$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f.cer File: 87fd9355-ffdc-4986-9329-4d1909e01a2f.cer (raw, json) Hash identifier: HaoirIuykndv/PlUiGmrzCLpPJZvmlBOS72xwqj7+gs= Subject key identifier: 0A:6A:12:1B:1A:E7:46:8D:EC:E5:7E:C2:B7:49:38:28:A2:74:5F:2B Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858452538C3022D8160B510C37E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 09 Mar 2024 01:45:21 +0000 Certificate not after: Fri 12 Jun 2026 00:45:21 +0000 Subordinate resources: AS: 46690 IP: 32.208.0.0/12 IP: 104.226.0.0/16 IP: 107.191.128.0/19 IP: 2602:250::/28 IP: 2605:d580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:25:38:c3:02:2d:81:60:b5:10:c3:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 9 01:45:21 2024 GMT Not After : Jun 12 00:45:21 2026 GMT Subject: CN=87fd9355-ffdc-4986-9329-4d1909e01a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:29:14:af:99:d9:24:d3:95:65:e1:ad:13:4f: 95:1c:ba:f7:8e:d1:7d:50:76:00:bf:70:4a:6d:65: 36:6b:af:e2:4e:34:12:30:3e:d3:61:d9:9c:4e:15: d4:31:8a:a8:c7:5b:9a:1b:4a:d4:83:8c:35:d8:28: 4b:17:3b:c8:e9:8e:14:76:b9:b6:42:3c:df:bf:7d: b6:54:b9:19:48:da:be:b7:aa:d8:24:a8:09:69:59: 69:63:d5:b1:a7:84:d0:14:34:a9:ed:98:b1:c1:c8: 58:64:ea:7a:63:15:d3:8a:ba:d5:bb:7d:58:24:26: 66:23:7a:6e:6c:d4:4f:3e:79:a4:53:81:65:40:af: 9b:c7:f6:b6:0f:7b:67:4f:ed:fd:97:01:82:80:64: 4a:28:82:a9:af:41:c5:2a:69:0f:ff:4a:40:bd:82: db:db:ea:5a:32:e7:d0:e4:5b:e5:87:96:cb:6b:33: 01:2c:e5:48:bb:77:27:6a:84:c5:e3:fc:0b:8e:9b: fd:b9:48:07:ad:75:e2:21:ca:7d:0e:af:18:32:c8: 49:f1:be:42:1d:0a:e4:87:a6:9c:6c:99:19:58:dd: c8:82:40:70:4b:d0:42:0c:85:73:09:a8:bb:d4:47: 23:ef:a1:98:ba:70:8d:25:a8:b3:c5:86:5e:52:03: 2f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6A:12:1B:1A:E7:46:8D:EC:E5:7E:C2:B7:49:38:28:A2:74:5F:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 32.208.0.0/12 104.226.0.0/16 107.191.128.0/19 IPv6: 2602:250::/28 2605:d580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46690 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:15:3c:36:72:73:09:53:3d:93:ff:4c:6e:e3:8b:ae:b3:aa: 1f:6a:b6:fe:73:4a:41:23:77:db:b3:3e:89:0c:c7:81:f8:f0: a6:ba:57:8d:b5:4a:25:3d:4e:57:ab:6f:44:89:64:67:d4:11: 43:12:9b:28:39:07:17:17:94:cb:93:e6:29:d0:d7:44:e9:56: 8d:db:b6:e1:3e:0c:46:fe:5d:d1:bc:39:d8:06:3f:76:44:84: 10:47:af:81:9d:6e:f6:ba:dd:5a:ed:d7:81:20:59:5b:11:bd: ad:ba:50:19:21:df:47:2c:fd:f1:4a:6e:e7:5c:8d:12:d7:53: 79:6e:26:38:6c:3f:ba:42:be:6e:57:82:3a:51:53:58:76:46: 38:d3:b5:60:04:8d:c2:b6:51:f3:ab:c7:ec:7f:35:52:e1:5c: 55:5e:3a:63:7c:f1:4f:19:75:d7:4d:60:00:41:97:f2:b6:19: f7:65:45:97:1c:8b:bc:94:f3:b1:43:bc:98:db:12:8e:05:d8: 48:83:3c:ed:b4:37:28:a6:43:b7:a8:e5:6c:07:cb:71:92:d6: f6:60:b2:49:8a:a3:05:c8:87:07:a6:ae:08:06:c9:e8:77:cd: 28:e9:55:83:01:e1:23:b0:b7:96:0f:bb:97:40:f1:fe:32:60: 9d:17:1f:a0 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEUlOMMCLYFgtRDDfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDMwOTAxNDUyMVoXDTI2MDYxMjAwNDUyMVowLzEtMCsGA1UEAxMk ODdmZDkzNTUtZmZkYy00OTg2LTkzMjktNGQxOTA5ZTAxYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSkUr5nZJNOVZeGtE0+VHLr3jtF9UHYAv3BK bWU2a6/iTjQSMD7TYdmcThXUMYqox1uaG0rUg4w12ChLFzvI6Y4Udrm2Qjzfv322 VLkZSNq+t6rYJKgJaVlpY9Wxp4TQFDSp7ZixwchYZOp6YxXTirrVu31YJCZmI3pu bNRPPnmkU4FlQK+bx/a2D3tnT+39lwGCgGRKKIKpr0HFKmkP/0pAvYLb2+paMufQ 5Fvlh5bLazMBLOVIu3cnaoTF4/wLjpv9uUgHrXXiIcp9Dq8YMshJ8b5CHQrkh6ac bJkZWN3IgkBwS9BCDIVzCai71Ecj76GYunCNJaizxYZeUgMvNQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFApqEhsa50aN7OV+wrdJOCiidF8rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84 N2ZkOTM1NS1mZmRjLTQ5ODYtOTMyOS00ZDE5MDllMDFhMmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzg3ZmQ5MzU1LWZmZGMtNDk4Ni05 MzI5LTRkMTkwOWUwMWEyZi84N2ZkOTM1NS1mZmRjLTQ5ODYtOTMyOS00ZDE5MDll MDFhMmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMBYEAgABMBADAwQg0AMDAGjiAwQFa7+AMBQEAgACMA4DBQQmAgJQ AwUAJgXVgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAtmIwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFhU8 NnJzCVM9k/9MbuOLrrOqH2q2/nNKQSN327M+iQzHgfjwprpXjbVKJT1OV6tvRIlk Z9QRQxKbKDkHFxeUy5PmKdDXROlWjdu24T4MRv5d0bw52AY/dkSEEEevgZ1u9rrd Wu3XgSBZWxG9rbpQGSHfRyz98Upu51yNEtdTeW4mOGw/ukK+bleCOlFTWHZGONO1 YASNwrZR86vH7H81UuFcVV46Y3zxTxl1101gAEGX8rYZ92VFlxyLvJTzsUO8mNsS jgXYSIM87bQ3KKZDt6jlbAfLcZLW9mCySYqjBciHB6auCAbJ6HfNKOlVgwHhI7C3 lg+7l0Dx/jJgnRcfoA== -----END CERTIFICATE-----Generated at Wed May 1 15:59:58 2024 by rpki-client on console-ams.rpki-client.org