$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer File: c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer (raw, json) Hash identifier: x6U35SpIb54I/ds4W/xNE9bB/+cmegtn527gNiQ7byo= Subject key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285843FA818456CF9A420B9D329B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Nov 2023 01:45:15 +0000 Certificate not after: Wed 25 Feb 2026 01:45:15 +0000 Subordinate resources: IP: 199.34.242.0/23 IP: 199.48.208.0/22 IP: 2605:2c40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:fa:81:84:56:cf:9a:42:0b:9d:32:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Nov 23 01:45:15 2023 GMT Not After : Feb 25 01:45:15 2026 GMT Subject: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:83:45:b4:23:3d:b2:63:b8:26:6f:3f:89: 45:9d:ef:5e:67:f4:2e:7c:a6:50:27:b5:26:ef:83: 8a:6a:48:f7:57:76:a5:96:5d:c0:d2:31:e5:bb:01: 1d:63:0e:00:57:44:70:41:b6:1b:8b:db:52:88:9d: f7:fe:dd:e9:a8:d6:de:d5:70:53:01:aa:38:a2:10: 07:0e:de:2b:d5:c2:aa:26:cc:13:90:30:9c:c3:b7: b0:de:e6:7a:a4:bc:7d:7e:76:30:ab:d5:53:f0:7f: 8f:7e:cc:8c:ca:62:ca:17:7c:ab:2e:af:63:c1:b6: 4a:07:05:1d:64:ba:bc:d2:bd:10:7b:f6:67:2e:18: 01:25:55:6b:b3:09:fb:c4:9f:a4:a0:14:86:67:84: cd:4a:92:20:44:14:c1:5b:56:46:38:7d:51:14:39: 80:79:d8:6e:00:32:d3:d7:7f:a9:97:6f:95:b8:0b: a2:1c:d1:97:1d:46:2f:9b:28:1c:39:79:b1:ab:fc: d4:4c:d1:1b:53:d7:80:35:9b:5e:0d:fd:c6:d7:e8: 76:5b:39:fe:cf:4c:3c:69:4f:2d:7c:15:34:45:d4: f6:53:ca:33:0b:2d:90:8d:32:ef:a3:87:a9:57:d4: a0:e4:3a:ff:8a:36:51:3c:bf:de:ed:f1:3b:e5:c3: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.34.242.0/23 199.48.208.0/22 IPv6: 2605:2c40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f3:e4:d4:35:b1:90:eb:61:fe:96:a1:4a:90:99:82:af:7c: 17:2d:18:d9:a2:15:54:60:31:15:b5:82:62:4e:65:24:35:ae: 51:80:41:06:27:dc:9a:52:b4:76:13:44:6c:4d:61:bf:86:58: 12:e5:1c:9d:78:13:25:7e:4e:fc:66:fc:55:4c:93:52:00:5d: 6b:3c:05:56:81:a6:51:95:86:b2:92:f3:c7:fb:f5:ac:31:39: 11:78:91:d7:20:99:29:7c:7e:d1:4d:c7:7a:81:44:80:14:b7: 60:76:fc:15:16:09:79:53:26:67:5d:68:ba:b5:e0:0b:27:a8: fa:cd:1c:9a:cc:ea:b4:f4:ef:d6:71:26:ee:3c:34:5f:ee:90: 7e:9f:8f:38:a3:2c:28:28:cd:3c:d1:4d:91:4e:b2:da:85:8e: d9:e8:b9:63:2f:43:26:fd:f3:3c:0f:a8:03:43:bc:45:04:4b: 09:31:90:d1:40:fe:ac:ee:0b:bb:8f:80:f6:18:a3:02:da:9b: 99:4c:13:46:ba:6d:2a:11:5b:2f:46:5b:8d:1f:56:0a:4a:a6: 53:a2:6a:18:60:15:b5:79:7f:c6:3b:65:11:b4:7d:4b:d3:cc: 3b:3c:03:d9:d7:98:26:73:21:47:b0:25:3c:9b:78:bf:b7:8f: a3:04:16:04 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEP6gYRWz5pCC50ymwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTEyMzAxNDUxNVoXDTI2MDIyNTAxNDUxNVowLzEtMCsGA1UEAxMk YzlhYTE1NjctODlhOS00Y2U0LThiZDctZTYyNDk5OTA5MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWeDRbQjPbJjuCZvP4lFne9eZ/QufKZQJ7Um 74OKakj3V3alll3A0jHluwEdYw4AV0RwQbYbi9tSiJ33/t3pqNbe1XBTAao4ohAH Dt4r1cKqJswTkDCcw7ew3uZ6pLx9fnYwq9VT8H+PfsyMymLKF3yrLq9jwbZKBwUd ZLq80r0Qe/ZnLhgBJVVrswn7xJ+koBSGZ4TNSpIgRBTBW1ZGOH1RFDmAedhuADLT 13+pl2+VuAuiHNGXHUYvmygcOXmxq/zUTNEbU9eANZteDf3G1+h2Wzn+z0w8aU8t fBU0RdT2U8ozCy2QjTLvo4epV9Sg5Dr/ijZRPL/e7fE75cPw1QIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFPbindzzmGl8E7noUh1AB4gdIU0IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j OWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5MDkxZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2M5YWExNTY3LTg5YTktNGNlNC04 YmQ3LWU2MjQ5OTkwOTFlMy9jOWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5 MDkxZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAHHIvIDBALHMNAwDQQCAAIwBwMFACYFLEAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGPPk1DWxkOth/pahSpCZgq98Fy0Y2aIVVGAxFbWCYk5lJDWuUYBBBifc mlK0dhNEbE1hv4ZYEuUcnXgTJX5O/Gb8VUyTUgBdazwFVoGmUZWGspLzx/v1rDE5 EXiR1yCZKXx+0U3HeoFEgBS3YHb8FRYJeVMmZ11ourXgCyeo+s0cmszqtPTv1nEm 7jw0X+6Qfp+POKMsKCjNPNFNkU6y2oWO2ei5Yy9DJv3zPA+oA0O8RQRLCTGQ0UD+ rO4Lu4+A9hijAtqbmUwTRrptKhFbL0ZbjR9WCkqmU6JqGGAVtXl/xjtlEbR9S9PM OzwD2deYJnMhR7AlPJt4v7ePowQWBA== -----END CERTIFICATE-----Generated at Wed May 1 16:33:35 2024 by rpki-client on console-fra.rpki-client.org