$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer File: c186a276-9141-41da-babe-4559d2c6d734.cer (raw, json) Hash identifier: b/X6BDhT123Jx/q53X7lF36FcINF3Huw8lyruByF0Hs= Subject key identifier: 6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285844C64D8085DF47AB466214E980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 04 Feb 2024 01:45:21 +0000 Certificate not after: Sat 09 May 2026 00:45:21 +0000 Subordinate resources: AS: 17331 IP: 206.168.80.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:c6:4d:80:85:df:47:ab:46:62:14:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 4 01:45:21 2024 GMT Not After : May 9 00:45:21 2026 GMT Subject: CN=c186a276-9141-41da-babe-4559d2c6d734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:25:bc:19:b9:e4:f3:47:74:5b:ee:f6:bc:14: 21:c9:ef:20:c2:ef:b5:88:22:2b:2e:b9:f8:52:29: 39:84:5a:61:9d:41:cd:8b:05:3f:89:de:6e:eb:6c: 25:c7:d4:0c:c5:4b:11:67:be:a6:8a:4f:f8:6d:bb: 2f:29:cc:0b:45:db:68:8b:f2:53:73:3d:ca:91:f3: 77:cb:6d:0a:a7:d2:96:87:e0:ff:d6:21:56:26:af: 3f:f9:16:57:00:b4:45:d0:af:64:fd:64:ff:97:94: df:3f:b1:82:b8:c0:f2:02:fd:cd:b6:68:cb:49:55: 78:72:e5:b1:e6:c2:9a:cd:0a:6b:53:ce:17:55:a3: d1:b2:ba:f3:37:31:2e:e3:7b:e5:ec:43:e5:fd:d7: c7:64:04:a3:03:10:40:2e:64:67:c4:c6:82:a0:80: 60:c7:53:06:d1:29:d8:e8:0b:55:38:0c:68:0b:5c: b5:ee:66:58:4f:71:97:54:79:d1:48:d3:90:3c:20: 73:57:b0:9c:b5:c6:f3:e3:50:cb:3a:17:b8:93:45: 11:65:ac:cb:ec:db:b4:31:14:33:78:bd:33:6e:92: aa:b2:a0:25:3e:2b:3d:0a:34:fd:b8:1f:ea:b7:30: 97:74:dc:0e:08:f6:3b:d4:54:1a:dc:41:7a:05:99: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 206.168.80.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17331 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:45:df:43:54:65:f0:9a:fb:be:23:9d:6b:70:f6:4c:9c:4b: df:8f:ef:ea:92:ff:9a:2c:4f:d0:4c:e0:0e:6a:62:bf:de:64: 0a:f9:a1:66:fd:45:ae:b7:75:71:8a:7e:c4:86:a0:7b:66:3d: 0c:13:f4:ad:5a:3c:1d:06:49:2f:80:4d:4a:07:85:82:91:c6: 75:10:ca:5d:1d:a7:f4:a9:0c:f3:ae:50:22:31:11:2e:56:9a: cb:d0:ea:66:ba:44:6c:ae:0c:ea:42:76:f0:fc:8d:00:ab:93: 22:51:1f:bf:b4:e6:06:91:3f:a7:8f:3d:00:9d:c3:a6:d5:7b: 84:be:d8:fa:fc:4e:7e:22:d3:3d:e5:62:c6:8c:fa:f2:82:b2: 8f:26:53:78:a3:3e:c2:34:81:7b:0c:e6:f1:ed:3f:64:41:d4: 3a:60:21:b0:51:b2:53:01:93:af:9b:2c:53:8b:e7:2f:e1:92: 5d:da:90:f4:5a:47:03:47:f4:19:ac:78:12:0f:6d:ac:80:58: 80:f3:9b:10:eb:af:67:65:b3:6d:8f:9b:5e:36:93:ca:b6:cc: 78:b6:2f:9a:ef:55:f0:29:c4:cd:1d:cd:24:d6:62:a7:11:e5: ba:dd:e9:3d:75:21:71:76:11:69:95:2e:f0:38:aa:9c:8e:a7: d1:94:c4:64 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWETGTYCF30erRmIU6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDIwNDAxNDUyMVoXDTI2MDUwOTAwNDUyMVowLzEtMCsGA1UEAxMk YzE4NmEyNzYtOTE0MS00MWRhLWJhYmUtNDU1OWQyYzZkNzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yW8Gbnk80d0W+72vBQhye8gwu+1iCIrLrn4 Uik5hFphnUHNiwU/id5u62wlx9QMxUsRZ76mik/4bbsvKcwLRdtoi/JTcz3KkfN3 y20Kp9KWh+D/1iFWJq8/+RZXALRF0K9k/WT/l5TfP7GCuMDyAv3NtmjLSVV4cuWx 5sKazQprU84XVaPRsrrzNzEu43vl7EPl/dfHZASjAxBALmRnxMaCoIBgx1MG0SnY 6AtVOAxoC1y17mZYT3GXVHnRSNOQPCBzV7Cctcbz41DLOhe4k0URZazL7Nu0MRQz eL0zbpKqsqAlPis9CjT9uB/qtzCXdNwOCPY71FQa3EF6BZkQZwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFGz+K/XTNq5S8ZPGzPWG0E4TF24jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j MTg2YTI3Ni05MTQxLTQxZGEtYmFiZS00NTU5ZDJjNmQ3MzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MxODZhMjc2LTkxNDEtNDFkYS1i YWJlLTQ1NTlkMmM2ZDczNC9jMTg2YTI3Ni05MTQxLTQxZGEtYmFiZS00NTU5ZDJj NmQ3MzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALOqFAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC Q7MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAaEXfQ1Rl8Jr7viOda3D2TJxL34/v6pL/mixP0EzgDmpiv95k CvmhZv1Frrd1cYp+xIage2Y9DBP0rVo8HQZJL4BNSgeFgpHGdRDKXR2n9KkM865Q IjERLlaay9DqZrpEbK4M6kJ28PyNAKuTIlEfv7TmBpE/p489AJ3DptV7hL7Y+vxO fiLTPeVixoz68oKyjyZTeKM+wjSBewzm8e0/ZEHUOmAhsFGyUwGTr5ssU4vnL+GS XdqQ9FpHA0f0Gax4Eg9trIBYgPObEOuvZ2WzbY+bXjaTyrbMeLYvmu9V8CnEzR3N JNZipxHlut3pPXUhcXYRaZUu8DiqnI6n0ZTEZA== -----END CERTIFICATE-----Generated at Wed May 1 16:33:35 2024 by rpki-client on console-fra.rpki-client.org