$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f6d4a11-6ea5-41b8-be9b-14045d89eac7.cer File: 8f6d4a11-6ea5-41b8-be9b-14045d89eac7.cer (raw, json) Hash identifier: tO4+7+vsIfeiq3SYgjmiwVgU1yYdOiKW9SLQLRGelHY= Subject key identifier: 21:4A:33:53:96:B5:4C:EF:E9:8A:DE:C9:2A:C7:10:87:CE:E1:BC:0C Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285842C481D301044A2378EF946600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f6d4a11-6ea5-41b8-be9b-14045d89eac7/8f6d4a11-6ea5-41b8-be9b-14045d89eac7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f6d4a11-6ea5-41b8-be9b-14045d89eac7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 04 Aug 2023 00:45:16 +0000 Certificate not after: Thu 06 Nov 2025 01:45:16 +0000 Subordinate resources: AS: 399515 IP: 199.231.234.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:c4:81:d3:01:04:4a:23:78:ef:94:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 4 00:45:16 2023 GMT Not After : Nov 6 01:45:16 2025 GMT Subject: CN=8f6d4a11-6ea5-41b8-be9b-14045d89eac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:81:be:5a:cb:dd:02:a6:d1:87:a7:eb:e0:c5: 4d:a0:0a:b5:1b:a4:e5:c1:8f:ad:a3:71:bd:75:ff: a7:cd:2c:75:4f:39:81:97:df:25:43:b3:c3:9d:4c: 65:a8:e4:94:c9:51:c0:d9:df:10:4e:39:11:dc:2b: e5:8f:74:49:10:c3:23:d1:ce:cb:8d:f4:ab:71:3c: 1b:39:e6:b8:49:ff:8f:e7:1c:f3:d0:fd:ad:f2:92: 52:6f:46:29:43:2a:a7:30:8a:1f:39:bb:47:4e:5f: 60:97:4e:c5:e1:83:45:26:92:64:4d:2e:e3:ec:65: 9e:66:20:55:92:63:55:06:01:8c:b5:8a:98:e5:53: ae:40:d8:52:ca:fb:94:91:c5:1e:9f:99:a2:1a:63: df:71:fb:81:63:bf:78:fb:bd:d2:57:15:9a:98:1c: 34:81:0a:df:b8:68:16:82:21:a2:09:65:69:6d:44: 73:0a:a0:5b:a1:f3:6e:dd:8b:8f:a0:81:88:b8:eb: 98:6e:b2:43:b4:cc:02:3a:4b:9b:6b:09:e8:6d:4b: 32:1c:94:b5:70:01:41:a8:90:b1:68:5d:b5:62:3d: e3:aa:5b:09:6b:ce:36:cc:13:e6:90:24:f2:62:cf: 0e:fa:be:95:15:90:83:65:57:3e:47:1d:5f:34:d1: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4A:33:53:96:B5:4C:EF:E9:8A:DE:C9:2A:C7:10:87:CE:E1:BC:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f6d4a11-6ea5-41b8-be9b-14045d89eac7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8f6d4a11-6ea5-41b8-be9b-14045d89eac7/8f6d4a11-6ea5-41b8-be9b-14045d89eac7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 199.231.234.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399515 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:09:85:d8:31:ac:10:d4:8f:94:de:59:17:81:82:28:75:a1: 7b:4d:4e:2a:20:f4:65:4d:54:4f:d4:c1:6d:3c:b1:dd:dd:d4: 08:9d:54:96:3d:cd:47:69:19:9f:c1:3b:0c:ab:13:7a:b4:e7: 8e:d8:ed:86:4c:84:ab:f4:80:73:14:04:4c:ce:be:ed:41:ec: 40:b9:37:09:fe:ea:6e:ff:8a:19:55:1f:0d:bf:0d:54:8d:5c: f5:c2:e0:ff:ed:cb:1e:d6:d6:43:b7:f0:9c:b2:d4:f9:79:df: 90:d3:98:bd:dc:7d:37:8b:16:38:29:be:57:51:8f:8f:be:b8: 64:8b:cd:1a:ee:68:88:56:71:23:94:9c:84:98:e4:fa:47:1b: d3:25:7b:28:0a:79:ff:dc:47:e2:c9:66:bf:c8:b5:40:3d:76: c7:30:5c:6b:96:71:a5:6b:5f:ef:16:3c:6c:19:b3:81:d5:b8: 6e:6d:92:87:2b:55:df:13:a3:48:ab:67:bd:59:d9:8f:02:39: d8:67:a6:76:7f:68:5c:8c:f6:f2:88:85:1d:ce:c8:c0:4a:99: 4c:88:5f:4e:b3:b8:18:2c:92:92:62:71:c7:67:e3:d7:76:e9: 14:37:8e:fb:eb:cc:cb:41:e1:27:a9:8f:21:ca:97:d7:ce:5c: af:d3:18:c2 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWELEgdMBBEojeO+UZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDgwNDAwNDUxNloXDTI1MTEwNjAxNDUxNlowLzEtMCsGA1UEAxMk OGY2ZDRhMTEtNmVhNS00MWI4LWJlOWItMTQwNDVkODllYWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4G+WsvdAqbRh6fr4MVNoAq1G6TlwY+to3G9 df+nzSx1TzmBl98lQ7PDnUxlqOSUyVHA2d8QTjkR3Cvlj3RJEMMj0c7LjfSrcTwb Oea4Sf+P5xzz0P2t8pJSb0YpQyqnMIofObtHTl9gl07F4YNFJpJkTS7j7GWeZiBV kmNVBgGMtYqY5VOuQNhSyvuUkcUen5miGmPfcfuBY794+73SVxWamBw0gQrfuGgW giGiCWVpbURzCqBbofNu3YuPoIGIuOuYbrJDtMwCOkubawnobUsyHJS1cAFBqJCx aF21Yj3jqlsJa842zBPmkCTyYs8O+r6VFZCDZVc+Rx1fNNFwOQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCFKM1OWtUzv6YreySrHEIfO4bwMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84 ZjZkNGExMS02ZWE1LTQxYjgtYmU5Yi0xNDA0NWQ4OWVhYzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzhmNmQ0YTExLTZlYTUtNDFiOC1i ZTliLTE0MDQ1ZDg5ZWFjNy84ZjZkNGExMS02ZWE1LTQxYjgtYmU5Yi0xNDA0NWQ4 OWVhYzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADH5+owGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhibMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB8JhdgxrBDUj5TeWReBgih1oXtNTiog9GVNVE/UwW08sd3d 1AidVJY9zUdpGZ/BOwyrE3q0547Y7YZMhKv0gHMUBEzOvu1B7EC5Nwn+6m7/ihlV Hw2/DVSNXPXC4P/tyx7W1kO38Jyy1Pl535DTmL3cfTeLFjgpvldRj4++uGSLzRru aIhWcSOUnISY5PpHG9MleygKef/cR+LJZr/ItUA9dscwXGuWcaVrX+8WPGwZs4HV uG5tkocrVd8To0irZ71Z2Y8COdhnpnZ/aFyM9vKIhR3OyMBKmUyIX06zuBgskpJi ccdn49d26RQ3jvvrzMtB4SepjyHKl9fOXK/TGMI= -----END CERTIFICATE-----Generated at Wed Apr 24 14:26:08 2024 by rpki-client on console-fra.rpki-client.org