$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer File: 65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer (raw, json) Hash identifier: UNSdb4lGHJWfswmjVLLHFuG8zEa7eZmMr/F+an4blyY= Subject key identifier: 5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842950C3122F0243E4DBDD832C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Jul 2023 00:45:16 +0000 Certificate not after: Mon 20 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 54797 IP: 143.195.224.0/19 IP: 198.28.13.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:95:0c:31:22:f0:24:3e:4d:bd:d8:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jul 18 00:45:16 2023 GMT Not After : Oct 20 00:45:16 2025 GMT Subject: CN=65492eef-01be-4b81-8e9f-8d89f7c6f85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a8:3e:c2:19:cb:e9:c9:df:ab:53:97:4a:40: b2:60:39:22:7d:69:44:51:8e:ff:91:3d:c0:87:3c: 80:10:c6:d7:4f:b1:d4:6e:9d:72:c3:ef:a2:4c:10: 99:f4:6f:5c:10:a9:66:1a:dc:d5:b6:41:93:66:7c: 2f:dd:57:63:3c:ff:ed:09:ba:d0:cb:50:0b:d1:bd: 98:ae:74:be:1d:0c:51:fc:56:8e:1c:f8:de:da:53: d0:ff:c0:8c:67:91:5e:3e:cf:ff:36:16:60:b4:17: 45:85:7d:1d:a6:bd:2e:ee:9a:41:ac:8e:a7:9b:0b: d7:d6:2e:00:d7:30:1d:4b:49:5a:d5:d6:3f:a8:c1: 8d:74:c1:0d:81:77:39:87:8b:e2:95:6b:b2:ba:43: d0:51:75:c7:57:6d:e7:17:75:5a:8b:da:2d:ae:13: 7c:91:09:57:c8:c0:c2:e7:48:00:e2:0d:1a:d0:dc: 0e:f7:25:3d:c2:ba:f9:65:6d:39:98:3f:b2:3f:04: de:8a:f2:97:28:cb:ec:6a:32:66:3a:3d:e7:a5:b1: 1f:00:11:2d:24:46:d0:d6:65:79:c4:e6:12:dd:e3: ea:06:03:91:5d:c5:1e:2a:d1:0a:ab:df:4c:05:da: 71:87:7d:44:bf:0c:da:71:87:b9:3f:fe:d8:3e:dc: 66:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 143.195.224.0/19 198.28.13.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54797 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:5a:97:5e:4e:55:e3:e2:b4:cc:5d:cf:5a:1d:31:25:99:c5: f2:e7:a3:8a:2c:e9:8e:c0:cd:82:e2:45:50:ec:3a:f8:a7:48: 69:e9:3f:1f:30:b9:1a:07:6d:37:5b:9b:f7:5d:a7:dd:41:52: 31:f3:59:1f:25:33:b2:75:4a:3f:84:df:e1:aa:c4:2c:31:d4: aa:77:98:07:fb:ba:8a:4b:ba:6e:31:ef:c5:94:b8:75:d5:77: fc:79:80:87:20:75:ad:90:05:20:7f:90:cb:56:38:56:80:59: ae:bd:f2:07:63:c2:1c:eb:cb:02:16:0a:dd:03:a6:b4:d2:48: 15:d4:2c:fb:d2:c9:d5:ad:89:d2:61:1c:a3:34:85:41:f2:2b: 37:4d:a7:22:61:9b:55:8a:da:e5:e7:f3:ad:03:8e:0c:0e:44: cf:1f:7e:d4:05:b4:65:fd:93:21:1b:e0:93:b3:36:f0:6a:c6: 2c:ca:b8:91:10:89:98:d0:31:49:8a:27:f4:1a:1c:4d:37:a0: c4:0c:ec:b1:c1:d2:65:c2:2c:a2:e0:5a:17:4d:bb:45:c1:73: e1:f5:1c:50:8f:6e:31:65:d8:1f:56:b5:32:d0:49:0a:50:d1: 44:fa:24:9a:1e:fc:20:fb:81:99:44:09:75:a1:ad:77:2c:01: a0:ad:ef:ee -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEKVDDEi8CQ+Tb3YMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDcxODAwNDUxNloXDTI1MTAyMDAwNDUxNlowLzEtMCsGA1UEAxMk NjU0OTJlZWYtMDFiZS00YjgxLThlOWYtOGQ4OWY3YzZmODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qg+whnL6cnfq1OXSkCyYDkifWlEUY7/kT3A hzyAEMbXT7HUbp1yw++iTBCZ9G9cEKlmGtzVtkGTZnwv3VdjPP/tCbrQy1AL0b2Y rnS+HQxR/FaOHPje2lPQ/8CMZ5FePs//NhZgtBdFhX0dpr0u7ppBrI6nmwvX1i4A 1zAdS0la1dY/qMGNdMENgXc5h4vilWuyukPQUXXHV23nF3Vai9otrhN8kQlXyMDC 50gA4g0a0NwO9yU9wrr5ZW05mD+yPwTeivKXKMvsajJmOj3npbEfABEtJEbQ1mV5 xOYS3ePqBgORXcUeKtEKq99MBdpxh31EvwzacYe5P/7YPtxmvQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFFuGujedoMzVuWpdXH+h+dpowCz5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 NTQ5MmVlZi0wMWJlLTRiODEtOGU5Zi04ZDg5ZjdjNmY4NWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY1NDkyZWVmLTAxYmUtNGI4MS04 ZTlmLThkODlmN2M2Zjg1Zi82NTQ5MmVlZi0wMWJlLTRiODEtOGU5Zi04ZDg5Zjdj NmY4NWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAWPw+ADBADGHA0wGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANYNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJtal15OVePitMxdz1odMSWZxfLno4os6Y7AzYLi RVDsOvinSGnpPx8wuRoHbTdbm/ddp91BUjHzWR8lM7J1Sj+E3+GqxCwx1Kp3mAf7 uopLum4x78WUuHXVd/x5gIcgda2QBSB/kMtWOFaAWa698gdjwhzrywIWCt0DprTS SBXULPvSydWtidJhHKM0hUHyKzdNpyJhm1WK2uXn860DjgwORM8fftQFtGX9kyEb 4JOzNvBqxizKuJEQiZjQMUmKJ/QaHE03oMQM7LHB0mXCLKLgWhdNu0XBc+H1HFCP bjFl2B9WtTLQSQpQ0UT6JJoe/CD7gZlECXWhrXcsAaCt7+4= -----END CERTIFICATE-----Generated at Sat Apr 20 02:46:27 2024 by rpki-client on console-ams.rpki-client.org