$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d66c2ee-34f7-47a1-9c64-e09c9586ccc9.cer File: 2d66c2ee-34f7-47a1-9c64-e09c9586ccc9.cer (raw, json) Hash identifier: y+C8mwl6ge40e/VDkZcwFlJbM5Ld9DGbpVSXfgBWcIA= Subject key identifier: 3F:C6:38:C1:68:AD:32:84:15:E0:1A:A5:19:0D:B9:0A:7A:38:46:2D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858446CF79014EDF562F2ED8651C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d66c2ee-34f7-47a1-9c64-e09c9586ccc9/2d66c2ee-34f7-47a1-9c64-e09c9586ccc9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d66c2ee-34f7-47a1-9c64-e09c9586ccc9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Jan 2024 01:45:15 +0000 Certificate not after: Tue 07 Apr 2026 00:45:15 +0000 Subordinate resources: AS: 394914 IP: 206.53.201.0/24 IP: 2001:504:60::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:6c:f7:90:14:ed:f5:62:f2:ed:86:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jan 3 01:45:15 2024 GMT Not After : Apr 7 00:45:15 2026 GMT Subject: CN=2d66c2ee-34f7-47a1-9c64-e09c9586ccc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:ac:c8:0a:f9:78:4a:09:eb:93:fe:d7:71: dc:0a:76:35:8b:7d:6a:94:47:2c:d0:06:f2:10:b7: e5:43:a5:2d:ce:16:12:ec:68:d8:ed:51:33:a6:b2: db:4f:1f:85:1a:8b:50:9f:c9:3e:45:00:69:d6:ba: f9:63:2a:de:41:c1:b9:9d:4f:80:d8:5c:d1:9f:20: 26:d7:8b:d2:80:6e:2f:6b:e3:74:7f:0b:5f:6a:67: 2b:d9:f2:a1:fc:a2:11:2c:d8:f9:f5:b4:ce:48:28: 8a:5b:9e:4c:f1:2c:a7:b0:1d:f2:97:28:c2:43:b6: e5:2e:a0:4a:f5:b3:d0:47:49:3d:b2:25:dc:64:01: 8e:f9:77:cd:19:8d:22:a6:7b:2b:64:a5:42:c7:f6: 3b:f4:eb:25:43:39:7f:b0:69:21:83:fd:cd:d5:57: 77:f4:34:4f:46:07:05:e6:b6:f6:c0:ae:d3:5f:36: e2:b0:56:45:1e:09:c7:e3:47:fc:34:bc:a1:1f:88: d7:82:77:dc:a8:6a:5a:26:cf:72:5a:60:11:da:c0: 97:ce:83:cd:4b:f5:b9:0e:91:97:e7:60:54:cb:e9: 63:b4:09:e9:0e:07:47:38:b6:9b:68:8a:6f:59:64: df:fa:ea:13:b9:4b:fd:75:c6:f6:5a:00:1e:33:57: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C6:38:C1:68:AD:32:84:15:E0:1A:A5:19:0D:B9:0A:7A:38:46:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d66c2ee-34f7-47a1-9c64-e09c9586ccc9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d66c2ee-34f7-47a1-9c64-e09c9586ccc9/2d66c2ee-34f7-47a1-9c64-e09c9586ccc9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 206.53.201.0/24 IPv6: 2001:504:60::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394914 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:35:45:2a:11:3c:49:4f:af:c8:f0:5b:f4:73:2b:10:c1:5c: 9d:e3:0c:5a:4a:c2:fa:a8:9f:05:a0:77:60:db:52:c9:fb:4a: b8:26:b6:e2:e6:c8:46:71:f2:e6:e6:04:cb:f8:9a:c7:82:67: e5:46:af:4d:b1:60:ac:bb:68:fa:87:f7:d7:a3:ea:5e:b9:05: 5e:46:7c:98:7e:09:cd:62:b7:56:91:e6:cf:4c:32:08:ed:f2: fb:b9:bd:9c:54:e9:79:5c:12:13:04:6a:b5:83:fb:30:b7:1c: 99:d9:9a:4e:5b:fd:7a:bb:e5:42:85:b7:f2:cd:f7:00:57:b5: c5:3e:cf:3a:ba:c3:1b:8d:38:f4:d9:15:66:16:c8:27:d7:4e: 24:21:25:bb:7e:dc:50:35:a6:b1:54:6f:fd:f9:24:f4:d1:7b: ee:f3:f2:56:99:fc:2c:e6:52:75:79:44:bd:60:0b:6e:32:f2: 09:ea:c4:7f:81:c8:e5:5d:ab:d7:98:d2:29:5f:cc:78:8c:36: 18:e1:6b:74:44:52:8e:00:64:3f:16:be:cf:a1:81:ca:f9:17: 95:20:e2:60:3b:ac:b2:fc:52:db:fa:c1:35:61:0d:38:31:9a: a2:47:57:aa:3f:57:92:a9:6e:77:e1:fa:04:7c:63:13:98:d5: 06:00:72:c9 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWERs95AU7fVi8u2GUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDEwMzAxNDUxNVoXDTI2MDQwNzAwNDUxNVowLzEtMCsGA1UEAxMk MmQ2NmMyZWUtMzRmNy00N2ExLTljNjQtZTA5Yzk1ODZjY2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJusyAr5eEoJ65P+13HcCnY1i31qlEcs0Aby ELflQ6UtzhYS7GjY7VEzprLbTx+FGotQn8k+RQBp1rr5YyreQcG5nU+A2FzRnyAm 14vSgG4va+N0fwtfamcr2fKh/KIRLNj59bTOSCiKW55M8SynsB3ylyjCQ7blLqBK 9bPQR0k9siXcZAGO+XfNGY0ipnsrZKVCx/Y79OslQzl/sGkhg/3N1Vd39DRPRgcF 5rb2wK7TXzbisFZFHgnH40f8NLyhH4jXgnfcqGpaJs9yWmAR2sCXzoPNS/W5DpGX 52BUy+ljtAnpDgdHOLabaIpvWWTf+uoTuUv9dcb2WgAeM1cT2QIDAQABo4IELDCC BCgwHQYDVR0OBBYEFD/GOMForTKEFeAapRkNuQp6OEYtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y ZDY2YzJlZS0zNGY3LTQ3YTEtOWM2NC1lMDljOTU4NmNjYzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJkNjZjMmVlLTM0ZjctNDdhMS05 YzY0LWUwOWM5NTg2Y2NjOS8yZDY2YzJlZS0zNGY3LTQ3YTEtOWM2NC1lMDljOTU4 NmNjYzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADONckwDwQCAAIwCQMHACABBQQAYDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGBqIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPTVFKhE8SU+vyPBb9HMrEMFc neMMWkrC+qifBaB3YNtSyftKuCa24ubIRnHy5uYEy/iax4Jn5UavTbFgrLto+of3 16PqXrkFXkZ8mH4JzWK3VpHmz0wyCO3y+7m9nFTpeVwSEwRqtYP7MLccmdmaTlv9 ervlQoW38s33AFe1xT7POrrDG4049NkVZhbIJ9dOJCElu37cUDWmsVRv/fkk9NF7 7vPyVpn8LOZSdXlEvWALbjLyCerEf4HI5V2r15jSKV/MeIw2GOFrdERSjgBkPxa+ z6GByvkXlSDiYDussvxS2/rBNWENODGaokdXqj9Xkqlud+H6BHxjE5jVBgByyQ== -----END CERTIFICATE-----Generated at Thu Apr 25 02:03:09 2024 by rpki-client on console-ams.rpki-client.org