$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c.cer File: 0ef8f014-b9f1-4fd0-90e9-86951c39e46c.cer (raw, json) Hash identifier: LBs384md0UEeSNESfcRHRKPk/jlFiGn1veUYFY9Mmeo= Subject key identifier: 12:F0:C5:3F:85:B4:D0:F2:09:75:61:81:1C:7A:26:AE:44:75:62:25 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285845685CCFB4BD5382886A162680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/0ef8f014-b9f1-4fd0-90e9-86951c39e46c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Apr 2024 02:57:09 +0000 Certificate not after: Mon 06 Jul 2026 02:57:09 +0000 Subordinate resources: AS: 54454 IP: 192.253.208.0/22 IP: 192.253.216.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:68:5c:cf:b4:bd:53:82:88:6a:16:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 2 02:57:09 2024 GMT Not After : Jul 6 02:57:09 2026 GMT Subject: CN=0ef8f014-b9f1-4fd0-90e9-86951c39e46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:d7:7e:57:e7:c6:91:67:18:0e:75:98:88: dc:cb:c9:83:86:4d:0d:fb:85:8e:29:83:45:18:d2: 77:00:08:dc:18:b9:ea:27:a0:33:98:e7:fd:00:6a: 0c:6e:81:78:44:0e:e0:8e:dc:9f:20:51:f0:39:69: f7:a9:da:a0:cc:4f:9c:e2:3f:37:21:49:bc:47:f4: 86:1c:1e:b7:74:95:8a:61:e0:21:70:a6:3a:0e:8f: ea:78:bd:26:43:d3:42:1b:1d:ae:48:e2:74:bf:6e: 59:4d:57:ea:f0:71:b4:50:fd:fd:59:6f:10:cd:ab: 47:6c:ec:86:fe:88:19:bd:4e:bf:77:61:36:5d:52: ae:ff:49:80:12:a7:08:e1:d4:49:a9:4b:cb:db:71: ee:ab:cb:68:8f:ca:d5:2e:bc:01:89:c7:2a:8c:bb: 14:77:fb:56:e3:8d:35:8b:0d:ce:6c:f9:19:5d:74: 0a:3d:ad:5d:a1:51:12:ad:bb:fd:d9:c9:79:ca:d5: cc:a4:4d:51:8f:d5:78:22:6c:3a:2a:e6:39:d7:13: 2a:b4:50:3a:71:8b:f2:d4:92:5a:82:f2:2a:54:0b: 67:6b:07:70:3d:3c:d5:32:cd:60:2c:ce:c6:24:c8: f2:33:e8:81:43:7d:ca:e0:c2:b1:48:30:ec:6c:77: b7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F0:C5:3F:85:B4:D0:F2:09:75:61:81:1C:7A:26:AE:44:75:62:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ef8f014-b9f1-4fd0-90e9-86951c39e46c/0ef8f014-b9f1-4fd0-90e9-86951c39e46c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 192.253.208.0/22 192.253.216.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54454 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:23:48:2b:23:f9:d5:31:9b:94:e3:ef:5c:a5:a2:d7:09:12: 32:76:c7:5f:7e:46:a2:17:9b:6c:d6:75:f6:00:b0:4d:78:a2: 53:b9:e0:76:39:81:b7:46:ac:18:9b:01:39:a4:e7:d2:50:c6: cb:a3:79:d4:4d:4e:00:a9:74:0f:ee:43:8d:fc:ea:1e:6c:78: df:cb:c8:67:34:6a:d2:db:5a:70:ba:6e:d8:47:58:51:e5:c5: d3:c3:d1:68:1f:8e:e0:7f:66:ac:95:ba:09:86:15:24:92:39: 20:f5:ee:09:b0:31:f5:5d:35:ac:c0:7e:5d:19:e0:9a:0b:04: 7d:33:88:78:24:00:cf:7b:f8:65:6a:d5:58:81:1b:83:8c:65: 4d:c7:af:58:a1:07:55:ce:f3:d3:b0:d9:7e:1c:43:5b:94:26: 3b:31:70:7b:3b:76:7a:c4:97:de:5d:10:8b:dd:01:31:95:ca: 93:b0:ca:32:94:09:ec:5c:fa:1b:41:e9:8d:c3:00:d3:a2:5f: 18:5b:f9:c5:16:9c:ec:c5:dc:e9:fd:89:54:d2:9c:7c:3a:3a: 7d:7b:ea:fb:36:f4:eb:80:ab:60:a4:33:15:1a:0a:e1:38:8b: 8d:b8:b2:ae:cb:d4:50:de:03:a8:94:a2:3d:a7:86:c0:b8:6f: 1d:27:3f:42 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEVoXM+0vVOCiGoWJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQwMjAyNTcwOVoXDTI2MDcwNjAyNTcwOVowLzEtMCsGA1UEAxMk MGVmOGYwMTQtYjlmMS00ZmQwLTkwZTktODY5NTFjMzllNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYnXflfnxpFnGA51mIjcy8mDhk0N+4WOKYNF GNJ3AAjcGLnqJ6AzmOf9AGoMboF4RA7gjtyfIFHwOWn3qdqgzE+c4j83IUm8R/SG HB63dJWKYeAhcKY6Do/qeL0mQ9NCGx2uSOJ0v25ZTVfq8HG0UP39WW8QzatHbOyG /ogZvU6/d2E2XVKu/0mAEqcI4dRJqUvL23Huq8toj8rVLrwBiccqjLsUd/tW4401 iw3ObPkZXXQKPa1doVESrbv92cl5ytXMpE1Rj9V4Imw6KuY51xMqtFA6cYvy1JJa gvIqVAtnawdwPTzVMs1gLM7GJMjyM+iBQ33K4MKxSDDsbHe3AQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFBLwxT+FtNDyCXVhgRx6Jq5EdWIlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8w ZWY4ZjAxNC1iOWYxLTRmZDAtOTBlOS04Njk1MWMzOWU0NmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzBlZjhmMDE0LWI5ZjEtNGZkMC05 MGU5LTg2OTUxYzM5ZTQ2Yy8wZWY4ZjAxNC1iOWYxLTRmZDAtOTBlOS04Njk1MWMz OWU0NmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALA/dADBAPA/dgwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANS2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIYjSCsj+dUxm5Tj71ylotcJEjJ2x19+RqIXm2zW dfYAsE14olO54HY5gbdGrBibATmk59JQxsujedRNTgCpdA/uQ4386h5seN/LyGc0 atLbWnC6bthHWFHlxdPD0WgfjuB/ZqyVugmGFSSSOSD17gmwMfVdNazAfl0Z4JoL BH0ziHgkAM97+GVq1ViBG4OMZU3Hr1ihB1XO89Ow2X4cQ1uUJjsxcHs7dnrEl95d EIvdATGVypOwyjKUCexc+htB6Y3DANOiXxhb+cUWnOzF3On9iVTSnHw6On176vs2 9OuAq2CkMxUaCuE4i424sq7L1FDeA6iUoj2nhsC4bx0nP0I= -----END CERTIFICATE-----Generated at Sat May 11 18:14:38 2024 by rpki-client on console-fra.rpki-client.org