$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer File: 9c2a7225-dfea-460d-aa69-804ae5740036.cer (raw, json) Hash identifier: qoIMyz0oOnGNUFbKVeh3rKmu8Y+Ny0/z259NOvT2Md4= Subject key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285841EDC978205632A68B6BE63600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 May 2023 02:50:50 +0000 Certificate not after: Thu 21 Aug 2025 02:50:50 +0000 Subordinate resources: AS: 20112 AS: 30221 IP: 63.247.144.0/20 IP: 68.68.192.0 -- 68.68.216.255 IP: 68.68.218.0/24 IP: 68.68.220.0/24 IP: 208.122.112.0/20 IP: 2607:fa28::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:ed:c9:78:20:56:32:a6:8b:6b:e6:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 19 02:50:50 2023 GMT Not After : Aug 21 02:50:50 2025 GMT Subject: CN=9c2a7225-dfea-460d-aa69-804ae5740036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5a:b5:78:a9:18:72:8a:56:37:da:2a:29:06: 9e:f4:bb:2d:d7:21:18:80:38:07:46:48:c0:35:95: 20:5f:f8:06:90:c3:1e:9d:40:8a:fb:38:17:aa:a2: 88:24:d2:4f:48:ff:75:91:8e:e6:49:f1:87:74:9a: e3:9f:7c:7b:07:84:12:0a:de:c4:95:27:02:07:c6: 4f:91:a6:45:99:a6:28:6a:c2:83:bf:18:6b:4d:8c: 54:5b:42:c0:b7:a0:cb:1e:26:38:b9:da:34:33:2d: d5:6e:6c:8f:fe:db:c8:b2:ed:c1:61:f1:79:ac:db: cb:ca:54:26:11:cf:b7:e4:79:d9:93:1c:3d:23:8f: ad:61:08:3d:e1:4d:cf:dd:ad:52:20:a2:18:44:f5: f1:14:b2:05:47:dc:21:1f:7c:3f:ef:bb:8b:79:40: 3b:58:a4:a1:78:c4:10:ed:05:49:43:0e:c0:39:86: a0:90:08:1d:23:51:7c:e2:d2:14:81:65:01:0b:e4: a7:09:2d:8e:3c:03:47:ea:43:88:28:16:21:c9:3e: d9:4a:f2:84:a9:1b:e8:de:55:31:b8:c1:7f:7e:b0: 7f:88:4c:b2:5e:cc:03:43:5c:5f:67:b1:b6:99:bb: 0a:95:ec:b6:8f:a4:2d:39:e1:43:ad:01:76:97:39: 6e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 63.247.144.0/20 68.68.192.0-68.68.216.255 68.68.218.0/24 68.68.220.0/24 208.122.112.0/20 IPv6: 2607:fa28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20112 30221 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:13:74:41:68:bb:7f:16:16:a9:d1:03:31:e4:02:8d:e7:4c: 84:2e:f2:b6:7b:a4:fc:cc:bd:09:ee:69:a2:ac:35:a5:94:94: 77:4f:76:c0:ba:09:79:32:20:a2:f6:7f:45:c1:77:b0:1c:7b: 36:f1:e9:bc:5a:91:14:56:3a:2c:25:87:28:65:11:d0:28:37: f1:66:5f:36:9e:24:11:76:29:bc:45:5a:2a:9c:b1:4d:55:43: e8:6a:07:2b:8f:98:51:41:c2:e4:57:50:ff:86:d9:84:b8:e0: c9:70:3e:b9:90:6d:e8:55:4a:86:9d:a0:04:59:6e:09:b5:75: 06:04:e1:9c:64:e6:2b:86:57:70:cc:bf:6e:b0:5c:7c:11:c9: 86:77:1c:6f:1e:55:30:34:2e:ab:1a:fa:09:f5:c1:cb:b3:a8: 1b:11:06:24:52:e7:cb:51:88:95:95:c3:29:eb:95:31:27:69: 74:46:3f:07:2f:54:e4:fb:cc:5c:8a:87:85:fd:72:7b:6b:4c: 72:ef:31:66:b0:9e:92:ca:0d:4b:8f:51:34:6f:00:d4:2c:5b: 3e:5f:8e:5d:1b:35:37:e9:05:95:29:7e:93:76:38:d9:63:53: 21:12:0b:60:27:24:47:d5:16:ca:6f:65:53:e6:24:bb:0d:e5: 9f:35:35:48 -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEHtyXggVjKmi2vmNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUxOTAyNTA1MFoXDTI1MDgyMTAyNTA1MFowLzEtMCsGA1UEAxMk OWMyYTcyMjUtZGZlYS00NjBkLWFhNjktODA0YWU1NzQwMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVq1eKkYcopWN9oqKQae9Lst1yEYgDgHRkjA NZUgX/gGkMMenUCK+zgXqqKIJNJPSP91kY7mSfGHdJrjn3x7B4QSCt7ElScCB8ZP kaZFmaYoasKDvxhrTYxUW0LAt6DLHiY4udo0My3VbmyP/tvIsu3BYfF5rNvLylQm Ec+35HnZkxw9I4+tYQg94U3P3a1SIKIYRPXxFLIFR9whH3w/77uLeUA7WKSheMQQ 7QVJQw7AOYagkAgdI1F84tIUgWUBC+SnCS2OPANH6kOIKBYhyT7ZSvKEqRvo3lUx uMF/frB/iEyyXswDQ1xfZ7G2mbsKley2j6QtOeFDrQF2lzlusQIDAQABo4IETTCC BEkwHQYDVR0OBBYEFJWK/sbIMwlYgT6Q6O+eySw623fDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85 YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3NDAwMzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzljMmE3MjI1LWRmZWEtNDYwZC1h YTY5LTgwNGFlNTc0MDAzNi85YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3 NDAwMzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MCwEAgABMCYDBAQ/95AwDAMEBkREwAMEAERE2AMEAERE2gMEAERE 3AMEBNB6cDANBAIAAjAHAwUAJgf6KDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgJO kAICdg0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEATBN0QWi7fxYWqdEDMeQCjedMhC7ytnuk/My9Ce5poqw1 pZSUd092wLoJeTIgovZ/RcF3sBx7NvHpvFqRFFY6LCWHKGUR0Cg38WZfNp4kEXYp vEVaKpyxTVVD6GoHK4+YUUHC5FdQ/4bZhLjgyXA+uZBt6FVKhp2gBFluCbV1BgTh nGTmK4ZXcMy/brBcfBHJhnccbx5VMDQuqxr6CfXBy7OoGxEGJFLny1GIlZXDKeuV MSdpdEY/By9U5PvMXIqHhf1ye2tMcu8xZrCeksoNS49RNG8A1CxbPl+OXRs1N+kF lSl+k3Y42WNTIRILYCckR9UWym9lU+Ykuw3lnzU1SA== -----END CERTIFICATE-----Generated at Wed May 1 15:59:59 2024 by rpki-client on console-ams.rpki-client.org