$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer File: b4251da6-e12c-464e-918b-9c9e6f10c032.cer (raw, json) Hash identifier: sfvjXBCfxSFVc3wCGVeGs/aC55+7Ozph2lBpKu5h/tQ= Subject key identifier: 28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285843C558C0B8364376EE7AC68F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 04 Nov 2023 00:45:16 +0000 Certificate not after: Fri 06 Feb 2026 01:45:16 +0000 Subordinate resources: AS: 62965 IP: 198.97.201.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:c5:58:c0:b8:36:43:76:ee:7a:c6:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 4 00:45:16 2023 GMT Not After : Feb 6 01:45:16 2026 GMT Subject: CN=b4251da6-e12c-464e-918b-9c9e6f10c032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:37:44:cd:13:fb:35:22:d8:e8:0d:3c:d6:d3: a1:9e:72:bd:73:57:96:31:8b:d2:29:d3:74:33:bf: 40:ad:07:fa:5f:14:46:a0:c2:77:d9:47:8e:8d:fe: 9d:6f:60:7a:63:26:22:02:9e:d2:1d:55:eb:fe:f3: e2:6c:34:6e:53:a9:97:91:6e:5a:2d:ed:f9:51:eb: 09:6a:ac:24:0d:59:ea:73:13:05:2b:aa:a3:d0:85: a8:17:23:ba:dd:64:66:e6:09:95:d1:18:58:20:03: 74:30:54:c0:aa:aa:f7:21:df:92:65:ee:0d:f5:6a: 28:f6:a6:23:f3:93:81:54:6c:f3:52:14:ef:14:76: f5:4f:07:e2:58:aa:61:16:7b:05:10:fd:04:af:c9: 1f:8f:0c:20:bc:09:f7:71:19:d4:89:2e:7b:e4:33: fc:23:b7:a9:ca:31:82:d8:01:b1:06:19:6d:24:27: dc:53:6c:f0:a2:43:5b:92:95:e5:2c:27:9a:2b:c7: 91:c2:71:63:68:9f:c3:07:19:1d:44:ed:ef:d9:9d: 32:7b:73:a5:e3:39:b4:eb:a9:c7:95:8d:2a:5a:2f: d7:cc:27:d0:1c:38:14:b0:7a:f8:a5:02:16:9e:7d: 85:9c:10:7f:30:41:0b:bd:2d:c0:34:e5:75:51:58: 81:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 198.97.201.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62965 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a3:ff:45:2d:cf:91:41:a5:b6:e5:fe:d8:fe:d0:99:d4:f3: 3b:27:bc:93:ac:d1:3f:85:e5:ec:a3:3e:ec:44:d0:d4:c5:4f: c4:f2:c3:bf:fc:29:18:94:a8:3c:b5:53:27:91:2e:92:52:de: d2:f5:0f:71:11:42:d8:62:71:dc:29:8c:9d:4b:78:54:cd:0b: a6:55:08:ce:8f:ee:e2:b8:f4:95:9b:d6:7e:97:75:7a:6e:e2: 17:05:c6:0f:59:f4:ae:f2:fb:74:4a:5d:61:8f:c2:ad:38:91: 8c:72:66:65:fc:cb:2c:06:bb:a9:7c:a2:e3:3b:a5:3c:7b:0e: 4c:df:f1:3e:86:4e:d1:ad:aa:1c:fe:78:8a:4e:1d:1b:91:64: a6:a3:aa:42:eb:70:91:cc:a4:89:1c:2b:e6:87:79:0b:00:d4: 61:49:0f:f8:96:3b:55:a4:e7:7f:69:64:e4:b0:6c:24:2d:6f: 2f:3c:e7:91:67:d4:39:69:76:8a:a9:e4:be:8a:d2:37:2a:bf: 31:ff:69:e6:eb:22:87:27:99:36:7f:a6:00:6c:cd:75:57:3a: 83:85:fd:fa:49:eb:d7:79:e5:b7:35:e5:e3:cf:02:92:24:e9: 90:0b:af:22:ca:aa:84:73:ee:71:b2:dc:69:36:b4:2a:b2:2b: ca:3c:3f:0f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEPFWMC4NkN27nrGjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTEwNDAwNDUxNloXDTI2MDIwNjAxNDUxNlowLzEtMCsGA1UEAxMk YjQyNTFkYTYtZTEyYy00NjRlLTkxOGItOWM5ZTZmMTBjMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDdEzRP7NSLY6A081tOhnnK9c1eWMYvSKdN0 M79ArQf6XxRGoMJ32UeOjf6db2B6YyYiAp7SHVXr/vPibDRuU6mXkW5aLe35UesJ aqwkDVnqcxMFK6qj0IWoFyO63WRm5gmV0RhYIAN0MFTAqqr3Id+SZe4N9Woo9qYj 85OBVGzzUhTvFHb1TwfiWKphFnsFEP0Er8kfjwwgvAn3cRnUiS575DP8I7epyjGC 2AGxBhltJCfcU2zwokNbkpXlLCeaK8eRwnFjaJ/DBxkdRO3v2Z0ye3Ol4zm066nH lY0qWi/XzCfQHDgUsHr4pQIWnn2FnBB/MEELvS3ANOV1UViB6QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFChTFFCtPkHIg0TtROYL0HDPaZ0rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i NDI1MWRhNi1lMTJjLTQ2NGUtOTE4Yi05YzllNmYxMGMwMzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2I0MjUxZGE2LWUxMmMtNDY0ZS05 MThiLTljOWU2ZjEwYzAzMi9iNDI1MWRhNi1lMTJjLTQ2NGUtOTE4Yi05YzllNmYx MGMwMzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGYckwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID APX1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFGj/0Utz5FBpbbl/tj+0JnU8zsnvJOs0T+F5eyjPuxE0NTF T8Tyw7/8KRiUqDy1UyeRLpJS3tL1D3ERQthicdwpjJ1LeFTNC6ZVCM6P7uK49JWb 1n6XdXpu4hcFxg9Z9K7y+3RKXWGPwq04kYxyZmX8yywGu6l8ouM7pTx7Dkzf8T6G TtGtqhz+eIpOHRuRZKajqkLrcJHMpIkcK+aHeQsA1GFJD/iWO1Wk539pZOSwbCQt by8855Fn1Dlpdoqp5L6K0jcqvzH/aebrIocnmTZ/pgBszXVXOoOF/fpJ69d55bc1 5ePPApIk6ZALryLKqoRz7nGy3Gk2tCqyK8o8Pw8= -----END CERTIFICATE-----Generated at Wed May 1 16:33:34 2024 by rpki-client on console-fra.rpki-client.org