$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer File: 43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer (raw, json) Hash identifier: 3OV1e/c89fkPut4BcsZ41h39devZX2GSxq5wBwkAIpU= Subject key identifier: 96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285841E4834FB47ACB64A67C54F300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Fri 04 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 7768 IP: 157.254.0.0/16 IP: 199.103.94.0/23 IP: 206.209.208.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 May 2023 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4f:b4:7a:cb:64:a6:7c:54:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 4 19:06:39 2025 GMT Subject: CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:b5:c3:87:2c:62:7b:bd:d3:f3:c3:e7:6d: 6e:79:ef:bd:2e:63:72:45:87:55:83:16:b3:33:f4: 9e:ad:5a:c6:4e:ec:57:c0:36:3f:2a:b1:93:4b:39: 86:1a:85:88:f1:74:57:80:37:4c:39:eb:d0:f0:44: 34:60:25:69:b9:62:83:64:cb:f8:3b:a8:0f:e8:c6: 7e:e0:02:77:2e:d5:27:af:a6:b4:30:36:da:c7:fd: 7f:33:3a:e8:bb:33:60:44:28:19:f7:84:8d:bd:5b: 96:49:7e:8f:c5:bd:f3:49:2e:b7:37:56:b8:a5:ad: 6c:ff:d1:ed:75:34:c2:a0:2e:31:52:ea:13:33:77: 56:df:f9:15:e6:53:3d:17:cb:32:55:ea:32:a1:98: 93:03:6e:8a:fc:32:28:0f:e4:0a:5b:b6:e9:68:4f: 0a:e7:c4:e9:be:cf:78:24:62:f0:a6:b9:f0:39:82: 7b:b1:a1:70:46:2d:02:92:bd:d1:d0:fd:0c:f7:d6: a2:f5:04:c4:36:76:ec:90:7e:8b:eb:b4:a1:b4:28: a4:51:1b:11:03:bd:ba:29:ac:a9:fe:3d:d6:c2:17: 53:04:2d:c6:95:d5:31:15:30:90:3c:f0:36:d3:ad: 1f:15:24:b4:0f:d6:bb:5e:93:f7:ff:0c:49:12:e8: ad:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 157.254.0.0/16 199.103.94.0/23 206.209.208.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7768 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:0c:a2:a7:43:d1:1e:07:0b:bd:ad:11:1a:91:82:d7:e4:bf: ef:f9:74:c0:80:7b:1d:89:2b:85:42:0a:47:7c:79:8d:d1:e7: 4e:9b:d4:ca:c0:d6:98:08:26:b3:cb:69:c0:7f:b1:a5:84:cb: c7:30:75:5a:a1:7c:e4:db:f1:92:1c:f5:63:38:3b:18:22:60: bd:3e:9e:48:80:0c:a9:e3:6d:e1:8b:a7:25:fa:f1:fe:17:38: b0:39:29:80:7a:22:01:df:5e:0c:77:1d:dd:c6:76:59:51:5a: 46:cd:46:a0:96:6d:d9:36:7f:69:a7:c0:49:32:11:47:25:20: 8b:ba:a6:09:86:12:15:88:ce:90:81:2a:03:5d:8c:3c:2d:4e: 54:91:38:4e:8d:e2:2d:17:68:cd:92:c0:86:1f:c2:2c:ba:b3: 94:e6:7c:b2:5e:f6:92:54:89:b4:ba:18:ca:3d:24:dd:7b:d1: bd:e7:fd:7b:0f:5f:68:24:58:f7:23:6c:9c:72:2c:8f:fb:bf: 3e:2b:f4:b4:ca:ef:f7:06:18:d1:64:18:4b:0f:fb:75:c2:99: 23:79:85:c7:4e:3e:db:c3:e3:e1:9c:df:91:c3:72:81:e3:6d: 3f:60:e6:9e:12:d8:c4:3b:e8:5b:6b:3e:56:4a:37:15:66:17: 3a:20:f8:1c -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEHkg0+0estkpnxU8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcwNDE5MDYzOVowLzEtMCsGA1UEAxMk NDNiN2ZiZjQtNGRlZi00OTA0LTg3ZmQtZTU5OGJmOWNmMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/C1w4csYnu90/PD521uee+9LmNyRYdVgxaz M/SerVrGTuxXwDY/KrGTSzmGGoWI8XRXgDdMOevQ8EQ0YCVpuWKDZMv4O6gP6MZ+ 4AJ3LtUnr6a0MDbax/1/MzrouzNgRCgZ94SNvVuWSX6Pxb3zSS63N1a4pa1s/9Ht dTTCoC4xUuoTM3dW3/kV5lM9F8syVeoyoZiTA26K/DIoD+QKW7bpaE8K58Tpvs94 JGLwprnwOYJ7saFwRi0Ckr3R0P0M99ai9QTENnbskH6L67ShtCikURsRA726Kayp /j3WwhdTBC3GldUxFTCQPPA2060fFSS0D9a7XpP3/wxJEuit2wIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFJZDyQbEy/ccnD1JRxXhOXEHrpe+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80 M2I3ZmJmNC00ZGVmLTQ5MDQtODdmZC1lNTk4YmY5Y2YyZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04 N2ZkLWU1OThiZjljZjJlMy80M2I3ZmJmNC00ZGVmLTQ5MDQtODdmZC1lNTk4YmY5 Y2YyZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwCd/gMEAcdnXgMEBM7R0DAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgIeWDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMDKKnQ9EeBwu9rREakYLX5L/v+XTAgHsd iSuFQgpHfHmN0edOm9TKwNaYCCazy2nAf7GlhMvHMHVaoXzk2/GSHPVjODsYImC9 Pp5IgAyp423hi6cl+vH+FziwOSmAeiIB314Mdx3dxnZZUVpGzUaglm3ZNn9pp8BJ MhFHJSCLuqYJhhIViM6QgSoDXYw8LU5UkThOjeItF2jNksCGH8IsurOU5nyyXvaS VIm0uhjKPSTde9G95/17D19oJFj3I2ycciyP+78+K/S0yu/3BhjRZBhLD/t1wpkj eYXHTj7bw+PhnN+Rw3KB420/YOaeEtjEO+hbaz5WSjcVZhc6IPgc -----END CERTIFICATE-----Generated at Mon May 15 19:47:13 2023 by rpki-client on console-fra.rpki-client.org