$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer File: 54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer (raw, json) Hash identifier: 4onYg3cFi2zfWzSwt14o7GvWpwhCzviZ5vJN1Ao3Q8Q= Subject key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584221842306FA04090A424AC700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Jun 2023 15:33:11 +0000 Certificate not after: Tue 19 Aug 2025 15:47:55 +0000 Subordinate resources: AS: 22296 IP: 23.155.8.0/24 IP: 2602:2e5::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:21:84:23:06:fa:04:09:0a:42:4a:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 6 15:33:11 2023 GMT Not After : Aug 19 15:47:55 2025 GMT Subject: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0f:ba:c8:fb:e9:87:14:4c:41:88:01:54:9a: 69:53:6c:c0:0e:84:7a:86:5d:38:c6:f1:41:ed:38: bc:7a:74:e8:28:37:7b:ca:39:33:ad:1d:61:c7:74: 74:b4:d5:e7:f9:00:ab:a0:7a:ac:22:53:f4:3d:b5: 36:d0:03:76:29:c9:05:c1:e6:23:e3:e1:db:50:4c: b6:65:29:7e:a5:ec:54:93:c0:a8:0d:bb:c5:c7:36: 75:f0:d7:1b:ae:62:90:b2:c3:30:ae:6a:7e:83:89: ce:f1:c7:1b:ce:9e:fe:ba:12:75:b5:2b:c2:55:b4: 3a:52:4f:79:40:77:36:91:0e:05:d9:8c:e1:1c:54: bd:6b:a2:29:2e:18:1c:7e:79:d4:5a:18:f5:4a:ac: 86:ba:e5:37:a2:c4:6a:29:ce:f4:8e:0f:d8:61:4e: d0:11:56:c5:0a:08:88:c4:72:8f:1b:c3:59:50:ac: 56:58:41:5c:d1:82:1b:16:05:ce:35:3a:77:9c:a2: 4b:d4:04:4e:06:b7:4a:d2:0a:d1:29:dd:b2:1f:9a: 9a:3e:87:05:df:84:93:30:f1:55:06:ff:13:60:fd: 3c:e2:e1:44:5f:c6:64:db:78:04:fe:e9:2e:9b:a4: 87:94:c4:c8:6c:ec:48:36:54:8f:bb:75:35:3f:88: 19:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.155.8.0/24 IPv6: 2602:2e5::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22296 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:23:bb:05:e2:52:a2:c7:0d:27:a7:63:ae:b7:6c:72:d2:a9: 03:36:4a:d0:1f:d2:cb:26:a4:ef:22:08:12:2a:b1:0c:07:2c: 11:29:7a:93:4f:25:07:09:bc:09:3c:f2:40:c0:57:85:a3:c1: 0d:3c:43:22:8d:72:be:17:cb:6d:42:82:53:8e:0d:53:0d:19: b8:0f:7f:a0:96:cb:0a:92:1f:f0:c5:4f:14:93:d2:2f:35:cf: 73:0a:59:5a:bd:7f:23:94:5b:ee:6d:6b:dd:b5:29:ca:89:1b: c7:cd:75:a5:29:44:c8:5e:e2:7b:2d:ad:9b:fc:36:6f:b3:98: 28:99:49:a9:43:82:c4:d9:32:b6:4e:9c:c2:96:a7:a6:a3:3d: 68:13:c1:04:dd:dd:33:67:3d:c5:e2:bc:af:0d:96:45:6b:cf: 5c:a1:c5:b1:09:fd:e9:7b:42:b6:63:18:7b:a7:30:89:37:84: 14:6c:90:b9:57:35:ef:3a:34:96:e7:09:d3:d0:a6:a8:35:af: 46:0d:46:05:f1:ec:2c:3b:08:8b:e8:1b:b4:52:5a:0c:cb:c4: 97:a5:85:f4:16:4d:4e:2d:9b:6a:70:05:26:06:7a:09:80:0d: de:17:af:86:18:d2:46:53:7f:61:96:02:9b:35:85:57:d4:d6: 9d:c1:fa:d3 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEIhhCMG+gQJCkJKxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDYwNjE1MzMxMVoXDTI1MDgxOTE1NDc1NVowLzEtMCsGA1UEAxMk NTQyOTNjZDItMWQ4Yy00M2YyLTkwYjgtYzdmZDhiMWMyZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA+6yPvphxRMQYgBVJppU2zADoR6hl04xvFB 7Ti8enToKDd7yjkzrR1hx3R0tNXn+QCroHqsIlP0PbU20AN2KckFweYj4+HbUEy2 ZSl+pexUk8CoDbvFxzZ18NcbrmKQssMwrmp+g4nO8ccbzp7+uhJ1tSvCVbQ6Uk95 QHc2kQ4F2YzhHFS9a6IpLhgcfnnUWhj1SqyGuuU3osRqKc70jg/YYU7QEVbFCgiI xHKPG8NZUKxWWEFc0YIbFgXONTp3nKJL1AROBrdK0grRKd2yH5qaPocF34STMPFV Bv8TYP084uFEX8Zk23gE/ukum6SHlMTIbOxINlSPu3U1P4gZJQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFNlUOn4GfESFdmmrFl+H0NRZtjMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81 NDI5M2NkMi0xZDhjLTQzZjItOTBiOC1jN2ZkOGIxYzJlZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzU0MjkzY2QyLTFkOGMtNDNmMi05 MGI4LWM3ZmQ4YjFjMmVmYi81NDI5M2NkMi0xZDhjLTQzZjItOTBiOC1jN2ZkOGIx YzJlZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmwgwDgQCAAIwCAMGBCYCAuUAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlcYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGsjuwXiUqLHDSenY663bHLSqQM2 StAf0ssmpO8iCBIqsQwHLBEpepNPJQcJvAk88kDAV4WjwQ08QyKNcr4Xy21CglOO DVMNGbgPf6CWywqSH/DFTxST0i81z3MKWVq9fyOUW+5ta921KcqJG8fNdaUpRMhe 4nstrZv8Nm+zmCiZSalDgsTZMrZOnMKWp6ajPWgTwQTd3TNnPcXivK8NlkVrz1yh xbEJ/el7QrZjGHunMIk3hBRskLlXNe86NJbnCdPQpqg1r0YNRgXx7Cw7CIvoG7RS WgzLxJelhfQWTU4tm2pwBSYGegmADd4Xr4YY0kZTf2GWAps1hVfU1p3B+tM= -----END CERTIFICATE-----Generated at Wed May 1 16:33:26 2024 by rpki-client on console-fra.rpki-client.org