$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683.cer File: 0283679c-8839-42d6-90a3-4215f8491683.cer (raw, json) Hash identifier: ik65/AFHQ8jy+0EbOKrc7KSRnHWn7gQGiaa8xzr8G+Y= Subject key identifier: 8E:5C:00:A8:45:BF:21:F2:91:4C:77:1E:8C:F2:46:CF:B8:23:6D:A6 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584493A2CE338927CF8646415870 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/0283679c-8839-42d6-90a3-4215f8491683.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Jan 2024 22:11:00 +0000 Certificate not after: Mon 20 Apr 2026 21:11:00 +0000 Subordinate resources: AS: 33494 IP: 67.222.96.0/20 IP: 72.34.32.0/19 IP: 162.219.248.0/22 IP: 192.40.112.0/22 IP: 192.69.235.0/24 IP: 2606:5600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:93:a2:ce:33:89:27:cf:86:46:41:58:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jan 16 22:11:00 2024 GMT Not After : Apr 20 21:11:00 2026 GMT Subject: CN=0283679c-8839-42d6-90a3-4215f8491683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ea:2b:01:07:92:eb:02:b0:00:1b:fc:b1:50: 4d:09:e6:00:27:74:27:af:26:c4:52:77:4a:97:53: e5:f2:f7:62:28:fd:a6:a1:18:a8:39:c9:e5:40:1f: f2:da:6e:fc:47:61:57:79:54:15:66:46:29:1e:76: 9c:98:ad:f6:74:ed:75:50:03:04:96:04:a1:68:8e: f3:38:98:ec:45:e2:48:88:ea:73:3e:ae:76:5f:4e: 66:76:a3:04:1c:bd:f2:ce:ff:26:7e:62:a5:da:e9: 21:21:2b:cc:39:57:71:08:8d:d0:f0:b8:1d:78:2a: 4e:48:fd:71:ba:eb:d3:3d:50:6c:61:dd:67:d0:f5: 1f:8e:55:0d:54:b5:95:02:ea:64:4c:cf:86:c1:61: 2f:20:b7:01:73:9d:2d:7f:84:88:54:cf:5e:05:1b: a6:67:ca:35:97:83:4a:3a:e3:1c:73:17:b5:5b:af: 5d:b6:f3:43:2a:88:9c:05:90:4e:c6:b8:bd:01:06: 86:a7:38:d6:12:2f:15:d2:78:52:7c:64:06:a0:83: cf:b9:da:ae:ff:71:83:76:c0:7f:85:a2:24:b3:26: a0:a0:32:6f:63:31:ab:18:76:c0:90:31:27:b2:45: 38:0b:a2:67:2f:ca:22:c2:c0:f8:55:b9:67:13:63: 9d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5C:00:A8:45:BF:21:F2:91:4C:77:1E:8C:F2:46:CF:B8:23:6D:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0283679c-8839-42d6-90a3-4215f8491683/0283679c-8839-42d6-90a3-4215f8491683.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 67.222.96.0/20 72.34.32.0/19 162.219.248.0/22 192.40.112.0/22 192.69.235.0/24 IPv6: 2606:5600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33494 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:54:b4:07:40:60:5f:68:52:e0:56:fd:ef:ec:b2:f6:5e:59: fa:78:cb:d5:88:ff:45:17:da:f3:52:8b:2b:e4:7b:da:59:59: fd:e1:11:5e:e0:ce:80:08:ac:46:32:64:d0:e5:e1:48:66:b0: c2:7f:1f:a8:04:af:3d:98:3f:c8:46:5b:ec:b6:13:8f:16:f0: 08:4a:73:5d:e5:31:e0:be:fd:4a:15:25:df:51:fd:9e:17:03: 7d:f0:5f:f8:3b:b8:08:6f:04:33:56:a4:8f:07:86:fc:4b:2a: ad:16:8d:05:df:9a:f4:98:e3:7f:30:7a:0f:46:a7:bd:53:e6: f0:9e:71:66:f6:62:51:08:a7:c5:a1:df:b5:26:dd:4e:f8:3f: 61:79:00:4a:31:14:51:62:d3:d6:c1:c6:78:d9:6d:b7:03:44: a2:b0:92:3f:86:75:61:70:0d:31:ee:6e:df:e3:a2:18:c2:50: a7:53:64:c4:b1:f1:ac:2c:91:36:44:a3:aa:8f:96:0e:c7:4b: 9d:0b:15:24:f8:8d:77:b1:1d:45:86:70:36:49:90:83:2e:0b: 99:7a:73:b2:c9:e3:d8:66:45:0e:0b:fb:94:71:03:73:23:db: 85:7f:15:f6:74:cb:6a:8b:23:70:ec:d0:5a:46:12:a8:fc:51: e9:c8:41:42 -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWESTos4ziSfPhkZBWHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDExNjIyMTEwMFoXDTI2MDQyMDIxMTEwMFowLzEtMCsGA1UEAxMk MDI4MzY3OWMtODgzOS00MmQ2LTkwYTMtNDIxNWY4NDkxNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+orAQeS6wKwABv8sVBNCeYAJ3QnrybEUndK l1Pl8vdiKP2moRioOcnlQB/y2m78R2FXeVQVZkYpHnacmK32dO11UAMElgShaI7z OJjsReJIiOpzPq52X05mdqMEHL3yzv8mfmKl2ukhISvMOVdxCI3Q8LgdeCpOSP1x uuvTPVBsYd1n0PUfjlUNVLWVAupkTM+GwWEvILcBc50tf4SIVM9eBRumZ8o1l4NK OuMccxe1W69dtvNDKoicBZBOxri9AQaGpzjWEi8V0nhSfGQGoIPPudqu/3GDdsB/ haIksyagoDJvYzGrGHbAkDEnskU4C6JnL8oiwsD4VblnE2OdYwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFI5cAKhFvyHykUx3HozyRs+4I22mMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w MjgzNjc5Yy04ODM5LTQyZDYtOTBhMy00MjE1Zjg0OTE2ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzAyODM2NzljLTg4MzktNDJkNi05 MGEzLTQyMTVmODQ5MTY4My8wMjgzNjc5Yy04ODM5LTQyZDYtOTBhMy00MjE1Zjg0 OTE2ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBARD3mADBAVIIiADBAKi2/gDBALAKHADBADAResw DQQCAAIwBwMFACYGVgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAILWMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAH1UtAdAYF9oUuBW/e/ssvZeWfp4y9WI/0UX2vNSiyvke9pZWf3hEV7gzoAI rEYyZNDl4UhmsMJ/H6gErz2YP8hGW+y2E48W8AhKc13lMeC+/UoVJd9R/Z4XA33w X/g7uAhvBDNWpI8HhvxLKq0WjQXfmvSY438weg9Gp71T5vCecWb2YlEIp8Wh37Um 3U74P2F5AEoxFFFi09bBxnjZbbcDRKKwkj+GdWFwDTHubt/johjCUKdTZMSx8aws kTZEo6qPlg7HS50LFST4jXexHUWGcDZJkIMuC5l6c7LJ49hmRQ4L+5RxA3Mj24V/ FfZ0y2qLI3Ds0FpGEqj8UenIQUI= -----END CERTIFICATE-----Generated at Thu Nov 21 16:16:43 2024 by rpki-client on console-ams.rpki-client.org