$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer File: 6be678b8-74cc-4a67-8700-5a07f5c20f62.cer (raw, json) Hash identifier: KyajMh4AdmsrycN5wVunYXxCLWE382GBFkJY7w3KHfg= Subject key identifier: 07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858453045B603A63195F40DB38180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Mar 2024 00:45:20 +0000 Certificate not after: Tue 16 Jun 2026 00:45:20 +0000 Subordinate resources: IP: 204.81.0.0 -- 204.82.255.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:30:45:b6:03:a6:31:95:f4:0d:b3:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 13 00:45:20 2024 GMT Not After : Jun 16 00:45:20 2026 GMT Subject: CN=6be678b8-74cc-4a67-8700-5a07f5c20f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:c7:0d:4a:3d:84:af:c2:bf:d9:f1:d8:9c: 3c:26:8c:a6:f6:ce:47:30:d8:db:e6:ab:a2:80:4b: de:86:04:e9:46:00:09:cd:11:cf:3d:93:36:46:15: a1:d4:e5:b2:a4:6e:f3:12:d2:81:b4:65:cf:2b:1d: d6:42:63:3f:89:ab:b6:6f:b0:69:f1:15:36:68:9d: 86:c7:2f:57:c2:73:ad:22:68:8a:c1:b3:9d:a9:a0: cd:55:6d:bf:01:1f:f9:f3:eb:81:e9:ae:09:30:a3: 23:0d:34:20:32:c3:39:7f:5b:c0:cf:98:a7:68:93: 68:b0:70:7d:11:32:84:58:73:cc:5f:01:fa:18:c3: ec:a7:dd:04:59:3a:0b:fa:c6:bf:5e:6f:9f:ac:84: 9b:75:5f:80:74:5c:d1:5d:18:46:0f:75:d0:b7:7b: 6d:10:c1:8e:85:1f:9b:58:7f:42:67:84:1c:e6:b8: 74:ef:62:2a:c5:d2:95:b8:7b:b4:76:c5:88:ea:34: fd:a7:7e:24:3c:42:d1:d3:25:d2:1c:11:1c:96:d8: 4f:09:b9:83:99:92:9d:40:06:17:6c:46:31:9f:dd: f9:8a:62:ba:40:5f:04:a3:3c:47:00:04:49:eb:1c: 59:13:d8:68:03:be:74:68:78:dd:94:c5:99:bf:91: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.81.0.0-204.82.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:96:2e:8a:85:26:78:73:ab:fd:de:d0:4b:c9:a0:25:77:1d: 04:36:45:19:b9:8e:ce:e3:21:8f:3d:0a:51:2d:03:83:92:8d: db:57:68:dd:d2:d0:11:10:ce:41:d8:a1:50:6f:5e:ab:55:3c: 01:57:c7:58:b1:b9:cf:10:c3:7b:65:a8:fc:e5:a6:ec:2d:d8: 1a:fd:2c:1b:25:2e:32:a7:e5:b2:f2:fe:05:27:e4:db:47:ff: 51:c7:f5:88:11:75:57:72:59:dc:cd:1c:7c:8b:89:03:f5:65: 99:01:19:c3:96:88:fc:2f:fb:fb:5d:73:6f:a7:4f:10:10:b3: 7b:18:21:fc:d4:d6:3b:eb:0f:13:16:d0:0b:f7:fa:fe:b5:f7: 13:b4:c9:8c:91:2a:1e:83:fa:68:74:2d:b9:2d:f3:ed:0a:84: 91:ca:18:89:86:8e:e5:4a:24:30:8b:55:96:c8:f9:ff:9a:ee: fd:10:81:39:86:db:67:7d:53:d7:81:47:b1:98:c6:f9:9c:28: de:bb:7d:a6:59:0d:a6:6f:0c:f7:37:e2:ae:e8:9a:04:c2:3d: a1:e6:09:7f:73:2e:12:19:34:f8:93:65:17:de:7f:29:9f:7a: 6f:21:88:f3:42:4b:37:5e:cd:39:4f:9f:47:dd:eb:44:5f:2f: b4:09:c3:1c -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEUwRbYDpjGV9A2zgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDMxMzAwNDUyMFoXDTI2MDYxNjAwNDUyMFowLzEtMCsGA1UEAxMk NmJlNjc4YjgtNzRjYy00YTY3LTg3MDAtNWEwN2Y1YzIwZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtXHDUo9hK/Cv9nx2Jw8Joym9s5HMNjb5qui gEvehgTpRgAJzRHPPZM2RhWh1OWypG7zEtKBtGXPKx3WQmM/iau2b7Bp8RU2aJ2G xy9XwnOtImiKwbOdqaDNVW2/AR/58+uB6a4JMKMjDTQgMsM5f1vAz5inaJNosHB9 ETKEWHPMXwH6GMPsp90EWToL+sa/Xm+frISbdV+AdFzRXRhGD3XQt3ttEMGOhR+b WH9CZ4Qc5rh072IqxdKVuHu0dsWI6jT9p34kPELR0yXSHBEclthPCbmDmZKdQAYX bEYxn935imK6QF8EozxHAARJ6xxZE9hoA750aHjdlMWZv5HiPQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFAcVodgpC+FiU3b0DDvjRIXujNGKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 YmU2NzhiOC03NGNjLTRhNjctODcwMC01YTA3ZjVjMjBmNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZiZTY3OGI4LTc0Y2MtNGE2Ny04 NzAwLTVhMDdmNWMyMGY2Mi82YmU2NzhiOC03NGNjLTRhNjctODcwMC01YTA3ZjVj MjBmNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwwCgMDAMxRAwMAzFIwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS5YuioUmeHOr /d7QS8mgJXcdBDZFGbmOzuMhjz0KUS0Dg5KN21do3dLQERDOQdihUG9eq1U8AVfH WLG5zxDDe2Wo/OWm7C3YGv0sGyUuMqflsvL+BSfk20f/Ucf1iBF1V3JZ3M0cfIuJ A/VlmQEZw5aI/C/7+11zb6dPEBCzexgh/NTWO+sPExbQC/f6/rX3E7TJjJEqHoP6 aHQtuS3z7QqEkcoYiYaO5UokMItVlsj5/5ru/RCBOYbbZ31T14FHsZjG+Zwo3rt9 plkNpm8M9zfiruiaBMI9oeYJf3MuEhk0+JNlF95/KZ96byGI80JLN17NOU+fR93r RF8vtAnDHA== -----END CERTIFICATE-----Generated at Wed May 1 16:33:27 2024 by rpki-client on console-fra.rpki-client.org