$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer File: 86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer (raw, json) Hash identifier: 0xBuVDRrTrVHHIhwBoR+6iM7AhAX9QA+4dC9DKFkPPE= Subject key identifier: 35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285844F02DC2900C5086E11C330700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 Feb 2024 01:45:20 +0000 Certificate not after: Sun 24 May 2026 00:45:20 +0000 Subordinate resources: IP: 47.191.0.0 -- 47.207.255.255 IP: 172.99.32.0/19 IP: 172.109.0.0/16 IP: 2606:4d80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f0:2d:c2:90:0c:50:86:e1:1c:33:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 19 01:45:20 2024 GMT Not After : May 24 00:45:20 2026 GMT Subject: CN=86e0b138-bef4-49fe-9dd1-fa51383dbfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:bf:4b:c4:64:e7:0f:cd:cc:f1:31:29:a1: 1b:90:9a:bb:1b:d8:01:c3:ef:71:e6:7c:99:c5:33: a6:7d:d1:1d:5e:3b:68:f8:a1:3b:45:2e:2e:ac:bb: 74:ba:38:2f:59:b7:b0:39:ea:01:84:97:73:2b:1c: 8a:94:1a:69:48:d8:8c:1d:80:dd:01:19:39:68:6c: 7f:19:15:86:6c:cb:42:f2:ed:c5:ed:78:c6:61:3b: ae:56:aa:9c:64:f5:2f:58:7d:1e:61:4b:82:ea:01: ef:3c:00:6e:ef:21:1d:4e:6a:25:d0:be:49:96:dc: 02:12:21:c5:41:c5:9f:fe:6f:1f:37:41:b8:a8:77: 71:66:eb:91:d4:9b:72:2a:03:45:04:47:87:3b:49: d4:01:a0:c2:1a:21:81:f2:ec:49:1f:2e:b9:a0:73: a9:f3:ce:06:cb:fb:33:d0:5a:77:1c:dd:0d:3e:b4: 93:ae:17:8b:cd:d7:91:5d:25:99:b9:41:e3:a0:f4: 71:1a:2b:10:20:27:b9:ba:96:69:3f:10:be:01:cc: a9:47:27:ef:17:a1:1c:33:0d:77:78:41:c6:5c:48: 9c:7a:38:25:16:4a:b2:bf:cd:92:86:39:a2:8a:df: ab:0c:ce:40:8c:d1:a7:2c:05:f5:d2:f0:ea:c2:a1: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 47.191.0.0-47.207.255.255 172.99.32.0/19 172.109.0.0/16 IPv6: 2606:4d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:2b:17:e3:e6:66:90:39:32:5b:29:5b:be:1a:cc:7f:a9:f1: a8:2f:3a:d5:5d:da:32:5e:b7:be:33:fd:4d:0d:3d:84:9c:f2: 70:f8:19:ad:01:82:86:98:5e:5a:e5:a9:df:50:06:c3:8f:b0: 68:7d:95:0c:65:ef:bd:a1:b3:67:4e:a0:df:62:5b:03:44:f2: 82:c0:cb:87:36:2d:0b:ce:a3:5c:14:5e:c8:84:ea:88:44:60: 68:63:3e:f8:73:6a:d4:bf:0b:44:f4:50:41:ca:1f:41:75:f0: 03:13:19:0c:65:00:7f:3b:1b:02:4f:83:80:94:4b:29:51:f8: cc:19:55:f5:61:c1:38:1a:65:56:2c:dd:28:6d:cc:f3:23:0b: 0c:01:36:c5:d1:0d:91:85:45:2f:69:eb:6d:88:80:25:fd:13: cb:0f:36:6d:25:84:1b:b6:a4:08:73:fa:e5:ad:c9:87:a6:5a: e2:63:4e:44:f7:6f:5f:9d:7c:a9:53:82:ce:d3:84:b0:9a:b8: 88:a2:52:21:46:4f:b8:77:86:e8:09:68:e5:0a:35:40:1e:bb: 6f:6a:1e:b4:ef:84:e5:e1:ac:02:f4:5c:75:e6:99:67:d4:e2: 7e:57:29:b8:b3:e9:e5:95:1d:48:3f:83:e4:f8:54:c3:0e:71: 2a:da:ec:ac -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWETwLcKQDFCG4RwzBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDIxOTAxNDUyMFoXDTI2MDUyNDAwNDUyMFowLzEtMCsGA1UEAxMk ODZlMGIxMzgtYmVmNC00OWZlLTlkZDEtZmE1MTM4M2RiZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBG/S8Rk5w/NzPExKaEbkJq7G9gBw+9x5nyZ xTOmfdEdXjto+KE7RS4urLt0ujgvWbewOeoBhJdzKxyKlBppSNiMHYDdARk5aGx/ GRWGbMtC8u3F7XjGYTuuVqqcZPUvWH0eYUuC6gHvPABu7yEdTmol0L5JltwCEiHF QcWf/m8fN0G4qHdxZuuR1JtyKgNFBEeHO0nUAaDCGiGB8uxJHy65oHOp884Gy/sz 0Fp3HN0NPrSTrheLzdeRXSWZuUHjoPRxGisQICe5upZpPxC+AcypRyfvF6EcMw13 eEHGXEicejglFkqyv82Shjmiit+rDM5AjNGnLAX10vDqwqEADwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFDVrFPTDF1+W/pkhRXtqsWBp/kYtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 NmUwYjEzOC1iZWY0LTQ5ZmUtOWRkMS1mYTUxMzgzZGJmY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05 ZGQxLWZhNTEzODNkYmZjZS84NmUwYjEzOC1iZWY0LTQ5ZmUtOWRkMS1mYTUxMzgz ZGJmY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMB0EAgABMBcwCgMDAC+/AwMEL8ADBAWsYyADAwCsbTANBAIAAjAH AwUAJgZNgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBaKxfj5maQOTJbKVu+Gsx/qfGoLzrVXdoyXre+M/1N DT2EnPJw+BmtAYKGmF5a5anfUAbDj7BofZUMZe+9obNnTqDfYlsDRPKCwMuHNi0L zqNcFF7IhOqIRGBoYz74c2rUvwtE9FBByh9BdfADExkMZQB/OxsCT4OAlEspUfjM GVX1YcE4GmVWLN0obczzIwsMATbF0Q2RhUUvaettiIAl/RPLDzZtJYQbtqQIc/rl rcmHplriY05E929fnXypU4LO04SwmriIolIhRk+4d4boCWjlCjVAHrtvah6074Tl 4awC9Fx15pln1OJ+Vym4s+nllR1IP4Pk+FTDDnEq2uys -----END CERTIFICATE-----Generated at Wed May 1 12:32:34 2024 by rpki-client on console-ams.rpki-client.org