$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer File: ab352a2a-d782-4f1d-9d54-cbfc159f7431.cer (raw, json) Hash identifier: LRCTaGL2G/6ZEyj32Qjg+leXlzj0AK872f9pIICEc7c= Subject key identifier: 4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285842CCE1E1F3D7EE87F647A3DA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ab352a2a-d782-4f1d-9d54-cbfc159f7431.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 00:45:17 +0000 Certificate not after: Sun 09 Nov 2025 01:45:17 +0000 Subordinate resources: AS: 20151 AS: 33635 IP: 66.36.112.0/20 IP: 162.255.156.0/22 IP: 199.7.96.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:cc:e1:e1:f3:d7:ee:87:f6:47:a3:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Aug 7 00:45:17 2023 GMT Not After : Nov 9 01:45:17 2025 GMT Subject: CN=ab352a2a-d782-4f1d-9d54-cbfc159f7431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:70:76:8f:2e:3e:2b:52:02:d2:b0:05:24: 1f:a1:6e:27:21:ca:aa:b8:24:6c:29:8a:fe:4b:10: 43:41:db:d3:ba:a2:16:52:6f:aa:bc:87:97:76:ef: 3a:2d:80:f3:e8:8b:fd:22:e0:c5:14:9a:f6:34:84: ec:97:11:d6:a3:dc:56:2c:46:b5:c6:b9:bd:90:f9: 9c:48:63:95:11:e1:6e:8c:e7:01:01:3e:cb:2b:0a: 6e:3f:dc:ab:c8:d4:50:ac:0f:f0:be:0b:e2:68:e7: 87:d3:d8:e2:4d:d4:f1:50:48:65:80:a7:81:b5:40: 86:58:c4:02:c8:f6:d1:6e:5d:55:cd:81:d6:88:98: 89:4e:b8:cc:39:c6:08:ce:11:b2:99:3f:96:a8:d8: 15:65:c7:32:20:5f:81:4d:f1:41:e3:74:9d:3b:4e: fd:f6:f4:6d:18:75:e2:5d:49:8b:ae:d5:e2:6e:a6: 68:93:30:c5:53:8b:23:c6:3d:8d:f0:6f:0d:71:02: 03:50:63:a2:3d:09:6f:a8:f4:96:f3:36:6b:2c:34: 6b:cb:ea:da:b5:55:98:67:8f:5c:9b:6e:66:2b:ea: fd:b4:22:0e:6e:77:94:09:22:08:a9:dc:5f:e0:33: e8:b3:e3:84:70:9c:ca:23:cc:15:84:9d:d9:ec:40: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0B:67:CD:BA:95:6E:F5:8D:3A:1C:9E:BD:11:F4:33:01:36:4A:D0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab352a2a-d782-4f1d-9d54-cbfc159f7431/ab352a2a-d782-4f1d-9d54-cbfc159f7431.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 66.36.112.0/20 162.255.156.0/22 199.7.96.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20151 33635 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7c:d0:13:9b:88:b2:a9:53:b2:4d:70:23:65:16:27:46:fe: 75:d3:fe:81:89:96:38:2f:80:4c:90:80:0f:4e:5c:c7:05:ba: 65:30:a5:9a:15:c6:20:39:6b:b2:24:78:ca:14:59:67:96:2f: 38:95:f8:de:2c:2d:94:2d:17:65:20:a5:7f:65:05:c0:1b:5c: 86:87:32:a5:d8:d0:fd:b6:12:86:c0:48:ee:11:c6:1c:16:71: 14:ea:27:9d:56:1f:91:a7:0a:60:95:12:90:61:38:c5:30:33: 12:6f:e9:41:2e:a4:49:73:bc:3d:01:3f:f6:ab:4d:c8:b5:97: f1:01:13:cb:30:5a:b6:7f:c9:b1:40:5d:d4:13:84:77:09:2a: e6:9a:b1:fc:45:90:7b:e2:30:40:73:f7:1c:29:25:87:10:f9: 40:c1:31:d0:4c:6f:cb:b4:6e:31:1e:0d:d8:a8:4b:7c:6a:dd: a4:3e:01:55:f8:e0:f5:47:bb:74:85:f9:c0:92:48:fb:ea:5b: b8:f8:96:38:a7:01:dd:ad:a5:e0:00:43:05:87:0d:0e:91:94: 44:95:b1:1b:67:5c:84:79:ab:97:6f:b5:76:ef:d5:31:a1:56: 24:1f:7e:3b:11:63:14:bd:4e:5b:b4:c0:c8:95:20:54:0e:6e: 3e:e3:63:1a -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWELM4eHz1+6H9kej2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMDgwNzAwNDUxN1oXDTI1MTEwOTAxNDUxN1owLzEtMCsGA1UEAxMk YWIzNTJhMmEtZDc4Mi00ZjFkLTlkNTQtY2JmYzE1OWY3NDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Jwdo8uPitSAtKwBSQfoW4nIcqquCRsKYr+ SxBDQdvTuqIWUm+qvIeXdu86LYDz6Iv9IuDFFJr2NITslxHWo9xWLEa1xrm9kPmc SGOVEeFujOcBAT7LKwpuP9yryNRQrA/wvgviaOeH09jiTdTxUEhlgKeBtUCGWMQC yPbRbl1VzYHWiJiJTrjMOcYIzhGymT+WqNgVZccyIF+BTfFB43SdO0799vRtGHXi XUmLrtXibqZokzDFU4sjxj2N8G8NcQIDUGOiPQlvqPSW8zZrLDRry+ratVWYZ49c m25mK+r9tCIObneUCSIIqdxf4DPos+OEcJzKI8wVhJ3Z7EBERQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEoLZ826lW71jTocnr0R9DMBNkrQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h YjM1MmEyYS1kNzgyLTRmMWQtOWQ1NC1jYmZjMTU5Zjc0MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2FiMzUyYTJhLWQ3ODItNGYxZC05 ZDU0LWNiZmMxNTlmNzQzMS9hYjM1MmEyYS1kNzgyLTRmMWQtOWQ1NC1jYmZjMTU5 Zjc0MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBARCJHADBAKi/5wDBAPHB2AwHgYIKwYBBQUHAQgB Af8EDzANoAswCQICTrcCAwCDYzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGfNATm4iyqVOyTXAjZRYnRv51 0/6BiZY4L4BMkIAPTlzHBbplMKWaFcYgOWuyJHjKFFlnli84lfjeLC2ULRdlIKV/ ZQXAG1yGhzKl2ND9thKGwEjuEcYcFnEU6iedVh+RpwpglRKQYTjFMDMSb+lBLqRJ c7w9AT/2q03ItZfxARPLMFq2f8mxQF3UE4R3CSrmmrH8RZB74jBAc/ccKSWHEPlA wTHQTG/LtG4xHg3YqEt8at2kPgFV+OD1R7t0hfnAkkj76lu4+JY4pwHdraXgAEMF hw0OkZRElbEbZ1yEeauXb7V279UxoVYkH347EWMUvU5btMDIlSBUDm4+42Ma -----END CERTIFICATE-----Generated at Fri Apr 19 02:03:16 2024 by rpki-client on console-fra.rpki-client.org