$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87.cer File: e49f1cd9-302a-4377-9a40-b12c78b69f87.cer (raw, json) Hash identifier: bDlNDQRVvJKmMTCL8tu0+raFeug+VEVpbxaNlf9r/9k= Subject key identifier: E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285844ED6311C2B09BDE6322234980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 18 Feb 2024 01:45:19 +0000 Certificate not after: Sat 23 May 2026 00:45:19 +0000 Subordinate resources: IP: 192.195.107.0/24 IP: 205.134.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ed:63:11:c2:b0:9b:de:63:22:23:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Feb 18 01:45:19 2024 GMT Not After : May 23 00:45:19 2026 GMT Subject: CN=e49f1cd9-302a-4377-9a40-b12c78b69f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:b2:16:7b:ec:af:24:26:ec:08:8d:99:09: 90:04:d2:c5:0c:6e:42:d1:39:7b:5d:62:6c:2e:f8: 40:cd:50:87:8e:88:a9:d1:c7:30:30:22:b6:5d:a9: 03:ea:20:a7:8c:04:1d:fe:8f:b3:81:38:32:13:cc: fa:48:82:43:e9:77:be:53:67:b2:e1:88:92:bd:60: 07:3a:4b:c7:fd:92:1c:4b:e5:fd:e0:82:d7:35:b3: 52:92:f1:f0:fe:2a:f4:0c:c5:6d:2a:22:3a:47:a9: f0:30:ff:47:e8:7d:91:80:26:19:ca:51:f7:14:f2: bc:69:9c:9d:48:85:ef:b7:a0:e4:e0:ee:da:73:5f: 90:65:69:e9:00:29:30:bf:24:9b:d2:58:7c:5c:05: bf:60:a2:06:05:bd:e7:b3:5e:19:64:36:d1:2b:69: 17:46:5d:6d:d0:1f:3e:0a:77:d6:67:ba:d5:38:0f: 51:93:1a:fd:71:2e:99:57:81:63:1c:61:73:a2:02: 0e:8f:77:73:21:e7:3f:11:f0:75:4d:5f:7c:57:c0: 28:1d:00:f4:51:54:ad:a2:0c:55:14:09:e7:b8:ac: da:bb:15:54:3d:d5:e7:50:fc:58:66:ec:79:ec:e5: 6a:9c:51:5b:16:29:13:44:4f:3d:c1:32:f1:3a:7e: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:0F:12:C1:02:BC:97:37:A3:F3:69:D2:A7:3C:44:E5:4E:BC:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e49f1cd9-302a-4377-9a40-b12c78b69f87/e49f1cd9-302a-4377-9a40-b12c78b69f87.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.195.107.0/24 205.134.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f2:57:c8:47:27:29:7b:48:0e:48:ba:21:d7:b0:b3:50:20: 9c:03:e9:39:09:49:a9:8c:68:36:8b:2e:f6:ce:81:78:c9:24: 76:63:c3:3f:44:3b:01:1b:1a:f8:e3:cd:c3:6a:6c:1d:16:3f: 9a:60:d6:2c:13:23:c3:c2:3c:08:55:52:e0:54:6a:08:26:40: 4c:22:f9:57:8c:53:40:d3:cb:0e:74:53:9f:a4:73:da:dc:13: 6e:99:17:05:62:6d:a1:e1:c8:49:95:ef:de:ed:6f:16:47:f9: f4:77:29:c3:d3:e1:6a:12:61:f2:61:4d:e3:2d:55:d8:27:2f: f6:7c:86:5b:e6:e9:d7:98:39:a5:54:be:35:c9:64:42:68:ad: da:85:de:a0:cc:71:da:2d:ea:d1:96:37:c8:dc:48:4c:6a:7b: 76:27:1a:bd:90:4e:e2:4a:30:93:ef:1d:08:99:56:dd:2c:ca: d9:45:3f:0d:b3:72:fe:71:b1:ba:1a:2b:fe:fe:73:73:e4:71: bd:5f:84:bc:98:91:ce:b3:cd:a3:10:fd:0f:bc:73:8c:ab:e5: 6e:8d:59:df:0d:21:9d:b4:da:1b:b8:2c:cb:49:ac:ff:91:78: ce:b4:e1:3a:00:0c:af:c3:1e:28:bd:00:af:59:2b:f4:45:4c: 84:9f:95:08 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWETtYxHCsJveYyIjSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDIxODAxNDUxOVoXDTI2MDUyMzAwNDUxOVowLzEtMCsGA1UEAxMk ZTQ5ZjFjZDktMzAyYS00Mzc3LTlhNDAtYjEyYzc4YjY5Zjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbayFnvsryQm7AiNmQmQBNLFDG5C0Tl7XWJs LvhAzVCHjoip0ccwMCK2XakD6iCnjAQd/o+zgTgyE8z6SIJD6Xe+U2ey4YiSvWAH OkvH/ZIcS+X94ILXNbNSkvHw/ir0DMVtKiI6R6nwMP9H6H2RgCYZylH3FPK8aZyd SIXvt6Dk4O7ac1+QZWnpACkwvySb0lh8XAW/YKIGBb3ns14ZZDbRK2kXRl1t0B8+ CnfWZ7rVOA9Rkxr9cS6ZV4FjHGFzogIOj3dzIec/EfB1TV98V8AoHQD0UVStogxV FAnnuKzauxVUPdXnUPxYZux57OVqnFFbFikTRE89wTLxOn4hQwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFOdgDxLBAryXN6PzadKnPETlTrzfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l NDlmMWNkOS0zMDJhLTQzNzctOWE0MC1iMTJjNzhiNjlmODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U0OWYxY2Q5LTMwMmEtNDM3Ny05 YTQwLWIxMmM3OGI2OWY4Ny9lNDlmMWNkOS0zMDJhLTQzNzctOWE0MC1iMTJjNzhi NjlmODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAw2sDBAXNhmAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZ/JXyEcnKXtI Dki6Idews1AgnAPpOQlJqYxoNosu9s6BeMkkdmPDP0Q7ARsa+OPNw2psHRY/mmDW LBMjw8I8CFVS4FRqCCZATCL5V4xTQNPLDnRTn6Rz2twTbpkXBWJtoeHISZXv3u1v Fkf59Hcpw9PhahJh8mFN4y1V2Ccv9nyGW+bp15g5pVS+NclkQmit2oXeoMxx2i3q 0ZY3yNxITGp7dicavZBO4kowk+8dCJlW3SzK2UU/DbNy/nGxuhor/v5zc+RxvV+E vJiRzrPNoxD9D7xzjKvlbo1Z3w0hnbTaG7gsy0ms/5F4zrThOgAMr8MeKL0Ar1kr 9EVMhJ+VCA== -----END CERTIFICATE-----Generated at Wed May 1 16:00:06 2024 by rpki-client on console-ams.rpki-client.org