$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer File: 9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer (raw, json) Hash identifier: 4264+YpFABg6YSrQdnr4ocKqem9rKUKN3nkWuy71hig= Subject key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B Authority key identifier: 35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D Certificate issuer: /CN=86e0b138-bef4-49fe-9dd1-fa51383dbfce Certificate serial: 010D0C9F43285841FF2FC6BC2B01107592E4D200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Thu 25 May 2023 08:25:43 +0000 Certificate not after: Wed 27 Aug 2025 08:25:43 +0000 Subordinate resources: IP: 47.191.0.0 -- 47.207.255.255 IP: 172.99.32.0/19 IP: 172.109.0.0/16 IP: 2606:4d80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:ff:2f:c6:bc:2b:01:10:75:92:e4:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86e0b138-bef4-49fe-9dd1-fa51383dbfce Validity Not Before: May 25 08:25:43 2023 GMT Not After : Aug 27 08:25:43 2025 GMT Subject: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:18:a2:cc:cf:5e:4e:1a:71:50:bc:d3:64: bc:e3:83:02:15:e1:fa:7b:10:0e:9a:3a:21:a6:1f: ba:d5:1e:71:34:c5:01:70:89:c9:fa:48:c5:0c:40: 4a:9a:94:db:56:a5:9c:5a:26:a2:85:2b:bb:ed:5a: 17:37:b4:59:cf:09:e5:e3:2e:5e:1f:8a:0e:34:ae: 81:81:0a:a3:9d:7f:7c:0a:8e:da:ff:b1:91:1b:dc: 0d:83:25:15:11:dc:80:38:44:97:5e:fa:09:0d:53: 9b:a6:be:e7:ca:ed:29:d4:ea:7c:2f:9d:fd:8e:de: 0f:3e:bd:40:dc:8f:fb:94:b5:65:e1:fc:09:b5:71: 92:dd:68:ee:e4:fa:5a:d6:c9:d6:95:23:38:a9:ab: 2d:95:05:c3:40:f3:56:74:b0:67:d0:d1:fb:30:3c: ce:bb:8f:2b:51:ee:0c:3d:3a:f6:08:29:7d:03:4e: 42:8f:80:0c:87:ec:81:80:da:ae:c8:00:ce:29:38: fe:3e:7e:ef:71:26:24:28:ba:da:7a:05:df:ae:e3: a1:90:f7:46:d5:b6:71:82:0d:d4:05:86:4d:f0:03: 5e:d3:d7:26:eb:81:f0:2e:47:51:a2:69:ed:1c:86: 0f:d2:39:f3:03:44:de:61:0e:89:1d:c6:8b:a7:b5: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl X509v3 Authority Key Identifier: keyid:35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer sbgp-ipAddrBlock: critical IPv4: 47.191.0.0-47.207.255.255 172.99.32.0/19 172.109.0.0/16 IPv6: 2606:4d80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:49:c3:8c:51:55:9e:f1:04:ad:a9:35:97:5f:78:e0:76:78: 7c:7d:61:51:2c:06:9c:b1:90:6c:f5:73:88:37:ea:57:99:8b: c3:b4:23:a5:cd:c6:9c:a7:73:f2:43:40:f8:04:20:79:1d:f5: 27:d9:dc:47:7c:04:0f:96:37:6d:96:9e:42:10:7a:3c:0c:2d: 01:4b:ab:69:c7:92:5d:58:1a:68:42:8d:b5:49:3d:4e:0d:3b: cd:aa:6b:57:ea:08:af:50:64:db:51:f5:2f:b0:96:df:c3:36: ef:45:48:5c:03:36:15:11:64:26:cb:8b:e3:f0:93:52:61:a1: a7:61:da:76:eb:1a:7b:f2:19:6f:58:82:2b:ae:ad:af:4a:b7: e5:00:61:ac:26:d8:e5:f7:0c:47:0e:93:ab:6e:7c:92:e0:dd: 5d:e0:6b:c9:2d:49:bb:fe:d3:3f:a8:ef:1b:da:5c:62:74:f6: 08:5a:f1:28:82:d7:b1:cb:1e:b5:cc:b6:29:f6:cb:9e:1e:af: c6:14:8f:10:e1:fc:c3:3a:e6:a7:86:24:96:73:f6:98:94:4c: 40:1f:42:3a:ea:e2:c8:ce:fd:b9:e0:92:23:12:9a:ed:11:2a: d7:b7:f3:64:25:30:70:ec:90:76:26:a4:3f:42:68:c6:24:e2: 98:07:c9:61 -----BEGIN CERTIFICATE----- MIIGwTCCBamgAwIBAgIUAQ0Mn0MoWEH/L8a8KwEQdZLk0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZlMGIxMzgtYmVmNC00OWZlLTlkZDEtZmE1MTM4M2Ri ZmNlMB4XDTIzMDUyNTA4MjU0M1oXDTI1MDgyNzA4MjU0M1owPTE7MDkGA1UEAxMy OWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGExN2I3MjY5NjIwM2RjODNh OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJhiizM9eThpxULzT ZLzjgwIV4fp7EA6aOiGmH7rVHnE0xQFwicn6SMUMQEqalNtWpZxaJqKFK7vtWhc3 tFnPCeXjLl4fig40roGBCqOdf3wKjtr/sZEb3A2DJRUR3IA4RJde+gkNU5umvufK 7SnU6nwvnf2O3g8+vUDcj/uUtWXh/Am1cZLdaO7k+lrWydaVIzipqy2VBcNA81Z0 sGfQ0fswPM67jytR7gw9OvYIKX0DTkKPgAyH7IGA2q7IAM4pOP4+fu9xJiQoutp6 Bd+u46GQ90bVtnGCDdQFhk3wA17T1ybrgfAuR1Giae0chg/SOfMDRN5hDokdxoun tacpAgMBAAGjggPFMIIDwTAdBgNVHQ4EFgQUgqkWOi6ZSEusoHgg7E95xoZmSYsw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5 MGEyZjA5N2YvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEyZjA5N2Yv MC84MkE5MTYzQTJFOTk0ODRCQUNBMDc4MjBFQzRGNzlDNjg2NjY0OThCLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNj Yy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQx LWZhNTEzODNkYmZjZS84NmUwYjEzOC1iZWY0LTQ5ZmUtOWRkMS1mYTUxMzgzZGJm Y2UuY3JsMB8GA1UdIwQYMBaAFDVrFPTDF1+W/pkhRXtqsWBp/kYtMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2NjLTRiMDMt YmRhNy0xYmUyMDQ5MzNhZTUvODZlMGIxMzgtYmVmNC00OWZlLTlkZDEtZmE1MTM4 M2RiZmNlLmNlcjA/BggrBgEFBQcBBwEB/wQwMC4wHQQCAAEwFzAKAwMAL78DAwQv wAMEBaxjIAMDAKxtMA0EAgACMAcDBQAmBk2AMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADhJw4xRVZ7xBK2p NZdfeOB2eHx9YVEsBpyxkGz1c4g36leZi8O0I6XNxpync/JDQPgEIHkd9SfZ3Ed8 BA+WN22WnkIQejwMLQFLq2nHkl1YGmhCjbVJPU4NO82qa1fqCK9QZNtR9S+wlt/D Nu9FSFwDNhURZCbLi+Pwk1Jhoadh2nbrGnvyGW9Ygiuura9Kt+UAYawm2OX3DEcO k6tufJLg3V3ga8ktSbv+0z+o7xvaXGJ09gha8SiC17HLHrXMtin2y54er8YUjxDh /MM65qeGJJZz9piUTEAfQjrq4sjO/bngkiMSmu0RKte382QlMHDskHYmpD9CaMYk 4pgHyWE= -----END CERTIFICATE-----Generated at Wed May 15 15:09:03 2024 by rpki-client on console-fra.rpki-client.org