$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer File: d416e28d-79e4-4432-b727-97e9702afe09.cer (raw, json) Hash identifier: zxl+Yw6smQZzYAIJmV2Vz3gIM+1J1voDN6z9EtCiHTc= Subject key identifier: AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858456AE615AA4DE10D0C216D6240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Apr 2024 00:45:21 +0000 Certificate not after: Tue 07 Jul 2026 00:45:21 +0000 Subordinate resources: IP: 208.73.212.0/22 IP: 2602:fb92::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6a:e6:15:aa:4d:e1:0d:0c:21:6d:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Apr 3 00:45:21 2024 GMT Not After : Jul 7 00:45:21 2026 GMT Subject: CN=d416e28d-79e4-4432-b727-97e9702afe09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ad:c9:cf:6e:4d:23:01:1c:92:e9:12:df:af: 80:0c:71:21:e3:e0:90:5a:d3:3f:95:57:8f:56:f2: de:09:0d:7a:af:39:c3:6a:71:de:31:ff:8c:4d:0d: 89:d5:74:79:36:5b:da:50:83:e2:df:b9:a7:66:a2: 33:fb:b8:30:33:7e:39:22:bb:d8:fe:e8:4c:53:50: 8b:11:1d:62:0e:ab:3c:57:cf:d5:a1:d1:cc:6e:97: 40:96:ee:60:73:36:1a:bd:0a:89:c6:2b:c8:bb:ec: ca:56:52:44:62:5f:48:bd:8b:5d:b9:c7:b2:b2:d4: f3:1f:be:23:90:1e:b6:0f:b5:2e:cc:fd:d6:f3:24: 27:fc:f3:26:3f:49:2a:5a:48:a5:3b:36:a0:35:a0: c7:d8:df:91:9d:7c:e4:15:3a:67:e3:48:0c:f6:f9: d3:83:e3:60:78:c4:c9:eb:38:18:67:aa:ff:78:cf: 14:64:33:0e:53:e2:2c:07:d9:40:4b:af:3c:6e:63: 83:53:e6:16:27:bc:41:c4:a7:97:37:57:c4:24:a5: 21:82:5e:7e:42:2d:2e:ca:cc:5f:dd:50:87:60:9f: d1:9e:5a:e8:a9:39:19:24:9e:a6:6d:99:ce:14:47: 58:38:13:f7:4e:65:ac:a7:92:0d:e2:c5:3e:40:b7: fb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 208.73.212.0/22 IPv6: 2602:fb92::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f3:20:b7:75:3a:df:c0:e6:39:a5:12:22:7c:f9:07:bd:0f: c8:3f:36:dd:f2:20:38:d5:d8:9d:04:dc:e9:90:21:da:77:f1: e2:39:34:f3:96:e2:0a:0e:d3:7b:66:0c:36:c4:ef:73:89:d8: 7f:c1:35:c1:26:c8:c5:9d:33:13:5e:f2:b5:90:98:ee:d5:e6: ef:f2:96:01:c8:14:fd:eb:44:34:a0:0c:1b:a4:68:b2:39:11: 5f:18:12:6d:7a:41:b2:1a:cd:65:f3:2b:4e:ea:bd:6f:2f:12: 80:08:cc:12:d3:e6:52:9a:71:c4:83:04:30:b9:1a:08:71:b2: 07:ce:91:43:d6:5c:e7:d4:f1:ed:9c:70:25:ac:42:89:cb:6b: 62:bb:04:e7:7a:e4:cf:55:73:0a:3d:15:45:f5:3d:4e:f4:65: a1:08:18:92:eb:9f:b3:c1:e3:ba:a2:47:f1:e2:bb:28:89:94: 00:68:b2:ac:63:c3:c1:0e:92:a1:1a:99:51:1a:63:27:0e:86: 11:87:95:58:80:30:53:fc:79:ff:2d:a9:9b:9e:44:22:fc:6f: 46:9b:15:67:3f:48:3b:9d:45:20:3f:5e:5f:d4:87:e1:fe:27: 86:93:de:a8:15:d5:1e:ac:8d:64:03:a3:47:02:bd:a9:27:94: 57:bc:c6:40 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEVq5hWqTeENDCFtYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDQwMzAwNDUyMVoXDTI2MDcwNzAwNDUyMVowLzEtMCsGA1UEAxMk ZDQxNmUyOGQtNzllNC00NDMyLWI3MjctOTdlOTcwMmFmZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj63Jz25NIwEckukS36+ADHEh4+CQWtM/lVeP VvLeCQ16rznDanHeMf+MTQ2J1XR5NlvaUIPi37mnZqIz+7gwM345IrvY/uhMU1CL ER1iDqs8V8/VodHMbpdAlu5gczYavQqJxivIu+zKVlJEYl9IvYtduceystTzH74j kB62D7UuzP3W8yQn/PMmP0kqWkilOzagNaDH2N+RnXzkFTpn40gM9vnTg+NgeMTJ 6zgYZ6r/eM8UZDMOU+IsB9lAS688bmODU+YWJ7xBxKeXN1fEJKUhgl5+Qi0uysxf 3VCHYJ/RnlroqTkZJJ6mbZnOFEdYOBP3TmWsp5IN4sU+QLf74wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFKzAJjIEU5LeYrvYp2zSdtsFUjq7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k NDE2ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5NzAyYWZlMDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q0MTZlMjhkLTc5ZTQtNDQzMi1i NzI3LTk3ZTk3MDJhZmUwOS9kNDE2ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5NzAy YWZlMDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALQSdQwDgQCAAIwCAMGBCYC+5IAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AC7zILd1Ot/A5jmlEiJ8+Qe9D8g/Nt3yIDjV2J0E3OmQIdp38eI5NPOW4goO03tm DDbE73OJ2H/BNcEmyMWdMxNe8rWQmO7V5u/ylgHIFP3rRDSgDBukaLI5EV8YEm16 QbIazWXzK07qvW8vEoAIzBLT5lKaccSDBDC5GghxsgfOkUPWXOfU8e2ccCWsQonL a2K7BOd65M9Vcwo9FUX1PU70ZaEIGJLrn7PB47qiR/HiuyiJlABosqxjw8EOkqEa mVEaYycOhhGHlViAMFP8ef8tqZueRCL8b0abFWc/SDudRSA/Xl/Uh+H+J4aT3qgV 1R6sjWQDo0cCvaknlFe8xkA= -----END CERTIFICATE-----Generated at Wed May 1 12:32:37 2024 by rpki-client on console-ams.rpki-client.org