$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer File: 3d318897-eed6-4fd9-a18c-91026968b3e2.cer (raw, json) Hash identifier: 1CQSWI/9pOc3TjjGXVA0vJvh1dVL+dMeO/3RMIJ319A= Subject key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858424B03A15A71E58EE53763CB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Jun 2023 12:18:12 +0000 Certificate not after: Tue 06 May 2025 19:06:39 +0000 Subordinate resources: AS: 800 IP: 23.160.32.0/24 IP: 162.120.72.0/23 IP: 207.32.208.0/22 IP: 2604:fdc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:4b:03:a1:5a:71:e5:8e:e5:37:63:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 21 12:18:12 2023 GMT Not After : May 6 19:06:39 2025 GMT Subject: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:25:ce:7c:d1:f8:6e:e4:94:34:8d:99:5e:69: aa:54:da:68:47:ce:3e:15:b1:ea:e2:92:f8:85:c2: 06:7b:fb:3f:fe:38:0a:c5:a6:00:13:1f:0d:1b:c8: 18:43:be:92:6f:9d:44:74:10:9e:bf:3d:5d:6c:84: 53:2e:55:3b:70:e7:14:c3:3a:60:db:1e:24:df:83: 87:3f:37:8e:43:3a:a4:73:ec:6a:dc:66:f3:06:ed: e5:f0:0d:a4:ed:1a:f2:9c:98:f3:7f:bb:73:86:e7: 21:5e:46:bd:c6:e4:9e:f4:ff:7f:5b:f0:d2:c4:f8: 1f:6c:b8:92:7d:b6:21:fe:e5:a1:65:58:4a:85:c4: 47:de:5a:a8:a0:8c:ef:ce:ab:cb:33:15:45:bc:3e: 58:fe:79:90:06:9a:1a:d1:53:56:3a:64:ce:60:fc: 65:88:f2:09:28:bb:cf:ba:9a:20:d5:22:32:ff:33: c8:68:84:55:a0:fc:71:7b:c8:52:3a:4f:7b:12:5b: 57:fb:f4:20:db:0f:66:f6:20:f9:9a:ec:ad:1a:5d: 7f:45:f0:33:d6:c0:7a:e8:03:88:1f:c3:e2:ca:f1: 50:77:bc:2f:2e:af:ba:9a:e4:cf:88:20:1c:01:ed: 4b:23:f8:d4:36:a8:e4:e8:e7:c5:07:91:2d:61:69: 36:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.160.32.0/24 162.120.72.0/23 207.32.208.0/22 IPv6: 2604:fdc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 800 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:69:7d:1c:7d:1c:bf:a1:42:fe:f2:7d:9c:5e:e7:f1:8b:f7: 1b:d3:2f:24:2e:c9:9a:bc:db:57:d6:6d:f6:ab:d5:6e:07:dd: 9f:a8:b7:57:67:62:9b:4d:b7:e2:88:20:fa:06:90:29:8d:0e: de:79:f0:dc:62:ee:37:58:d8:8f:b0:5b:8c:32:e3:ac:46:ba: da:b0:bb:e2:64:fd:01:5d:75:ce:30:ad:31:a7:fd:7b:e7:6e: 6f:1c:b3:49:db:89:18:aa:c1:df:37:6f:35:7d:d9:ea:56:70: 6a:ea:3c:c9:7c:4b:b6:89:66:ef:c5:9c:30:d0:89:c9:51:59: d5:1e:32:bf:e2:79:94:4e:0e:93:b0:b6:0a:80:a7:28:55:1f: 42:52:cd:e6:2a:ef:b0:f5:47:23:a6:1c:80:5f:d1:d2:ba:e6: db:e3:03:60:4b:30:16:76:48:40:55:d3:bf:2f:44:0a:09:e5: 0b:0b:08:d4:80:cd:cf:2a:84:e7:e0:bb:2e:44:7c:98:ef:73: 95:49:a3:a1:fa:96:74:c0:a1:8f:bc:d4:58:91:56:d8:81:3a: 53:cc:7c:a4:22:7f:20:9d:aa:3b:33:5f:e9:93:8a:35:59:83: 3c:69:41:99:88:d1:cb:23:57:62:3d:3f:6d:da:79:13:1d:eb: 8e:e4:7d:83 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEJLA6FaceWO5Tdjy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDYyMTEyMTgxMloXDTI1MDUwNjE5MDYzOVowLzEtMCsGA1UEAxMk M2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5NjhiM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSXOfNH4buSUNI2ZXmmqVNpoR84+FbHq4pL4 hcIGe/s//jgKxaYAEx8NG8gYQ76Sb51EdBCevz1dbIRTLlU7cOcUwzpg2x4k34OH PzeOQzqkc+xq3GbzBu3l8A2k7RrynJjzf7tzhuchXka9xuSe9P9/W/DSxPgfbLiS fbYh/uWhZVhKhcRH3lqooIzvzqvLMxVFvD5Y/nmQBpoa0VNWOmTOYPxliPIJKLvP upog1SIy/zPIaIRVoPxxe8hSOk97EltX+/Qg2w9m9iD5muytGl1/RfAz1sB66AOI H8PiyvFQd7wvLq+6muTPiCAcAe1LI/jUNqjk6OfFB5EtYWk2vwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFHPE0Cw2kaPqn8z+1arA4CKIwzylMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z ZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzNkMzE4ODk3LWVlZDYtNGZkOS1h MThjLTkxMDI2OTY4YjNlMi8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2 OGIzZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXoCADBAGieEgDBALPINAwDQQCAAIwBwMFACYE /cAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICAyAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADGl9HH0cv6FC /vJ9nF7n8Yv3G9MvJC7JmrzbV9Zt9qvVbgfdn6i3V2dim0234ogg+gaQKY0O3nnw 3GLuN1jYj7BbjDLjrEa62rC74mT9AV11zjCtMaf9e+dubxyzSduJGKrB3zdvNX3Z 6lZwauo8yXxLtolm78WcMNCJyVFZ1R4yv+J5lE4Ok7C2CoCnKFUfQlLN5irvsPVH I6YcgF/R0rrm2+MDYEswFnZIQFXTvy9ECgnlCwsI1IDNzyqE5+C7LkR8mO9zlUmj ofqWdMChj7zUWJFW2IE6U8x8pCJ/IJ2qOzNf6ZOKNVmDPGlBmYjRyyNXYj0/bdp5 Ex3rjuR9gw== -----END CERTIFICATE-----Generated at Wed May 1 16:33:25 2024 by rpki-client on console-fra.rpki-client.org