$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer File: 35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer (raw, json) Hash identifier: /JOilpiqL4vzO0GR/3X5ryxHpXFQ2c0CpcVkIs3s5Es= Subject key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858420F198B4836D1AF8286A57500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 31 May 2023 01:13:51 +0000 Certificate not after: Tue 02 Sep 2025 01:13:51 +0000 Subordinate resources: AS: 18986 IP: 66.51.160.0/20 IP: 148.163.160.0/20 IP: 173.255.152.0/21 IP: 202.130.217.0/24 IP: 203.21.47.0/24 IP: 203.21.104.0/24 IP: 203.28.168.0/24 IP: 203.30.143.0/24 IP: 203.30.211.0/24 IP: 203.34.15.0/24 IP: 203.57.110.0/24 IP: 2605:1c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:0f:19:8b:48:36:d1:af:82:86:a5:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 31 01:13:51 2023 GMT Not After : Sep 2 01:13:51 2025 GMT Subject: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:f1:43:10:63:eb:3b:e6:03:91:6d:38:db: 3a:af:9c:a4:23:64:12:a8:40:5f:4d:f3:fb:8d:37: f2:a5:4b:91:c4:69:30:0a:0c:6c:18:cb:02:11:de: 21:57:07:c7:17:a5:2a:68:1d:49:c9:72:7b:46:2e: 09:69:74:1e:1b:44:8d:70:86:0d:3f:04:e0:4f:64: 13:86:6f:a4:5e:41:54:e6:c1:26:31:c8:20:a1:11: 7b:82:ac:a1:82:47:54:1b:f8:63:2c:e8:94:6f:d6: 19:cc:e7:8c:c2:fb:e6:1a:41:97:c0:9f:3f:48:a4: c9:86:e7:27:f5:f7:8e:b3:00:2e:5d:ea:8a:77:4e: c2:dd:29:37:19:2e:2a:76:a4:35:e0:2c:b6:f7:51: 9e:d7:61:ba:c1:bf:c7:c0:d1:67:e2:45:16:76:0a: 28:59:16:0b:a0:0b:72:65:68:3e:7a:ae:21:82:ac: c2:fe:8e:85:4f:c0:af:47:04:90:77:ea:d7:77:6b: 7d:ee:32:89:4c:5a:de:37:cd:6a:81:27:35:45:c5: c9:71:59:e7:c2:42:50:0c:61:9b:d1:0e:d8:e5:db: 6e:e3:20:9e:b3:df:10:ce:af:d8:35:72:bd:55:5f: 52:2b:39:8b:ab:0a:d7:82:d0:bd:cb:25:6f:13:df: 9c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.51.160.0/20 148.163.160.0/20 173.255.152.0/21 202.130.217.0/24 203.21.47.0/24 203.21.104.0/24 203.28.168.0/24 203.30.143.0/24 203.30.211.0/24 203.34.15.0/24 203.57.110.0/24 IPv6: 2605:1c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18986 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:65:99:ed:8f:b1:38:28:cd:62:39:ff:f2:35:d7:7e:29:05: fe:27:7f:f6:cf:cc:98:66:76:dd:58:dd:ab:b4:af:ee:c8:83: 64:05:d1:b9:a4:cf:34:99:ee:2f:b3:7d:fb:9d:d2:6d:5f:c5: c9:cb:7d:a7:2b:99:b6:35:18:e0:3e:53:97:eb:20:0c:f4:d1: f8:aa:c1:67:6d:af:27:4b:8a:fe:9e:85:86:f4:cf:78:a8:39: d0:56:4a:2f:eb:95:57:31:f7:13:d9:1b:b3:0f:f9:61:87:e3: a8:be:99:ad:f9:f4:3d:a6:7b:4a:cb:66:b8:10:ee:55:2a:33: 51:6d:7f:4c:c5:80:b6:e2:23:4a:e9:6c:00:4b:c9:c8:7d:40: a5:87:2c:e1:7a:c1:ae:15:7d:0c:76:b5:13:90:fd:a7:82:a2: 50:d2:62:da:d5:a2:e7:09:92:84:d8:08:5a:46:cf:c7:ee:d0: d0:1f:10:98:04:5f:ab:9f:12:c8:57:de:2a:98:df:31:b2:19: 95:4f:6c:18:90:b9:c1:c3:61:fe:67:a2:38:a2:b7:a6:e8:cd: bf:b2:a8:21:7b:c1:30:e0:2e:db:87:65:a1:4c:97:0c:cd:ca: e4:b8:50:e4:6f:ca:25:c7:b9:20:2f:03:df:07:7d:2c:59:ec: 0c:ec:28:e1 -----BEGIN CERTIFICATE----- MIIHUzCCBjugAwIBAgIUAQ0Mn0MoWEIPGYtINtGvgoaldQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUzMTAxMTM1MVoXDTI1MDkwMjAxMTM1MVowLzEtMCsGA1UEAxMk MzVhM2YwODgtMDViNy00NzBhLTlhZjUtNDViZDI1ZWU4ZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM7xQxBj6zvmA5FtONs6r5ykI2QSqEBfTfP7 jTfypUuRxGkwCgxsGMsCEd4hVwfHF6UqaB1JyXJ7Ri4JaXQeG0SNcIYNPwTgT2QT hm+kXkFU5sEmMcggoRF7gqyhgkdUG/hjLOiUb9YZzOeMwvvmGkGXwJ8/SKTJhucn 9feOswAuXeqKd07C3Sk3GS4qdqQ14Cy291Ge12G6wb/HwNFn4kUWdgooWRYLoAty ZWg+eq4hgqzC/o6FT8CvRwSQd+rXd2t97jKJTFreN81qgSc1RcXJcVnnwkJQDGGb 0Q7Y5dtu4yCes98Qzq/YNXK9VV9SKzmLqwrXgtC9yyVvE9+cXwIDAQABo4IEZTCC BGEwHQYDVR0OBBYEFDSu1iL1vqscMp5VEc12A3VQnBcFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z NWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVlZThmYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzM1YTNmMDg4LTA1YjctNDcwYS05 YWY1LTQ1YmQyNWVlOGZjMS8zNWEzZjA4OC0wNWI3LTQ3MGEtOWFmNS00NWJkMjVl ZThmYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwagYIKwYBBQUH AQcBAf8EWzBZMEgEAgABMEIDBARCM6ADBASUo6ADBAOt/5gDBADKgtkDBADLFS8D BADLFWgDBADLHKgDBADLHo8DBADLHtMDBADLIg8DBADLOW4wDQQCAAIwBwMFACYF HIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICSiowVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAL2WZ7Y+xOCjN Yjn/8jXXfikF/id/9s/MmGZ23Vjdq7Sv7siDZAXRuaTPNJnuL7N9+53SbV/Fyct9 pyuZtjUY4D5Tl+sgDPTR+KrBZ22vJ0uK/p6FhvTPeKg50FZKL+uVVzH3E9kbsw/5 YYfjqL6Zrfn0PaZ7SstmuBDuVSozUW1/TMWAtuIjSulsAEvJyH1ApYcs4XrBrhV9 DHa1E5D9p4KiUNJi2tWi5wmShNgIWkbPx+7Q0B8QmARfq58SyFfeKpjfMbIZlU9s GJC5wcNh/meiOKK3pujNv7KoIXvBMOAu24dloUyXDM3K5LhQ5G/KJce5IC8D3wd9 LFnsDOwo4Q== -----END CERTIFICATE-----Generated at Wed May 1 16:33:25 2024 by rpki-client on console-fra.rpki-client.org