$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer File: 0c50e3d6-0902-477b-85fe-37d2d7c97e30.cer (raw, json) Hash identifier: Oj3MNG969K3VEi9o+5ckN/BvaHiXOyLIdJmY+k9m0Yo= Subject key identifier: C1:36:E9:3C:D0:03:48:7A:EC:54:B6:CB:90:1A:24:7C:3E:D8:ED:A7 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858456F91A2A94FE2F97A63CF07A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Apr 2024 16:54:14 +0000 Certificate not after: Sat 06 Dec 2025 01:45:28 +0000 Subordinate resources: AS: 395648 IP: 167.253.63.0/24 IP: 2602:fac9::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6f:91:a2:a9:4f:e2:f9:7a:63:cf:07:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 4 16:54:14 2024 GMT Not After : Dec 6 01:45:28 2025 GMT Subject: CN=0c50e3d6-0902-477b-85fe-37d2d7c97e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7c:32:2e:d1:4d:22:68:aa:7c:65:dc:af:a6: 85:d3:ed:46:7a:80:3b:7d:13:8a:c8:0f:3f:23:f3: 2a:6e:35:c0:f7:44:9b:6b:cb:4a:db:0e:b9:c7:5a: 53:ad:02:50:73:5c:25:a5:b2:ae:3c:4a:45:c8:4a: 54:f8:d5:df:33:d7:aa:7a:60:53:60:32:b9:44:10: 2c:19:4c:61:8f:c6:7a:fa:23:9a:07:30:a6:1e:95: 4a:94:01:fc:5a:b6:ca:18:d4:ca:b7:09:9c:10:88: ab:ae:6f:6b:a7:a0:af:30:05:79:50:10:53:db:23: 39:02:96:6c:c0:41:d9:2d:cb:af:2d:59:dd:ba:5a: d9:3d:14:54:04:5e:9b:5b:59:68:bd:85:88:49:7c: 3c:0d:30:fe:3e:a4:9b:2f:18:45:fa:08:5d:5b:9c: 64:83:fa:f0:30:b3:a7:60:74:31:ff:f3:0c:2d:d3: 79:da:a9:cb:1e:4e:41:4d:8b:8e:1e:19:3f:f6:4d: 35:9e:51:1f:77:65:8a:a3:a2:6c:7d:7b:82:16:06: f8:76:76:f9:e7:27:e5:83:8b:41:39:c8:a5:ef:39: 37:73:12:f8:97:95:3d:a6:39:5b:5f:99:6e:dc:fd: c2:12:e2:b2:c4:88:a4:bc:93:9a:df:1a:b5:f9:0d: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:36:E9:3C:D0:03:48:7A:EC:54:B6:CB:90:1A:24:7C:3E:D8:ED:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c50e3d6-0902-477b-85fe-37d2d7c97e30/0c50e3d6-0902-477b-85fe-37d2d7c97e30.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 167.253.63.0/24 IPv6: 2602:fac9::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395648 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ae:dd:59:ae:c6:51:6a:8b:a5:ba:34:f5:cc:89:3d:71:89: 18:1f:60:1b:1f:57:6d:f6:bf:1d:90:77:99:1d:77:3f:97:9b: 66:90:41:3b:20:de:6b:51:be:b2:9a:a6:5a:10:62:96:65:14: d1:b3:4e:26:11:9c:dd:07:00:67:f5:0b:ab:01:50:0e:a7:b9: ac:d8:86:1d:0c:ba:72:64:4c:d4:25:18:ee:a1:6d:88:4f:2d: 73:b7:cf:9b:d1:58:85:e0:7a:1e:4f:83:a3:57:62:ee:28:8c: 1c:6d:8c:32:7c:05:3b:b4:83:64:33:db:8f:a9:9e:0b:fa:1d: 7d:43:3d:4d:a3:80:25:a0:88:5d:16:c8:de:c5:f2:0c:bf:00: 2d:29:b4:27:30:ae:fe:dc:9d:63:66:2b:af:d4:e3:ec:33:84: 25:69:37:f4:d3:32:67:58:3a:df:db:7b:48:ba:ec:7b:5f:39: b6:1b:63:28:bc:d3:16:83:e8:36:52:5a:e7:bd:52:a5:54:96: dc:2b:c3:96:1f:7b:53:f2:6a:28:57:e7:e5:7d:68:d4:95:9b: 41:db:ac:ad:16:d6:a8:00:11:e6:8f:cb:c3:92:aa:a7:e8:ed: 3d:7c:2e:26:99:16:30:b2:54:b6:b9:5d:11:a5:b8:49:77:91: f6:c1:22:7a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEVvkaKpT+L5emPPB6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDQwNDE2NTQxNFoXDTI1MTIwNjAxNDUyOFowLzEtMCsGA1UEAxMk MGM1MGUzZDYtMDkwMi00NzdiLTg1ZmUtMzdkMmQ3Yzk3ZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XwyLtFNImiqfGXcr6aF0+1GeoA7fROKyA8/ I/MqbjXA90Sba8tK2w65x1pTrQJQc1wlpbKuPEpFyEpU+NXfM9eqemBTYDK5RBAs GUxhj8Z6+iOaBzCmHpVKlAH8WrbKGNTKtwmcEIirrm9rp6CvMAV5UBBT2yM5ApZs wEHZLcuvLVndulrZPRRUBF6bW1lovYWISXw8DTD+PqSbLxhF+ghdW5xkg/rwMLOn YHQx//MMLdN52qnLHk5BTYuOHhk/9k01nlEfd2WKo6JsfXuCFgb4dnb55yflg4tB Ocil7zk3cxL4l5U9pjlbX5lu3P3CEuKyxIikvJOa3xq1+Q3leQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFME26TzQA0h67FS2y5AaJHw+2O2nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w YzUwZTNkNi0wOTAyLTQ3N2ItODVmZS0zN2QyZDdjOTdlMzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzBjNTBlM2Q2LTA5MDItNDc3Yi04 NWZlLTM3ZDJkN2M5N2UzMC8wYzUwZTNkNi0wOTAyLTQ3N2ItODVmZS0zN2QyZDdj OTdlMzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBACn/T8wDgQCAAIwCAMGACYC+skAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYJgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJrt1ZrsZRaoulujT1zIk9cYkY H2AbH1dt9r8dkHeZHXc/l5tmkEE7IN5rUb6ymqZaEGKWZRTRs04mEZzdBwBn9Qur AVAOp7ms2IYdDLpyZEzUJRjuoW2ITy1zt8+b0ViF4HoeT4OjV2LuKIwcbYwyfAU7 tINkM9uPqZ4L+h19Qz1No4AloIhdFsjexfIMvwAtKbQnMK7+3J1jZiuv1OPsM4Ql aTf00zJnWDrf23tIuux7Xzm2G2MovNMWg+g2UlrnvVKlVJbcK8OWH3tT8mooV+fl fWjUlZtB26ytFtaoABHmj8vDkqqn6O09fC4mmRYwslS2uV0RpbhJd5H2wSJ6 -----END CERTIFICATE-----Generated at Wed Apr 24 15:51:35 2024 by rpki-client on console-ams.rpki-client.org