$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer File: 89fa01af-cca5-4d8f-8003-f6c9e22578b4.cer (raw, json) Hash identifier: tbO4FWhykrcdHlerSItC8cvKf8W9WlUYmrk3xJnnVWk= Subject key identifier: CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285841E48350158ABDDEEECCFB1E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Mon 07 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 31746 IP: 2620:5d:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:50:15:8a:bd:de:ee:cc:fb:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 7 19:06:39 2025 GMT Subject: CN=89fa01af-cca5-4d8f-8003-f6c9e22578b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:35:4d:eb:5c:96:cf:c0:6c:27:ef:a6:2a:b1: 9d:d9:73:d3:cb:fa:b0:59:8f:9d:18:71:43:d1:a3: 18:dd:12:09:6a:e7:46:02:8c:1d:7b:f6:94:87:f2: b9:57:7e:bf:ae:d5:5b:de:d1:6b:86:89:a3:06:e8: ca:91:50:72:1b:4a:78:ad:c0:c2:08:cc:59:17:ba: 54:b4:ac:d6:cc:05:0f:3c:0d:e1:ad:4b:9f:da:11: c7:2c:be:57:d2:92:e7:6e:e5:9b:0f:3e:05:d0:63: d4:1f:73:b3:8a:69:29:27:5e:ea:de:9c:ef:11:41: 65:27:7f:98:a8:c1:9e:1f:71:1d:ad:94:95:0e:c9: 98:64:f3:dd:ca:a0:b5:27:d7:c4:70:7c:de:ae:ed: 6c:28:b2:0a:db:06:42:7f:aa:67:d8:f1:f2:5c:52: 4d:9a:41:2c:dd:9a:e2:79:08:39:19:76:30:7b:23: ea:fb:4d:64:70:26:87:2c:76:e1:9e:b9:b6:dd:73: 57:0a:84:db:c5:95:51:53:0c:16:92:61:64:28:a3: 86:06:4f:b8:c3:d7:8f:6b:0d:42:a8:a7:59:a6:ef: 39:5a:5c:19:08:10:62:31:ba:5a:09:4c:02:0b:f8: 96:d6:da:61:c8:5c:9c:3d:3c:e2:67:7e:02:12:96: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AB:AE:F3:7B:C8:4A:F7:4F:BC:AE:D0:A1:BC:E5:15:6B:25:5B:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/89fa01af-cca5-4d8f-8003-f6c9e22578b4/89fa01af-cca5-4d8f-8003-f6c9e22578b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv6: 2620:5d:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31746 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:fd:a4:dd:fc:74:af:64:1c:71:dd:f0:75:45:a1:8c:bc:7d: b4:21:8c:83:0f:0f:83:f0:f7:d2:82:cb:cc:c5:46:17:94:0a: 12:13:0b:6f:44:81:8a:c4:5a:09:15:db:d5:c7:6b:8f:74:63: 29:a1:76:54:f9:36:7a:12:b1:c6:cc:de:a6:b6:bd:cb:0a:6f: ba:09:25:e6:4d:01:55:79:12:4d:2f:c2:8c:71:48:e0:a6:fd: df:a5:2d:7a:ee:b9:5a:c6:6d:55:80:1f:f5:5d:5f:8e:7d:7d: d1:54:a0:c9:a1:b9:75:7b:dc:b8:d8:e8:77:45:af:30:bb:33: 01:c5:1b:19:b1:f2:41:56:45:be:6c:2d:be:a2:43:0b:3c:c8: fb:4d:66:b2:1c:57:18:bd:e8:0d:de:cd:39:3d:a7:a5:e9:68: 22:f6:a3:e0:36:f8:91:47:cd:e8:02:67:7f:b2:5b:ab:b0:90: 9e:34:ec:4f:6f:b7:4c:26:91:1a:9a:e2:89:c6:3e:6a:43:1e: 7c:ce:be:6c:19:53:20:b4:10:50:91:f6:82:44:cb:98:98:30: 4f:37:0c:28:56:63:d0:10:4d:5b:70:04:e9:85:d9:15:1f:e5: a6:eb:f1:d1:fb:bf:6d:b0:2b:0a:1d:eb:c7:b4:80:68:e5:79: 81:c9:a6:28 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEHkg1AVir3e7sz7HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcwNzE5MDYzOVowLzEtMCsGA1UEAxMk ODlmYTAxYWYtY2NhNS00ZDhmLTgwMDMtZjZjOWUyMjU3OGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijVN61yWz8BsJ++mKrGd2XPTy/qwWY+dGHFD 0aMY3RIJaudGAowde/aUh/K5V36/rtVb3tFrhomjBujKkVByG0p4rcDCCMxZF7pU tKzWzAUPPA3hrUuf2hHHLL5X0pLnbuWbDz4F0GPUH3OzimkpJ17q3pzvEUFlJ3+Y qMGeH3EdrZSVDsmYZPPdyqC1J9fEcHzeru1sKLIK2wZCf6pn2PHyXFJNmkEs3Zri eQg5GXYweyPq+01kcCaHLHbhnrm23XNXCoTbxZVRUwwWkmFkKKOGBk+4w9ePaw1C qKdZpu85WlwZCBBiMbpaCUwCC/iW1tphyFycPTziZ34CEpbhmwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFMyrrvN7yEr3T7yu0KG85RVrJVtGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84 OWZhMDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5ZTIyNTc4YjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzg5ZmEwMWFmLWNjYTUtNGQ4Zi04 MDAzLWY2YzllMjI1NzhiNC84OWZhMDFhZi1jY2E1LTRkOGYtODAwMy1mNmM5ZTIy NTc4YjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIABdQAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICfAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAav2k3fx0r2Qccd3wdUWhjLx9tCGMgw8Pg/D30oLLzMVG F5QKEhMLb0SBisRaCRXb1cdrj3RjKaF2VPk2ehKxxszepra9ywpvugkl5k0BVXkS TS/CjHFI4Kb936Uteu65WsZtVYAf9V1fjn190VSgyaG5dXvcuNjod0WvMLszAcUb GbHyQVZFvmwtvqJDCzzI+01mshxXGL3oDd7NOT2npeloIvaj4Db4kUfN6AJnf7Jb q7CQnjTsT2+3TCaRGpriicY+akMefM6+bBlTILQQUJH2gkTLmJgwTzcMKFZj0BBN W3AE6YXZFR/lpuvx0fu/bbArCh3rx7SAaOV5gcmmKA== -----END CERTIFICATE-----Generated at Thu Apr 25 22:34:46 2024 by rpki-client on console-fra.rpki-client.org