$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a.cer File: 2c41fdd7-374e-45cb-986c-b74864f1441a.cer (raw, json) Hash identifier: 9sYJhtvwtRKEuunt1PyiLa7GKtOu3CUDMBFyBITbi+8= Subject key identifier: 46:5D:4F:76:28:0F:03:BE:D5:D3:30:82:30:A0:AE:E7:F8:BB:AC:04 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858436B7274233FA1BB4AF7E11080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/2c41fdd7-374e-45cb-986c-b74864f1441a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Oct 2023 19:54:18 +0000 Certificate not after: Sat 09 Aug 2025 19:06:39 +0000 Subordinate resources: AS: 11246 IP: 64.93.76.0/22 IP: 2602:fa0f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:6b:72:74:23:3f:a1:bb:4a:f7:e1:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 2 19:54:18 2023 GMT Not After : Aug 9 19:06:39 2025 GMT Subject: CN=2c41fdd7-374e-45cb-986c-b74864f1441a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:ea:97:4e:5a:a5:74:a9:08:40:43:1d:d5: 32:05:2b:11:29:5e:63:e5:c0:c0:6d:53:91:d1:1e: ee:7d:6b:14:aa:c7:d3:dc:33:bf:d6:46:c7:67:31: 03:c7:cb:4c:97:e6:a0:a6:e1:14:00:3c:5f:1e:fb: 18:78:7e:3b:b0:81:42:ef:6a:e5:94:6b:37:a3:9d: 6e:14:49:cc:11:d9:2d:0e:c6:46:26:e7:1a:04:13: ba:fb:cc:35:e9:fc:a7:90:b1:ad:92:a9:04:de:cb: 81:23:28:2c:80:34:47:62:d4:c0:11:54:13:47:03: 75:f1:c0:ae:8a:83:39:49:bd:81:e9:ff:89:70:bf: 79:45:d6:56:4c:ca:a2:8e:e6:f8:5f:58:58:97:4b: a3:8d:29:ac:20:60:47:a3:22:2b:bb:9a:87:ee:59: 8d:04:3a:a2:2b:fb:63:a5:10:0a:d4:4f:9a:16:79: b2:b0:ca:c4:88:60:9d:40:89:7c:bd:34:52:b0:f9: 8e:09:07:96:e5:70:c1:c6:f4:ce:44:8c:07:65:52: db:e0:12:c7:5d:81:bf:1c:f8:f4:78:f3:9b:fa:48: 1b:c7:92:78:66:24:15:53:17:4a:d4:73:3c:21:fc: 2c:6a:9a:ef:c3:53:ff:2c:b8:6b:02:b0:7c:0d:79: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5D:4F:76:28:0F:03:BE:D5:D3:30:82:30:A0:AE:E7:F8:BB:AC:04 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/2c41fdd7-374e-45cb-986c-b74864f1441a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.93.76.0/22 IPv6: 2602:fa0f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11246 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d0:7c:49:f5:cb:25:26:25:c4:0e:a2:03:5b:2a:8d:27:53: d5:c4:cb:95:32:19:df:84:4e:e5:3b:ba:19:4e:46:f1:52:d7: 7f:ea:d3:50:e6:8f:d8:03:84:d4:d6:f2:d3:86:8e:ec:3d:dc: 76:8c:95:b5:23:5b:6d:cc:28:72:68:db:55:32:bd:4f:82:f7: 66:a9:7e:fc:51:2e:0a:3e:5a:eb:a4:d6:73:12:01:e3:7d:40: 8f:97:4c:3d:2e:32:c9:1b:8e:cb:2a:98:95:57:f7:6b:36:be: ea:86:a9:bd:2e:4f:b4:7e:fb:c3:bc:5e:03:4b:27:aa:8c:ed: cd:d9:d1:1c:c8:a7:69:3a:17:af:69:4c:ba:73:73:fd:e9:87: f7:12:eb:42:f5:29:b1:d3:6b:3e:f7:18:b9:83:e4:3f:4a:f3: ad:f8:68:d5:a5:e2:ac:79:07:1b:c8:a6:14:5d:a5:62:48:00: d2:71:d1:65:4e:3a:44:da:a5:27:60:50:b6:1d:85:41:d6:16: 03:9c:dd:86:5d:75:29:28:fd:21:6f:49:07:a6:7f:44:33:5c: e7:b0:4c:e9:10:9a:50:7c:df:b3:27:c7:d4:0d:16:9a:3d:3a: b1:18:24:9a:98:07:45:29:ad:82:f6:6b:1f:89:1e:51:fb:bf: c5:20:50:52 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWENrcnQjP6G7SvfhEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTAwMjE5NTQxOFoXDTI1MDgwOTE5MDYzOVowLzEtMCsGA1UEAxMk MmM0MWZkZDctMzc0ZS00NWNiLTk4NmMtYjc0ODY0ZjE0NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUXql05apXSpCEBDHdUyBSsRKV5j5cDAbVOR 0R7ufWsUqsfT3DO/1kbHZzEDx8tMl+agpuEUADxfHvsYeH47sIFC72rllGs3o51u FEnMEdktDsZGJucaBBO6+8w16fynkLGtkqkE3suBIygsgDRHYtTAEVQTRwN18cCu ioM5Sb2B6f+JcL95RdZWTMqijub4X1hYl0ujjSmsIGBHoyIru5qH7lmNBDqiK/tj pRAK1E+aFnmysMrEiGCdQIl8vTRSsPmOCQeW5XDBxvTORIwHZVLb4BLHXYG/HPj0 ePOb+kgbx5J4ZiQVUxdK1HM8Ifwsaprvw1P/LLhrArB8DXma8wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEZdT3YoDwO+1dMwgjCgruf4u6wEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8y YzQxZmRkNy0zNzRlLTQ1Y2ItOTg2Yy1iNzQ4NjRmMTQ0MWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzJjNDFmZGQ3LTM3NGUtNDVjYi05 ODZjLWI3NDg2NGYxNDQxYS8yYzQxZmRkNy0zNzRlLTQ1Y2ItOTg2Yy1iNzQ4NjRm MTQ0MWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAJAXUwwDgQCAAIwCAMGBCYC+g8AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAivuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD7QfEn1yyUmJcQOogNbKo0nU9XE y5UyGd+ETuU7uhlORvFS13/q01Dmj9gDhNTW8tOGjuw93HaMlbUjW23MKHJo21Uy vU+C92apfvxRLgo+Wuuk1nMSAeN9QI+XTD0uMskbjssqmJVX92s2vuqGqb0uT7R+ +8O8XgNLJ6qM7c3Z0RzIp2k6F69pTLpzc/3ph/cS60L1KbHTaz73GLmD5D9K8634 aNWl4qx5BxvIphRdpWJIANJx0WVOOkTapSdgULYdhUHWFgOc3YZddSko/SFvSQem f0QzXOewTOkQmlB837Mnx9QNFpo9OrEYJJqYB0UprYL2ax+JHlH7v8UgUFI= -----END CERTIFICATE-----Generated at Wed May 1 13:33:32 2024 by rpki-client on console-fra.rpki-client.org