$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e2470f83-2b4c-4d46-b605-05e9c8e99590.cer File: e2470f83-2b4c-4d46-b605-05e9c8e99590.cer (raw, json) Hash identifier: l/d3WxO0WSlvAJECNHac2/n6N481VVvy8VHc0WDWhRE= Subject key identifier: 17:A5:98:82:F5:27:E0:93:7A:2E:19:C2:C1:37:3C:D8:02:4A:9A:32 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285842A036EDF0837C63BB4F370EF8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e2470f83-2b4c-4d46-b605-05e9c8e99590/e2470f83-2b4c-4d46-b605-05e9c8e99590.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e2470f83-2b4c-4d46-b605-05e9c8e99590/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Jul 2023 00:45:16 +0000 Certificate not after: Fri 24 Oct 2025 00:45:16 +0000 Subordinate resources: IP: 198.187.168.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:a0:36:ed:f0:83:7c:63:bb:4f:37:0e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Jul 22 00:45:16 2023 GMT Not After : Oct 24 00:45:16 2025 GMT Subject: CN=e2470f83-2b4c-4d46-b605-05e9c8e99590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:8d:28:7e:d9:0c:08:1e:b5:e8:21:b7:f0: 66:3a:86:dc:26:c2:88:20:1e:56:e2:39:cd:c4:71: 9d:bb:e9:7f:d2:82:cd:2e:11:fb:76:41:24:f3:b7: e0:d9:15:f7:6b:28:61:2f:04:41:2b:20:aa:82:2c: d7:55:02:a8:12:05:14:07:c1:03:89:83:d8:27:6b: cb:f7:25:81:95:52:6f:4d:9c:3f:bb:c5:4b:d0:fd: 5f:27:75:0e:8b:a7:3f:c1:4a:6a:af:c5:21:e1:56: 88:e9:31:3a:25:52:0d:23:a1:d7:36:ec:7c:54:6e: 98:6b:f7:8f:87:f5:65:71:e3:b9:83:86:34:5b:5e: 12:21:28:40:b0:6b:fb:59:3e:64:c7:ef:4f:5c:b7: f7:97:75:eb:70:80:38:e3:ca:36:67:d1:cf:d2:17: ee:aa:e0:86:3c:b3:d3:e3:80:27:ad:cf:59:1d:db: 7a:e6:89:31:e3:4e:ad:06:4f:53:8e:94:c5:b3:2b: d2:2b:3e:4f:de:f2:10:f3:77:92:c6:c2:86:d4:bf: 91:41:93:dc:31:ef:58:b6:58:d4:65:b4:73:65:95: ee:d5:03:0b:02:7f:87:ca:54:d7:27:9c:bd:bf:b6: 0a:ca:91:05:fc:67:50:33:51:df:25:5b:36:02:a3: 7f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A5:98:82:F5:27:E0:93:7A:2E:19:C2:C1:37:3C:D8:02:4A:9A:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e2470f83-2b4c-4d46-b605-05e9c8e99590/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e2470f83-2b4c-4d46-b605-05e9c8e99590/e2470f83-2b4c-4d46-b605-05e9c8e99590.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 198.187.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c2:d1:b6:ba:57:68:d1:68:f6:48:a6:e3:f3:e8:08:78:19: 5c:74:23:b3:9a:37:3f:ee:c2:01:5e:9f:3f:00:2d:4e:22:2d: 00:14:1c:d4:b8:bb:72:a1:4f:67:4c:69:a8:d1:06:29:ee:13: c8:0b:bf:42:42:9e:8a:f2:0c:44:fb:92:d8:70:15:0a:69:f9: b3:cc:99:38:ad:b3:a9:26:39:ab:e3:bc:d4:a0:80:6e:6d:aa: 3f:4a:1c:9e:1b:9b:52:87:67:29:69:81:96:25:fd:03:b8:31: 95:42:e2:9c:27:37:28:ae:7d:a3:0a:ac:62:1c:06:74:6f:4a: 73:88:6c:59:8f:a1:4c:3c:49:4d:cc:a3:f5:53:89:82:4a:ed: f9:d4:55:4f:19:22:c9:72:f9:45:d6:78:bc:84:e4:b2:56:a4: 4d:aa:bd:e5:c8:0e:49:94:6e:a4:bb:e2:01:d3:65:92:31:a6: 59:f9:a9:2c:38:ab:3c:fe:70:83:bf:88:5d:c4:2f:73:3e:0c: ec:ce:1d:78:06:e9:eb:26:18:92:e1:a1:7b:82:3c:73:44:79: 99:ca:74:9d:01:6f:69:cd:a3:0d:fa:96:20:0e:5d:bb:f2:e6: d9:ee:22:2e:ce:4c:aa:c8:23:c4:04:0b:55:21:c2:52:11:46: 49:14:76:9c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEKgNu3wg3xju083DvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDcyMjAwNDUxNloXDTI1MTAyNDAwNDUxNlowLzEtMCsGA1UEAxMk ZTI0NzBmODMtMmI0Yy00ZDQ2LWI2MDUtMDVlOWM4ZTk5NTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3juNKH7ZDAgeteght/BmOobcJsKIIB5W4jnN xHGdu+l/0oLNLhH7dkEk87fg2RX3ayhhLwRBKyCqgizXVQKoEgUUB8EDiYPYJ2vL 9yWBlVJvTZw/u8VL0P1fJ3UOi6c/wUpqr8Uh4VaI6TE6JVINI6HXNux8VG6Ya/eP h/VlceO5g4Y0W14SIShAsGv7WT5kx+9PXLf3l3XrcIA448o2Z9HP0hfuquCGPLPT 44Anrc9ZHdt65okx406tBk9TjpTFsyvSKz5P3vIQ83eSxsKG1L+RQZPcMe9YtljU ZbRzZZXu1QMLAn+HylTXJ5y9v7YKypEF/GdQM1HfJVs2AqN/RQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBelmIL1J+CTei4ZwsE3PNgCSpoyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l MjQ3MGY4My0yYjRjLTRkNDYtYjYwNS0wNWU5YzhlOTk1OTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2UyNDcwZjgzLTJiNGMtNGQ0Ni1i NjA1LTA1ZTljOGU5OTU5MC9lMjQ3MGY4My0yYjRjLTRkNDYtYjYwNS0wNWU5Yzhl OTk1OTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHGu6gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAD8LRtrpXaNFo9kim4/Po CHgZXHQjs5o3P+7CAV6fPwAtTiItABQc1Li7cqFPZ0xpqNEGKe4TyAu/QkKeivIM RPuS2HAVCmn5s8yZOK2zqSY5q+O81KCAbm2qP0ocnhubUodnKWmBliX9A7gxlULi nCc3KK59owqsYhwGdG9Kc4hsWY+hTDxJTcyj9VOJgkrt+dRVTxkiyXL5RdZ4vITk slakTaq95cgOSZRupLviAdNlkjGmWfmpLDirPP5wg7+IXcQvcz4M7M4deAbp6yYY kuGhe4I8c0R5mcp0nQFvac2jDfqWIA5du/Lm2e4iLs5MqsgjxAQLVSHCUhFGSRR2 nA== -----END CERTIFICATE-----Generated at Wed May 1 16:00:06 2024 by rpki-client on console-ams.rpki-client.org