$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer File: 28aae7db-2f51-4656-bba0-64f1d3ee3256.cer (raw, json) Hash identifier: g00/WpbsmdbAVxCdyWv0gnE/UWMcDqw9l6I4l9abhiQ= Subject key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844BA8B1AEBAEB5324E6C82B0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 Jan 2024 20:39:46 +0000 Certificate not after: Mon 04 May 2026 19:39:46 +0000 Subordinate resources: AS: 32435 IP: 199.189.200.0/22 IP: 2602:fac3::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ba:8b:1a:eb:ae:b5:32:4e:6c:82:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jan 30 20:39:46 2024 GMT Not After : May 4 19:39:46 2026 GMT Subject: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:6b:c9:a9:4e:59:fa:28:eb:39:b4:d2:04: d2:07:f7:7e:30:6c:42:a9:eb:24:79:88:8d:93:7d: f1:27:13:e9:f8:0c:71:d7:3f:1a:29:df:34:27:6a: 4d:31:60:67:35:85:7e:f1:6f:a9:9b:e5:32:41:52: b7:e0:11:dc:0a:19:02:93:24:48:58:8b:e6:1c:33: af:71:a9:f8:ac:e4:71:f8:b2:a0:17:9b:81:68:6e: b3:3a:f9:bd:9a:4c:0e:ee:ca:c4:04:ad:54:dd:8d: ae:2d:ae:09:d7:f9:b5:d3:52:24:49:64:58:08:95: bc:f9:66:af:f1:b7:fa:5e:d8:6d:87:c9:6b:86:3d: 14:1e:00:ec:49:fe:3c:66:73:81:d8:82:62:73:a7: a0:07:1e:ab:44:a2:f7:ed:5f:d6:6b:87:ac:54:49: 52:8f:eb:8a:cb:00:18:2c:d0:e9:e8:5f:d1:cd:cc: e7:70:1e:4c:c6:9c:fa:a9:85:6a:16:b4:5e:e9:e7: 7a:32:13:f8:c5:f5:a4:cc:d7:ff:4c:a6:bb:25:1e: df:7a:cb:e6:00:54:0c:3a:9f:91:73:f7:de:72:ba: 5d:ea:2a:0f:79:e9:64:80:8e:ab:26:df:0d:c6:5a: c3:4a:ae:d6:bd:5a:7f:dd:bd:92:06:f7:4f:e1:e8: c0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 199.189.200.0/22 IPv6: 2602:fac3::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32435 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b2:b9:ab:e5:9c:f5:95:74:e7:fd:7c:ba:b2:c8:00:bd:b7: 7c:38:86:56:56:79:51:3c:e9:47:de:09:42:51:8a:e2:af:d7: 02:f0:ca:41:16:76:5f:d8:1c:2e:0c:b8:d7:e1:ce:6f:df:6e: 37:7c:04:82:20:5a:57:41:03:3a:50:25:80:a6:c3:22:3b:fc: b5:37:a5:33:41:07:35:db:d2:5d:32:71:ae:a1:cf:06:53:be: fa:32:f0:4f:49:85:34:9b:20:5f:fe:4e:f8:cd:90:53:17:4f: fe:98:74:3c:0e:e2:29:5d:9d:c7:46:68:5c:a3:a4:e2:b9:82: ec:0f:ae:52:4b:e5:38:b0:63:a8:71:7b:e1:f5:ce:25:34:da: 84:fa:ba:c9:7e:ff:18:26:d7:57:17:ae:aa:63:c8:2d:57:ee: 0b:ff:93:cc:f5:7d:7d:5c:ca:d5:3f:fe:12:42:83:08:85:65: 66:4b:3b:e6:fe:99:b3:b6:f2:b3:cb:94:47:1f:89:e8:55:67: c0:6a:08:69:e3:30:98:4d:b7:ee:6b:41:54:57:44:ca:85:d0: 63:71:b9:bd:b8:61:1a:72:a8:c0:61:00:43:4f:d0:70:7d:9f: 99:be:6e:cf:12:1c:7a:ab:c2:07:fa:0e:57:b9:47:8b:fa:5b: 3a:fa:f7:26 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWES6ixrrrrUyTmyCsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDEzMDIwMzk0NloXDTI2MDUwNDE5Mzk0NlowLzEtMCsGA1UEAxMk MjhhYWU3ZGItMmY1MS00NjU2LWJiYTAtNjRmMWQzZWUzMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrVryalOWfoo6zm00gTSB/d+MGxCqeskeYiN k33xJxPp+Axx1z8aKd80J2pNMWBnNYV+8W+pm+UyQVK34BHcChkCkyRIWIvmHDOv can4rORx+LKgF5uBaG6zOvm9mkwO7srEBK1U3Y2uLa4J1/m101IkSWRYCJW8+Wav 8bf6Xthth8lrhj0UHgDsSf48ZnOB2IJic6egBx6rRKL37V/Wa4esVElSj+uKywAY LNDp6F/RzczncB5Mxpz6qYVqFrRe6ed6MhP4xfWkzNf/TKa7JR7fesvmAFQMOp+R c/fecrpd6ioPeelkgI6rJt8NxlrDSq7WvVp/3b2SBvdP4ejACQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIzgzxasj2/M5GMn7d/fofnnb5OPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y OGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNlZTMyNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI4YWFlN2RiLTJmNTEtNDY1Ni1i YmEwLTY0ZjFkM2VlMzI1Ni8yOGFhZTdkYi0yZjUxLTQ2NTYtYmJhMC02NGYxZDNl ZTMyNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHvcgwDgQCAAIwCAMGACYC+sMAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAn6zMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEmyuavlnPWVdOf9fLqyyAC9t3w4 hlZWeVE86UfeCUJRiuKv1wLwykEWdl/YHC4MuNfhzm/fbjd8BIIgWldBAzpQJYCm wyI7/LU3pTNBBzXb0l0yca6hzwZTvvoy8E9JhTSbIF/+TvjNkFMXT/6YdDwO4ild ncdGaFyjpOK5guwPrlJL5TiwY6hxe+H1ziU02oT6usl+/xgm11cXrqpjyC1X7gv/ k8z1fX1cytU//hJCgwiFZWZLO+b+mbO28rPLlEcfiehVZ8BqCGnjMJhNt+5rQVRX RMqF0GNxub24YRpyqMBhAENP0HB9n5m+bs8SHHqrwgf6Dle5R4v6Wzr69yY= -----END CERTIFICATE-----Generated at Sat May 11 18:14:39 2024 by rpki-client on console-fra.rpki-client.org