$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer File: be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer (raw, json) Hash identifier: IOayrWIL9GvEfZAmFB/areMTKfJdKpvOgZwB1LgeEHI= Subject key identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858456CD2DEFEEEDEE9F0DB23B7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Apr 2024 17:18:15 +0000 Certificate not after: Thu 02 Oct 2025 00:45:17 +0000 Subordinate resources: AS: 398949 AS: 400952 IP: 192.64.206.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:d2:de:fe:ee:de:e9:f0:db:23:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 3 17:18:15 2024 GMT Not After : Oct 2 00:45:17 2025 GMT Subject: CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:7a:97:5f:e0:f8:f0:71:bb:10:ce:e5:a7: 9b:4e:6c:dd:87:1a:20:ee:39:1f:af:d0:f5:f3:b1: 55:26:19:66:ca:0a:1c:aa:2a:89:eb:ae:d8:89:21: cc:a0:dd:c0:6e:29:bd:4c:87:b2:d5:48:cb:06:f0: 65:73:35:45:4a:3f:bd:54:dc:53:78:20:30:d9:35: 0d:a4:41:46:43:6f:a9:c7:dd:14:eb:30:1d:02:ca: 8c:dd:7f:13:2f:22:59:94:00:bf:76:c1:23:fb:20: 67:6b:82:c1:bf:d3:e4:c1:66:39:60:e5:3f:63:19: cb:6f:f0:4e:d8:78:b6:d3:2d:7c:7d:61:34:b2:fa: f0:18:5e:fc:30:c4:07:86:5d:08:e5:71:c1:7c:46: a7:0f:a1:4d:73:39:e5:99:2c:a5:e5:76:5d:b2:c0: d2:04:99:81:91:8f:78:e6:96:71:87:14:61:f6:39: 5f:57:a5:f7:ef:f7:a9:ca:d7:3e:ca:d9:fa:c6:41: 79:bd:bf:93:c5:46:5d:8b:d4:12:fa:30:33:75:ff: ee:bf:f5:0d:e5:cf:c7:9a:85:f8:a9:11:dc:77:e0: b6:86:9a:41:24:a7:89:c0:13:65:76:e1:9a:80:54: ca:bd:68:d3:d8:95:cd:28:8d:30:a9:fa:b8:b5:a1: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.64.206.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398949 400952 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6f:94:9f:d1:13:cd:62:c8:fb:23:81:d0:93:6d:d2:a5:6f: 94:50:03:92:9f:da:d7:88:af:b1:18:fa:90:ee:2c:35:32:f8: 7f:2a:d4:d8:30:3c:29:bb:bb:a2:06:0a:70:37:6a:ee:ab:b3: c5:f7:a6:20:db:ab:78:74:ed:15:ed:bd:03:36:1e:37:d2:6e: cc:e8:7e:54:9a:b2:23:e9:51:42:d2:3e:e9:2c:f1:13:95:ed: 21:8c:1b:63:68:74:ff:6b:47:17:d0:60:2e:5a:ac:04:4b:3f: 67:bc:e7:0e:15:9b:c9:d7:e5:2e:ed:3d:11:c0:a6:32:e9:3f: 8f:b9:ff:c2:89:01:ca:e6:09:8e:65:53:e1:97:e2:34:d9:ce: ab:00:9f:1b:70:1f:f4:19:d0:b0:61:db:77:61:84:d6:37:d1: 1c:07:73:86:b5:06:e4:03:98:30:35:90:d2:86:2e:9e:47:9b: 0c:cd:a0:db:e1:2c:ee:1e:0e:c6:dd:33:f9:65:29:c4:70:48: c1:4b:3b:0f:25:7b:a8:5a:f1:0e:97:11:0a:9c:28:31:94:0e: 47:b7:80:8f:c3:fc:86:92:e0:64:d3:8e:c6:a5:7b:6f:fe:89: e0:6e:48:64:9c:f6:d1:e8:1a:af:0f:9a:9c:cc:a4:65:1c:1f: b3:bc:d7:ee -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEVs0t7+7t7p8Nsjt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDQwMzE3MTgxNVoXDTI1MTAwMjAwNDUxN1owLzEtMCsGA1UEAxMk YmU5MDg5NWEtM2M0My00YjM4LWE1YWEtYjFlYmMyNjFiNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzp6l1/g+PBxuxDO5aebTmzdhxog7jkfr9D1 87FVJhlmygocqiqJ667YiSHMoN3Abim9TIey1UjLBvBlczVFSj+9VNxTeCAw2TUN pEFGQ2+px90U6zAdAsqM3X8TLyJZlAC/dsEj+yBna4LBv9PkwWY5YOU/YxnLb/BO 2Hi20y18fWE0svrwGF78MMQHhl0I5XHBfEanD6FNcznlmSyl5XZdssDSBJmBkY94 5pZxhxRh9jlfV6X37/epytc+ytn6xkF5vb+TxUZdi9QS+jAzdf/uv/UN5c/HmoX4 qRHcd+C2hppBJKeJwBNlduGagFTKvWjT2JXNKI0wqfq4taEOXwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFPFVajZbzSq7YcClrDe1fuLW1u4KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9i ZTkwODk1YS0zYzQzLTRiMzgtYTVhYS1iMWViYzI2MWI2ZjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2JlOTA4OTVhLTNjNDMtNGIzOC1h NWFhLWIxZWJjMjYxYjZmOS9iZTkwODk1YS0zYzQzLTRiMzgtYTVhYS1iMWViYzI2 MWI2ZjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHAQM4wHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID BhZlAgMGHjgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAcG+Un9ETzWLI+yOB0JNt0qVvlFADkp/a14ivsRj6 kO4sNTL4fyrU2DA8Kbu7ogYKcDdq7quzxfemINureHTtFe29AzYeN9JuzOh+VJqy I+lRQtI+6SzxE5XtIYwbY2h0/2tHF9BgLlqsBEs/Z7znDhWbydflLu09EcCmMuk/ j7n/wokByuYJjmVT4ZfiNNnOqwCfG3Af9BnQsGHbd2GE1jfRHAdzhrUG5AOYMDWQ 0oYunkebDM2g2+Es7h4Oxt0z+WUpxHBIwUs7DyV7qFrxDpcRCpwoMZQOR7eAj8P8 hpLgZNOOxqV7b/6J4G5IZJz20egarw+anMykZRwfs7zX7g== -----END CERTIFICATE-----Generated at Wed May 1 07:10:51 2024 by rpki-client on console-fra.rpki-client.org