$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer File: 87eb8683-245d-4fd0-909a-a8de70c5dadd.cer (raw, json) Hash identifier: lMOmMB5igTNRT6BqQXrFYTyA/a2bzq0jqJnvYiVA0g0= Subject key identifier: 9C:92:D0:4D:B3:AD:78:C2:85:03:B9:E1:DC:A7:0A:98:6C:9A:B0:F8 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285845A2BBBFD025118F778EC10900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 23 Apr 2024 00:45:19 +0000 Certificate not after: Mon 27 Jul 2026 00:45:19 +0000 Subordinate resources: AS: 394522 IP: 198.163.221.0 -- 198.163.226.255 IP: 2620:35:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a2:bb:bf:d0:25:11:8f:77:8e:c1:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Apr 23 00:45:19 2024 GMT Not After : Jul 27 00:45:19 2026 GMT Subject: CN=87eb8683-245d-4fd0-909a-a8de70c5dadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:20:a3:8a:ad:10:fb:ca:94:2d:3e:a1:35: 25:9b:b4:a6:e3:4b:d3:91:3c:cc:b5:4f:1f:59:6f: fb:14:eb:2e:26:99:55:48:fa:26:fb:fd:f2:4d:e9: dc:3e:78:d7:f7:00:7b:2e:71:42:86:44:3f:a4:ff: 53:02:0b:8d:ee:65:2c:54:9e:17:17:84:d2:ff:41: b2:9c:2b:0a:ad:a2:46:d5:d9:d3:31:d4:0f:17:07: 13:cf:cd:5f:51:54:e7:6c:83:ad:14:80:73:2f:30: 48:f0:66:24:8a:6f:ad:db:42:ae:4e:65:21:61:fa: 58:ba:b5:17:b3:f1:4b:4b:2b:95:9b:a9:db:e6:57: 4d:b7:2a:02:d1:76:89:db:c5:63:3e:1c:04:8d:74: 83:d8:45:fc:d3:d1:cd:0d:e5:30:1a:95:b5:69:b4: 65:05:f6:06:c4:9d:93:34:a2:d4:ea:67:40:73:4e: 72:6c:ec:39:04:b4:72:00:20:73:2e:91:6a:8f:a1: 98:d3:02:c5:24:3f:31:03:62:6c:34:2e:f0:78:0a: 23:71:24:5b:d5:db:fe:19:93:75:e5:58:2c:b0:18: 0a:a9:26:93:74:51:d1:a4:4c:fd:26:a5:48:92:be: 05:7f:72:3b:8e:b6:68:39:69:5f:4e:3b:71:b5:51: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:92:D0:4D:B3:AD:78:C2:85:03:B9:E1:DC:A7:0A:98:6C:9A:B0:F8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 198.163.221.0-198.163.226.255 IPv6: 2620:35:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394522 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b0:a6:f2:db:16:51:20:36:14:7f:e0:de:6a:11:94:55:7b: 2f:47:e6:ef:1a:fd:de:ec:cc:13:d6:86:56:db:43:6d:db:13: 96:27:f1:69:00:5d:14:e0:56:bf:49:8d:ea:11:bf:aa:84:22: 19:e2:57:da:f1:d4:57:ab:6b:a4:4e:78:44:ec:68:8d:76:42: 6d:20:c9:bc:dd:80:7a:4f:0f:ec:1d:dd:93:ee:fb:11:d3:da: 7c:b8:a6:92:8e:b9:1e:5c:52:33:5d:b4:82:a9:b5:51:6f:e3: b8:57:59:c5:00:bc:d0:a5:d8:bf:72:40:01:61:32:c1:ab:84: 54:8f:19:8d:6a:15:da:0b:73:ce:03:20:71:b7:b8:47:ac:85: 65:0a:3a:76:95:ef:69:f7:b0:70:cc:e3:77:62:35:43:51:0f: 31:98:12:38:82:bc:4b:fc:d2:2f:2c:97:04:3d:f0:40:ba:f9: b9:c5:6a:58:01:87:40:85:99:14:99:a2:af:0c:7d:5b:0e:e7: 5c:d3:11:fc:20:58:25:b7:9c:69:66:58:29:f3:77:7a:dd:39: f5:94:18:cc:28:2c:95:70:db:30:85:cd:3a:64:fa:ff:9c:01: 71:f8:92:0a:6f:e0:a6:ed:b6:d5:3b:af:b1:33:74:65:cc:dd: 12:a9:21:b3 -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEWiu7/QJRGPd47BCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDQyMzAwNDUxOVoXDTI2MDcyNzAwNDUxOVowLzEtMCsGA1UEAxMk ODdlYjg2ODMtMjQ1ZC00ZmQwLTkwOWEtYThkZTcwYzVkYWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhcgo4qtEPvKlC0+oTUlm7Sm40vTkTzMtU8f WW/7FOsuJplVSPom+/3yTencPnjX9wB7LnFChkQ/pP9TAguN7mUsVJ4XF4TS/0Gy nCsKraJG1dnTMdQPFwcTz81fUVTnbIOtFIBzLzBI8GYkim+t20KuTmUhYfpYurUX s/FLSyuVm6nb5ldNtyoC0XaJ28VjPhwEjXSD2EX809HNDeUwGpW1abRlBfYGxJ2T NKLU6mdAc05ybOw5BLRyACBzLpFqj6GY0wLFJD8xA2JsNC7weAojcSRb1dv+GZN1 5VgssBgKqSaTdFHRpEz9JqVIkr4Ff3I7jrZoOWlfTjtxtVGy6wIDAQABo4IENDCC BDAwHQYDVR0OBBYEFJyS0E2zrXjChQO54dynCphsmrD4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84 N2ViODY4My0yNDVkLTRmZDAtOTA5YS1hOGRlNzBjNWRhZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzg3ZWI4NjgzLTI0NWQtNGZkMC05 MDlhLWE4ZGU3MGM1ZGFkZC84N2ViODY4My0yNDVkLTRmZDAtOTA5YS1hOGRlNzBj NWRhZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMBQEAgABMA4wDAMEAMaj3QMEAMaj4jAPBAIAAjAJAwcAJiAANYAA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYFGjBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXsKby2xZRIDYU f+DeahGUVXsvR+bvGv3e7MwT1oZW20Nt2xOWJ/FpAF0U4Fa/SY3qEb+qhCIZ4lfa 8dRXq2ukTnhE7GiNdkJtIMm83YB6Tw/sHd2T7vsR09p8uKaSjrkeXFIzXbSCqbVR b+O4V1nFALzQpdi/ckABYTLBq4RUjxmNahXaC3POAyBxt7hHrIVlCjp2le9p97Bw zON3YjVDUQ8xmBI4grxL/NIvLJcEPfBAuvm5xWpYAYdAhZkUmaKvDH1bDudc0xH8 IFglt5xpZlgp83d63Tn1lBjMKCyVcNswhc06ZPr/nAFx+JIKb+Cm7bbVO6+xM3Rl zN0SqSGz -----END CERTIFICATE-----Generated at Thu Apr 25 22:34:46 2024 by rpki-client on console-fra.rpki-client.org