$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87f7154e-190a-4c87-811b-e7d811d94b21.cer File: 87f7154e-190a-4c87-811b-e7d811d94b21.cer (raw, json) Hash identifier: Yr5VquoBaflCvVlVI1aWcwtzEbsRrFw6gIIKi5ed9bk= Subject key identifier: BC:07:97:51:D1:45:4D:7B:D6:00:52:FA:9E:8C:80:13:07:F3:98:AF Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285843236D20A03FC3ED340239CA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87f7154e-190a-4c87-811b-e7d811d94b21/87f7154e-190a-4c87-811b-e7d811d94b21.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87f7154e-190a-4c87-811b-e7d811d94b21/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 Sep 2023 00:45:22 +0000 Certificate not after: Wed 10 Dec 2025 01:45:22 +0000 Subordinate resources: AS: 14442 IP: 192.34.52.0 -- 192.34.54.255 IP: 199.167.128.0 -- 199.167.130.255 IP: 199.182.128.0/23 IP: 2605:2100::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:23:6d:20:a0:3f:c3:ed:34:02:39:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 7 00:45:22 2023 GMT Not After : Dec 10 01:45:22 2025 GMT Subject: CN=87f7154e-190a-4c87-811b-e7d811d94b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:76:91:2d:08:3b:c4:82:11:40:27:dc:36: 82:44:db:43:a1:f6:8a:f4:a4:0d:64:cd:fe:b3:e4: ff:65:e6:a7:02:dd:f5:ed:e8:10:84:56:0e:2b:9a: 0f:c7:fe:7e:3a:48:46:af:ff:70:aa:fa:ea:d3:9f: 1a:84:2e:ae:ae:8e:65:e6:20:b3:fc:08:ad:6f:9d: 34:b1:a8:b8:ac:8f:6f:22:e8:1d:24:5c:99:3a:8d: 73:06:09:4f:79:10:b6:3e:dc:92:d6:0a:f9:24:f1: 56:e8:f5:43:72:00:cc:27:24:12:f7:8d:2c:bb:fd: 00:75:08:ca:27:ce:e3:f8:58:10:19:95:c1:12:8e: df:b4:75:b8:e5:57:90:53:65:81:0f:9a:28:f4:30: 16:63:97:b4:f8:1b:0e:26:f2:98:2d:31:41:36:02: e8:a0:b7:39:be:f8:f0:bd:d3:7e:b0:ec:fb:4a:2c: a2:af:33:09:ba:14:6d:3f:0d:4a:c1:bb:44:6c:85: ad:f6:e4:2e:db:e6:8e:d4:3c:e1:9a:ff:39:71:74: 0b:2f:5f:51:de:77:e7:ee:b5:b9:1f:f6:19:67:bf: 5f:0a:aa:68:e4:9c:15:ac:84:05:8a:76:bc:c7:04: 45:f7:c2:c7:87:db:f7:f8:aa:27:80:1f:d7:9b:8c: aa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:07:97:51:D1:45:4D:7B:D6:00:52:FA:9E:8C:80:13:07:F3:98:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87f7154e-190a-4c87-811b-e7d811d94b21/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87f7154e-190a-4c87-811b-e7d811d94b21/87f7154e-190a-4c87-811b-e7d811d94b21.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.34.52.0-192.34.54.255 199.167.128.0-199.167.130.255 199.182.128.0/23 IPv6: 2605:2100::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14442 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e3:63:e5:44:21:93:78:f9:d9:db:79:6d:e3:f3:ca:68:12: ec:45:f8:d4:6d:05:64:71:0c:6e:dc:06:fd:38:a2:08:58:fb: 8f:15:a1:01:b7:95:70:3e:28:8f:3b:03:7f:96:b0:41:07:85: a4:f4:18:90:27:76:06:69:05:04:bf:39:b2:d3:d1:09:d7:ed: 4d:12:8a:4c:ec:51:20:88:c5:7e:38:8d:2e:39:19:54:fd:e3: e6:0a:9b:77:6a:68:54:8e:90:00:14:72:3f:60:12:d9:02:da: 6d:99:bd:24:a2:0f:a4:b1:cd:b6:e1:cf:3a:5b:38:ab:44:31: 57:90:66:dd:43:01:34:5c:cc:da:87:76:fc:19:2e:ad:73:5a: 05:a0:b3:92:3c:5c:90:32:c5:d3:ea:7e:05:65:2c:c0:ce:ec: 06:29:0b:f2:ce:61:1c:4e:be:c0:7f:85:6b:39:10:37:7f:2f: d1:dc:18:e2:73:20:c0:96:ed:55:09:e4:28:a2:ea:44:a0:73: cf:34:f2:79:d1:0d:16:ad:28:ca:d8:ef:f6:a3:ac:b6:86:c5: 08:64:f0:a4:dc:d5:32:34:19:1c:89:57:ca:93:20:09:45:3c: 36:6d:23:55:6a:cb:f9:87:23:52:a9:0b:6d:f4:a9:ee:a1:19: 6f:bc:35:c8 -----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWEMjbSCgP8PtNAI5yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDkwNzAwNDUyMloXDTI1MTIxMDAxNDUyMlowLzEtMCsGA1UEAxMk ODdmNzE1NGUtMTkwYS00Yzg3LTgxMWItZTdkODExZDk0YjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZp2kS0IO8SCEUAn3DaCRNtDofaK9KQNZM3+ s+T/ZeanAt317egQhFYOK5oPx/5+OkhGr/9wqvrq058ahC6uro5l5iCz/Aitb500 sai4rI9vIugdJFyZOo1zBglPeRC2PtyS1gr5JPFW6PVDcgDMJyQS940su/0AdQjK J87j+FgQGZXBEo7ftHW45VeQU2WBD5oo9DAWY5e0+BsOJvKYLTFBNgLooLc5vvjw vdN+sOz7SiyirzMJuhRtPw1KwbtEbIWt9uQu2+aO1Dzhmv85cXQLL19R3nfn7rW5 H/YZZ79fCqpo5JwVrIQFina8xwRF98LHh9v3+KongB/Xm4yqnQIDAQABo4IERjCC BEIwHQYDVR0OBBYEFLwHl1HRRU171gBS+p6MgBMH85ivMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 N2Y3MTU0ZS0xOTBhLTRjODctODExYi1lN2Q4MTFkOTRiMjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg3ZjcxNTRlLTE5MGEtNGM4Ny04 MTFiLWU3ZDgxMWQ5NGIyMS84N2Y3MTU0ZS0xOTBhLTRjODctODExYi1lN2Q4MTFk OTRiMjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwSwYIKwYBBQUH AQcBAf8EPDA6MCgEAgABMCIwDAMEAsAiNAMEAMAiNjAMAwQHx6eAAwQAx6eCAwQB x7aAMA4EAgACMAgDBgQmBSEAADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI4ajBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAA42PlRCGTePnZ23lt4/PKaBLsRfjUbQVkcQxu3Ab9OKIIWPuPFaEB t5VwPiiPOwN/lrBBB4Wk9BiQJ3YGaQUEvzmy09EJ1+1NEopM7FEgiMV+OI0uORlU /ePmCpt3amhUjpAAFHI/YBLZAtptmb0kog+ksc224c86WzirRDFXkGbdQwE0XMza h3b8GS6tc1oFoLOSPFyQMsXT6n4FZSzAzuwGKQvyzmEcTr7Af4VrORA3fy/R3Bji cyDAlu1VCeQooupEoHPPNPJ50Q0WrSjK2O/2o6y2hsUIZPCk3NUyNBkciVfKkyAJ RTw2bSNVasv5hyNSqQtt9KnuoRlvvDXI -----END CERTIFICATE-----Generated at Wed May 1 13:33:36 2024 by rpki-client on console-fra.rpki-client.org