:bf:32:23:b7:33:3a:8c:12:1a:fe:9c: 9d:cf:f5:5c:2c:57:71:20:7f:cf:d0:6d:98:a2:8b:cc:8d:3d: 93:cb:f4:44:af:52:03:ae:e8:19:b2:10:e7:84:ca:15:fc:c7: b2:85:86:a4:0b:72:78:9e:1b:2c:b6:07:e2:82:c9:37:98:0d: 2c:b9:c2:cf:ed:97:5a:8a:f1:95:92:89:84:4d:61:83:c2:55: 79:f5:4e:46 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWETCC4/TSctL1WHl7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDIwMjEzMDkxNVoXDTI2MDQyMDIwMzEwMlowLzEtMCsGA1UEAxMk MjY1NDM0M2YtNzg2Mi00ODU5LTg2MzgtYjljMjAwOGIzMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqplByDfRDX9dVhoXC6+Hy71Uk5ictvttIFIq tI/FVMH4pJGgZJerZ34i2Q0KScJ18FiQnyL1CSQVosXk+iyWI4nFEAAqVs1yeXnY znNrn265cvZkaqfCbEMjg3QpTs4wVAQ37rbKu+t118uZ+0omPlDuE7mwllPEHrPZ BXWUgJhLfDMQy7GIRAbbOYPtByTKK8SybrAhaLMNH7UHOUbKgtP8D3bQWGGPzWcN Zo3a5Upm7tnmc3Pvbtr9wn6n7KhYUx0IfX55rn2c8376DdvHJm8+5w5PdCPrf2TH tZJKPuzT8gN47YK9Spn4HJyJYpXt7oTClOPggFpJ9Vy0AAX+2wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFJ0QVXfyLJNcNx8gGEnERxhlLYIuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y NjU0MzQzZi03ODYyLTQ4NTktODYzOC1iOWMyMDA4YjMxNTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzI2NTQzNDNmLTc4NjItNDg1OS04 NjM4LWI5YzIwMDhiMzE1MS8yNjU0MzQzZi03ODYyLTQ4NTktODYzOC1iOWMyMDA4 YjMxNTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqsgwDgQCAAIwCAMGACYC+Z8AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AD6nED0uyKhZ2+fNXi+xbLh017CwwT7nlIGbHQ+UkhFtqPK0139+Rexa90u1cD0P saHo0DiwwW6g660meI10d/N6t88OEJv2gRa+VbeKB9SG3C0ky68Zw0/1df06zXod kgeo+Se1gtC+1m6usO5JLCZBbsZG87Kw/oW/uT0Uker2/by3ZcskTfiQc8FVLV30 FQeXVQYHsSeh7C6s9KZV0CU7nOwDB/tvLWy/MiO3MzqMEhr+nJ3P9VwsV3Egf8/Q bZiii8yNPZPL9ESvUgOu6BmyEOeEyhX8x7KFhqQLcnieGyy2B+KCyTeYDSy5ws/t l1qK8ZWSiYRNYYPCVXn1TkY= -----END CERTIFICATE-----Generated at Wed May 1 15:59:54 2024 by rpki-client on console-ams.rpki-client.org