$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer File: 2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer (raw, json) Hash identifier: Hwv82gY5Y6B8dxaDB+uUSWHKdX8tWiZ0tRz0J032+z4= Subject key identifier: 8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584448ACACBB8CD80CCB12ED3920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Dec 2023 01:45:15 +0000 Certificate not after: Wed 25 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 32334 IP: 23.150.128.0/24 IP: 192.30.36.0/24 IP: 2620:17:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:48:ac:ac:bb:8c:d8:0c:cb:12:ed:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 21 01:45:15 2023 GMT Not After : Mar 25 00:45:15 2026 GMT Subject: CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:d2:5b:c9:1e:b0:57:17:bb:e4:ff:51:48: de:9b:6e:03:02:d5:0a:f5:99:3c:6e:02:ea:1f:77: 0a:40:65:68:2c:fc:67:78:b6:29:0e:37:f7:c5:06: d7:39:c9:35:7f:76:9e:18:78:70:6d:90:eb:22:12: 7d:8f:37:2c:d9:74:67:79:86:ff:b0:c1:76:f8:94: 57:82:3d:d0:24:c4:8d:23:aa:70:5d:b0:55:d1:74: a7:b8:73:31:2b:f6:7a:4b:95:25:4b:e7:ef:53:a5: 25:54:b9:a1:87:fe:07:68:15:64:2e:ab:dd:b0:84: 01:f2:2e:a4:93:71:c9:fc:40:05:58:05:3f:a9:c2: 3b:5f:d3:71:eb:65:96:91:24:6b:12:dc:4d:c7:fd: b6:4c:1b:40:94:0f:39:50:d9:d0:2d:64:f8:04:81: 04:33:64:bd:9b:4b:d2:63:03:c2:23:12:e1:2d:30: 7b:dc:ca:4e:5a:78:e5:30:fa:78:ac:3d:fe:ad:9e: 9e:13:4a:2f:37:62:01:9e:a4:87:cc:9d:cf:b9:e4: 19:74:9c:e2:8b:d7:eb:18:f2:a7:12:70:bc:3d:8a: 1c:80:02:fb:8c:e6:83:97:c4:f7:0d:10:4b:fc:7b: 25:cf:99:28:39:03:3c:91:86:19:05:8f:70:47:52: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.150.128.0/24 192.30.36.0/24 IPv6: 2620:17:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32334 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f3:35:58:77:9f:27:3a:2d:0d:34:d5:5d:63:d7:b1:26:80: f9:35:52:06:47:7c:d1:ac:54:19:6c:46:cd:2f:61:89:de:ea: 2c:bc:e4:4f:ee:de:85:00:d5:90:2d:fa:8d:6b:b1:d8:ee:d2: 19:10:f7:71:1b:88:ed:fe:24:07:5d:6f:63:94:47:4c:78:ea: 54:1d:cb:c8:6c:fd:95:b9:8e:6e:81:a9:55:79:f2:03:65:6a: df:7f:af:32:bc:06:d8:e7:d4:85:0e:ea:e6:d1:f4:c9:b0:e1: db:c7:e4:15:f8:7a:8a:ab:01:c3:5b:27:79:a1:7d:7a:07:ed: 57:d4:61:f7:74:ac:4b:09:7c:c0:b7:62:30:3d:5c:81:20:c9: 96:c8:42:84:03:b4:7e:0d:ae:86:33:a3:ec:9b:e3:58:36:fa: 50:1d:a9:aa:63:20:0e:5e:ab:d9:5f:5d:09:eb:58:80:1b:5f: 06:67:6b:bf:92:00:15:09:0e:f0:3e:9b:c6:8f:f8:88:8f:21: 5f:cf:ee:d4:b9:e9:48:33:bf:c4:91:e8:60:43:ee:33:8c:b8: ab:e7:0b:0a:5e:a4:94:22:6f:7b:83:ac:9a:97:10:09:a2:e2: a7:19:0c:79:4a:d3:28:8b:52:7a:d2:11:7a:53:46:53:1a:f3: 74:32:8d:34 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWERIrKy7jNgMyxLtOSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMTIyMTAxNDUxNVoXDTI2MDMyNTAwNDUxNVowLzEtMCsGA1UEAxMk MmQ0OTM0YzgtNWI3OC00OGQ2LWIyNjEtYjdhMGQxYmM0YmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyanSW8kesFcXu+T/UUjem24DAtUK9Zk8bgLq H3cKQGVoLPxneLYpDjf3xQbXOck1f3aeGHhwbZDrIhJ9jzcs2XRneYb/sMF2+JRX gj3QJMSNI6pwXbBV0XSnuHMxK/Z6S5UlS+fvU6UlVLmhh/4HaBVkLqvdsIQB8i6k k3HJ/EAFWAU/qcI7X9Nx62WWkSRrEtxNx/22TBtAlA85UNnQLWT4BIEEM2S9m0vS YwPCIxLhLTB73MpOWnjlMPp4rD3+rZ6eE0ovN2IBnqSHzJ3PueQZdJzii9frGPKn EnC8PYocgAL7jOaDl8T3DRBL/Hslz5koOQM8kYYZBY9wR1KKdQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFI2lc5lnN3Rc1PzM68DCxecMVEnjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y ZDQ5MzRjOC01Yjc4LTQ4ZDYtYjI2MS1iN2EwZDFiYzRiYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJkNDkzNGM4LTViNzgtNDhkNi1i MjYxLWI3YTBkMWJjNGJiNy8yZDQ5MzRjOC01Yjc4LTQ4ZDYtYjI2MS1iN2EwZDFi YzRiYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXloADBADAHiQwDwQCAAIwCQMHACYgABegADAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJ+TjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAw8zVYd58nOi0NNNVd Y9exJoD5NVIGR3zRrFQZbEbNL2GJ3uosvORP7t6FANWQLfqNa7HY7tIZEPdxG4jt /iQHXW9jlEdMeOpUHcvIbP2VuY5ugalVefIDZWrff68yvAbY59SFDurm0fTJsOHb x+QV+HqKqwHDWyd5oX16B+1X1GH3dKxLCXzAt2IwPVyBIMmWyEKEA7R+Da6GM6Ps m+NYNvpQHamqYyAOXqvZX10J61iAG18GZ2u/kgAVCQ7wPpvGj/iIjyFfz+7UuelI M7/EkehgQ+4zjLir5wsKXqSUIm97g6yalxAJouKnGQx5StMoi1J60hF6U0ZTGvN0 Mo00 -----END CERTIFICATE-----Generated at Fri Apr 19 19:18:16 2024 by rpki-client on console-ams.rpki-client.org