$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer File: 693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer (raw, json) Hash identifier: E3KhaaEXDUDDKysGEPHwF+t2P2UN4sBp5es/qNN3sg4= Subject key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285841E4834FFE3894C701A1AD2A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sun 06 Jul 2025 19:06:39 +0000 Subordinate resources: IP: 72.250.176.0/20 IP: 2607:19c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4f:fe:38:94:c7:01:a1:ad:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 6 19:06:39 2025 GMT Subject: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:72:7b:e5:57:bb:cc:96:9e:19:f3:0b:f3: 52:b6:d8:cf:32:f9:54:96:a6:67:a6:17:2d:91:f6: ca:02:aa:fc:03:6b:2a:c0:ab:1c:4f:06:5a:24:ba: c8:7a:bd:ce:c5:e9:94:78:f5:cd:40:8a:d6:94:3a: 7a:f7:db:1b:13:66:4b:45:6d:b3:07:17:49:ce:f0: 4a:4f:96:d8:f0:f0:a2:ac:05:66:28:f6:38:8a:ab: 99:34:32:b9:db:51:5e:17:fe:18:63:6d:0c:ce:6b: 9f:68:24:9f:f1:a0:e7:36:e6:c7:11:ba:3b:39:85: 7c:6d:eb:1d:a0:33:37:fa:3d:b4:0e:1d:a6:34:92: ee:84:72:7f:f1:0a:7b:c1:e4:cf:de:9a:a1:c0:bc: 45:4a:80:d3:1d:de:3b:f4:12:d3:13:bf:04:6a:9f: 3b:5a:5c:02:bf:d0:38:46:a7:33:36:71:b7:6a:43: 8b:a3:fc:34:93:13:d8:e2:eb:c6:4b:95:e2:7d:f2: 97:1e:23:5e:e5:4c:96:cd:2b:2c:92:a4:68:05:10: 28:e3:18:d0:75:97:ec:f3:f0:5e:2d:03:9e:08:09: 30:d1:70:70:8f:0a:ab:aa:37:dd:50:49:9b:19:bd: ab:bd:ca:db:aa:58:aa:2f:8d:e7:49:3d:43:05:8b: 82:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 72.250.176.0/20 IPv6: 2607:19c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:59:e4:d4:5d:b7:0a:09:4b:a9:5f:69:48:9f:dd:ae:e0:3e: 40:b1:67:0b:02:db:13:a5:29:9f:cb:89:09:8f:af:7e:ee:69: ea:8b:91:e5:ae:98:d4:fa:3b:a8:91:a7:8b:cc:5e:14:ed:ef: de:91:a6:f4:e1:a5:a3:a2:62:9e:45:a0:90:2a:32:aa:5d:a2: b9:cf:d2:c8:90:c1:3b:61:43:bf:d1:15:7e:9c:1e:0d:d7:ed: 2f:f7:64:37:bc:b6:b5:2c:17:3b:34:ab:39:89:bc:94:42:90: 01:30:fa:e2:4e:6c:84:ba:e2:31:af:e5:4e:28:10:9c:9d:f3: 47:38:41:69:24:34:4f:30:6c:a4:5c:39:b4:a8:04:8a:3b:bb: 1b:60:f9:e6:dc:02:38:03:c0:37:11:44:7b:f5:bd:e8:9a:1a: b7:5a:a7:f3:3b:22:74:46:73:48:eb:3b:8e:91:4e:dd:8e:51: da:2b:fc:a6:75:41:7b:15:6f:ba:9e:02:ad:97:5c:e4:4f:03: 3a:87:78:f2:4d:59:07:3e:65:fc:08:e2:f3:b8:02:87:68:79: 5f:d5:57:bc:ea:8e:9e:80:e9:20:8c:1d:00:9d:db:62:6b:11: a3:b5:c9:84:08:af:1a:1f:80:07:5f:24:71:fd:60:74:70:6b: 4a:ca:ed:c8 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEHkg0/+OJTHAaGtKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcwNjE5MDYzOVowLzEtMCsGA1UEAxMk NjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4ZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0tye+VXu8yWnhnzC/NSttjPMvlUlqZnphct kfbKAqr8A2sqwKscTwZaJLrIer3OxemUePXNQIrWlDp699sbE2ZLRW2zBxdJzvBK T5bY8PCirAVmKPY4iquZNDK521FeF/4YY20MzmufaCSf8aDnNubHEbo7OYV8besd oDM3+j20Dh2mNJLuhHJ/8Qp7weTP3pqhwLxFSoDTHd479BLTE78Eap87WlwCv9A4 RqczNnG3akOLo/w0kxPY4uvGS5XiffKXHiNe5UyWzSsskqRoBRAo4xjQdZfs8/Be LQOeCAkw0XBwjwqrqjfdUEmbGb2rvcrbqliqL43nST1DBYuC2wIDAQABo4IEDjCC BAowHQYDVR0OBBYEFAQ7kSZDWuU9uSE1vxjGNtDanUGnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzY5M2JmNzcyLWIxYzItNGYyZi05 NzZjLTUyOGI2ZjFkOGUxNi82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYx ZDhlMTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARI+rAwDQQCAAIwBwMFACYHGcAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA Rlnk1F23CglLqV9pSJ/druA+QLFnCwLbE6Upn8uJCY+vfu5p6ouR5a6Y1Po7qJGn i8xeFO3v3pGm9OGlo6JinkWgkCoyql2iuc/SyJDBO2FDv9EVfpweDdftL/dkN7y2 tSwXOzSrOYm8lEKQATD64k5shLriMa/lTigQnJ3zRzhBaSQ0TzBspFw5tKgEiju7 G2D55twCOAPANxFEe/W96Joat1qn8zsidEZzSOs7jpFO3Y5R2iv8pnVBexVvup4C rZdc5E8DOod48k1ZBz5l/Aji87gCh2h5X9VXvOqOnoDpIIwdAJ3bYmsRo7XJhAiv Gh+AB18kcf1gdHBrSsrtyA== -----END CERTIFICATE-----Generated at Wed May 1 12:32:31 2024 by rpki-client on console-ams.rpki-client.org