$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer File: 0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer (raw, json) Hash identifier: v9yLLshNg/Zy2RVjmggSdYH8ScPQ022w0flJLDOp5Po= Subject key identifier: 72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285841E4834D0C2B6A652EFB52CC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Mon 16 Jun 2025 19:06:39 +0000 Subordinate resources: AS: 396507 IP: 23.129.64.0/24 IP: 23.190.144.0/24 IP: 2620:18c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4d:0c:2b:6a:65:2e:fb:52:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jun 16 19:06:39 2025 GMT Subject: CN=0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:58:5d:83:9e:66:ec:7a:6b:11:47:8c:38: d3:b7:ac:66:76:68:82:30:43:65:fa:30:06:55:7d: db:4a:6f:99:1d:9b:0e:e6:40:4f:9a:db:56:3d:54: 04:16:c5:03:cb:d9:d6:03:1c:80:3d:98:cf:d0:c4: 18:5b:4b:c0:e6:3d:f8:1c:76:a4:d9:65:8e:b7:e6: 16:cc:48:12:75:ac:7c:d0:dd:b4:76:63:a2:b9:bf: 31:70:07:81:d8:b3:83:ae:87:35:c5:37:aa:d7:a4: a6:c5:1d:cd:75:87:25:fe:19:22:5d:64:e7:9a:2e: 75:a8:e1:a1:1b:2b:f8:58:bc:75:0c:cb:eb:f6:93: 91:b0:bd:07:45:87:29:6e:12:88:af:02:e2:a6:f2: af:fd:c4:68:68:d1:7d:35:ad:07:13:7c:79:8e:38: c6:e3:fa:cc:56:f8:15:e7:5e:f0:b2:13:34:bf:06: 89:64:81:63:a7:29:b9:66:5c:54:3d:3b:c4:bf:bf: 2a:04:aa:7a:c1:f6:e0:e9:4a:a0:7f:19:2b:ff:ed: 8d:e1:12:c4:b5:77:70:65:bc:be:84:66:2d:13:b8: 30:60:ae:5f:e6:65:c2:2e:34:48:a9:9f:5c:38:01: e7:c8:ca:a9:82:02:59:e2:43:54:0f:b8:1d:48:7e: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.129.64.0/24 23.190.144.0/24 IPv6: 2620:18c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f8:7b:a3:2f:fd:36:42:fe:15:20:73:39:b0:a4:45:3d:82: c5:25:73:ed:d9:35:8e:34:66:f8:c6:6b:ee:08:fd:47:aa:6d: fb:de:89:88:ab:f6:9c:cb:bc:f7:27:ad:dc:52:b8:91:34:e0: a7:83:e5:fb:7e:eb:16:c7:7a:6f:b6:80:3c:9e:97:74:da:2c: 1f:6a:3b:5a:aa:c0:49:5f:f7:2d:f4:31:8a:dd:63:8d:61:86: 20:36:d7:23:fb:29:d2:6e:ec:c3:4a:49:bb:ac:93:bc:8b:af: 3f:43:3d:8a:c3:d9:e3:f8:40:6b:01:7a:ac:74:59:ff:5f:94: aa:e2:7b:82:0a:31:30:60:cf:8c:c8:01:c6:f5:86:1c:2c:6c: cc:78:9d:01:4e:b0:1a:ea:0f:19:73:c3:25:ca:68:f9:07:ce: 41:60:c1:ef:3b:c9:a4:27:2d:7e:93:50:f0:bf:ee:e8:7f:9a: 27:a9:34:b6:aa:28:6f:f5:58:91:ce:fd:99:05:0b:54:a7:99: dd:87:2e:ff:09:4b:f8:33:0c:29:90:45:64:9b:56:bb:6b:6e: d7:81:27:a9:36:8e:e2:52:12:a8:77:c5:72:ed:74:c1:33:49: 31:39:ae:93:c6:51:ac:0c:ef:2e:23:9d:c0:a7:5e:2c:63:6d: cc:59:b8:78 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEHkg00MK2plLvtSzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYxNjE5MDYzOVowLzEtMCsGA1UEAxMk MGU2YjdhM2YtYjIwNS00YzZiLWEwMGYtN2RmYzIwODNiNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqpYXYOeZux6axFHjDjTt6xmdmiCMENl+jAG VX3bSm+ZHZsO5kBPmttWPVQEFsUDy9nWAxyAPZjP0MQYW0vA5j34HHak2WWOt+YW zEgSdax80N20dmOiub8xcAeB2LODroc1xTeq16SmxR3NdYcl/hkiXWTnmi51qOGh Gyv4WLx1DMvr9pORsL0HRYcpbhKIrwLipvKv/cRoaNF9Na0HE3x5jjjG4/rMVvgV 517wshM0vwaJZIFjpym5ZlxUPTvEv78qBKp6wfbg6Uqgfxkr/+2N4RLEtXdwZby+ hGYtE7gwYK5f5mXCLjRIqZ9cOAHnyMqpggJZ4kNUD7gdSH4RcQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFHIGrpEXHk7WoDpe1pJj889xjUS9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w ZTZiN2EzZi1iMjA1LTRjNmItYTAwZi03ZGZjMjA4M2I3OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzBlNmI3YTNmLWIyMDUtNGM2Yi1h MDBmLTdkZmMyMDgzYjc4ZC8wZTZiN2EzZi1iMjA1LTRjNmItYTAwZi03ZGZjMjA4 M2I3OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgUADBAAXvpAwDgQCAAIwCAMGBCYgAYwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYM2zBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAn+HujL/02Qv4VIHM5 sKRFPYLFJXPt2TWONGb4xmvuCP1Hqm373omIq/acy7z3J63cUriRNOCng+X7fusW x3pvtoA8npd02iwfajtaqsBJX/ct9DGK3WONYYYgNtcj+ynSbuzDSkm7rJO8i68/ Qz2Kw9nj+EBrAXqsdFn/X5Sq4nuCCjEwYM+MyAHG9YYcLGzMeJ0BTrAa6g8Zc8Ml ymj5B85BYMHvO8mkJy1+k1Dwv+7of5onqTS2qihv9ViRzv2ZBQtUp5ndhy7/CUv4 MwwpkEVkm1a7a27XgSepNo7iUhKod8Vy7XTBM0kxOa6TxlGsDO8uI53Ap14sY23M Wbh4 -----END CERTIFICATE-----Generated at Tue Apr 23 18:46:33 2024 by rpki-client on console-ams.rpki-client.org