$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.cer File: ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.cer (raw, json) Hash identifier: 22Y9AnU76Qltsi6khS3eEYeeyJIxfKXc3McY4nL3Igg= Subject key identifier: CF:A9:AD:83:62:69:4D:25:FD:BE:48:2F:04:03:13:B4:0B:96:26:60 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285841E48354D5FB11FCD4E6D5A700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Fri 08 Aug 2025 19:06:39 +0000 Subordinate resources: IP: 2602:804:7000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:54:d5:fb:11:fc:d4:e6:d5:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Aug 8 19:06:39 2025 GMT Subject: CN=ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:05:99:33:98:40:2f:7b:68:0e:ec:24:ee: c7:c5:b6:7e:46:68:1b:2d:23:6b:7b:b6:a2:82:bf: 45:df:c8:d0:d4:24:70:7b:c1:ae:39:23:8d:5c:ab: dd:83:3e:8b:09:5b:fc:76:17:42:51:fe:a9:48:c3: 47:87:35:11:5c:46:b4:17:46:cf:aa:12:45:0c:b8: ef:79:1d:4d:cc:67:21:19:1e:b7:0f:b8:cc:b9:b2: 9b:27:48:ae:df:37:23:e1:4d:1e:e2:75:6a:58:f0: c0:7f:d9:f4:4b:19:9c:eb:00:32:45:8f:31:6b:77: 34:d9:a0:0c:cf:54:e9:eb:da:ec:da:04:09:19:47: cb:26:b4:3b:ca:fd:5c:f7:86:09:fc:d1:45:f1:21: bc:bf:15:67:5f:b7:cc:ff:5d:90:90:13:d2:22:30: 9b:98:c6:c5:fb:25:f2:5d:ab:6a:ac:e1:34:0e:ae: a0:db:26:45:4d:3a:6e:75:9e:cc:99:1a:95:e4:7c: b3:a8:3f:61:ea:ec:41:9e:f9:ef:9a:1d:81:63:4f: 17:6b:89:dc:db:78:62:19:f2:90:28:d4:4e:4f:56: 48:d1:eb:9d:5b:7b:3d:86:42:11:8b:fe:d3:58:91: 02:ca:d7:1d:e4:93:14:a9:99:f5:a2:df:50:72:69: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A9:AD:83:62:69:4D:25:FD:BE:48:2F:04:03:13:B4:0B:96:26:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb/ea0cf81a-e5e8-4700-a4b4-c34969ed8dcb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv6: 2602:804:7000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:09:2b:66:14:3a:9b:9b:ae:8b:c3:f3:4f:3e:82:b0:05:92: 4c:24:90:0a:db:7a:c6:de:b5:be:a1:8e:b6:1c:b6:37:d7:b7: 37:db:75:d3:44:13:9b:ca:ed:9c:1a:3e:9c:35:43:fd:75:5e: 1d:6a:9c:f9:a6:d9:5d:19:28:29:c3:1d:fd:4f:34:ce:97:61: b8:44:f9:c8:30:92:96:bf:45:2b:b0:27:41:17:3a:77:cf:e4: 95:16:82:d7:76:6b:4e:7c:ca:6c:8c:89:ad:e2:9b:50:24:fa: 9b:51:ef:17:09:48:54:36:f7:c0:70:2c:fa:b2:d5:5c:6b:e6: 80:d9:63:41:7f:9b:2f:1a:fb:67:fe:b0:ca:7c:d2:3a:90:05: 38:fb:19:33:80:c9:19:ff:7d:bd:89:05:69:6e:ab:cb:41:09: 7b:e3:c4:51:28:ad:86:ef:20:dd:d8:e3:05:4f:93:39:d2:f7: 5d:c4:74:9a:eb:af:71:3d:5a:c2:d7:67:ee:f2:8d:ae:7d:57: 3d:1d:28:61:92:0b:8d:39:06:ec:d8:8a:d8:ac:88:2c:37:bd: 82:75:d3:df:fd:de:77:0e:48:e1:a1:37:49:6f:2a:9e:8b:a3: 6a:4d:e3:94:4d:29:0a:79:21:3a:eb:4a:d3:b7:62:fc:7b:21: bb:e6:ac:79 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEHkg1TV+xH81ObVpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgwODE5MDYzOVowLzEtMCsGA1UEAxMk ZWEwY2Y4MWEtZTVlOC00NzAwLWE0YjQtYzM0OTY5ZWQ4ZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpMFmTOYQC97aA7sJO7HxbZ+RmgbLSNre7ai gr9F38jQ1CRwe8GuOSONXKvdgz6LCVv8dhdCUf6pSMNHhzURXEa0F0bPqhJFDLjv eR1NzGchGR63D7jMubKbJ0iu3zcj4U0e4nVqWPDAf9n0Sxmc6wAyRY8xa3c02aAM z1Tp69rs2gQJGUfLJrQ7yv1c94YJ/NFF8SG8vxVnX7fM/12QkBPSIjCbmMbF+yXy XatqrOE0Dq6g2yZFTTpudZ7MmRqV5HyzqD9h6uxBnvnvmh2BY08Xa4nc23hiGfKQ KNROT1ZI0eudW3s9hkIRi/7TWJECytcd5JMUqZn1ot9QcmkRVwIDAQABo4IEATCC A/0wHQYDVR0OBBYEFM+prYNiaU0l/b5ILwQDE7QLliZgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l YTBjZjgxYS1lNWU4LTQ3MDAtYTRiNC1jMzQ5NjllZDhkY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2VhMGNmODFhLWU1ZTgtNDcwMC1h NGI0LWMzNDk2OWVkOGRjYi9lYTBjZjgxYS1lNWU4LTQ3MDAtYTRiNC1jMzQ5Njll ZDhkY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAggEcDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmCStmFDqbm66Lw/NP PoKwBZJMJJAK23rG3rW+oY62HLY317c323XTRBObyu2cGj6cNUP9dV4dapz5ptld GSgpwx39TzTOl2G4RPnIMJKWv0UrsCdBFzp3z+SVFoLXdmtOfMpsjImt4ptQJPqb Ue8XCUhUNvfAcCz6stVca+aA2WNBf5svGvtn/rDKfNI6kAU4+xkzgMkZ/329iQVp bqvLQQl748RRKK2G7yDd2OMFT5M50vddxHSa669xPVrC12fu8o2ufVc9HShhkguN OQbs2IrYrIgsN72CddPf/d53DkjhoTdJbyqei6NqTeOUTSkKeSE660rTt2L8eyG7 5qx5 -----END CERTIFICATE-----Generated at Wed May 1 16:33:37 2024 by rpki-client on console-fra.rpki-client.org