$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192.cer File: 8583e379-1578-4044-8426-ddcb4a4a8192.cer (raw, json) Hash identifier: iL7LIcjwY8eM+MdF4XaEd7VPnsgAwF0D/XsO3bBAaaI= Subject key identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285844BCAE929976443F14B7963D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 31 Jan 2024 15:02:51 +0000 Certificate not after: Tue 05 May 2026 14:02:51 +0000 Subordinate resources: AS: 64200 IP: 67.21.32.0/22 IP: 192.154.192.0/19 IP: 192.154.232.0 -- 192.154.255.255 IP: 199.188.88.0/21 IP: 2604:8180::/31 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:bc:ae:92:99:76:44:3f:14:b7:96:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jan 31 15:02:51 2024 GMT Not After : May 5 14:02:51 2026 GMT Subject: CN=8583e379-1578-4044-8426-ddcb4a4a8192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:55:27:04:4f:ae:58:e6:77:88:33:66:c8: 17:69:80:1e:c7:97:fe:d8:ed:5d:7b:4f:3b:4d:54: 55:cc:1e:ab:fc:96:b0:35:87:31:d6:a1:f7:30:6a: 52:5b:69:3b:80:4b:cd:c5:7a:3e:2c:33:3a:18:ad: 6e:81:8c:b9:99:11:fc:6d:da:8d:d6:a0:d0:3e:7d: 7c:4f:6b:e7:86:10:db:67:ca:46:94:70:1a:9d:bb: 55:f7:2d:ec:e2:19:63:dd:ca:0e:07:dc:bd:00:a3: 62:78:95:ec:9e:97:38:65:38:16:2a:27:9c:0a:c1: 00:79:94:86:ff:65:61:2f:8d:3d:66:50:ad:8a:90: 6a:53:05:2f:84:19:50:df:c1:d3:ed:d6:5b:93:f9: d2:e0:84:a7:57:9a:c6:5b:26:69:6e:20:1a:20:a2: 70:78:cc:cc:d4:d1:94:5f:ac:d7:7c:9d:10:e0:79: 48:e4:4d:2a:76:2c:6d:c2:65:12:5d:b3:8c:bb:c4: fe:7a:47:fe:36:e8:92:89:6f:c4:b9:f8:f9:41:fe: 7c:98:66:98:a9:89:a0:b2:ad:13:22:ab:69:83:55: 2e:89:ae:67:41:4a:e9:f5:05:b8:01:a1:c0:c2:15: e8:71:5d:87:80:48:21:b6:85:20:69:a9:8f:87:ec: be:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C7:5F:3F:CE:A7:5D:0D:C3:10:F9:23:2C:65:92:27:0C:63:1D:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8583e379-1578-4044-8426-ddcb4a4a8192/8583e379-1578-4044-8426-ddcb4a4a8192.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 67.21.32.0/22 192.154.192.0/19 192.154.232.0-192.154.255.255 199.188.88.0/21 IPv6: 2604:8180::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64200 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:17:2f:f7:d2:65:bd:bc:13:b9:a9:80:44:a7:f4:9f:73:32: 2e:37:d2:34:26:92:d8:e8:eb:46:83:3a:d8:63:5e:62:c2:30: f8:79:5d:ac:40:8a:32:c8:24:52:31:9e:00:53:61:40:19:ca: a1:15:c0:8f:bb:00:b1:58:16:a4:89:9e:94:ea:09:79:a9:99: f2:38:6b:4e:64:3d:51:90:ef:21:4d:8f:1c:ce:60:1b:79:c7: 00:24:21:7c:af:be:ee:f8:86:c5:96:69:4e:8b:1a:f2:4a:91: fe:2e:59:30:9b:d6:db:f3:64:f4:b5:8d:3c:ee:2c:de:ba:04: e9:eb:e0:80:77:d8:b2:57:b4:a9:a9:a6:c6:54:b2:5f:36:77: 0a:fa:16:17:fa:36:82:77:21:01:a3:0f:01:00:c8:8b:f6:c4: 0c:22:5d:00:f3:74:72:79:d8:01:8d:34:25:e2:e0:a4:f3:d7: 44:54:96:e6:6f:a7:72:05:88:fd:9b:c1:01:71:d2:4f:a3:1a: 41:4c:08:1c:a6:e0:eb:e9:00:84:66:e9:d5:66:4c:53:c1:a7: 78:9a:61:75:56:ab:f1:51:0f:57:95:52:93:b1:b9:df:de:f1: 3a:0e:f5:96:4b:37:3c:39:39:f9:f1:a7:f6:15:8e:d3:c2:ce: 6b:6e:55:cb -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWES8rpKZdkQ/FLeWPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDEzMTE1MDI1MVoXDTI2MDUwNTE0MDI1MVowLzEtMCsGA1UEAxMk ODU4M2UzNzktMTU3OC00MDQ0LTg0MjYtZGRjYjRhNGE4MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSJVJwRPrljmd4gzZsgXaYAex5f+2O1de087 TVRVzB6r/JawNYcx1qH3MGpSW2k7gEvNxXo+LDM6GK1ugYy5mRH8bdqN1qDQPn18 T2vnhhDbZ8pGlHAanbtV9y3s4hlj3coOB9y9AKNieJXsnpc4ZTgWKiecCsEAeZSG /2VhL409ZlCtipBqUwUvhBlQ38HT7dZbk/nS4ISnV5rGWyZpbiAaIKJweMzM1NGU X6zXfJ0Q4HlI5E0qdixtwmUSXbOMu8T+ekf+NuiSiW/Eufj5Qf58mGaYqYmgsq0T Iqtpg1Uuia5nQUrp9QW4AaHAwhXocV2HgEghtoUgaamPh+y+dwIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFInHXz/Op10NwxD5IyxlkicMYx1iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 NTgzZTM3OS0xNTc4LTQwNDQtODQyNi1kZGNiNGE0YTgxOTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg1ODNlMzc5LTE1NzgtNDA0NC04 NDI2LWRkY2I0YTRhODE5Mi84NTgzZTM3OS0xNTc4LTQwNDQtODQyNi1kZGNiNGE0 YTgxOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCUEAgABMB8DBAJDFSADBAXAmsAwCwMEA8Ca6AMDAMCaAwQDx7xY MA0EAgACMAcDBQEmBIGAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD6yDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCBFy/30mW9vBO5qYBEp/SfczIuN9I0JpLY6OtGgzrYY15iwjD4eV2sQIoy yCRSMZ4AU2FAGcqhFcCPuwCxWBakiZ6U6gl5qZnyOGtOZD1RkO8hTY8czmAbeccA JCF8r77u+IbFlmlOixrySpH+Llkwm9bb82T0tY087izeugTp6+CAd9iyV7SpqabG VLJfNncK+hYX+jaCdyEBow8BAMiL9sQMIl0A83RyedgBjTQl4uCk89dEVJbmb6dy BYj9m8EBcdJPoxpBTAgcpuDr6QCEZunVZkxTwad4mmF1VqvxUQ9XlVKTsbnf3vE6 DvWWSzc8OTn58af2FY7Tws5rblXL -----END CERTIFICATE-----Generated at Wed May 1 15:59:58 2024 by rpki-client on console-ams.rpki-client.org