$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer File: d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer (raw, json) Hash identifier: imx7YEpy4surO5zaYjglNXUKU/XqgjhtuIeXpqen76Y= Subject key identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285845226E14F72A8DC04FF01D2B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Mar 2024 01:45:21 +0000 Certificate not after: Thu 11 Jun 2026 00:45:21 +0000 Subordinate resources: AS: 400725 IP: 199.45.241.0/24 IP: 2606:dbc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:22:6e:14:f7:2a:8d:c0:4f:f0:1d:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Mar 8 01:45:21 2024 GMT Not After : Jun 11 00:45:21 2026 GMT Subject: CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:16:bf:14:7b:d6:35:21:29:67:4d:41:18: d6:62:ab:6c:a8:ee:e3:04:9b:b1:96:40:d7:9d:2a: 9a:0d:c3:04:00:35:80:80:25:1d:6e:6a:2b:29:a1: 9d:ec:fd:f2:71:63:78:4c:c4:35:6f:b3:22:9d:e8: c3:a2:74:26:c3:a3:c7:49:2e:ec:14:68:61:35:12: 84:4a:c6:44:7d:52:1a:9f:0d:57:a3:9a:e0:14:65: 18:b9:21:44:ad:3d:96:ae:53:f1:e7:9d:c6:90:ea: 3c:47:02:b7:e1:6e:5d:0c:5f:35:fe:61:4c:27:b8: c5:89:b0:84:98:4a:94:10:f4:b1:a3:4d:8f:63:5e: bf:2d:04:b2:31:03:ca:83:c2:4b:9a:a3:d9:c0:0a: b7:46:37:02:0e:67:83:c5:d0:90:72:66:ff:b7:63: b0:ca:b6:10:b3:de:2b:e8:54:8e:c0:5a:27:44:90: d0:d3:77:c1:39:8f:e0:32:b4:4c:25:63:92:ea:c4: 20:6a:22:66:65:48:31:d1:f2:33:c8:90:7e:72:78: 80:01:32:21:ca:67:50:01:4e:f1:2c:25:07:99:76: 8e:3d:6f:b0:a7:cc:2f:8e:59:d6:41:ac:08:cf:94: fa:97:59:06:fb:28:23:51:ad:5e:2c:fa:17:19:15: 27:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.45.241.0/24 IPv6: 2606:dbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400725 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:12:4b:8f:04:07:c4:16:5d:f0:44:0b:7d:f1:2f:52:25:65: ee:5e:25:66:af:40:e1:d5:c3:e2:04:85:67:1b:a4:70:aa:e3: 6c:10:33:8d:63:f1:a7:ee:23:db:3e:0c:c2:d3:e9:bc:d9:23: 8c:10:b2:63:db:a7:06:f5:47:f2:e4:ac:65:e1:29:78:1c:76: 3e:50:48:42:f6:f7:35:c7:42:92:74:cb:ff:25:de:ee:cd:4f: dc:0e:43:3c:a5:f8:d0:c9:2c:7a:c1:cc:26:51:23:5e:45:91: e7:14:b3:c3:0b:52:74:c7:69:5a:0d:3b:e4:46:c6:60:5c:00: 4a:fa:c4:e2:d5:ca:50:29:e5:dc:b8:4b:df:5d:c5:e3:4a:49: 9d:9e:64:b8:63:3b:84:b6:d4:6e:79:2a:75:df:52:2c:a0:36: c2:76:ad:69:5a:f2:ff:91:e0:b3:e4:34:2c:0d:48:04:3b:29: 87:2b:cb:67:48:f1:78:f7:cc:af:ee:83:eb:00:d1:92:1a:81: f9:75:e7:62:1a:d4:10:a3:b8:54:49:21:93:a3:96:40:73:df: b5:6b:0c:14:81:b9:1c:5e:2e:1b:ef:bf:04:ef:3d:62:47:10: 80:f6:31:db:bc:58:f8:69:a5:cb:20:72:9b:66:d0:3f:3e:af: f6:b1:65:c7 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEUibhT3Ko3AT/AdK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDMwODAxNDUyMVoXDTI2MDYxMTAwNDUyMVowLzEtMCsGA1UEAxMk ZDA1MGI0ZGUtZjRjOC00ZWU3LTkwN2EtNGRmMzkyNTNlMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXAWvxR71jUhKWdNQRjWYqtsqO7jBJuxlkDX nSqaDcMEADWAgCUdbmorKaGd7P3ycWN4TMQ1b7MinejDonQmw6PHSS7sFGhhNRKE SsZEfVIanw1Xo5rgFGUYuSFErT2WrlPx553GkOo8RwK34W5dDF81/mFMJ7jFibCE mEqUEPSxo02PY16/LQSyMQPKg8JLmqPZwAq3RjcCDmeDxdCQcmb/t2OwyrYQs94r 6FSOwFonRJDQ03fBOY/gMrRMJWOS6sQgaiJmZUgx0fIzyJB+cniAATIhymdQAU7x LCUHmXaOPW+wp8wvjlnWQawIz5T6l1kG+ygjUa1eLPoXGRUnTQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFFuBtqm88Yl9Bc1EDfPqDu8dTXjmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k MDUwYjRkZS1mNGM4LTRlZTctOTA3YS00ZGYzOTI1M2UxYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2QwNTBiNGRlLWY0YzgtNGVlNy05 MDdhLTRkZjM5MjUzZTFhZS9kMDUwYjRkZS1mNGM4LTRlZTctOTA3YS00ZGYzOTI1 M2UxYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADHLfEwDQQCAAIwBwMFACYG28AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBh1VMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG4SS48EB8QWXfBEC33xL1IlZe5e JWavQOHVw+IEhWcbpHCq42wQM41j8afuI9s+DMLT6bzZI4wQsmPbpwb1R/LkrGXh KXgcdj5QSEL29zXHQpJ0y/8l3u7NT9wOQzyl+NDJLHrBzCZRI15FkecUs8MLUnTH aVoNO+RGxmBcAEr6xOLVylAp5dy4S99dxeNKSZ2eZLhjO4S21G55KnXfUiygNsJ2 rWla8v+R4LPkNCwNSAQ7KYcry2dI8Xj3zK/ug+sA0ZIagfl152Ia1BCjuFRJIZOj lkBz37VrDBSBuRxeLhvvvwTvPWJHEID2Mdu8WPhppcsgcptm0D8+r/axZcc= -----END CERTIFICATE-----Generated at Wed May 1 16:33:35 2024 by rpki-client on console-fra.rpki-client.org