$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.cer File: 3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.cer (raw, json) Hash identifier: GnLXsBkYiKGmWcF2YYrrsO7CQ3srLe/3dQvw3gQHMtM= Subject key identifier: 34:75:A4:CD:48:96:B4:D7:99:49:1A:2A:CA:81:36:F6:01:E8:67:20 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858456F8141745911B749D7D56A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Apr 2024 16:21:14 +0000 Certificate not after: Wed 20 Aug 2025 19:35:21 +0000 Subordinate resources: AS: 17015 IP: 23.153.152.0/24 IP: 130.51.79.0/24 IP: 2606:6bc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6f:81:41:74:59:11:b7:49:d7:d5:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 4 16:21:14 2024 GMT Not After : Aug 20 19:35:21 2025 GMT Subject: CN=3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:0c:d3:c4:3a:83:ec:a6:d8:cf:df:31:7a: 71:bd:f4:c3:f0:5e:d9:6c:37:02:f9:9c:7b:9b:f3: bb:1f:dd:b8:1c:f4:b5:68:d4:7e:a2:65:ea:8c:1f: e3:c2:54:09:f2:b8:90:5f:96:a4:2c:b8:ff:8e:21: b4:1a:f7:07:f5:7c:a9:b1:b2:df:b0:03:1d:cc:86: 2a:57:72:73:06:dd:4b:2a:ff:d5:9d:b1:31:92:9a: aa:c2:85:9c:e0:6b:f7:3e:3b:71:de:d5:77:59:60: ea:40:90:34:31:a6:23:4d:84:20:2c:ac:b1:4b:f4: c7:f0:8f:2f:32:9e:f6:9a:ab:9b:fe:66:b7:15:67: 69:0c:1f:c9:ce:6a:23:a1:72:b8:4c:6a:ce:25:c8: 9c:b5:12:8b:aa:b9:81:a6:bf:07:e0:0d:e1:5d:24: 5f:78:79:82:3c:3a:1e:77:f2:f8:c5:71:39:38:e7: 10:4a:ee:80:b2:89:4d:3a:a0:ae:a2:ac:fe:b8:eb: b3:73:57:88:19:76:ee:bf:42:4b:5d:96:c5:5d:d7: 6c:3f:cb:40:c8:fa:4b:ec:71:94:e2:47:1c:cb:cc: 26:c7:fc:32:95:3d:ab:b1:d7:b5:be:04:df:62:f0: ba:b6:d1:5e:cb:b1:2a:3b:3b:41:87:61:ec:24:fe: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:75:A4:CD:48:96:B4:D7:99:49:1A:2A:CA:81:36:F6:01:E8:67:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6/3ad33e8c-898c-4cf1-b7ef-48f7e44f4bf6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.153.152.0/24 130.51.79.0/24 IPv6: 2606:6bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17015 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:03:ee:a2:3b:ad:48:04:e5:ef:8e:14:ff:25:d4:ee:18:85: 38:a7:f6:5b:22:f0:46:c2:a2:ad:c7:96:a3:43:a4:31:5c:fa: f4:ea:49:83:0d:87:2a:13:d2:3c:1f:f2:1c:98:1c:65:76:43: b9:42:42:d8:18:e1:05:f9:83:61:ae:c3:78:c7:83:42:7a:8a: 39:b7:6b:ec:15:bc:6b:10:97:96:b7:36:a4:17:c1:30:99:07: 94:3e:54:95:7d:17:ab:32:88:0b:40:9e:7f:fa:c5:ca:cb:1a: a7:5f:30:48:83:91:b5:8e:d3:32:0a:bb:51:eb:e4:13:d2:09: 5b:a5:be:b3:8f:6a:cb:85:9d:d1:85:ae:b2:0f:25:74:e7:30: 72:63:e7:11:1c:43:d4:cc:23:e7:41:a6:c1:ce:48:89:2a:0a: 08:25:6c:cd:b9:2c:0b:8f:58:24:17:19:37:fe:6c:56:ae:28: 96:9a:8e:f4:d3:e8:64:03:78:b4:a5:7d:58:ed:eb:ef:5c:8a: 76:47:a1:68:cf:12:6d:f2:60:55:cc:2e:80:c1:56:a3:02:ab: 96:5d:d3:75:5e:78:3b:17:9a:76:cb:b0:df:2f:fc:72:22:18: 0c:74:23:48:48:20:c9:28:54:a7:8f:05:66:16:f7:42:df:e8: 8e:68:ce:2c -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEVvgUF0WRG3SdfVaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDQwNDE2MjExNFoXDTI1MDgyMDE5MzUyMVowLzEtMCsGA1UEAxMk M2FkMzNlOGMtODk4Yy00Y2YxLWI3ZWYtNDhmN2U0NGY0YmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluAM08Q6g+ym2M/fMXpxvfTD8F7ZbDcC+Zx7 m/O7H924HPS1aNR+omXqjB/jwlQJ8riQX5akLLj/jiG0GvcH9XypsbLfsAMdzIYq V3JzBt1LKv/VnbExkpqqwoWc4Gv3Pjtx3tV3WWDqQJA0MaYjTYQgLKyxS/TH8I8v Mp72mqub/ma3FWdpDB/JzmojoXK4TGrOJcictRKLqrmBpr8H4A3hXSRfeHmCPDoe d/L4xXE5OOcQSu6AsolNOqCuoqz+uOuzc1eIGXbuv0JLXZbFXddsP8tAyPpL7HGU 4kccy8wmx/wylT2rsde1vgTfYvC6ttFey7EqOztBh2HsJP5+gQIDAQABo4IELzCC BCswHQYDVR0OBBYEFDR1pM1IlrTXmUkaKsqBNvYB6GcgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z YWQzM2U4Yy04OThjLTRjZjEtYjdlZi00OGY3ZTQ0ZjRiZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzNhZDMzZThjLTg5OGMtNGNmMS1i N2VmLTQ4ZjdlNDRmNGJmNi8zYWQzM2U4Yy04OThjLTRjZjEtYjdlZi00OGY3ZTQ0 ZjRiZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXmZgDBACCM08wDQQCAAIwBwMFACYGa8AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICQncwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVQPuojutSATl744U/yXU 7hiFOKf2WyLwRsKirceWo0OkMVz69OpJgw2HKhPSPB/yHJgcZXZDuUJC2BjhBfmD Ya7DeMeDQnqKObdr7BW8axCXlrc2pBfBMJkHlD5UlX0XqzKIC0Cef/rFyssap18w SIORtY7TMgq7UevkE9IJW6W+s49qy4Wd0YWusg8ldOcwcmPnERxD1Mwj50Gmwc5I iSoKCCVszbksC49YJBcZN/5sVq4olpqO9NPoZAN4tKV9WO3r71yKdkehaM8SbfJg VcwugMFWowKrll3TdV54Oxeadsuw3y/8ciIYDHQjSEggyShUp48FZhb3Qt/ojmjO LA== -----END CERTIFICATE-----Generated at Wed May 1 15:59:54 2024 by rpki-client on console-ams.rpki-client.org