$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer File: c9bd201b-ca94-46d6-909a-8b5b404b5361.cer (raw, json) Hash identifier: y4i8ZKzALXB5qQlWUkTQxUmtmTDEPLkjwMkPvg1uPEk= Subject key identifier: C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858422DC0E198747A2CA1304F7F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Jun 2023 00:45:16 +0000 Certificate not after: Sat 13 Sep 2025 00:45:16 +0000 Subordinate resources: IP: 167.234.36.0/24 IP: 203.2.198.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:2d:c0:e1:98:74:7a:2c:a1:30:4f:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 11 00:45:16 2023 GMT Not After : Sep 13 00:45:16 2025 GMT Subject: CN=c9bd201b-ca94-46d6-909a-8b5b404b5361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:77:99:b0:a2:11:b6:fa:69:88:9f:a1:60: e0:ae:a1:48:c5:d9:ed:80:72:74:c5:6e:5f:fd:4a: a1:64:a1:b6:db:f8:01:d5:af:97:2b:9e:19:39:6a: 19:12:81:f7:f4:60:15:2d:53:fa:0b:96:f2:f1:bf: c5:ed:25:3a:9c:9e:da:fb:6c:2e:fa:c4:0f:73:09: c0:ec:e6:56:c8:c3:c8:f1:ad:4e:17:c6:66:95:ed: cd:dc:e4:a8:65:d7:71:bb:15:03:ae:09:3d:46:4c: 8c:b2:f0:cc:c3:09:62:c4:ff:a9:c6:3c:6f:2d:14: 88:32:50:7b:f2:66:38:05:8a:2b:0b:2a:b2:9a:4e: 17:f7:75:0e:b1:12:38:7a:82:df:df:1b:f3:8e:cc: 7a:6b:4a:db:b7:32:aa:e2:6b:19:da:a9:6b:3f:01: 6d:fd:6a:4e:0f:7a:8b:d6:26:e3:8c:93:51:d6:86: f5:a2:65:d0:8c:b1:3c:bf:80:21:d9:b7:da:20:ee: 1d:2f:4d:e5:6f:b8:fc:d1:27:32:b8:89:1a:a3:21: 6c:28:a7:0e:c1:6a:26:f7:84:60:03:d8:c1:18:31: 0e:69:c1:90:a8:82:92:d9:29:23:16:0b:16:d1:a8: cc:d1:c4:f0:81:21:98:f2:94:85:00:48:c6:f6:a7: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 167.234.36.0/24 203.2.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:00:c3:ea:cc:39:49:9f:ae:b5:77:78:44:04:d0:79:17:f3: 8e:ef:69:f9:4c:54:e8:50:7a:38:18:28:49:b8:20:a0:ec:ea: a7:2d:76:0e:7a:f7:4a:bf:79:47:0f:7c:2a:bb:21:95:d7:0d: c2:e6:34:81:26:97:08:c5:63:c7:d0:b4:b8:ea:1a:04:f5:8f: 17:88:d6:ed:c9:91:71:0c:1a:9e:86:2e:e7:cf:23:4b:35:db: 90:f7:95:f1:48:83:28:82:f1:c4:a3:30:a9:9f:83:b0:ed:e3: 7d:ee:48:88:d5:3a:03:07:eb:67:59:b7:3d:be:97:fa:44:5f: 61:81:36:f9:4e:2c:d2:a1:a1:6e:91:54:62:a2:28:c3:b0:22: a1:d9:46:7f:d5:b1:30:8a:97:c8:08:08:2a:ed:60:c9:49:35: c5:71:01:18:dc:50:38:ef:b5:be:da:d3:73:90:bc:b1:05:8c: 6a:0b:24:7a:2a:3b:85:1c:d1:68:58:87:6b:82:42:1f:6e:1c: 61:f8:0c:10:2e:e1:1c:dc:f5:54:5f:21:31:47:99:1d:94:fc: eb:6b:b9:3a:6e:2e:fa:0e:79:e4:da:c4:8d:37:a3:fb:6a:18: ef:fb:1b:ca:5c:40:68:ee:dd:ab:0b:2f:a1:fa:f5:c6:3e:e7: f5:65:67:a4 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEItwOGYdHosoTBPf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDYxMTAwNDUxNloXDTI1MDkxMzAwNDUxNlowLzEtMCsGA1UEAxMk YzliZDIwMWItY2E5NC00NmQ2LTkwOWEtOGI1YjQwNGI1MzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssR3mbCiEbb6aYifoWDgrqFIxdntgHJ0xW5f /UqhZKG22/gB1a+XK54ZOWoZEoH39GAVLVP6C5by8b/F7SU6nJ7a+2wu+sQPcwnA 7OZWyMPI8a1OF8Zmle3N3OSoZddxuxUDrgk9RkyMsvDMwwlixP+pxjxvLRSIMlB7 8mY4BYorCyqymk4X93UOsRI4eoLf3xvzjsx6a0rbtzKq4msZ2qlrPwFt/WpOD3qL 1ibjjJNR1ob1omXQjLE8v4Ah2bfaIO4dL03lb7j80ScyuIkaoyFsKKcOwWom94Rg A9jBGDEOacGQqIKS2SkjFgsW0ajM0cTwgSGY8pSFAEjG9qclTQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFME34SxLk3+mC58RWq/pnWL0hSIDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j OWJkMjAxYi1jYTk0LTQ2ZDYtOTA5YS04YjViNDA0YjUzNjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2M5YmQyMDFiLWNhOTQtNDZkNi05 MDlhLThiNWI0MDRiNTM2MS9jOWJkMjAxYi1jYTk0LTQ2ZDYtOTA5YS04YjViNDA0 YjUzNjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACn6iQDBADLAsYwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANADD6sw5SZ+u tXd4RATQeRfzju9p+UxU6FB6OBgoSbggoOzqpy12Dnr3Sr95Rw98KrshldcNwuY0 gSaXCMVjx9C0uOoaBPWPF4jW7cmRcQwanoYu588jSzXbkPeV8UiDKILxxKMwqZ+D sO3jfe5IiNU6AwfrZ1m3Pb6X+kRfYYE2+U4s0qGhbpFUYqIow7AiodlGf9WxMIqX yAgIKu1gyUk1xXEBGNxQOO+1vtrTc5C8sQWMagskeio7hRzRaFiHa4JCH24cYfgM EC7hHNz1VF8hMUeZHZT862u5Om4u+g555NrEjTej+2oY7/sbylxAaO7dqwsvofr1 xj7n9WVnpA== -----END CERTIFICATE-----Generated at Wed May 1 16:00:02 2024 by rpki-client on console-ams.rpki-client.org