$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer File: 3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.cer (raw, json) Hash identifier: u4Fukl+6q3xtVXyjTtJOn71LRNsSAZsYpSzpNEgShO0= Subject key identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285841E4834A22BB1978BBD3E1F6D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Tue 27 May 2025 19:06:39 +0000 Subordinate resources: AS: 26258 AS: 400692 IP: 144.29.0.0/16 IP: 2620:123:c000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4a:22:bb:19:78:bb:d3:e1:f6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 27 19:06:39 2025 GMT Subject: CN=3d9a4c35-54c1-427c-8f6e-ef1b1644f89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:3c:2a:cd:ff:ff:02:83:3c:8b:40:50:cb: c6:fa:6c:dd:09:f6:2f:05:0e:96:6e:0b:e9:0f:83: ff:33:ae:53:03:50:bd:34:d8:72:43:45:f6:eb:b4: c4:57:a3:a9:f1:0d:c9:e1:df:14:64:d1:bf:80:fd: 5c:32:e5:98:a6:7f:ca:3d:02:d5:7f:81:f3:ff:b6: bb:6f:e0:b9:4e:9a:31:a6:74:dd:72:4c:a9:c8:23: 77:61:19:08:bc:32:00:4e:04:59:fc:db:4d:a7:fa: 0a:b1:8b:a4:be:0a:aa:9a:ab:ef:cf:bc:96:58:25: c0:2a:77:85:24:64:f4:28:af:5b:f8:ce:9f:a9:83: bb:ff:3d:e4:8c:59:f8:a4:98:79:c8:26:f9:88:e2: 3f:d9:44:d4:40:55:1a:01:57:08:9b:2b:d3:eb:a5: 79:0c:e8:69:30:6f:60:aa:7f:50:e7:07:c5:4e:70: 32:8d:c9:1d:ce:5a:40:b6:94:80:15:a1:8c:c3:95: ae:27:e1:4c:57:d6:48:04:40:92:79:c1:99:f6:84: a1:26:77:06:46:d1:51:69:e0:38:76:df:0f:08:cf: 12:52:dc:75:52:b3:4f:ae:a9:39:a9:b3:dd:01:e4: a4:57:4e:27:fc:1b:c9:bd:26:a5:1c:1a:38:c9:a8: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:46:D6:D1:1D:4A:D0:6B:D2:D7:1F:5A:72:CB:6F:A9:BF:8A:A8:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e/3d9a4c35-54c1-427c-8f6e-ef1b1644f89e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 144.29.0.0/16 IPv6: 2620:123:c000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26258 400692 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:fb:c2:a1:c5:0c:5e:82:85:e2:f6:f5:68:85:4c:72:03:64: 13:cb:7d:17:ac:1f:27:b1:3f:ab:1c:b1:5e:56:b3:67:a9:9d: 03:ea:0a:df:bb:d1:3c:69:40:de:73:15:79:c3:30:da:9a:b3: 02:d4:17:a0:1f:d8:29:67:97:bd:02:69:18:88:26:6f:69:8a: b6:2a:86:d6:fa:56:79:c4:2c:21:7d:a9:b2:aa:b5:95:58:10: 87:a3:dc:fc:2e:fc:25:83:31:b5:a1:31:fe:9b:05:e0:33:ed: 88:0d:ae:be:ec:03:12:80:31:d9:ca:2e:02:dd:dc:6f:86:e7: f9:6f:93:a9:8c:1e:15:60:cf:7d:dd:1c:2c:29:90:87:2f:c2: 01:45:c8:1d:b4:f4:84:50:db:ac:52:58:19:5f:f1:ce:b1:8e: d7:84:1b:cc:ab:e6:fc:c1:11:3e:e3:fc:fe:ce:90:75:3e:a0: cd:68:87:e9:4a:e8:78:6e:7d:0b:f0:73:dd:e3:a3:17:84:a5: 01:c8:34:2b:58:e5:4d:f2:98:01:f1:44:6c:5e:cd:8f:36:66: 7f:2e:4f:4a:98:75:27:08:09:8d:b5:a6:20:f3:55:5c:50:be: bc:e3:73:52:7e:e7:57:24:5b:a7:3b:75:44:fd:03:2c:45:8a: 50:08:b1:07 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEHkg0oiuxl4u9Ph9tkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUyNzE5MDYzOVowLzEtMCsGA1UEAxMk M2Q5YTRjMzUtNTRjMS00MjdjLThmNmUtZWYxYjE2NDRmODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwME8Ks3//wKDPItAUMvG+mzdCfYvBQ6Wbgvp D4P/M65TA1C9NNhyQ0X267TEV6Op8Q3J4d8UZNG/gP1cMuWYpn/KPQLVf4Hz/7a7 b+C5TpoxpnTdckypyCN3YRkIvDIATgRZ/NtNp/oKsYukvgqqmqvvz7yWWCXAKneF JGT0KK9b+M6fqYO7/z3kjFn4pJh5yCb5iOI/2UTUQFUaAVcImyvT66V5DOhpMG9g qn9Q5wfFTnAyjckdzlpAtpSAFaGMw5WuJ+FMV9ZIBECSecGZ9oShJncGRtFRaeA4 dt8PCM8SUtx1UrNPrqk5qbPdAeSkV04n/BvJvSalHBo4yah5zQIDAQABo4IELjCC BCowHQYDVR0OBBYEFJ9G1tEdStBr0tcfWnLLb6m/iqi6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z ZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0NGY4OWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzNkOWE0YzM1LTU0YzEtNDI3Yy04 ZjZlLWVmMWIxNjQ0Zjg5ZS8zZDlhNGMzNS01NGMxLTQyN2MtOGY2ZS1lZjFiMTY0 NGY4OWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAsEAgABMAUDAwCQHTAOBAIAAjAIAwYAJiABI8AwHgYIKwYBBQUH AQgBAf8EDzANoAswCQICZpICAwYdNDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJ+8KhxQxegoXi9vVohUxy A2QTy30XrB8nsT+rHLFeVrNnqZ0D6grfu9E8aUDecxV5wzDamrMC1BegH9gpZ5e9 AmkYiCZvaYq2KobW+lZ5xCwhfamyqrWVWBCHo9z8LvwlgzG1oTH+mwXgM+2IDa6+ 7AMSgDHZyi4C3dxvhuf5b5OpjB4VYM993RwsKZCHL8IBRcgdtPSEUNusUlgZX/HO sY7XhBvMq+b8wRE+4/z+zpB1PqDNaIfpSuh4bn0L8HPd46MXhKUByDQrWOVN8pgB 8URsXs2PNmZ/Lk9KmHUnCAmNtaYg81VcUL6843NSfudXJFunO3VE/QMsRYpQCLEH -----END CERTIFICATE-----Generated at Fri Apr 19 16:14:18 2024 by rpki-client on console-ams.rpki-client.org