$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer File: b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer (raw, json) Hash identifier: Gal10DlGycFk3ITES+brspl7UweOQLbXN9bnUiS84EA= Subject key identifier: F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858420097A76AC7DCE52C1523E6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 25 May 2023 20:30:50 +0000 Certificate not after: Wed 27 Aug 2025 20:30:50 +0000 Subordinate resources: AS: 397913 IP: 204.108.182.0/23 IP: 204.235.160.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:00:97:a7:6a:c7:dc:e5:2c:15:23:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 25 20:30:50 2023 GMT Not After : Aug 27 20:30:50 2025 GMT Subject: CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:ba:de:48:32:7f:ff:c5:9d:d3:82:b2:db: da:13:1a:c6:e0:fd:14:92:06:0d:c3:40:a7:15:9d: 98:b4:20:7f:42:e1:a1:cc:d8:4c:66:d2:06:ff:e9: a3:09:28:d5:58:50:55:6d:63:8a:c1:29:b5:5c:3e: e4:fa:b8:4d:37:fc:49:b7:4c:38:6c:9f:61:de:7c: 01:9e:fc:59:fe:cd:88:6a:7a:42:1d:06:c4:26:fd: 0c:ea:c6:3e:40:5d:75:6e:f5:45:9a:5e:18:6a:af: a7:4d:47:74:ac:b4:ff:4c:f9:9a:1e:a2:75:9b:d3: 0c:f8:8b:d3:38:0d:96:28:20:96:39:a8:e7:24:c5: 47:d6:c3:bc:75:ba:43:a4:fc:e2:d0:62:d8:3c:f0: 65:96:74:de:93:35:52:72:a4:cf:9a:5a:5d:c7:80: ef:1f:28:4a:eb:19:73:d7:91:c6:5b:ad:d0:44:bd: 98:30:cd:51:05:0c:dd:42:74:d9:64:fd:7f:86:7e: 84:50:0b:3b:38:06:a7:25:02:d6:01:41:39:2a:61: 22:eb:8d:74:43:c3:4a:e7:31:df:a5:02:c8:b0:09: 76:95:13:20:b4:24:7d:91:52:82:ff:b5:0b:3a:d1: b7:a5:b0:7e:1f:ed:1c:89:d3:76:96:ff:3d:0a:c2: ac:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 204.108.182.0/23 204.235.160.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397913 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:14:23:4b:94:1c:51:51:54:d0:1f:25:07:c6:7d:cd:4c:f9: a2:61:21:a3:8e:95:07:80:62:4c:d2:b2:3e:84:42:bf:b6:94: 05:b5:7f:68:10:13:3b:df:9d:fe:f8:4b:98:2e:a3:4b:32:57: 76:ac:14:a8:e8:a7:81:1a:21:e5:5f:aa:3e:89:93:ef:4f:29: c8:5c:0b:61:49:12:e8:b4:21:c4:08:e5:20:a7:35:fb:84:40: fe:ec:00:71:a3:82:b1:ee:e8:cc:af:72:e5:d7:91:09:d1:d6: 7e:6a:13:d1:b4:8d:03:d5:9a:e7:49:e2:9e:32:a3:9d:28:a3: 38:22:96:a4:00:77:d4:4e:cd:bf:19:ac:6b:8c:9e:9d:84:e5: c2:40:d2:64:1a:f0:59:5c:46:82:29:96:82:3b:25:18:a8:46: f9:ad:82:9e:a4:27:ee:ce:0d:2c:d4:20:9d:01:dd:36:fd:3d: 45:19:ff:be:09:87:c0:10:c2:8e:af:8f:4a:66:ff:fc:43:ae: c1:01:8c:df:af:26:e0:52:9a:7a:65:d4:70:bf:27:32:49:20: 6d:a2:6e:c2:df:09:87:3a:fe:4a:4b:3b:3e:12:76:36:86:c0: f6:fa:51:03:57:23:c4:f7:9d:bc:81:c0:db:d1:ba:60:6d:8d: ad:9c:37:8b -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEIAl6dqx9zlLBUj5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUyNTIwMzA1MFoXDTI1MDgyNzIwMzA1MFowLzEtMCsGA1UEAxMk YjI0MjI0YmEtODM0MC00YTJlLTk4NmEtNWUxZjliMmMyMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLq63kgyf//FndOCstvaExrG4P0UkgYNw0Cn FZ2YtCB/QuGhzNhMZtIG/+mjCSjVWFBVbWOKwSm1XD7k+rhNN/xJt0w4bJ9h3nwB nvxZ/s2IanpCHQbEJv0M6sY+QF11bvVFml4Yaq+nTUd0rLT/TPmaHqJ1m9MM+IvT OA2WKCCWOajnJMVH1sO8dbpDpPzi0GLYPPBllnTekzVScqTPmlpdx4DvHyhK6xlz 15HGW63QRL2YMM1RBQzdQnTZZP1/hn6EUAs7OAanJQLWAUE5KmEi6410Q8NK5zHf pQLIsAl2lRMgtCR9kVKC/7ULOtG3pbB+H+0cidN2lv89CsKswQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFPPT7XUQlaBYZ3NaYe+X+dbzFpS8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i MjQyMjRiYS04MzQwLTRhMmUtOTg2YS01ZTFmOWIyYzIxODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2IyNDIyNGJhLTgzNDAtNGEyZS05 ODZhLTVlMWY5YjJjMjE4Mi9iMjQyMjRiYS04MzQwLTRhMmUtOTg2YS01ZTFmOWIy YzIxODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHMbLYDBAHM66AwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhJZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAIUI0uUHFFRVNAfJQfGfc1M+aJhIaOOlQeAYkzS sj6EQr+2lAW1f2gQEzvfnf74S5guo0syV3asFKjop4EaIeVfqj6Jk+9PKchcC2FJ Eui0IcQI5SCnNfuEQP7sAHGjgrHu6MyvcuXXkQnR1n5qE9G0jQPVmudJ4p4yo50o ozgilqQAd9ROzb8ZrGuMnp2E5cJA0mQa8FlcRoIploI7JRioRvmtgp6kJ+7ODSzU IJ0B3Tb9PUUZ/74Jh8AQwo6vj0pm//xDrsEBjN+vJuBSmnpl1HC/JzJJIG2ibsLf CYc6/kpLOz4SdjaGwPb6UQNXI8T3nbyBwNvRumBtja2cN4s= -----END CERTIFICATE-----Generated at Wed May 1 13:33:40 2024 by rpki-client on console-fra.rpki-client.org