$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer File: cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer (raw, json) Hash identifier: S/Jlry8RZqLLJ5cxhY0K+E3nALB5HfS4y91x/BVoAJ0= Subject key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584506833B7F634B5E6CEE8DB200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 Feb 2024 01:45:20 +0000 Certificate not after: Mon 01 Jun 2026 00:45:20 +0000 Subordinate resources: IP: 207.174.4.0/22 IP: 2602:2db::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:06:83:3b:7f:63:4b:5e:6c:ee:8d:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 27 01:45:20 2024 GMT Not After : Jun 1 00:45:20 2026 GMT Subject: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2f:1f:6e:e2:0f:6a:e1:0d:1a:b5:67:d4:c2: d4:a3:7b:a3:85:93:b6:27:cf:72:eb:b3:3e:c8:1b: 8d:7b:a5:00:97:82:a6:bf:1c:e9:08:5d:be:ad:b9: 7d:d6:22:69:6e:c4:24:27:47:03:12:a8:94:59:89: 51:ab:12:74:4f:ab:ca:68:1f:0f:ed:b3:39:16:3c: 51:9c:76:55:1a:40:72:5f:e1:d4:c7:6c:5b:d4:1b: 80:69:1c:25:20:78:a1:83:db:cf:1a:31:48:f3:94: 0d:46:76:76:5f:45:dc:5c:49:94:08:1f:9b:45:43: c1:bc:94:92:ab:24:02:ca:0d:33:e3:7e:ca:24:b5: 60:1e:7f:d4:3a:f2:52:13:8a:64:ff:ca:b6:c8:d2: b2:69:10:2f:53:d7:c8:59:63:df:2e:69:b3:75:b4: 8b:b0:99:b6:20:5b:23:f8:5d:0a:a2:fb:d3:8d:fb: 01:0a:18:67:dd:89:03:2c:28:07:61:31:ad:49:a6: f4:af:97:f8:cb:fc:a3:36:00:a3:45:4e:d4:13:72: b3:1e:89:a5:c6:ba:aa:d0:f0:37:7c:c9:b7:35:6f: a0:d7:94:bc:3a:98:4c:b4:5b:0f:ea:d4:5f:70:12: 69:7e:59:62:4a:9d:82:6e:30:51:62:9e:63:d2:e0: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 207.174.4.0/22 IPv6: 2602:2db::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:85:d6:9a:53:1d:8b:59:12:94:53:ed:68:29:a3:05:72:33: 3f:ea:b0:a7:91:72:00:d6:f2:ec:c4:14:57:ba:98:2b:67:9e: 05:57:78:0d:4e:98:fb:c1:2c:7f:dd:cb:92:a1:09:b4:b1:e2: 3d:55:3e:16:ba:21:61:a5:62:55:d4:25:0f:69:44:a5:ea:cc: ce:ba:51:fe:5e:3a:c6:cd:79:ce:fe:1c:38:fc:57:aa:f9:b5: 1a:22:48:d8:6c:2b:6a:27:b8:82:b5:09:74:62:8d:15:84:93: b6:18:bd:06:d1:4f:47:13:8b:f4:b3:f8:57:75:0a:b3:fd:b7: 93:b0:a8:62:37:64:c9:51:65:9c:5a:7e:00:8a:53:64:32:72: b3:9d:82:09:b7:2e:58:54:8b:71:99:fe:b9:8d:70:32:ea:12: e2:11:a2:22:f2:ab:d3:ca:63:d0:25:58:cb:62:3b:6c:78:c4: bc:a2:a6:1f:18:50:e1:ff:29:6c:02:77:2f:52:bf:23:42:dc: d0:08:63:bf:15:f7:f1:96:82:ca:b4:bc:04:c6:b1:96:a6:40: 04:aa:f9:bf:6c:97:83:9a:0c:af:ed:f3:74:88:f2:bf:ab:2b: b3:af:fa:84:d6:1b:52:fd:98:49:08:c2:40:9d:71:db:f2:95: 9c:9b:cd:82 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEUGgzt/Y0tebO6NsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDIyNzAxNDUyMFoXDTI2MDYwMTAwNDUyMFowLzEtMCsGA1UEAxMk Y2MwZWIyZGUtZTVlOC00MTA4LTg3MGUtOGNiYmZmMzk4ODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC8fbuIPauENGrVn1MLUo3ujhZO2J89y67M+ yBuNe6UAl4KmvxzpCF2+rbl91iJpbsQkJ0cDEqiUWYlRqxJ0T6vKaB8P7bM5FjxR nHZVGkByX+HUx2xb1BuAaRwlIHihg9vPGjFI85QNRnZ2X0XcXEmUCB+bRUPBvJSS qyQCyg0z437KJLVgHn/UOvJSE4pk/8q2yNKyaRAvU9fIWWPfLmmzdbSLsJm2IFsj +F0KovvTjfsBChhn3YkDLCgHYTGtSab0r5f4y/yjNgCjRU7UE3KzHomlxrqq0PA3 fMm3NW+g15S8OphMtFsP6tRfcBJpflliSp2CbjBRYp5j0uDt9QIDAQABo4IEDzCC BAswHQYDVR0OBBYEFGwoEUvC40qcgZfaM0h7Hq9Od/TJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j YzBlYjJkZS1lNWU4LTQxMDgtODcwZS04Y2JiZmYzOTg4NWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2NjMGViMmRlLWU1ZTgtNDEwOC04 NzBlLThjYmJmZjM5ODg1ZC9jYzBlYjJkZS1lNWU4LTQxMDgtODcwZS04Y2JiZmYz OTg4NWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALPrgQwDgQCAAIwCAMGBCYCAtsAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEiF1ppTHYtZEpRT7WgpowVyMz/qsKeRcgDW8uzEFFe6mCtnngVXeA1OmPvBLH/d y5KhCbSx4j1VPha6IWGlYlXUJQ9pRKXqzM66Uf5eOsbNec7+HDj8V6r5tRoiSNhs K2onuIK1CXRijRWEk7YYvQbRT0cTi/Sz+Fd1CrP9t5OwqGI3ZMlRZZxafgCKU2Qy crOdggm3LlhUi3GZ/rmNcDLqEuIRoiLyq9PKY9AlWMtiO2x4xLyiph8YUOH/KWwC dy9SvyNC3NAIY78V9/GWgsq0vATGsZamQASq+b9sl4OaDK/t83SI8r+rK7Ov+oTW G1L9mEkIwkCdcdvylZybzYI= -----END CERTIFICATE-----Generated at Wed May 1 16:33:35 2024 by rpki-client on console-fra.rpki-client.org