$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer File: ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer (raw, json) Hash identifier: T2Ed5JAT5qIZBNr/aN88VHn3YipuQEcTexa/2gwiM6Y= Subject key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority key identifier: 96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE Certificate issuer: /CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3 Certificate serial: 010D0C9F4328584068E921B2BAC3E7474529A300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0 Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Fri 30 Dec 2022 19:45:11 +0000 Certificate not after: Thu 03 Apr 2025 18:45:11 +0000 Subordinate resources: AS: 7768 IP: 157.254.0.0/16 IP: 199.103.94.0/23 IP: 206.209.208.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Mar 2023 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:40:68:e9:21:b2:ba:c3:e7:47:45:29:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43b7fbf4-4def-4904-87fd-e598bf9cf2e3 Validity Not Before: Dec 30 19:45:11 2022 GMT Not After : Apr 3 18:45:11 2025 GMT Subject: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:15:15:0a:68:50:d1:c9:18:20:77:38:a7: 0a:73:a5:1a:28:6e:a2:9e:92:e3:21:3b:61:9f:f2: 46:c9:89:6c:57:6b:1a:85:42:2e:00:fc:77:19:cb: 6e:4b:b6:bf:20:b1:c4:f4:6c:3a:13:b3:de:ec:cf: cb:4b:f4:57:f8:17:6e:1d:46:cf:11:d7:a4:42:f1: a5:73:b5:20:8a:4e:21:5f:42:f2:95:7a:8c:34:96: 5d:be:43:44:c2:4c:d2:6b:c6:13:69:8e:6d:e0:e1: fb:ca:5c:8f:63:f4:23:b7:69:d6:4f:f3:f1:ac:3c: 69:6f:9f:b8:24:92:bf:35:d3:97:9a:33:8d:38:d3: 2e:48:11:28:1e:41:85:74:3c:82:64:6c:10:81:a6: cc:f4:60:52:73:9f:3b:64:3a:07:44:52:a2:77:b3: ae:9f:b1:5e:4d:ec:d8:d8:81:03:b7:93:97:e7:21: 2d:02:f4:67:fa:56:b7:d3:1d:b5:50:f2:08:46:e7: b8:f4:39:5b:c9:35:24:1f:66:5a:5a:74:c7:b3:fd: af:0c:b8:45:10:44:ce:ce:40:9b:11:77:b5:c1:7b: c8:de:76:e8:4a:ba:a9:79:90:e2:fa:12:8d:92:dc: 33:1b:55:b4:e0:08:9d:21:d5:42:3b:e6:a0:a5:2c: 2a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0 RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl X509v3 Authority Key Identifier: keyid:96:43:C9:06:C4:CB:F7:1C:9C:3D:49:47:15:E1:39:71:07:AE:97:BE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer sbgp-ipAddrBlock: critical IPv4: 157.254.0.0/16 199.103.94.0/23 206.209.208.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7768 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:bf:5f:d6:40:65:50:09:ce:05:67:61:f9:41:91:4b:d4:9e: 27:0f:7c:f1:a7:6f:61:7e:2a:21:f7:de:91:52:17:48:e0:73: 54:d6:40:9d:2d:2e:6e:0b:61:53:9d:60:ef:ac:14:06:ac:12: 03:73:b5:a2:50:e2:6b:ed:f4:c5:3b:24:20:53:ea:ee:7b:d1: db:58:9d:98:da:51:77:ef:c5:d5:80:b5:94:9d:6b:db:97:c5: 1c:3e:2d:d6:79:a1:7f:7f:ac:ca:4f:5e:0c:35:49:24:cf:7d: 6e:86:34:20:dd:34:04:f4:e8:e2:51:55:f7:a4:32:14:86:1f: bd:91:21:e1:fe:b8:d5:a1:68:d5:68:21:fb:d4:6e:70:7a:7b: d7:62:78:3f:d2:82:fc:6e:a1:a9:c3:42:de:14:ed:a4:af:2f: f6:a6:ba:a5:ca:a2:6e:ba:de:08:9a:e8:3a:6b:a6:b7:d0:bd: dd:b3:e6:87:21:86:0b:47:88:40:45:20:37:56:e8:33:ef:9b: 8d:c0:fa:c3:1b:ba:b4:e5:97:f6:a0:03:1f:34:85:1c:c3:79: b7:47:1f:b5:08:49:8b:6a:72:6d:4e:21:79:65:f9:68:eb:04: 96:5b:4d:83:8f:4a:e8:31:0a:d6:13:10:b0:07:d5:9e:8e:62: 7a:87:cc:88 -----BEGIN CERTIFICATE----- MIIGxjCCBa6gAwIBAgIUAQ0Mn0MoWEBo6SGyusPnR0UpowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNiN2ZiZjQtNGRlZi00OTA0LTg3ZmQtZTU5OGJmOWNm MmUzMB4XDTIyMTIzMDE5NDUxMVoXDTI1MDQwMzE4NDUxMVowPTE7MDkGA1UEAxMy ZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4NDcxYTI2M2Q5NGNjZjdm YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPxUVCmhQ0ckYIHc4 pwpzpRoobqKekuMhO2Gf8kbJiWxXaxqFQi4A/HcZy25Ltr8gscT0bDoTs97sz8tL 9Ff4F24dRs8R16RC8aVztSCKTiFfQvKVeow0ll2+Q0TCTNJrxhNpjm3g4fvKXI9j 9CO3adZP8/GsPGlvn7gkkr8105eaM4040y5IESgeQYV0PIJkbBCBpsz0YFJznztk OgdEUqJ3s66fsV5N7NjYgQO3k5fnIS0C9Gf6VrfTHbVQ8ghG57j0OVvJNSQfZlpa dMez/a8MuEUQRM7OQJsRd7XBe8jeduhKuql5kOL6Eo2S3DMbVbTgCJ0h1UI75qCl LCrxAgMBAAGjggPKMIIDxjAdBgNVHQ4EFgQU0/nNKIqWNLU5Y4/n36bIVCfDA/kw ggEiBggrBgEFBQcBCwSCARQwggEQMFMGCCsGAQUFBzAFhkdyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkw ZjQ0NTNiN2IvMDCBgAYIKwYBBQUHMAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5u ZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0OTBmNDQ1M2I3Yi8w L0QzRjlDRDI4OEE5NjM0QjUzOTYzOEZFN0RGQTZDODU0MjdDMzAzRjkubWZ0MDYG CCsGAQUFBzANhipodHRwczovL3JyZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlv bi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHF cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1hNzlh LTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDNiN2ZiZjQtNGRlZi00OTA0LTg3ZmQt ZTU5OGJmOWNmMmUzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJl My5jcmwwHwYDVR0jBBgwFoAUlkPJBsTL9xycPUlHFeE5cQeul74wDgYDVR0PAQH/ BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzov L3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEt ZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05 NTg2LTkyZGQ0OWVmMzIyMy80M2I3ZmJmNC00ZGVmLTQ5MDQtODdmZC1lNTk4YmY5 Y2YyZTMuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAnf4DBAHHZ14D BATO0dAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICHlgwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHL9f1kBl UAnOBWdh+UGRS9SeJw988advYX4qIffekVIXSOBzVNZAnS0ubgthU51g76wUBqwS A3O1olDia+30xTskIFPq7nvR21idmNpRd+/F1YC1lJ1r25fFHD4t1nmhf3+syk9e DDVJJM99boY0IN00BPTo4lFV96QyFIYfvZEh4f641aFo1Wgh+9RucHp712J4P9KC /G6hqcNC3hTtpK8v9qa6pcqibrreCJroOmumt9C93bPmhyGGC0eIQEUgN1boM++b jcD6wxu6tOWX9qADHzSFHMN5t0cftQhJi2pybU4heWX5aOsElltNg49K6DEK1hMQ sAfVno5ieofMiA== -----END CERTIFICATE-----Generated at Wed Mar 15 11:55:08 2023 by rpki-client on console-fra.rpki-client.org