$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer File: 747306d8-f469-4e78-a1fc-d958dfc4f31b.cer (raw, json) Hash identifier: nkNSNTuw0pETUCrL2Gr1V/kqHHqKjAHg6hyZQYUL62w= Subject key identifier: 3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285845245ADC00AF07EAEB33B1E780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Mar 2024 18:18:15 +0000 Certificate not after: Sat 01 Nov 2025 00:45:17 +0000 Subordinate resources: AS: 30581 IP: 23.147.232.0/24 IP: 23.163.8.0/24 IP: 2602:2a3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:24:5a:dc:00:af:07:ea:eb:33:b1:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 8 18:18:15 2024 GMT Not After : Nov 1 00:45:17 2025 GMT Subject: CN=747306d8-f469-4e78-a1fc-d958dfc4f31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:23:ba:59:98:4d:87:74:32:ae:7c:b9:5e: 18:6a:33:99:44:f9:0f:29:5d:34:03:ba:12:2f:60: fd:c7:a7:c0:4b:3f:5e:f7:2d:9b:14:48:3f:ca:01: 27:67:d3:ab:45:49:53:40:3d:38:4c:8b:c3:f5:89: da:40:3c:30:58:5f:c4:4a:1a:c0:0e:3d:4b:e1:ba: 01:d7:b0:63:9c:10:0a:39:42:f5:67:fc:20:36:12: f1:24:b5:bf:38:ab:8d:8c:c0:2e:93:f6:97:f7:0c: ef:6d:72:43:57:28:d4:1a:b7:51:2b:e6:b9:96:18: ea:be:5d:8c:3e:28:37:cf:5b:6a:c2:18:aa:5b:05: b8:dc:db:47:2c:cf:dc:1c:71:6a:5d:8b:8c:4f:35: 9c:10:92:19:84:14:47:e8:9f:1c:51:fa:3f:26:cf: 62:87:f4:34:b9:59:90:56:4e:e3:be:da:e5:33:ed: 07:33:78:54:c6:eb:f7:74:29:fe:55:1d:30:8d:5a: e6:1c:8d:19:30:31:af:71:89:a8:ce:a5:22:3c:f0: 14:7d:a0:d1:51:b0:dd:d0:3a:14:f6:eb:32:8d:56: f2:23:8a:4e:63:03:aa:85:f1:1b:64:40:5c:f7:49: 49:0b:89:30:ae:45:68:7c:03:cf:f0:68:1f:4c:a8: 0f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.147.232.0/24 23.163.8.0/24 IPv6: 2602:2a3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30581 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:10:97:e5:0b:e2:80:b7:e1:45:54:d6:fb:a8:6e:e9:b4:4c: 63:1a:b1:95:41:71:8f:64:f0:db:3c:a2:4a:73:bf:99:bb:37: 4c:df:5e:6e:a8:c7:01:6e:68:08:fd:5a:2c:83:ad:bc:6e:fa: f3:25:50:eb:b4:ec:d7:27:4d:b9:d7:e4:f5:36:91:f3:65:80: 95:f5:d9:85:b3:a2:1c:f8:47:68:0f:aa:5a:13:40:4d:22:b7: 70:5f:e8:dd:e6:9f:b8:f0:98:27:47:64:35:55:0c:26:99:54: 81:e9:9f:49:66:e8:07:ea:0c:0b:3f:22:b7:52:48:da:b8:ce: 48:bf:32:cb:4f:6f:86:66:4d:c5:9c:76:1b:65:d4:e8:5e:60: 50:64:cb:df:25:54:4d:64:46:9a:ee:24:4e:ab:2f:ba:ed:8a: b0:4d:03:9e:68:d0:53:c3:27:0c:22:11:1e:34:86:7d:18:bb: c4:b7:e1:24:05:00:ff:88:52:b9:76:f5:48:f3:06:53:1a:17: 07:e7:02:41:7e:12:35:c0:28:9d:24:7d:e7:ec:84:14:a3:09: f3:bd:f3:32:0f:92:28:91:10:b2:4a:b9:95:fa:7a:b6:32:07: 40:15:9e:f2:d4:51:4b:5c:3e:36:19:90:c8:ae:bd:35:57:de: f7:e6:bd:ca -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEUkWtwArwfq6zOx54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDMwODE4MTgxNVoXDTI1MTEwMTAwNDUxN1owLzEtMCsGA1UEAxMk NzQ3MzA2ZDgtZjQ2OS00ZTc4LWExZmMtZDk1OGRmYzRmMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnMjulmYTYd0Mq58uV4YajOZRPkPKV00A7oS L2D9x6fASz9e9y2bFEg/ygEnZ9OrRUlTQD04TIvD9YnaQDwwWF/EShrADj1L4boB 17BjnBAKOUL1Z/wgNhLxJLW/OKuNjMAuk/aX9wzvbXJDVyjUGrdRK+a5lhjqvl2M Pig3z1tqwhiqWwW43NtHLM/cHHFqXYuMTzWcEJIZhBRH6J8cUfo/Js9ih/Q0uVmQ Vk7jvtrlM+0HM3hUxuv3dCn+VR0wjVrmHI0ZMDGvcYmozqUiPPAUfaDRUbDd0DoU 9usyjVbyI4pOYwOqhfEbZEBc90lJC4kwrkVofAPP8GgfTKgPowIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFDprxPOoftRGHjXcxVhjSq6KtpSsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83 NDczMDZkOC1mNDY5LTRlNzgtYTFmYy1kOTU4ZGZjNGYzMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzc0NzMwNmQ4LWY0NjktNGU3OC1h MWZjLWQ5NThkZmM0ZjMxYi83NDczMDZkOC1mNDY5LTRlNzgtYTFmYy1kOTU4ZGZj NGYzMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXk+gDBAAXowgwDgQCAAIwCAMGBCYCAqMAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnd1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABsQl+UL4oC34UVU1vuo bum0TGMasZVBcY9k8Ns8okpzv5m7N0zfXm6oxwFuaAj9WiyDrbxu+vMlUOu07Ncn TbnX5PU2kfNlgJX12YWzohz4R2gPqloTQE0it3Bf6N3mn7jwmCdHZDVVDCaZVIHp n0lm6AfqDAs/IrdSSNq4zki/MstPb4ZmTcWcdhtl1OheYFBky98lVE1kRpruJE6r L7rtirBNA55o0FPDJwwiER40hn0Yu8S34SQFAP+IUrl29UjzBlMaFwfnAkF+EjXA KJ0kfefshBSjCfO98zIPkiiRELJKuZX6erYyB0AVnvLUUUtcPjYZkMiuvTVX3vfm vco= -----END CERTIFICATE-----Generated at Wed May 1 12:32:34 2024 by rpki-client on console-ams.rpki-client.org