$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer File: ae85d24a-77d4-4cf7-80aa-c071199c2889.cer (raw, json) Hash identifier: VqGH7kwWJxXQvDcUVFBVQwPfvpEtXn1snn2Xvb4HZE4= Subject key identifier: 7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285841E48353EE88C637E661484D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sat 02 Aug 2025 19:06:39 +0000 Subordinate resources: AS: 395841 IP: 64.4.168.0/22 IP: 208.91.188.0/22 IP: 2604:7c0::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:53:ee:88:c6:37:e6:61:48:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Aug 2 19:06:39 2025 GMT Subject: CN=ae85d24a-77d4-4cf7-80aa-c071199c2889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:62:3d:fa:dd:f6:91:a5:e7:23:2e:eb:fa: 6e:b8:b3:59:bc:16:e6:38:d9:ee:cc:9c:29:29:41: 7e:fb:1e:e4:ce:d6:19:82:42:af:6f:09:ff:b0:87: 3d:d4:fe:43:46:e3:bd:0d:f3:c6:c0:8a:1b:01:17: 89:e3:fd:11:7e:e6:27:c4:e1:40:5f:a5:bc:42:37: c1:27:b7:8a:65:32:c5:23:b5:bc:ab:9f:94:8a:ab: a2:3f:d3:5e:74:e1:8c:cd:90:01:fe:57:32:12:fd: ab:94:f3:ce:ec:8c:fe:2e:41:c6:34:f8:d1:ff:49: 8a:a2:20:27:df:12:36:51:18:ee:84:90:a8:3e:19: cb:1f:24:7d:fe:c5:f3:ac:31:79:b8:5d:bb:db:9b: a7:b2:c8:d5:3e:c1:5a:cf:13:9c:d6:62:8b:89:7f: 9f:88:24:a3:07:7a:f3:ff:80:70:b7:88:75:43:11: f0:46:ea:b7:80:28:16:c2:e5:e2:21:ff:6c:cc:66: 84:9f:8a:93:6f:f3:0f:9e:5f:72:90:25:60:9c:d1: 1f:2a:59:da:07:b2:94:c2:8b:48:a6:a3:d6:bf:c2: af:41:3a:ae:7e:dc:0f:97:bf:92:30:a5:69:df:46: 6e:87:ca:d8:93:94:09:ca:72:2b:34:49:2c:d1:23: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:26:E3:D5:24:B2:0A:B1:53:3F:85:38:71:0A:8A:B2:97:DF:07:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 64.4.168.0/22 208.91.188.0/22 IPv6: 2604:7c0::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395841 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:56:c3:4e:74:e7:63:f3:7c:03:51:75:2a:03:8a:e6:02:a3: 0f:bf:92:9a:6c:48:63:78:90:9e:4e:9f:f8:d1:95:ec:d5:ad: 8b:4a:7a:0b:ee:bf:bd:0d:2c:ad:c9:4f:f6:26:9a:6b:fe:01: 65:57:03:7b:86:08:46:5d:88:2d:99:5a:f2:7c:f2:65:01:c1: 29:32:75:0a:21:8c:41:40:c9:32:16:c1:50:cd:ec:c9:46:f9: 09:cf:20:08:91:e9:c9:ca:8e:b3:24:62:be:3f:4e:14:c5:cf: 7d:d5:49:1a:ff:d8:28:63:0e:a1:08:22:92:da:65:27:c8:70: 97:da:25:90:0d:a1:b6:25:20:42:c9:d9:b7:47:7a:6e:17:6b: 79:0c:42:74:3b:be:b6:2d:b8:20:1a:ce:17:f9:a3:d7:b7:db: 64:3a:ee:d4:5c:0f:2c:30:5e:0f:f5:83:4b:7f:b9:98:41:f7: 88:7e:ae:c3:85:e8:10:52:f8:76:7c:e9:69:ed:a1:25:aa:23: 08:6b:5c:bd:8d:b6:b6:1d:eb:47:20:b3:de:d3:63:f4:46:d7: e6:ed:be:ff:c4:b0:49:cf:9e:ee:88:d4:ee:20:50:21:24:27: 98:43:fd:fe:34:88:ce:96:64:38:40:b8:3e:76:30:de:e8:1c: 36:ed:8c:e5 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEHkg1PuiMY35mFITYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgwMjE5MDYzOVowLzEtMCsGA1UEAxMk YWU4NWQyNGEtNzdkNC00Y2Y3LTgwYWEtYzA3MTE5OWMyODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuptiPfrd9pGl5yMu6/puuLNZvBbmONnuzJwp KUF++x7kztYZgkKvbwn/sIc91P5DRuO9DfPGwIobAReJ4/0RfuYnxOFAX6W8QjfB J7eKZTLFI7W8q5+UiquiP9NedOGMzZAB/lcyEv2rlPPO7Iz+LkHGNPjR/0mKoiAn 3xI2URjuhJCoPhnLHyR9/sXzrDF5uF2725unssjVPsFazxOc1mKLiX+fiCSjB3rz /4Bwt4h1QxHwRuq3gCgWwuXiIf9szGaEn4qTb/MPnl9ykCVgnNEfKlnaB7KUwotI pqPWv8KvQTquftwPl7+SMKVp30Zuh8rYk5QJynIrNEks0SMEPQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFH0m49UksgqxUz+FOHEKirKX3wceMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9h ZTg1ZDI0YS03N2Q0LTRjZjctODBhYS1jMDcxMTk5YzI4ODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04 MGFhLWMwNzExOTljMjg4OS9hZTg1ZDI0YS03N2Q0LTRjZjctODBhYS1jMDcxMTk5 YzI4ODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAJABKgDBALQW7wwDgQCAAIwCAMGBCYEB8AAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYKQTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzVsNOdOdj83wDUXUq A4rmAqMPv5KabEhjeJCeTp/40ZXs1a2LSnoL7r+9DSytyU/2Jppr/gFlVwN7hghG XYgtmVryfPJlAcEpMnUKIYxBQMkyFsFQzezJRvkJzyAIkenJyo6zJGK+P04Uxc99 1Uka/9goYw6hCCKS2mUnyHCX2iWQDaG2JSBCydm3R3puF2t5DEJ0O762LbggGs4X +aPXt9tkOu7UXA8sMF4P9YNLf7mYQfeIfq7DhegQUvh2fOlp7aElqiMIa1y9jba2 HetHILPe02P0Rtfm7b7/xLBJz57uiNTuIFAhJCeYQ/3+NIjOlmQ4QLg+djDe6Bw2 7Yzl -----END CERTIFICATE-----Generated at Wed May 1 16:00:01 2024 by rpki-client on console-ams.rpki-client.org