$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer File: 5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer (raw, json) Hash identifier: Z8LGvGw2a9w+CWKFqSrLn+5p+Sc2u1MLytXK4O8A9uw= Subject key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858452538C2DBAEE103726085F400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 09 Mar 2024 01:45:21 +0000 Certificate not after: Fri 12 Jun 2026 00:45:21 +0000 Subordinate resources: AS: 23528 IP: 147.253.208.0/20 IP: 156.70.2.0 -- 156.70.5.255 IP: 156.70.12.0/23 IP: 156.70.16.0/23 IP: 156.70.22.0 -- 156.70.25.255 IP: 156.70.34.0/23 IP: 156.70.46.0/23 IP: 156.70.52.0/23 IP: 156.70.62.0/23 IP: 156.70.72.0/23 IP: 156.70.76.0/23 IP: 156.70.88.0/23 IP: 156.70.116.0/23 IP: 156.70.120.0/23 IP: 156.70.150.0/23 IP: 168.203.32.0/19 IP: 192.174.80.0/20 IP: 199.15.224.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:25:38:c2:db:ae:e1:03:72:60:85:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 9 01:45:21 2024 GMT Not After : Jun 12 00:45:21 2026 GMT Subject: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:10:0d:97:48:3b:7c:4d:33:37:be:1c:bf:98: 36:fb:46:30:a9:f9:25:18:31:7c:85:a4:fe:36:e9: 5e:5a:11:58:d8:80:28:d1:5e:68:70:87:36:4f:da: 3f:a7:a0:aa:9d:bd:f5:87:31:1d:68:4a:e1:75:6f: e7:bd:99:c8:f0:96:9e:71:12:7f:73:1c:aa:b4:1f: 9a:d1:d0:81:5f:89:ba:a6:6b:1c:29:2b:e6:b0:b5: 22:2b:79:3e:52:d2:9b:02:df:b8:93:f2:56:64:0e: 86:9c:ef:0a:5e:df:5a:f6:c6:0e:c6:5b:0e:1f:38: f4:44:6e:7e:64:f6:44:6a:54:55:f0:80:8d:b4:ec: 39:17:7f:a6:ff:9e:5f:9f:15:d1:db:52:8c:b8:88: 17:a8:36:d3:e2:f6:33:56:fb:e1:2e:5a:17:83:5d: 52:b1:ca:2f:44:55:e7:5b:49:ef:67:01:73:16:ad: da:b2:ad:4a:9d:2a:18:58:66:1f:06:de:93:82:7b: 84:18:84:d6:84:47:3f:66:a4:88:c3:f2:61:87:92: a1:6b:78:6f:87:cf:fd:aa:4d:b4:83:9c:8a:43:71: fa:fa:ff:50:bf:d9:6b:8b:39:7c:c8:d7:f5:7d:54: ec:6e:d7:e9:ba:03:a8:d2:de:03:2a:25:d4:d5:fe: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 147.253.208.0/20 156.70.2.0-156.70.5.255 156.70.12.0/23 156.70.16.0/23 156.70.22.0-156.70.25.255 156.70.34.0/23 156.70.46.0/23 156.70.52.0/23 156.70.62.0/23 156.70.72.0/23 156.70.76.0/23 156.70.88.0/23 156.70.116.0/23 156.70.120.0/23 156.70.150.0/23 168.203.32.0/19 192.174.80.0/20 199.15.224.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23528 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3b:95:45:7a:78:e0:d8:5c:01:ef:94:5a:db:b4:a7:0d:81: 1a:3b:8e:0d:2a:b7:7c:d0:e3:25:35:35:35:c8:14:d7:9b:db: b5:de:e9:b5:a2:8f:df:09:cc:16:58:c2:1a:ed:a3:48:16:6f: c9:f3:5f:0b:67:cf:b2:87:1b:5a:d2:89:f0:9a:2b:bd:2c:78: cd:0c:d4:87:47:dc:c7:9d:76:a7:78:27:2d:60:85:02:df:c2: be:ad:d8:8e:f3:7f:4a:61:d9:a3:91:96:24:18:e8:b1:5e:9a: 86:01:d2:41:f2:fd:be:94:b9:88:41:72:f9:68:a3:50:99:65: 38:4d:e1:db:12:2b:91:92:28:37:5a:f0:ec:5b:33:fc:09:7f: 85:d2:58:e3:64:d0:99:d6:34:32:70:67:41:fd:6c:6f:80:d0: 66:47:60:a6:d9:67:3d:76:79:8d:ae:d3:7a:6d:c1:81:a9:08: 42:cf:4c:fe:f6:b1:b0:9e:59:cc:37:13:0f:0c:f0:cc:bf:96: 57:3a:bd:8e:6e:e9:d4:8c:29:aa:49:61:5d:db:eb:e9:6b:01: 17:e4:8a:46:32:08:36:02:6a:69:3e:12:f5:57:8a:ad:5c:a4: 2f:70:af:06:8b:c9:bc:81:c8:dc:7a:d1:8b:53:d2:78:e0:cb: 40:9e:5c:d5 -----BEGIN CERTIFICATE----- MIIHgjCCBmqgAwIBAgIUAQ0Mn0MoWEUlOMLbruEDcmCF9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDMwOTAxNDUyMVoXDTI2MDYxMjAwNDUyMVowLzEtMCsGA1UEAxMk NWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBiMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxANl0g7fE0zN74cv5g2+0YwqfklGDF8haT+ NuleWhFY2IAo0V5ocIc2T9o/p6Cqnb31hzEdaErhdW/nvZnI8JaecRJ/cxyqtB+a 0dCBX4m6pmscKSvmsLUiK3k+UtKbAt+4k/JWZA6GnO8KXt9a9sYOxlsOHzj0RG5+ ZPZEalRV8ICNtOw5F3+m/55fnxXR21KMuIgXqDbT4vYzVvvhLloXg11SscovRFXn W0nvZwFzFq3asq1KnSoYWGYfBt6TgnuEGITWhEc/ZqSIw/Jhh5Kha3hvh8/9qk20 g5yKQ3H6+v9Qv9lrizl8yNf1fVTsbtfpugOo0t4DKiXU1f4JPQIDAQABo4IElDCC BJAwHQYDVR0OBBYEFDE0nghwLKuyni+0qlIoJhTzHAkiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81 YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzVjOGM4MzE2LTA4ZGMtNGJlZi05 OWY2LWE0MTZmZmEwYjA0YS81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZh MGIwNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwgZgGCCsGAQUF BwEHAQH/BIGIMIGFMIGCBAIAATB8AwQEk/3QMAwDBAGcRgIDBAGcRgQDBAGcRgwD BAGcRhAwDAMEAZxGFgMEAZxGGAMEAZxGIgMEAZxGLgMEAZxGNAMEAZxGPgMEAZxG SAMEAZxGTAMEAZxGWAMEAZxGdAMEAZxGeAMEAZxGlgMEBajLIAMEBMCuUAMEAscP 4DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJb6DBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEO5VFenjg2FwB 75Ra27SnDYEaO44NKrd80OMlNTU1yBTXm9u13um1oo/fCcwWWMIa7aNIFm/J818L Z8+yhxta0onwmiu9LHjNDNSHR9zHnXaneCctYIUC38K+rdiO839KYdmjkZYkGOix XpqGAdJB8v2+lLmIQXL5aKNQmWU4TeHbEiuRkig3WvDsWzP8CX+F0ljjZNCZ1jQy cGdB/WxvgNBmR2Cm2Wc9dnmNrtN6bcGBqQhCz0z+9rGwnlnMNxMPDPDMv5ZXOr2O bunUjCmqSWFd2+vpawEX5IpGMgg2AmppPhL1V4qtXKQvcK8Gi8m8gcjcetGLU9J4 4MtAnlzV -----END CERTIFICATE-----Generated at Sat Apr 20 14:21:26 2024 by rpki-client on console-fra.rpki-client.org