$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer File: d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer (raw, json) Hash identifier: hVio3l9DFck5f1NexPc3wyAsuPzt8ulTOYxv7dV4S54= Subject key identifier: 83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285841E48347F098EA2B832683EBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sun 11 May 2025 19:06:39 +0000 Subordinate resources: IP: 23.149.248.0/24 IP: 149.112.53.0/24 IP: 2602:fa90::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:47:f0:98:ea:2b:83:26:83:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 11 19:06:39 2025 GMT Subject: CN=d8ea1081-bccb-41d5-b0fe-1b9724cced3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:d4:ff:61:ea:f1:09:67:74:99:6c:75:bb: 52:c5:29:53:dc:53:d5:64:33:e6:21:df:d7:f6:46: e3:db:b0:49:4d:03:cd:a3:1a:c7:d5:5d:8e:0a:49: 54:f8:1c:70:ef:67:35:2f:ba:5f:d5:08:df:0b:46: 8d:97:21:1d:01:62:e5:69:19:4c:e4:34:06:54:47: af:96:82:bd:a5:6f:ec:81:f5:8c:df:a3:77:5e:c3: 10:76:4d:9c:1a:c2:92:a6:01:79:4d:d4:c4:03:77: 77:2d:83:df:60:6a:cd:33:1d:74:05:84:b7:e0:29: a0:bd:11:11:1e:57:db:ac:29:4d:48:0a:41:dd:37: c9:1b:ad:7e:fc:75:59:38:0b:75:ef:4c:bd:7c:8e: 09:0b:0e:8f:9c:d0:1f:53:7b:a7:93:37:67:3c:53: 55:bd:37:36:38:37:b8:dd:c5:c4:2d:ec:cc:36:76: d7:d3:a7:fd:64:2d:1b:da:6c:6b:db:58:17:81:2b: 9e:e8:25:d6:3f:b9:ff:6c:c0:b0:ba:e2:e2:47:fc: be:35:72:1a:98:a8:8e:c2:ae:4b:b1:2e:f2:e4:c9: 6d:56:59:b5:53:89:69:45:b8:35:a6:9e:63:3c:d0: e9:89:1c:5c:e1:f1:66:03:18:34:64:4c:88:8f:a1: b1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:66:CF:7B:DF:D7:40:6C:72:0E:55:3F:02:5E:98:CD:0D:E3:CC:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.149.248.0/24 149.112.53.0/24 IPv6: 2602:fa90::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:34:5f:36:97:0c:e8:77:23:e9:f4:e7:f4:65:47:45:5c:7b: 3b:26:9b:b7:8f:64:54:51:83:a3:ae:ec:33:f1:2c:f5:db:26: 22:bd:55:18:fa:7b:b7:a5:d9:3d:d2:f7:ee:44:be:41:4d:46: 5e:e8:41:2e:05:aa:5e:82:2f:83:db:2e:c9:fb:de:55:73:b8: b0:f3:99:d2:76:3d:10:11:b0:10:07:c7:21:b3:17:66:2f:88: a9:7d:26:8a:f0:4b:29:87:58:3d:67:ba:b2:aa:f1:83:fb:90: 13:f7:9b:5b:fb:c9:1f:ce:a9:3b:ae:70:90:4b:a7:8e:81:0a: ca:21:0d:4f:a8:f3:f1:8a:42:e0:af:bc:da:f5:65:72:b4:ea: 1a:df:28:89:7c:17:b3:a3:4d:bc:24:81:8f:4f:10:fd:57:7f: 49:dc:b3:1b:d5:bf:af:5b:89:5c:34:5b:3b:f5:db:77:7a:7b: 05:5d:da:9c:ee:39:c9:c0:a5:82:17:bd:10:4a:3f:ee:3a:c5: ce:c0:04:eb:db:ed:36:89:6a:8e:07:f7:78:86:11:8b:1e:7e: e6:b1:6d:4b:99:40:ab:0e:78:07:9a:b5:bb:7a:40:5d:9f:b6: ad:07:ce:25:4b:0a:a1:7d:a7:d8:74:72:8a:72:1f:2a:84:29: ae:97:c4:fe -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEHkg0fwmOorgyaD68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUxMTE5MDYzOVowLzEtMCsGA1UEAxMk ZDhlYTEwODEtYmNjYi00MWQ1LWIwZmUtMWI5NzI0Y2NlZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwODU/2Hq8QlndJlsdbtSxSlT3FPVZDPmId/X 9kbj27BJTQPNoxrH1V2OCklU+Bxw72c1L7pf1QjfC0aNlyEdAWLlaRlM5DQGVEev loK9pW/sgfWM36N3XsMQdk2cGsKSpgF5TdTEA3d3LYPfYGrNMx10BYS34CmgvRER HlfbrClNSApB3TfJG61+/HVZOAt170y9fI4JCw6PnNAfU3unkzdnPFNVvTc2ODe4 3cXELezMNnbX06f9ZC0b2mxr21gXgSue6CXWP7n/bMCwuuLiR/y+NXIamKiOwq5L sS7y5MltVlm1U4lpRbg1pp5jPNDpiRxc4fFmAxg0ZEyIj6GxNwIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFINmz3vf10Bscg5VPwJemM0N48z4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k OGVhMTA4MS1iY2NiLTQxZDUtYjBmZS0xYjk3MjRjY2VkM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q4ZWExMDgxLWJjY2ItNDFkNS1i MGZlLTFiOTcyNGNjZWQzZi9kOGVhMTA4MS1iY2NiLTQxZDUtYjBmZS0xYjk3MjRj Y2VkM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXlfgDBACVcDUwDgQCAAIwCAMGBCYC+pAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk0XzaXDOh3I+n05/RlR0Vcezsmm7ePZFRRg6Ou7DPxLPXbJiK9VRj6 e7el2T3S9+5EvkFNRl7oQS4Fql6CL4PbLsn73lVzuLDzmdJ2PRARsBAHxyGzF2Yv iKl9JorwSymHWD1nurKq8YP7kBP3m1v7yR/OqTuucJBLp46BCsohDU+o8/GKQuCv vNr1ZXK06hrfKIl8F7OjTbwkgY9PEP1Xf0ncsxvVv69biVw0Wzv123d6ewVd2pzu OcnApYIXvRBKP+46xc7ABOvb7TaJao4H93iGEYsefuaxbUuZQKsOeAeatbt6QF2f tq0HziVLCqF9p9h0copyHyqEKa6XxP4= -----END CERTIFICATE-----Generated at Wed May 1 16:33:36 2024 by rpki-client on console-fra.rpki-client.org