$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer File: 86906b9d-26ff-4ce8-b900-62739db43657.cer (raw, json) Hash identifier: tz+uupeqvz3T88jGS/sc/rwe5+1j7FsYx41ThRJAWiw= Subject key identifier: 5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285842414BACF14E6D658F0D96EBA8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 18 Jun 2023 00:45:17 +0000 Certificate not after: Sat 20 Sep 2025 00:45:17 +0000 Subordinate resources: AS: 33253 IP: 204.10.124.0/22 IP: 204.16.224.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:41:4b:ac:f1:4e:6d:65:8f:0d:96:eb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 18 00:45:17 2023 GMT Not After : Sep 20 00:45:17 2025 GMT Subject: CN=86906b9d-26ff-4ce8-b900-62739db43657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ed:15:85:a8:02:d5:4f:fc:da:6b:f9:13:5c: 19:cf:ed:1c:5c:d7:33:b6:94:6e:5e:a2:4e:7b:1a: 4a:b5:93:81:37:81:74:4a:12:75:25:d2:fb:37:b4: 5a:f7:d9:8d:4e:5d:dd:e2:84:e5:3a:83:75:84:c8: dc:53:49:a2:03:cc:2a:3f:48:9c:e6:81:fe:ab:5c: ea:8e:c9:c4:a2:24:a3:80:30:64:e4:c6:6d:42:4e: 4f:c5:af:76:a8:c3:7d:be:9d:ab:ff:52:43:a4:03: 23:92:ef:7e:6a:1d:0c:fd:68:2e:5d:1f:54:68:1e: b0:4a:d4:02:6d:00:86:fe:4e:a8:e5:07:ce:27:76: 1e:f7:c6:92:f6:21:0a:7b:2a:88:f3:a3:8e:64:d2: 4e:20:02:5e:35:74:43:4e:07:07:c1:8a:50:91:85: 00:b5:32:1f:16:f9:75:0b:1f:b5:a5:64:d2:e5:4b: 37:06:c1:38:bd:b4:35:19:25:f6:62:d6:19:14:b6: 03:73:c5:45:70:11:45:68:db:ed:d7:84:dd:d6:9f: fb:7b:d2:bc:f8:ea:62:5a:b9:9a:bf:53:4a:2b:1b: b4:23:4b:13:0e:af:ea:82:6d:cc:84:3b:23:03:83: f3:5e:93:19:12:c2:d3:cc:0d:b1:86:c5:3d:94:7b: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.10.124.0/22 204.16.224.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33253 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:70:39:35:c3:65:23:74:45:33:2f:b9:d3:d2:ca:6b:5f:d7: 4b:61:7a:1b:54:bd:fd:ab:32:db:4e:16:ff:75:d2:91:97:e3: 0f:59:10:65:e9:b8:04:0b:61:6c:25:87:56:95:f5:d4:72:83: 0c:f7:4a:f3:a7:ec:12:bb:70:34:7a:3e:c7:0e:10:52:0a:ad: 7d:67:f3:79:fa:0a:45:2f:04:6a:e4:31:30:04:e0:e3:68:f7: aa:c9:1f:0c:65:0f:21:1a:3a:fe:33:d2:e6:b6:9d:89:15:07: f1:4a:84:7c:a7:fd:55:53:71:e6:1f:bb:48:81:18:fd:df:77: a6:82:f9:98:72:cc:d5:a9:80:7b:18:f3:c2:47:3e:32:ee:1d: e4:66:a4:aa:8b:47:3a:38:e4:7e:5c:d8:16:1d:a8:76:a9:d1: 2f:49:12:d4:b9:fe:2d:eb:74:9f:d2:59:c4:ac:e6:55:b1:2c: aa:9b:d8:80:0a:5c:9e:8c:13:b4:46:7c:67:a0:2e:93:e8:e0: 81:0a:72:aa:8a:46:ae:df:f4:d5:91:61:53:d7:60:f8:31:26: 50:f8:64:99:71:f0:a8:59:32:82:ca:cb:ca:d6:22:5e:f7:79: 86:8f:f0:02:b8:90:13:e3:98:b6:11:20:d4:64:7b:31:d0:29: c7:df:c1:6f -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEJBS6zxTm1ljw2W66gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDYxODAwNDUxN1oXDTI1MDkyMDAwNDUxN1owLzEtMCsGA1UEAxMk ODY5MDZiOWQtMjZmZi00Y2U4LWI5MDAtNjI3MzlkYjQzNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9u0VhagC1U/82mv5E1wZz+0cXNcztpRuXqJO expKtZOBN4F0ShJ1JdL7N7Ra99mNTl3d4oTlOoN1hMjcU0miA8wqP0ic5oH+q1zq jsnEoiSjgDBk5MZtQk5Pxa92qMN9vp2r/1JDpAMjku9+ah0M/WguXR9UaB6wStQC bQCG/k6o5QfOJ3Ye98aS9iEKeyqI86OOZNJOIAJeNXRDTgcHwYpQkYUAtTIfFvl1 Cx+1pWTS5Us3BsE4vbQ1GSX2YtYZFLYDc8VFcBFFaNvt14Td1p/7e9K8+OpiWrma v1NKKxu0I0sTDq/qgm3MhDsjA4PzXpMZEsLTzA2xhsU9lHvDaQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFFuU6G9ckwtZ8M+arAl5lc7tlj+hMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 NjkwNmI5ZC0yNmZmLTRjZTgtYjkwMC02MjczOWRiNDM2NTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg2OTA2YjlkLTI2ZmYtNGNlOC1i OTAwLTYyNzM5ZGI0MzY1Ny84NjkwNmI5ZC0yNmZmLTRjZTgtYjkwMC02MjczOWRi NDM2NTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALMCnwDBALMEOAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAIHlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFtwOTXDZSN0RTMvudPSymtf10thehtUvf2rMttO Fv910pGX4w9ZEGXpuAQLYWwlh1aV9dRygwz3SvOn7BK7cDR6PscOEFIKrX1n83n6 CkUvBGrkMTAE4ONo96rJHwxlDyEaOv4z0ua2nYkVB/FKhHyn/VVTceYfu0iBGP3f d6aC+ZhyzNWpgHsY88JHPjLuHeRmpKqLRzo45H5c2BYdqHap0S9JEtS5/i3rdJ/S WcSs5lWxLKqb2IAKXJ6ME7RGfGegLpPo4IEKcqqKRq7f9NWRYVPXYPgxJlD4ZJlx 8KhZMoLKy8rWIl73eYaP8AK4kBPjmLYRINRkezHQKcffwW8= -----END CERTIFICATE-----Generated at Wed May 1 16:33:29 2024 by rpki-client on console-fra.rpki-client.org