$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer File: de57fd18-3c65-43a3-96c1-a6fe61028c72.cer (raw, json) Hash identifier: 48wrNGT+I8QpRdrFyBj1PHyWQPkjravcmIT7eklfJ40= Subject key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285842282B85E6293807CC1D3AF0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Jun 2023 00:45:17 +0000 Certificate not after: Thu 11 Sep 2025 00:45:17 +0000 Subordinate resources: AS: 400304 IP: 23.147.152.0/24 IP: 193.149.164.0/24 IP: 216.181.107.0/24 IP: 2606:a8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:28:2b:85:e6:29:38:07:cc:1d:3a:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jun 9 00:45:17 2023 GMT Not After : Sep 11 00:45:17 2025 GMT Subject: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:78:81:30:14:98:fb:7b:30:8a:da:68:ad:81: a3:7a:d4:2f:4c:37:56:60:54:6d:2d:e3:ae:9f:22: c2:2c:e6:47:7b:eb:1e:a3:9f:1b:03:a4:ae:52:44: d2:4a:67:ee:88:93:02:a2:85:70:39:0d:91:78:23: b7:10:3c:6a:db:ae:7f:28:9d:65:bf:16:36:04:a8: ac:30:30:16:3f:6a:58:a2:30:ec:12:35:23:c9:75: ae:cb:2e:05:41:45:8e:6a:74:54:36:ec:43:ff:b6: 8c:24:93:aa:8a:cd:6c:e3:84:5d:6a:97:1d:44:82: e5:d0:d8:38:32:6b:e6:e8:b2:70:cc:45:43:48:c9: 9f:b1:77:11:02:58:a6:ea:3f:c4:c3:87:96:41:d8: 7e:1e:ff:5e:bd:78:ca:3e:99:a6:2c:80:e5:4f:b0: 76:63:04:62:2b:75:13:ad:6e:10:5a:27:83:15:c9: 45:5d:85:a7:96:18:2b:8e:6d:9b:37:d4:1e:ac:de: 7f:8d:d8:ae:24:6b:d3:d9:5c:de:c0:13:93:3d:ea: 94:c6:1f:65:aa:73:01:9c:12:93:e9:ac:b0:fa:9e: bf:86:57:6a:d0:3b:be:28:97:e6:19:ad:b2:fa:ea: ce:30:5a:72:bb:c6:00:fa:50:da:83:e9:a4:da:90: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.147.152.0/24 193.149.164.0/24 216.181.107.0/24 IPv6: 2606:a8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400304 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:31:53:33:02:d3:63:de:03:9e:49:63:db:cb:07:0a:88:be: d1:57:9f:06:f4:ce:26:5c:0f:27:c3:4a:bb:f8:15:13:45:9b: 71:25:f0:5d:c3:91:d0:3d:a1:4d:0f:5e:13:ff:5f:e1:90:33: e3:b7:77:db:48:0e:3e:70:7f:9b:f5:ab:17:da:fb:8a:ff:df: 57:e4:0d:0f:cb:2f:a2:66:cf:02:e7:60:ae:83:08:50:6c:5e: d0:d0:99:5f:b3:bb:17:2f:01:a4:bf:cd:c0:13:9e:06:6c:81: 7c:8c:fc:c6:5b:ac:fc:68:40:de:59:c6:d9:e5:23:6a:57:b0: e4:3e:5d:6f:f1:8c:72:9e:87:80:8e:1d:64:7d:74:30:cc:60: 04:db:4c:f4:e5:ed:3a:0e:f9:c8:97:d1:48:16:81:25:c8:0c: 84:8f:51:1d:7f:f7:eb:15:25:be:8b:cf:a3:74:c7:be:82:d9: 0c:cd:f3:fd:53:c8:ec:51:ab:37:b5:09:2c:32:4e:05:d7:7c: 4c:4f:ad:14:b1:fa:aa:20:f2:9f:3e:5b:98:68:a7:b0:96:00: c7:b0:bb:a3:a7:f0:bf:55:e2:23:5e:21:27:3b:19:e8:52:e9: 56:5a:19:3f:5e:14:17:fe:83:41:8a:45:45:b7:f6:75:51:78: de:e2:da:c5 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEIoK4XmKTgHzB068MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDYwOTAwNDUxN1oXDTI1MDkxMTAwNDUxN1owLzEtMCsGA1UEAxMk ZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4YzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XiBMBSY+3switporYGjetQvTDdWYFRtLeOu nyLCLOZHe+seo58bA6SuUkTSSmfuiJMCooVwOQ2ReCO3EDxq265/KJ1lvxY2BKis MDAWP2pYojDsEjUjyXWuyy4FQUWOanRUNuxD/7aMJJOqis1s44RdapcdRILl0Ng4 Mmvm6LJwzEVDSMmfsXcRAlim6j/Ew4eWQdh+Hv9evXjKPpmmLIDlT7B2YwRiK3UT rW4QWieDFclFXYWnlhgrjm2bN9QerN5/jdiuJGvT2VzewBOTPeqUxh9lqnMBnBKT 6ayw+p6/hldq0Du+KJfmGa2y+urOMFpyu8YA+lDag+mk2pAsDwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFMi8G/UvUulPlct6/BgMAmRATII9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9k ZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2RlNTdmZDE4LTNjNjUtNDNhMy05 NmMxLWE2ZmU2MTAyOGM3Mi9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEw MjhjNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXk5gDBADBlaQDBADYtWswDQQCAAIwBwMFACYG qMAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhuwMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADoxUzMC02Pe A55JY9vLBwqIvtFXnwb0ziZcDyfDSrv4FRNFm3El8F3DkdA9oU0PXhP/X+GQM+O3 d9tIDj5wf5v1qxfa+4r/31fkDQ/LL6JmzwLnYK6DCFBsXtDQmV+zuxcvAaS/zcAT ngZsgXyM/MZbrPxoQN5ZxtnlI2pXsOQ+XW/xjHKeh4COHWR9dDDMYATbTPTl7ToO +ciX0UgWgSXIDISPUR1/9+sVJb6Lz6N0x76C2QzN8/1TyOxRqze1CSwyTgXXfExP rRSx+qog8p8+W5hop7CWAMewu6On8L9V4iNeISc7GehS6VZaGT9eFBf+g0GKRUW3 9nVReN7i2sU= -----END CERTIFICATE-----Generated at Wed May 1 12:32:39 2024 by rpki-client on console-ams.rpki-client.org