$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer File: e553e5ec-0211-480d-9476-86db3dbe2182.cer (raw, json) Hash identifier: ipFAl8+nChvncocHTFjB06x4afOWkRXe2r+3eSK6K/k= Subject key identifier: 74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285841E4834BE98F4AA5BF86AF26D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sun 08 Jun 2025 19:06:39 +0000 Subordinate resources: IP: 192.159.124.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4b:e9:8f:4a:a5:bf:86:af:26:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jun 8 19:06:39 2025 GMT Subject: CN=e553e5ec-0211-480d-9476-86db3dbe2182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:0c:cc:d3:76:92:65:97:26:4e:60:78:88: e2:1f:6c:5a:54:7a:31:ca:62:18:d7:de:ea:d4:9b: f1:97:f9:0a:ef:95:ce:3b:e5:58:73:23:ae:53:df: 3f:b2:d5:01:c2:e9:4f:7c:aa:9c:47:5f:9b:79:c6: 5e:bf:22:18:67:2a:e4:0a:54:6a:ae:1b:5c:3c:53: 01:d8:b7:cc:4a:26:e9:fa:17:70:75:e1:70:b6:f2: 36:09:29:9c:16:be:34:ac:32:da:75:1c:4c:c2:f6: 32:6c:72:de:6c:15:f6:30:4e:0a:91:46:31:c4:e0: a5:cd:96:01:31:3f:61:cc:d9:2f:ca:05:da:fc:15: 03:aa:41:87:06:5d:73:d6:2e:b7:bb:3f:88:1f:49: af:8d:f5:47:a9:1f:62:47:ca:c4:49:e2:9b:d3:8a: ba:3c:4d:00:af:d1:67:b1:e0:6e:11:c7:8f:e1:c3: af:fd:f3:43:f2:df:26:90:d3:ac:a5:9c:3c:94:5b: f4:c3:9d:ed:77:3e:b2:31:01:56:30:ec:f0:9a:2e: 42:67:49:e3:ea:f4:d0:69:a8:e9:86:2b:1c:ca:ba: 60:5b:63:20:d5:b2:86:80:b5:23:a6:68:74:92:5d: 07:a1:8d:4e:bf:0a:34:26:d0:49:12:65:19:14:b6: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.159.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a4:e2:63:ac:b1:81:25:1a:12:ae:a0:cb:4a:6c:78:59:dd: 0e:51:5e:22:11:e8:99:53:09:96:ad:13:39:a7:31:a7:79:95: a7:55:55:85:c4:61:5d:42:e0:fe:45:29:9b:89:73:4c:f3:6a: dd:a7:5f:f1:24:d6:37:63:8a:07:a0:df:2f:e6:0a:d4:04:8c: ff:23:cd:97:c2:63:88:c2:2a:5b:9b:27:6e:39:2f:fb:99:0f: d9:1c:d1:0d:91:96:cd:16:a2:e8:43:76:69:bd:1a:e4:8b:68: 81:44:ca:fd:2d:39:dc:45:76:90:cf:f5:ce:d8:1a:c9:16:c9: aa:b6:c9:14:92:ee:ae:a7:94:46:28:c4:0f:21:5b:fc:bc:b0: 6b:39:90:4a:81:3c:b5:00:0b:3d:90:62:14:0a:0f:92:a0:e6: b8:ba:f5:08:d2:83:b9:25:80:d1:a2:71:f5:e0:a4:3f:ff:1f: 36:23:6e:4b:a8:3a:22:8e:10:28:27:af:88:58:5a:96:ab:ac: d2:f6:46:e4:63:a7:ec:65:3f:ab:a8:43:9f:0a:e5:7e:95:56: 8a:d0:9d:b1:79:ed:7b:c0:d1:e5:0c:7d:5a:8d:d8:fc:a2:2d: d2:28:83:d5:27:46:53:35:56:7e:ac:33:fa:d8:7f:65:c6:54: 7d:1f:44:6f -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEHkg0vpj0qlv4avJtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYwODE5MDYzOVowLzEtMCsGA1UEAxMk ZTU1M2U1ZWMtMDIxMS00ODBkLTk0NzYtODZkYjNkYmUyMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDIMzNN2kmWXJk5geIjiH2xaVHoxymIY197q 1Jvxl/kK75XOO+VYcyOuU98/stUBwulPfKqcR1+becZevyIYZyrkClRqrhtcPFMB 2LfMSibp+hdwdeFwtvI2CSmcFr40rDLadRxMwvYybHLebBX2ME4KkUYxxOClzZYB MT9hzNkvygXa/BUDqkGHBl1z1i63uz+IH0mvjfVHqR9iR8rESeKb04q6PE0Ar9Fn seBuEceP4cOv/fND8t8mkNOspZw8lFv0w53tdz6yMQFWMOzwmi5CZ0nj6vTQaajp hiscyrpgW2Mg1bKGgLUjpmh0kl0HoY1Ovwo0JtBJEmUZFLZJ1QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHQTtARnZPWgsHIQGzW/l72yJUwlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l NTUzZTVlYy0wMjExLTQ4MGQtOTQ3Ni04NmRiM2RiZTIxODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U1NTNlNWVjLTAyMTEtNDgwZC05 NDc2LTg2ZGIzZGJlMjE4Mi9lNTUzZTVlYy0wMjExLTQ4MGQtOTQ3Ni04NmRiM2Ri ZTIxODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALAn3wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABqTiY6yxgSUaEq6gy0ps eFndDlFeIhHomVMJlq0TOacxp3mVp1VVhcRhXULg/kUpm4lzTPNq3adf8STWN2OK B6DfL+YK1ASM/yPNl8JjiMIqW5snbjkv+5kP2RzRDZGWzRai6EN2ab0a5ItogUTK /S053EV2kM/1ztgayRbJqrbJFJLurqeURijEDyFb/LywazmQSoE8tQALPZBiFAoP kqDmuLr1CNKDuSWA0aJx9eCkP/8fNiNuS6g6Io4QKCeviFhalqus0vZG5GOn7GU/ q6hDnwrlfpVWitCdsXnte8DR5Qx9Wo3Y/KIt0iiD1SdGUzVWfqwz+th/ZcZUfR9E bw== -----END CERTIFICATE-----Generated at Wed May 1 16:00:06 2024 by rpki-client on console-ams.rpki-client.org