$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.cer File: eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.cer (raw, json) Hash identifier: wsMyu85mDCOjuoLCK0hx3E1sGs8SDJxs0VnhPTUaDkQ= Subject key identifier: 84:BA:C2:FD:68:01:49:CE:5D:F8:72:76:36:19:2A:B9:28:13:26:D5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858437F8DA292C9563FEBF47EF8B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Oct 2023 00:45:14 +0000 Certificate not after: Mon 12 Jan 2026 01:45:14 +0000 Subordinate resources: IP: 149.164.0.0/16 IP: 168.102.144.0 -- 168.102.255.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:7f:8d:a2:92:c9:56:3f:eb:f4:7e:f8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 10 00:45:14 2023 GMT Not After : Jan 12 01:45:14 2026 GMT Subject: CN=eb20c2e0-7f57-4974-bb92-1fdbfcfc514e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:5a:04:8b:33:48:13:6a:11:56:34:58:d4: 63:5f:41:88:5c:70:3c:fd:81:09:ba:0c:19:03:79: 31:72:bf:55:cb:d5:27:75:07:96:25:b1:f7:a3:7b: cf:e9:26:f1:61:40:51:0b:83:a0:ce:b1:1b:ce:c5: 57:09:0d:da:89:83:56:a7:1e:71:08:0f:a0:a1:51: 78:bd:4e:ce:c3:bc:7d:b7:ea:78:56:da:4f:49:fa: de:b8:88:65:61:e6:3d:93:71:bc:ba:e3:73:b3:e0: 8a:2b:d2:2c:95:db:69:f9:85:91:05:c3:e1:7f:fa: fb:26:7d:fd:29:b0:d6:ad:b8:24:98:16:de:eb:df: 63:ae:83:0b:44:47:e1:5d:05:63:47:61:3e:d0:ac: f3:eb:cd:13:e2:74:27:a1:63:26:5e:cd:0a:5f:16: a2:06:72:0f:ea:e7:09:48:1f:5e:7f:5e:3f:b7:06: fa:ad:6c:e5:84:1e:bc:79:3d:6b:be:a7:d5:df:54: 4b:6b:78:0f:84:5b:48:06:93:b8:58:9d:da:6d:53: 3b:f4:e5:ac:a4:e5:78:69:55:5b:12:30:6d:da:a3: 56:43:16:16:3f:6b:28:7c:27:15:6f:c8:c5:27:18: 06:33:ae:0d:bf:8d:5e:38:e7:cb:96:e8:0b:4a:ab: e4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:C2:FD:68:01:49:CE:5D:F8:72:76:36:19:2A:B9:28:13:26:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e/eb20c2e0-7f57-4974-bb92-1fdbfcfc514e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 149.164.0.0/16 168.102.144.0-168.102.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e6:ac:76:00:ce:4b:5e:94:6c:9b:74:a1:41:f6:04:f3:0e: ef:11:85:49:b6:d7:6b:ce:04:5c:b1:79:23:ec:aa:a5:9f:5c: 63:8e:9b:d8:78:08:8b:16:66:ef:f5:f1:2a:7d:c2:92:07:5a: 13:fc:ee:22:ff:5c:7b:93:2c:1a:b9:2d:8d:7f:47:bd:c4:75: 9b:03:14:bd:43:a8:a2:64:9d:6d:a7:3a:cf:fb:15:ac:e6:51: f1:ed:9f:13:a1:e7:d6:90:5c:70:db:e2:97:a2:3c:5d:6b:14: c6:02:78:ef:a3:52:8b:49:10:e3:46:f7:6f:03:5b:66:43:60: 29:2b:67:a3:12:08:f8:43:b6:a0:ad:4e:11:18:8f:9d:47:bb: ba:7a:58:36:4e:38:58:81:af:65:c0:c8:11:a7:5d:b8:08:f5: 68:d1:f7:b5:81:5d:ee:94:c2:bc:be:65:f6:ea:ae:2f:ba:21: 73:a9:14:45:14:f7:5b:5e:fa:99:d6:e8:58:5e:3e:e7:1a:d4: 64:31:9a:cd:fa:7e:e3:68:d5:05:c2:83:83:fc:5c:48:68:3f: 1a:00:7e:76:0d:38:92:88:6e:17:3a:f3:7e:73:08:87:69:17: d3:80:6c:d6:cb:8d:16:c4:7d:a4:54:90:19:47:23:3a:87:06: de:49:cb:5d -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEN/jaKSyVY/6/R++LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMTAxMDAwNDUxNFoXDTI2MDExMjAxNDUxNFowLzEtMCsGA1UEAxMk ZWIyMGMyZTAtN2Y1Ny00OTc0LWJiOTItMWZkYmZjZmM1MTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAhaBIszSBNqEVY0WNRjX0GIXHA8/YEJugwZ A3kxcr9Vy9UndQeWJbH3o3vP6SbxYUBRC4OgzrEbzsVXCQ3aiYNWpx5xCA+goVF4 vU7Ow7x9t+p4VtpPSfreuIhlYeY9k3G8uuNzs+CKK9Isldtp+YWRBcPhf/r7Jn39 KbDWrbgkmBbe699jroMLREfhXQVjR2E+0Kzz680T4nQnoWMmXs0KXxaiBnIP6ucJ SB9ef14/twb6rWzlhB68eT1rvqfV31RLa3gPhFtIBpO4WJ3abVM79OWspOV4aVVb EjBt2qNWQxYWP2sofCcVb8jFJxgGM64Nv41eOOfLlugLSqvkDQIDAQABo4IECzCC BAcwHQYDVR0OBBYEFIS6wv1oAUnOXfhydjYZKrkoEybVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l YjIwYzJlMC03ZjU3LTQ5NzQtYmI5Mi0xZmRiZmNmYzUxNGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2ViMjBjMmUwLTdmNTctNDk3NC1i YjkyLTFmZGJmY2ZjNTE0ZS9lYjIwYzJlMC03ZjU3LTQ5NzQtYmI5Mi0xZmRiZmNm YzUxNGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDAwCVpDALAwQEqGaQAwMAqGYwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATOas dgDOS16UbJt0oUH2BPMO7xGFSbbXa84EXLF5I+yqpZ9cY46b2HgIixZm7/XxKn3C kgdaE/zuIv9ce5MsGrktjX9HvcR1mwMUvUOoomSdbac6z/sVrOZR8e2fE6Hn1pBc cNvil6I8XWsUxgJ476NSi0kQ40b3bwNbZkNgKStnoxII+EO2oK1OERiPnUe7unpY Nk44WIGvZcDIEadduAj1aNH3tYFd7pTCvL5l9uquL7ohc6kURRT3W176mdboWF4+ 5xrUZDGazfp+42jVBcKDg/xcSGg/GgB+dg04kohuFzrzfnMIh2kX04Bs1suNFsR9 pFSQGUcjOocG3knLXQ== -----END CERTIFICATE-----Generated at Wed May 1 12:32:40 2024 by rpki-client on console-ams.rpki-client.org