$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer File: c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer (raw, json) Hash identifier: OPMzMGOGfUlcIPU3kEqShySBo5QIDoB9HcGNNJRWkQs= Subject key identifier: CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858436AC1460F2A697E3789CEF680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Oct 2023 13:57:18 +0000 Certificate not after: Tue 23 Sep 2025 00:45:17 +0000 Subordinate resources: AS: 106 AS: 22858 IP: 137.100.0.0/16 IP: 165.159.0.0/16 IP: 166.16.0.0/16 IP: 192.5.164.0/24 IP: 192.26.147.0/24 IP: 192.48.143.0/24 IP: 192.73.3.0/24 IP: 192.101.175.0/24 IP: 192.251.90.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:6a:c1:46:0f:2a:69:7e:37:89:ce:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 2 13:57:18 2023 GMT Not After : Sep 23 00:45:17 2025 GMT Subject: CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:87:03:b4:af:18:b7:1d:7a:08:f7:ef:d1:c6: ea:1f:6e:a1:ec:05:db:1e:3f:e8:98:fa:d9:10:8c: 8a:bb:5d:29:91:07:1b:5a:ab:ad:32:1b:28:60:c9: f1:7a:bd:c8:93:06:9c:21:25:71:b2:6a:b5:92:a7: 30:fa:81:66:8d:d9:45:21:b1:83:54:a2:e7:a7:99: 9d:49:9b:fb:31:69:4c:1f:84:b2:60:83:39:a4:26: 47:cf:85:65:09:4c:e2:e7:28:8d:10:4d:c5:c5:14: e2:95:b3:47:4f:c9:98:2a:f2:47:56:06:d4:3a:83: 5f:dc:ba:29:2d:fc:9d:db:48:33:fb:be:a2:77:27: c0:55:4f:c5:74:16:44:a0:99:ab:44:19:1e:00:93: 8c:3f:6f:97:f5:97:1f:be:da:cc:b3:80:af:35:89: 50:0a:9c:0d:1d:de:74:53:4a:b6:66:69:f0:98:62: d5:f6:c8:80:6c:fe:25:86:41:44:1c:eb:cf:27:d2: 3c:38:2b:58:2e:e4:01:13:4b:f6:a9:a8:19:b2:69: 52:48:28:96:49:45:44:dd:07:04:99:f0:28:91:1b: a1:0f:ea:01:20:b3:f0:49:b1:c5:e4:c7:a5:89:6e: c6:4f:e8:4e:b0:04:4c:34:85:75:54:58:6e:1e:cf: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 137.100.0.0/16 165.159.0.0/16 166.16.0.0/16 192.5.164.0/24 192.26.147.0/24 192.48.143.0/24 192.73.3.0/24 192.101.175.0/24 192.251.90.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 106 22858 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:23:9c:4e:87:0f:e5:85:72:c3:81:69:1d:9e:f4:0a:03:a2: d7:a2:b1:6d:7b:73:9b:f1:3a:49:11:72:60:01:d6:36:8e:de: 4c:08:35:c7:76:14:e5:ad:f7:11:93:41:95:e3:ad:3a:e3:87: 79:96:21:c0:ad:19:30:00:67:bc:d8:1d:57:21:ab:66:ac:f4: a4:45:4d:ab:22:b2:a6:32:67:bf:0b:cd:2e:e2:88:09:59:d9: 57:16:4b:c7:a5:9a:a1:8d:37:48:a6:f4:8a:55:11:75:13:ce: f2:8d:ca:0f:5a:41:73:9a:e8:d6:a5:0c:82:06:64:5a:4c:00: 98:36:27:7c:fa:31:27:f0:06:8d:80:37:49:89:1c:df:01:b5: 65:0a:c0:4d:81:0a:d8:03:7a:1d:f3:0f:94:0b:21:73:6e:58: 17:a3:4b:2d:9e:a5:db:fc:1c:a3:f2:f3:8f:0d:1f:ae:a7:f7: 4e:50:30:9a:97:25:4d:e8:1d:c6:99:8a:ba:1b:2c:2a:11:56: 9d:bb:2e:ef:c6:07:90:c8:80:d7:fe:08:49:1b:77:24:be:fa: f6:a5:f9:23:0a:1e:10:59:27:e0:e3:ad:22:f1:8a:29:53:50: db:18:c0:d4:27:8b:b6:97:2b:17:6b:2b:20:04:a4:c9:97:63: 4e:ae:4e:0e -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWENqwUYPKml+N4nO9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTAwMjEzNTcxOFoXDTI1MDkyMzAwNDUxN1owLzEtMCsGA1UEAxMk YzAxN2VlNmMtMmYxZi00ZDVhLTgyZDktY2RlY2JmZmU2OGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYcDtK8Ytx16CPfv0cbqH26h7AXbHj/omPrZ EIyKu10pkQcbWqutMhsoYMnxer3IkwacISVxsmq1kqcw+oFmjdlFIbGDVKLnp5md SZv7MWlMH4SyYIM5pCZHz4VlCUzi5yiNEE3FxRTilbNHT8mYKvJHVgbUOoNf3Lop Lfyd20gz+76idyfAVU/FdBZEoJmrRBkeAJOMP2+X9ZcfvtrMs4CvNYlQCpwNHd50 U0q2ZmnwmGLV9siAbP4lhkFEHOvPJ9I8OCtYLuQBE0v2qagZsmlSSCiWSUVE3QcE mfAokRuhD+oBILPwSbHF5MeliW7GT+hOsARMNIV1VFhuHs8D2QIDAQABo4IESjCC BEYwHQYDVR0OBBYEFMuP64Po0rV7FiA0a+XE+4CmBoZFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j MDE3ZWU2Yy0yZjFmLTRkNWEtODJkOS1jZGVjYmZmZTY4ZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MwMTdlZTZjLTJmMWYtNGQ1YS04 MmQ5LWNkZWNiZmZlNjhmYS9jMDE3ZWU2Yy0yZjFmLTRkNWEtODJkOS1jZGVjYmZm ZTY4ZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MDkEAgABMDMDAwCJZAMDAKWfAwMAphADBADABaQDBADAGpMDBADA MI8DBADASQMDBADAZa8DBADA+1owHAYIKwYBBQUHAQgBAf8EDTALoAkwBwIBagIC WUowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALyOcTocP5YVyw4FpHZ70CgOi16KxbXtzm/E6SRFyYAHWNo7e TAg1x3YU5a33EZNBleOtOuOHeZYhwK0ZMABnvNgdVyGrZqz0pEVNqyKypjJnvwvN LuKICVnZVxZLx6WaoY03SKb0ilURdRPO8o3KD1pBc5ro1qUMggZkWkwAmDYnfPox J/AGjYA3SYkc3wG1ZQrATYEK2AN6HfMPlAshc25YF6NLLZ6l2/wco/Lzjw0frqf3 TlAwmpclTegdxpmKuhssKhFWnbsu78YHkMiA1/4ISRt3JL769qX5IwoeEFkn4OOt IvGKKVNQ2xjA1CeLtpcrF2srIASkyZdjTq5ODg== -----END CERTIFICATE-----Generated at Wed May 1 16:00:01 2024 by rpki-client on console-ams.rpki-client.org