$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer File: 2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer (raw, json) Hash identifier: dDsDft4X3WHlZAkOpB/FGLGrSax6LvzEATU02dP1BiU= Subject key identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858434D4D63F1CD0BE4FB16A08CE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Sep 2023 00:45:22 +0000 Certificate not after: Thu 25 Dec 2025 01:45:22 +0000 Subordinate resources: AS: 396000 IP: 138.128.248.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:4d:4d:63:f1:cd:0b:e4:fb:16:a0:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 22 00:45:22 2023 GMT Not After : Dec 25 01:45:22 2025 GMT Subject: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:e6:9c:94:38:cc:9e:99:85:b2:8d:42:a6: 81:0e:a2:ba:7c:33:c4:e1:8e:48:10:37:b3:fa:e7: 95:a9:00:54:6f:82:a0:c2:55:49:4a:be:fa:fc:d2: 80:28:06:61:88:c2:e4:77:01:cf:06:aa:37:71:23: ea:3a:77:dc:b7:c9:f2:44:46:97:1a:83:1f:6c:aa: 2a:b6:6e:6b:c4:7f:e1:3b:ac:4a:20:c8:cf:ee:74: 36:9f:8e:57:17:2a:fe:c3:5b:13:91:6c:b2:5b:67: 36:f6:e9:6f:d3:5b:0f:1c:4d:22:72:2a:24:33:38: fb:a6:27:58:2c:27:1e:64:a7:32:be:9b:5c:6b:b2: 0f:6a:67:ec:c7:ab:dc:6f:5a:b4:3d:10:1b:59:82: 57:ec:96:54:59:d3:44:e8:ee:18:87:1b:30:a0:de: 0a:65:15:46:07:a3:38:d1:cd:b6:8d:ed:87:e4:8a: ec:07:2c:86:37:ed:f9:df:e7:7b:96:c6:41:b8:5b: 67:f7:00:ad:c4:b9:9f:4d:78:0c:a8:fa:80:93:b8: 44:7c:9e:05:8e:61:95:d8:0c:44:2c:aa:6b:69:b1: 14:fd:1f:72:27:bc:e5:f6:39:1e:03:72:b9:f0:3d: 2e:18:ae:10:f0:24:b1:b6:16:35:9e:05:44:ca:a3: b9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 138.128.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396000 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:5d:b6:89:e2:37:26:5e:a5:29:e0:45:1f:88:6e:72:66:6c: e2:e6:6a:59:3e:23:c7:7c:a4:0e:ba:61:d4:8b:98:fb:5a:2e: 97:1b:3d:2c:bb:16:5b:a5:c1:f6:98:cf:fc:88:fc:e1:9c:37: da:5f:df:b1:f6:39:c0:f7:84:23:66:cb:32:a1:46:92:37:67: 4a:cc:ed:89:46:e4:1c:bd:b4:67:20:7e:e0:be:30:83:40:23: db:eb:c4:38:28:8e:9c:49:2d:51:a1:7c:16:ad:5c:c3:b4:1c: e2:56:d9:59:3e:f5:aa:d9:2d:55:64:00:c1:ac:bb:f1:e8:db: b7:97:29:f8:9d:8a:34:76:b4:d1:64:41:3c:1e:48:1c:61:e8: 2f:5f:a9:0c:67:41:92:e1:40:a9:70:45:d3:6e:5b:42:1e:51: ec:0b:cc:22:8d:86:5d:ee:3f:27:39:51:78:7c:88:96:d4:b6: ef:cf:0e:79:d3:a9:6a:0d:76:94:b6:b8:8b:e2:5d:bc:d7:1c: c0:f1:87:76:71:77:50:0c:8f:fa:69:98:b3:a0:b0:c4:d9:04: da:11:2a:d1:ae:01:7a:2a:4e:61:d7:e2:6c:29:09:00:c3:4f: cf:21:ff:ed:cc:6c:c3:84:61:ec:af:ad:74:10:3d:4e:18:3b: af:57:32:d2 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWENNTWPxzQvk+xagjOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDkyMjAwNDUyMloXDTI1MTIyNTAxNDUyMlowLzEtMCsGA1UEAxMk MmIzYmNiNDctNWYxOC00NmQzLTliNTAtNjNkNWNiYjllOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIDmnJQ4zJ6ZhbKNQqaBDqK6fDPE4Y5IEDez +ueVqQBUb4KgwlVJSr76/NKAKAZhiMLkdwHPBqo3cSPqOnfct8nyREaXGoMfbKoq tm5rxH/hO6xKIMjP7nQ2n45XFyr+w1sTkWyyW2c29ulv01sPHE0iciokMzj7pidY LCceZKcyvptca7IPamfsx6vcb1q0PRAbWYJX7JZUWdNE6O4YhxswoN4KZRVGB6M4 0c22je2H5IrsByyGN+353+d7lsZBuFtn9wCtxLmfTXgMqPqAk7hEfJ4FjmGV2AxE LKprabEU/R9yJ7zl9jkeA3K58D0uGK4Q8CSxthY1ngVEyqO5AwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFLXm6ARiTPFnHgaJBGbR5iUtu4KtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8y YjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2JiOWU5ZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzJiM2JjYjQ3LTVmMTgtNDZkMy05 YjUwLTYzZDVjYmI5ZTlkZC8yYjNiY2I0Ny01ZjE4LTQ2ZDMtOWI1MC02M2Q1Y2Ji OWU5ZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKKgPgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgrgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEtdtoniNyZepSngRR+IbnJmbOLmalk+I8d8pA66YdSLmPta LpcbPSy7FlulwfaYz/yI/OGcN9pf37H2OcD3hCNmyzKhRpI3Z0rM7YlG5By9tGcg fuC+MINAI9vrxDgojpxJLVGhfBatXMO0HOJW2Vk+9arZLVVkAMGsu/Ho27eXKfid ijR2tNFkQTweSBxh6C9fqQxnQZLhQKlwRdNuW0IeUewLzCKNhl3uPyc5UXh8iJbU tu/PDnnTqWoNdpS2uIviXbzXHMDxh3Zxd1AMj/ppmLOgsMTZBNoRKtGuAXoqTmHX 4mwpCQDDT88h/+3MbMOEYeyvrXQQPU4YO69XMtI= -----END CERTIFICATE-----Generated at Thu Apr 25 02:02:28 2024 by rpki-client on console-ams.rpki-client.org