$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer File: 0858b07f-775e-4c05-ae48-d43b5d938b9b.cer (raw, json) Hash identifier: MfNtzK8Z6bPuT14IJALiSPXmiRzTB4lcP+mwxuQ2rUM= Subject key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844A879DEC9FA9B38A054C6F580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Jan 2024 09:20:30 +0000 Certificate not after: Tue 28 Apr 2026 08:20:30 +0000 Subordinate resources: IP: 165.125.0.0/16 IP: 199.79.232.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:a8:79:de:c9:fa:9b:38:a0:54:c6:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jan 24 09:20:30 2024 GMT Not After : Apr 28 08:20:30 2026 GMT Subject: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:9f:6c:8c:b7:23:76:e7:ad:b6:a3:45:9e: a7:f1:16:ea:25:d2:19:03:94:a8:b9:0f:f1:32:23: 9a:34:a5:62:ee:07:ea:63:82:03:98:ee:d5:fe:31: 37:84:33:13:7e:fb:d4:48:51:f7:1d:99:e0:c6:f2: 41:72:46:20:40:c4:c9:e1:30:d4:a7:bf:0d:f8:71: fd:f9:f4:69:55:e6:50:65:e7:0b:b0:e9:f5:2c:b0: 83:0d:8f:e0:dc:0d:c4:eb:b4:89:1c:9e:6f:08:0b: 19:26:fd:f9:ee:c8:56:34:b9:0b:a0:b7:e7:25:79: 09:f0:2d:ee:61:a2:1b:e7:ef:f9:f6:e4:1e:11:02: 60:96:0b:33:19:9b:1e:39:5e:3f:0c:fe:d9:90:1c: 72:56:03:a5:32:85:77:43:46:d1:87:7d:44:27:f3: b0:f0:04:47:3c:0d:98:d7:83:ce:09:15:5e:59:a9: 05:59:e7:95:77:ea:7d:ab:2e:2a:03:bc:f5:9f:d6: 2b:52:df:a9:04:1d:fd:1e:46:23:a4:fb:b7:b5:db: 37:32:9d:82:e5:08:50:b0:8d:24:b2:ca:f6:54:7f: d0:92:ea:27:5b:d2:6d:fc:40:78:48:3b:01:88:04: b0:65:b4:5d:7a:26:e0:be:5b:ce:78:f8:e9:1f:f5: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 165.125.0.0/16 199.79.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e4:bf:84:3c:b7:34:49:ba:b2:16:46:5f:f2:a2:3c:10:f2: 54:e3:1b:94:70:4b:21:d9:a7:53:68:76:f5:72:dd:77:7c:5b: 36:5d:5c:88:56:7d:84:10:bb:a8:2b:94:27:8e:cc:ff:5c:8d: 67:67:eb:a8:74:cb:39:2a:16:0a:90:07:f8:ea:b5:95:c2:54: da:f5:96:63:83:66:94:95:c2:83:a4:33:6d:88:22:30:fe:3e: 54:05:73:64:65:19:85:17:42:dc:70:0f:51:74:95:3a:b0:b3: 30:b9:c7:ea:a5:ff:1e:6c:b5:df:c6:4d:91:ef:d3:f7:04:f6: a3:58:46:05:68:f7:cc:df:11:35:30:b4:df:ec:5d:c8:a8:43: a6:dd:af:2a:64:90:8d:e9:0b:1c:3f:70:8d:28:9f:bf:9f:70: 7a:95:b6:f9:a4:4a:56:b2:da:1c:b4:8a:d8:19:fe:43:f0:4d: b5:83:c7:08:3e:d5:70:b4:6d:e9:35:5a:c9:ac:d6:ff:4f:00: f4:d0:40:e2:08:6c:a8:c2:39:e2:36:2b:31:bd:45:7b:61:7c: c5:57:a5:6f:3b:3b:48:8e:7c:e9:89:b3:b6:51:bd:7e:47:79: 2e:65:7b:e0:87:9e:9d:13:7c:85:5d:4d:89:06:61:0b:42:7f: 8b:66:ff:b3 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWESoed7J+ps4oFTG9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDEyNDA5MjAzMFoXDTI2MDQyODA4MjAzMFowLzEtMCsGA1UEAxMk MDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4YjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloefbIy3I3bnrbajRZ6n8RbqJdIZA5SouQ/x MiOaNKVi7gfqY4IDmO7V/jE3hDMTfvvUSFH3HZngxvJBckYgQMTJ4TDUp78N+HH9 +fRpVeZQZecLsOn1LLCDDY/g3A3E67SJHJ5vCAsZJv357shWNLkLoLfnJXkJ8C3u YaIb5+/59uQeEQJglgszGZseOV4/DP7ZkBxyVgOlMoV3Q0bRh31EJ/Ow8ARHPA2Y 14POCRVeWakFWeeVd+p9qy4qA7z1n9YrUt+pBB39HkYjpPu3tds3Mp2C5QhQsI0k ssr2VH/QkuonW9Jt/EB4SDsBiASwZbRdeibgvlvOePjpH/VJ/wIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFM5vpPS4ASzWxu/GMkotjXi8HQ2LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w ODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzA4NThiMDdmLTc3NWUtNGMwNS1h ZTQ4LWQ0M2I1ZDkzOGI5Yi8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5 MzhiOWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwClfQMEAsdP6DBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQ5L+EPLc0Sbqy FkZf8qI8EPJU4xuUcEsh2adTaHb1ct13fFs2XVyIVn2EELuoK5Qnjsz/XI1nZ+uo dMs5KhYKkAf46rWVwlTa9ZZjg2aUlcKDpDNtiCIw/j5UBXNkZRmFF0LccA9RdJU6 sLMwucfqpf8ebLXfxk2R79P3BPajWEYFaPfM3xE1MLTf7F3IqEOm3a8qZJCN6Qsc P3CNKJ+/n3B6lbb5pEpWstoctIrYGf5D8E21g8cIPtVwtG3pNVrJrNb/TwD00EDi CGyowjniNisxvUV7YXzFV6VvOztIjnzpibO2Ub1+R3kuZXvgh56dE3yFXU2JBmEL Qn+LZv+z -----END CERTIFICATE-----Generated at Fri May 10 20:14:29 2024 by rpki-client on console-fra.rpki-client.org