$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer File: b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer (raw, json) Hash identifier: snZyWpubepCAImdDG6B/fIa9VIWccs8cOUhOELBlMe8= Subject key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285842ADA4D22141D0D2510EA1B800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Jul 2023 20:12:12 +0000 Certificate not after: Tue 22 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 29909 IP: 50.21.160.0/20 IP: 63.250.48.0/22 IP: 64.21.184.0/21 IP: 216.157.152.0/22 IP: 2607:2a00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ad:a4:d2:21:41:d0:d2:51:0e:a1:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 26 20:12:12 2023 GMT Not After : Jul 22 19:06:39 2025 GMT Subject: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c2:cd:9d:a6:34:fa:25:3e:97:41:f8:b1:7f: d6:00:88:18:b6:4b:8b:f9:a7:bd:04:65:d9:ca:8b: 5e:43:90:41:8e:16:fe:78:81:1f:91:87:a2:a5:b4: dc:d8:47:89:6d:ef:34:bf:67:77:5c:25:c5:b3:d9: 06:6c:47:dd:fe:6c:d3:6f:ac:d9:db:25:75:b8:38: 4f:05:0e:31:b2:3e:02:21:58:d3:97:82:9a:4a:14: de:bd:8f:d0:58:46:52:62:7d:24:8b:4a:40:92:5f: 7a:db:25:63:38:b5:fa:ca:9c:a3:8e:16:b1:51:16: 1a:7a:23:b1:e0:59:be:cc:91:1f:e1:45:3d:a9:ff: d9:14:9e:a0:2f:d3:47:29:df:65:d0:3b:87:64:c7: ee:98:24:bc:ed:3b:42:ad:fb:44:e6:cf:f9:c8:b1: bf:d5:17:90:de:79:48:8e:8f:d3:d9:86:4d:19:2b: d8:4c:dd:1f:0b:77:54:f4:8c:6a:d8:02:be:15:b1: 27:9f:2f:9d:a1:aa:d7:fd:dd:dd:13:9f:27:55:e4: 8b:03:9f:99:3c:0b:bb:33:9f:91:73:91:3b:d9:62: 69:f7:f5:a3:d6:f1:57:79:52:be:0f:c6:84:b8:88: bb:d1:eb:43:cd:7d:b4:28:a2:4a:7e:19:e1:ac:3c: 7d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 50.21.160.0/20 63.250.48.0/22 64.21.184.0/21 216.157.152.0/22 IPv6: 2607:2a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29909 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2c:4f:e0:89:80:7a:e5:5d:43:a2:92:ad:2e:d4:d6:06:8a: 3c:e9:a3:35:04:84:6f:e4:ef:c0:9c:61:c4:19:8a:2f:03:a4: 93:7c:67:ed:9c:7e:f9:28:84:a5:dc:62:6a:bb:a6:4b:52:0e: fc:9b:4b:a2:7b:90:31:2f:3b:ec:bc:0f:dc:54:2b:05:b6:b6: 9a:50:63:45:c7:b1:e7:e4:fc:67:ee:32:ef:8d:d0:d1:6a:b0: a3:fe:b6:53:48:08:ca:28:fa:30:99:1c:f8:3f:8e:6f:d6:86: e2:0f:17:e4:57:8a:8d:e4:dc:61:ac:0d:d0:f5:37:91:54:6c: b8:8d:2f:40:74:b8:87:44:fa:af:5c:e6:48:62:29:dd:fa:15: 63:67:dd:8f:52:88:8b:46:bb:97:ee:8a:03:b9:fa:d1:e3:35: 25:e1:39:9e:a8:f6:9f:e0:7f:5e:16:a1:e3:f4:52:3f:5e:35: c8:67:79:01:ef:e9:a4:e7:f7:5a:d6:ab:97:c1:ff:a4:81:6b: 06:61:32:92:08:95:8e:42:a8:4c:bd:98:c3:ac:d1:c4:17:df: 3c:ba:6a:08:f3:b2:af:fc:00:be:e2:d4:15:03:cb:73:64:9f: 1c:d5:4f:31:3a:6b:89:d5:7a:62:52:f3:46:33:fb:a2:a5:d9: b8:9d:00:68 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEKtpNIhQdDSUQ6huAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDcyNjIwMTIxMloXDTI1MDcyMjE5MDYzOVowLzEtMCsGA1UEAxMk YjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2ZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcLNnaY0+iU+l0H4sX/WAIgYtkuL+ae9BGXZ yoteQ5BBjhb+eIEfkYeipbTc2EeJbe80v2d3XCXFs9kGbEfd/mzTb6zZ2yV1uDhP BQ4xsj4CIVjTl4KaShTevY/QWEZSYn0ki0pAkl962yVjOLX6ypyjjhaxURYaeiOx 4Fm+zJEf4UU9qf/ZFJ6gL9NHKd9l0DuHZMfumCS87TtCrftE5s/5yLG/1ReQ3nlI jo/T2YZNGSvYTN0fC3dU9Ixq2AK+FbEnny+doarX/d3dE58nVeSLA5+ZPAu7M5+R c5E72WJp9/Wj1vFXeVK+D8aEuIi70etDzX20KKJKfhnhrDx9gwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFLtElF8Bck3uuSK46tAuogduTiM7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i MGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2IwYzQzYjc1LTEwNmYtNDllNy1i ZjNhLTRhZWI5NDU2NmU5MC9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1 NjZlOTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAQyFaADBAI/+jADBANAFbgDBALYnZgwDQQCAAIw BwMFACYHKgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICdNUwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATSxP 4ImAeuVdQ6KSrS7U1gaKPOmjNQSEb+TvwJxhxBmKLwOkk3xn7Zx++SiEpdxiarum S1IO/JtLonuQMS877LwP3FQrBba2mlBjRcex5+T8Z+4y743Q0Wqwo/62U0gIyij6 MJkc+D+Ob9aG4g8X5FeKjeTcYawN0PU3kVRsuI0vQHS4h0T6r1zmSGIp3foVY2fd j1KIi0a7l+6KA7n60eM1JeE5nqj2n+B/Xhah4/RSP141yGd5Ae/ppOf3Wtarl8H/ pIFrBmEykgiVjkKoTL2Yw6zRxBffPLpqCPOyr/wAvuLUFQPLc2SfHNVPMTpridV6 YlLzRjP7oqXZuJ0AaA== -----END CERTIFICATE-----Generated at Wed May 1 16:00:01 2024 by rpki-client on console-ams.rpki-client.org