$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer File: 73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer (raw, json) Hash identifier: z2OYpaor1y2+z5ULBkKVI7cauVKG3m/th/rlE1ZQFoQ= Subject key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858420702910343E7AEABCFEA9080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 May 2023 03:41:05 +0000 Certificate not after: Sat 30 Aug 2025 03:41:05 +0000 Subordinate resources: AS: 14397 AS: 393545 IP: 65.49.128.0/23 IP: 65.49.149.0/24 IP: 104.251.113.0 -- 104.251.118.255 IP: 104.251.121.0/24 IP: 104.251.124.0/22 IP: 2605:c180::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:07:02:91:03:43:e7:ae:ab:cf:ea:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 28 03:41:05 2023 GMT Not After : Aug 30 03:41:05 2025 GMT Subject: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a0:e8:2e:bd:66:5b:93:e3:44:4c:b3:b0:80: 2a:91:72:93:05:b0:03:06:f1:bf:3b:4a:7a:86:a8: df:74:b7:29:02:50:82:0c:b1:11:f7:6d:91:9e:0b: 9c:14:ad:48:b4:3c:d0:f6:87:79:5f:2a:51:69:b5: be:a1:ff:a8:fc:c5:de:3e:9e:09:bf:a1:c4:2c:ec: 68:62:04:0c:eb:40:52:d1:5b:a0:46:fa:ab:bd:54: 1f:98:3d:e7:0f:16:07:42:08:ee:bb:90:28:fc:db: 15:2b:03:11:c1:e0:a1:b5:ef:d7:c1:6a:3a:13:f7: 92:b5:93:21:5d:d0:99:e8:f9:73:c5:28:57:8e:79: 52:fa:94:7d:1b:85:c8:fb:97:49:44:82:05:d7:ad: 1b:81:00:71:81:9e:9e:f9:06:8b:41:5c:ca:6a:4c: 13:ac:9e:9d:27:39:29:85:f3:e9:43:2b:9e:a8:5b: 09:27:5d:5f:e9:0e:9e:7f:1d:ec:02:d4:13:65:42: 9e:1c:b7:4e:f4:43:48:13:87:c8:f4:10:2b:bb:a1: dd:5c:42:65:c2:e8:e7:9a:6d:0c:f0:10:5e:23:74: e9:e3:37:c1:cf:d2:6f:77:61:0b:11:0c:2c:29:23: f7:41:11:d1:5d:01:67:5b:79:ee:2f:66:34:30:60: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 65.49.128.0/23 65.49.149.0/24 104.251.113.0-104.251.118.255 104.251.121.0/24 104.251.124.0/22 IPv6: 2605:c180::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14397 393545 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1f:34:76:f0:c3:26:cd:4e:7b:3b:c1:c9:c9:84:89:aa:0f: 4d:c0:81:a4:0c:3a:8b:3f:b9:53:6c:10:b8:ed:ab:58:78:a2: 19:fb:05:71:2a:84:e2:da:21:a6:e6:b5:54:40:66:e6:19:16: d2:5f:f4:f5:26:95:a5:48:9b:7a:5e:13:ff:91:a9:76:c3:0c: ce:5f:16:23:33:b5:54:69:ca:0d:ac:15:d4:e6:65:e2:79:b8: 8b:ee:88:0a:2b:18:73:d7:e9:80:64:27:15:1f:c5:c0:2d:47: 20:a3:55:86:27:80:e1:f0:b1:4d:2d:95:eb:d1:47:d1:59:0c: 37:22:f3:05:83:ec:55:ae:24:b4:d3:d5:54:b0:a3:9b:80:d8: 02:e7:53:15:f1:27:55:aa:7a:87:9c:c1:46:29:07:3e:7f:97: 5a:76:35:4f:22:5e:ae:99:69:fe:91:3a:1e:78:54:f1:46:63: f5:78:37:c6:19:c4:14:0a:ba:f9:7b:b0:a3:02:e8:02:5c:45: 59:ad:be:89:2e:cd:dd:a7:13:70:5b:89:8f:b3:00:d0:69:8a: 2d:e9:c9:c7:f1:a3:0e:64:fe:e0:35:8f:90:7c:01:74:84:31: 21:34:ee:46:bd:e3:e5:aa:04:bf:06:df:2c:ed:81:d4:49:c8: 83:42:0b:f5 -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWEIHApEDQ+euq8/qkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUyODAzNDEwNVoXDTI1MDgzMDAzNDEwNVowLzEtMCsGA1UEAxMk NzNkMmRiYWUtM2YxYS00ZDllLTllMDEtZjdlZjI1MGY1NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6DoLr1mW5PjREyzsIAqkXKTBbADBvG/O0p6 hqjfdLcpAlCCDLER922RngucFK1ItDzQ9od5XypRabW+of+o/MXePp4Jv6HELOxo YgQM60BS0VugRvqrvVQfmD3nDxYHQgjuu5Ao/NsVKwMRweChte/XwWo6E/eStZMh XdCZ6PlzxShXjnlS+pR9G4XI+5dJRIIF160bgQBxgZ6e+QaLQVzKakwTrJ6dJzkp hfPpQyueqFsJJ11f6Q6efx3sAtQTZUKeHLdO9ENIE4fI9BAru6HdXEJlwujnmm0M 8BBeI3Tp4zfBz9Jvd2ELEQwsKSP3QRHRXQFnW3nuL2Y0MGD9swIDAQABo4IETzCC BEswHQYDVR0OBBYEFATxDtxgzwB+QDJedxWZ174F8gYOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 M2QyZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2VmMjUwZjU1ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzczZDJkYmFlLTNmMWEtNGQ5ZS05 ZTAxLWY3ZWYyNTBmNTVlZi83M2QyZGJhZS0zZjFhLTRkOWUtOWUwMS1mN2VmMjUw ZjU1ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTwYIKwYBBQUH AQcBAf8EQDA+MCwEAgABMCYDBAFBMYADBABBMZUwDAMEAGj7cQMEAGj7dgMEAGj7 eQMEAmj7fDAOBAIAAjAIAwYEJgXBgAAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC OD0CAwYBSTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBRHzR28MMmzU57O8HJyYSJqg9NwIGkDDqLP7lTbBC4 7atYeKIZ+wVxKoTi2iGm5rVUQGbmGRbSX/T1JpWlSJt6XhP/kal2wwzOXxYjM7VU acoNrBXU5mXiebiL7ogKKxhz1+mAZCcVH8XALUcgo1WGJ4Dh8LFNLZXr0UfRWQw3 IvMFg+xVriS009VUsKObgNgC51MV8SdVqnqHnMFGKQc+f5dadjVPIl6umWn+kToe eFTxRmP1eDfGGcQUCrr5e7CjAugCXEVZrb6JLs3dpxNwW4mPswDQaYot6cnH8aMO ZP7gNY+QfAF0hDEhNO5GvePlqgS/Bt8s7YHUSciDQgv1 -----END CERTIFICATE-----Generated at Wed May 1 15:59:58 2024 by rpki-client on console-ams.rpki-client.org