$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer File: 2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer (raw, json) Hash identifier: kjr7dUGozGAhS5x526DVcLdUlTLgBwsp2/D+CeocfaQ= Subject key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858456DB0C60C5ACACDB0F18BEA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Apr 2024 00:45:21 +0000 Certificate not after: Wed 08 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 46432 IP: 23.139.96.0/24 IP: 208.88.244.0/22 IP: 2602:fe59::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6d:b0:c6:0c:5a:ca:cd:b0:f1:8b:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 4 00:45:21 2024 GMT Not After : Jul 8 00:45:21 2026 GMT Subject: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:64:4d:bc:2b:02:3d:7c:cd:8c:96:01:ad:c7: 1f:1d:1f:14:1b:e1:c9:55:03:a2:56:97:da:ce:c0: 6d:2d:80:47:ab:d9:eb:75:3a:33:7a:fb:5b:79:c7: b3:f3:4b:16:f4:ef:4e:4a:dd:6f:9f:64:54:5d:1b: 48:98:13:cf:d6:22:d6:ab:77:ed:7a:94:62:06:6c: 50:2c:1f:ac:66:78:4c:ed:5d:66:fd:cb:c5:23:3c: f2:f8:59:3c:9d:b6:95:ba:a8:5a:88:9c:f9:51:ba: ca:c0:4f:cf:72:88:49:ea:3e:db:f5:96:6a:bf:c7: 01:fd:a5:7c:95:d0:34:a7:51:62:aa:5e:e8:45:4c: 04:b7:a8:e6:74:00:7c:22:fd:03:e4:e2:3a:35:27: ba:5b:e6:5b:f1:dd:61:56:15:f2:fc:13:2c:81:50: ca:41:24:3f:42:6c:63:f3:71:7c:46:30:86:98:ce: 3e:bc:a5:44:8b:2c:2d:1f:bf:42:44:0f:c6:ef:75: 2d:a4:a2:a4:6f:3f:98:8e:2a:6f:6f:56:b4:23:c6: c4:b2:91:5a:9f:9b:6d:b6:ef:bc:d4:f7:81:e2:0b: db:01:af:e9:d1:ed:52:3e:b1:4b:b8:24:aa:56:c1: eb:a8:2d:e4:19:b9:a2:65:09:59:5d:8b:44:e0:d6: c7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.139.96.0/24 208.88.244.0/22 IPv6: 2602:fe59::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46432 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f5:c3:d6:c0:da:19:1a:1e:23:73:d7:f4:6a:b3:0c:2b:c7: e7:41:b1:a1:f2:3e:26:a7:b9:ee:7f:e4:fc:84:2d:a4:bd:c2: ad:1c:2e:3b:42:6a:36:8c:30:56:a0:c7:cc:0f:ec:b5:24:f7: 61:da:54:f3:80:fa:49:00:38:e6:4f:e9:24:ef:1c:b0:49:67: aa:08:d2:66:80:9a:8d:41:5f:01:bd:af:c5:37:5a:38:92:e5: dc:d4:3b:e1:69:61:5d:c5:e8:ba:d3:e0:c8:0c:d9:c6:21:2c: 42:cb:98:56:d3:52:b4:a2:f0:59:e4:9b:84:83:50:e0:3a:ab: 5c:1d:2b:0f:1b:f0:08:1b:ac:ff:e8:81:6f:49:70:19:99:35: ea:4a:26:06:b3:eb:cf:02:dd:82:f1:3b:f5:0d:c0:c8:76:7f: 4a:de:2c:6b:2f:b4:39:1f:5c:5a:07:06:e5:93:3f:20:54:8d: cb:72:b0:53:ef:df:14:20:b5:99:06:a2:e3:e4:62:89:06:b0: 40:fc:47:24:53:f5:bc:82:41:c2:b0:96:da:42:15:2a:4a:eb: 30:49:17:36:fb:c0:1d:ed:30:b0:97:b1:31:d6:3b:3f:62:b5: 36:b6:b9:b2:62:fc:21:e4:94:f7:c0:69:c4:1c:46:91:c1:c9: 64:6e:69:a0 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEVtsMYMWsrNsPGL6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDQwNDAwNDUyMVoXDTI2MDcwODAwNDUyMVowLzEtMCsGA1UEAxMk Mjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2ZmYjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2RNvCsCPXzNjJYBrccfHR8UG+HJVQOiVpfa zsBtLYBHq9nrdTozevtbecez80sW9O9OSt1vn2RUXRtImBPP1iLWq3ftepRiBmxQ LB+sZnhM7V1m/cvFIzzy+Fk8nbaVuqhaiJz5UbrKwE/PcohJ6j7b9ZZqv8cB/aV8 ldA0p1Fiql7oRUwEt6jmdAB8Iv0D5OI6NSe6W+Zb8d1hVhXy/BMsgVDKQSQ/Qmxj 83F8RjCGmM4+vKVEiywtH79CRA/G73UtpKKkbz+Yjipvb1a0I8bEspFan5tttu+8 1PeB4gvbAa/p0e1SPrFLuCSqVsHrqC3kGbmiZQlZXYtE4NbHtQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFF5zI5j8K2QyrpzXbNYfW8B6FDgaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8y ODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzI4OTBmMzkwLTVlNTMtNGQwOC1h YTUyLTFkZTVjZTdmZmI4NS8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3 ZmZiODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXi2ADBALQWPQwDgQCAAIwCAMGBCYC/lkAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC1YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAe9cPWwNoZGh4jc9f0 arMMK8fnQbGh8j4mp7nuf+T8hC2kvcKtHC47Qmo2jDBWoMfMD+y1JPdh2lTzgPpJ ADjmT+kk7xywSWeqCNJmgJqNQV8Bva/FN1o4kuXc1DvhaWFdxei60+DIDNnGISxC y5hW01K0ovBZ5JuEg1DgOqtcHSsPG/AIG6z/6IFvSXAZmTXqSiYGs+vPAt2C8Tv1 DcDIdn9K3ixrL7Q5H1xaBwblkz8gVI3LcrBT798UILWZBqLj5GKJBrBA/EckU/W8 gkHCsJbaQhUqSuswSRc2+8Ad7TCwl7Ex1js/YrU2trmyYvwh5JT3wGnEHEaRwclk bmmg -----END CERTIFICATE-----Generated at Thu Apr 25 02:02:28 2024 by rpki-client on console-ams.rpki-client.org