$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188.cer File: ced1e153-6559-46ef-8f8b-ee841a2a0188.cer (raw, json) Hash identifier: eAzFpbHkLpsCiWGPZq7X8Ri5U+qeoWspGLOYZLxIr/I= Subject key identifier: 5F:2B:B2:0E:6A:C5:63:EB:F3:66:68:1A:C6:64:F0:ED:3B:A4:5A:4B Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584578DB809E0A7F0120CC594400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Apr 2024 00:45:20 +0000 Certificate not after: Sun 12 Jul 2026 00:45:20 +0000 Subordinate resources: AS: 394889 IP: 199.48.172.0/22 IP: 2620:135:a000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:78:db:80:9e:0a:7f:01:20:cc:59:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 8 00:45:20 2024 GMT Not After : Jul 12 00:45:20 2026 GMT Subject: CN=ced1e153-6559-46ef-8f8b-ee841a2a0188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:e7:77:e3:7f:bb:46:90:b3:13:87:f7:77: b0:e6:8d:e2:e2:16:a5:1b:74:48:90:d3:01:50:8b: c6:8c:41:bf:f7:02:8c:fc:26:2f:e0:48:66:0c:f3: e0:ba:c6:2a:66:8f:7e:ab:13:57:3c:b8:c0:dc:e2: 7c:88:00:4c:76:00:df:fa:b2:0f:bf:a1:03:f8:1a: 62:86:df:7c:a4:d0:cc:67:65:aa:94:18:19:70:dd: 83:24:b8:90:aa:d5:91:cc:c5:07:1b:e1:52:95:72: 06:2a:93:a5:30:b5:32:5b:52:75:88:a9:21:5f:a1: e8:07:b0:af:4e:51:70:72:3e:62:03:5c:9d:21:90: 61:bc:31:c0:18:67:03:90:34:30:7b:e9:0c:2d:01: a3:fd:63:5c:6e:fc:69:36:4d:81:a1:39:93:57:42: 45:09:cf:6b:d2:45:de:cc:27:0f:54:eb:e7:d9:a4: d8:36:c1:2c:4f:34:83:7d:9b:80:c9:9b:62:b2:91: 35:d8:5b:46:79:82:c5:02:5a:56:22:1b:97:41:47: b1:af:7d:b8:3f:2a:00:9a:55:49:fc:65:1c:09:e0: 46:0a:73:5e:36:33:db:a1:1e:a5:a8:75:19:6b:8a: 43:ac:ad:ef:ef:4f:b8:eb:7f:69:dd:4a:f5:ba:9c: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2B:B2:0E:6A:C5:63:EB:F3:66:68:1A:C6:64:F0:ED:3B:A4:5A:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ced1e153-6559-46ef-8f8b-ee841a2a0188/ced1e153-6559-46ef-8f8b-ee841a2a0188.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.48.172.0/22 IPv6: 2620:135:a000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394889 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:44:f9:71:11:e4:18:7d:86:4f:b5:11:d8:8e:1f:7d:ca:26: 65:8a:e3:8c:12:b8:46:cb:f9:87:00:80:4e:e3:a1:75:6f:7a: ff:c8:d8:f5:b9:40:1b:fd:82:d2:00:bf:f8:ca:30:6f:b8:b8: b3:02:07:7c:01:fb:4c:3e:a5:3f:7c:98:d6:a7:d5:83:e0:94: e9:b2:b3:b6:a3:11:09:95:2b:ac:be:1a:9a:de:d8:91:a7:b5: 29:63:fd:69:4c:20:81:78:81:f3:35:b2:77:e4:c1:74:ed:29: 4a:43:7a:f2:ee:07:16:af:59:11:34:78:b9:94:0f:a1:4d:74: 72:0a:af:5f:94:25:59:6d:a0:52:e1:9b:bb:5b:25:2b:da:5e: 6a:5c:05:ae:f8:d3:66:25:ee:38:76:b8:31:69:6b:4c:b3:97: 43:b7:52:cc:8a:f0:bc:b4:73:e0:83:f6:26:a9:2b:86:48:2d: 1a:1b:69:a8:1b:8b:d9:e1:bb:22:48:81:11:11:14:a2:5c:6d: 30:6d:eb:19:96:a1:4e:66:14:d2:c9:53:4d:27:68:5b:4f:f2: 85:fe:e5:fa:b9:e5:3b:46:e2:5a:67:8b:b4:db:96:bb:b5:dd: 91:b0:3a:42:96:89:b9:2b:6d:dc:39:96:b1:7a:2e:dd:4e:f2: d3:88:e5:26 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEV424CeCn8BIMxZRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDQwODAwNDUyMFoXDTI2MDcxMjAwNDUyMFowLzEtMCsGA1UEAxMk Y2VkMWUxNTMtNjU1OS00NmVmLThmOGItZWU4NDFhMmEwMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnjnd+N/u0aQsxOH93ew5o3i4halG3RIkNMB UIvGjEG/9wKM/CYv4EhmDPPgusYqZo9+qxNXPLjA3OJ8iABMdgDf+rIPv6ED+Bpi ht98pNDMZ2WqlBgZcN2DJLiQqtWRzMUHG+FSlXIGKpOlMLUyW1J1iKkhX6HoB7Cv TlFwcj5iA1ydIZBhvDHAGGcDkDQwe+kMLQGj/WNcbvxpNk2BoTmTV0JFCc9r0kXe zCcPVOvn2aTYNsEsTzSDfZuAyZtispE12FtGeYLFAlpWIhuXQUexr324PyoAmlVJ /GUcCeBGCnNeNjPboR6lqHUZa4pDrK3v70+4639p3Ur1upwdhwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFF8rsg5qxWPr82ZoGsZk8O07pFpLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j ZWQxZTE1My02NTU5LTQ2ZWYtOGY4Yi1lZTg0MWEyYTAxODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2NlZDFlMTUzLTY1NTktNDZlZi04 ZjhiLWVlODQxYTJhMDE4OC9jZWQxZTE1My02NTU5LTQ2ZWYtOGY4Yi1lZTg0MWEy YTAxODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHMKwwDgQCAAIwCAMGACYgATWgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYGiTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdRPlxEeQYfYZPtRHYjh99yiZl iuOMErhGy/mHAIBO46F1b3r/yNj1uUAb/YLSAL/4yjBvuLizAgd8AftMPqU/fJjW p9WD4JTpsrO2oxEJlSusvhqa3tiRp7UpY/1pTCCBeIHzNbJ35MF07SlKQ3ry7gcW r1kRNHi5lA+hTXRyCq9flCVZbaBS4Zu7WyUr2l5qXAWu+NNmJe44drgxaWtMs5dD t1LMivC8tHPgg/YmqSuGSC0aG2moG4vZ4bsiSIERERSiXG0wbesZlqFOZhTSyVNN J2hbT/KF/uX6ueU7RuJaZ4u025a7td2RsDpClom5K23cOZaxei7dTvLTiOUm -----END CERTIFICATE-----Generated at Wed May 1 16:33:35 2024 by rpki-client on console-fra.rpki-client.org