$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.cer File: dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.cer (raw, json) Hash identifier: wTdRr7bJFs2tA/bzjQBWmFYrBUMjsrHselDm09D+zGs= Subject key identifier: 6C:55:D1:A4:32:7B:96:D3:67:EE:5C:4D:89:D6:D2:3C:9C:76:27:9E Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F4328584538A5C68EAAF4A5467E345820 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 16 Mar 2024 00:45:21 +0000 Certificate not after: Fri 19 Jun 2026 00:45:21 +0000 Subordinate resources: AS: 2701 IP: 129.130.0.0/16 IP: 192.31.97.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:38:a5:c6:8e:aa:f4:a5:46:7e:34:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Mar 16 00:45:21 2024 GMT Not After : Jun 19 00:45:21 2026 GMT Subject: CN=dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:41:8c:38:23:9c:fb:23:25:75:63:e5:f4:3d: 3c:5e:79:67:8a:6d:08:da:3d:aa:8c:3f:c2:b6:16: 31:61:17:08:78:f7:8f:a9:8e:e2:47:e6:de:0c:13: 07:35:06:29:d3:7b:ea:96:71:67:9f:e2:48:71:13: 73:03:12:9d:71:52:f5:ea:83:f9:9c:1f:a0:ac:52: ec:6d:a7:4a:28:00:a6:92:56:fd:b0:aa:3b:c9:2b: ba:be:8c:c7:b1:9b:4b:3c:25:08:c6:ed:bf:9c:a9: 4b:86:99:55:b1:c7:93:d5:62:ac:4d:af:cc:46:17: 41:f3:76:9d:f2:2b:06:38:ae:bc:10:1c:c7:74:e3: 2c:27:d3:2c:d0:ea:3b:ea:fe:de:12:c5:53:5d:8b: 43:90:3a:5e:8b:67:1e:91:7f:b7:2f:e7:b0:75:61: 45:bc:ad:98:60:34:44:3d:e4:9c:73:ec:13:bd:91: 5a:5d:96:57:6e:73:bd:b7:50:2d:77:85:9c:09:eb: a8:1a:22:bf:21:9b:21:f8:8e:86:53:35:5c:15:34: bc:7a:05:12:a2:75:44:ec:2f:ff:94:8a:4e:ef:05: 8c:d5:fe:40:d9:b6:b8:fa:43:49:be:ba:7a:0f:ca: bc:48:e8:a5:97:91:ac:fd:79:ac:2d:24:d0:2c:65: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:55:D1:A4:32:7B:96:D3:67:EE:5C:4D:89:D6:D2:3C:9C:76:27:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 129.130.0.0/16 192.31.97.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2701 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b5:5f:c0:59:b0:1f:66:22:69:0f:ba:a8:fc:0b:50:d3:5b: b0:0e:d4:ee:7c:2f:1f:69:d0:a8:e4:c7:a2:29:35:a8:2b:65: b2:d5:ec:bf:28:e6:5b:6d:cf:52:e0:4d:b5:95:97:16:96:91: 2b:30:18:0a:76:31:03:54:ff:80:3a:10:c6:20:21:e1:e2:ab: 99:b1:36:e7:99:37:2c:82:ef:e1:08:d6:2e:dc:c6:63:15:8e: 5f:dd:eb:cf:e7:45:e7:b5:f2:de:d3:f2:78:89:88:38:43:5b: 6e:39:3d:67:60:68:4a:63:8c:d1:58:57:01:d5:af:a0:a4:5a: 41:b3:59:82:38:d9:42:09:33:df:0c:01:c9:ca:1a:11:01:ca: ac:03:36:f1:14:20:dc:36:02:3d:70:11:80:a1:34:0b:93:af: 59:68:91:fd:90:f5:5b:16:f5:68:54:4a:42:63:ff:2b:1f:0a: 24:b6:19:52:c9:e4:53:62:c1:44:b9:e1:44:0e:5b:af:69:ed: 28:c9:79:37:3a:6b:d8:d2:d2:ec:0e:4a:18:22:5b:2d:db:6a: 63:b3:e5:9f:aa:d5:d7:27:8f:25:60:3a:cc:16:fa:68:08:fa: 8b:82:c3:2c:79:18:fd:da:e8:c9:1a:b8:58:e4:09:e6:46:62: 0d:1d:6e:8b -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEU4pcaOqvSlRn40WCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDMxNjAwNDUyMVoXDTI2MDYxOTAwNDUyMVowLzEtMCsGA1UEAxMk ZGM0Y2M2YzgtNDdhYS00YjBlLWIwYjAtMDQ0MDBmN2Y5OWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkGMOCOc+yMldWPl9D08Xnlnim0I2j2qjD/C thYxYRcIePePqY7iR+beDBMHNQYp03vqlnFnn+JIcRNzAxKdcVL16oP5nB+grFLs badKKACmklb9sKo7ySu6vozHsZtLPCUIxu2/nKlLhplVsceT1WKsTa/MRhdB83ad 8isGOK68EBzHdOMsJ9Ms0Oo76v7eEsVTXYtDkDpei2cekX+3L+ewdWFFvK2YYDRE PeScc+wTvZFaXZZXbnO9t1Atd4WcCeuoGiK/IZsh+I6GUzVcFTS8egUSonVE7C// lIpO7wWM1f5A2ba4+kNJvrp6D8q8SOill5Gs/XmsLSTQLGUB+wIDAQABo4IEHzCC BBswHQYDVR0OBBYEFGxV0aQye5bTZ+5cTYnW0jycdieeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9k YzRjYzZjOC00N2FhLTRiMGUtYjBiMC0wNDQwMGY3Zjk5YjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2RjNGNjNmM4LTQ3YWEtNGIwZS1i MGIwLTA0NDAwZjdmOTliMC9kYzRjYzZjOC00N2FhLTRiMGUtYjBiMC0wNDQwMGY3 Zjk5YjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCBggMEAMAfYTAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgIKjTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQB9tV/AWbAfZiJpD7qo/AtQ01uwDtTufC8fadCo5Mei KTWoK2Wy1ey/KOZbbc9S4E21lZcWlpErMBgKdjEDVP+AOhDGICHh4quZsTbnmTcs gu/hCNYu3MZjFY5f3evP50XntfLe0/J4iYg4Q1tuOT1nYGhKY4zRWFcB1a+gpFpB s1mCONlCCTPfDAHJyhoRAcqsAzbxFCDcNgI9cBGAoTQLk69ZaJH9kPVbFvVoVEpC Y/8rHwokthlSyeRTYsFEueFEDluvae0oyXk3OmvY0tLsDkoYIlst22pjs+WfqtXX J48lYDrMFvpoCPqLgsMseRj92ujJGrhY5AnmRmINHW6L -----END CERTIFICATE-----Generated at Sat Apr 20 15:05:22 2024 by rpki-client on console-ams.rpki-client.org