$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375.cer File: 35fbc5b3-479b-405d-8578-f7c792a1f375.cer (raw, json) Hash identifier: 1YShHMep7hAowPnQpVG9UyCFx9cmak/ep+89eWs242Y= Subject key identifier: 0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858456C0FD6BAD0BF60A4E48A86A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Apr 2024 10:45:17 +0000 Certificate not after: Tue 07 Jul 2026 10:45:17 +0000 Subordinate resources: AS: 397071 IP: 130.51.100.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:0f:d6:ba:d0:bf:60:a4:e4:8a:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 3 10:45:17 2024 GMT Not After : Jul 7 10:45:17 2026 GMT Subject: CN=35fbc5b3-479b-405d-8578-f7c792a1f375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:83:77:c0:54:20:6c:72:1a:b3:8c:a9:a2: de:f6:2a:db:2d:80:69:0b:12:7d:cf:cc:9e:41:b3: 9a:4e:94:04:75:f6:d5:73:e6:ab:59:92:2d:36:96: 50:43:fb:96:0b:e7:57:ac:f5:39:42:01:68:33:af: 51:a0:8a:76:75:4f:63:c2:fc:e5:a5:31:93:47:38: e3:ea:c5:0a:79:8b:7b:12:c8:b9:c1:b1:cd:38:51: 98:70:4a:5f:1c:54:b7:00:d6:08:b0:01:ce:7e:06: 47:3a:70:c8:b8:2c:91:48:52:01:de:09:b4:9f:6d: 48:6a:d2:b3:4c:43:e4:fd:95:90:ca:2c:25:4d:2a: 6a:86:1f:0c:08:02:91:c9:b0:44:a9:8b:80:3e:bb: 92:41:3c:49:c0:37:d9:84:56:41:54:c4:9e:f1:9b: 01:33:97:54:0a:41:be:18:d2:a2:e6:d0:3d:d2:b4: cf:df:26:0b:78:a3:c5:04:2b:78:f9:3e:ac:00:c2: 23:cc:64:2c:f8:96:29:fd:7b:02:fe:04:97:e1:95: ca:aa:09:7b:7f:8d:66:94:f3:5c:f4:aa:aa:6b:c3: 33:a8:6b:48:7a:d1:48:be:d0:65:13:c3:4f:5c:65: 4f:35:9f:5d:55:f0:9e:7f:2d:d7:aa:3c:ce:ca:fa: 18:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:96:56:30:07:2E:19:B2:B9:4C:5C:16:F7:22:7E:2C:86:C4:6F:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35fbc5b3-479b-405d-8578-f7c792a1f375/35fbc5b3-479b-405d-8578-f7c792a1f375.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 130.51.100.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b3:c9:b3:78:fd:f4:80:f5:b8:f7:c8:34:4e:4f:43:c3:20: d6:8e:66:f9:27:b8:ce:3f:7d:95:6c:8d:c5:3e:f9:b2:83:1f: b6:f7:e7:eb:03:f3:af:ab:a2:e7:28:62:66:3c:7d:3d:c6:4b: 9b:09:b0:44:88:5b:ca:85:b6:f1:ee:ec:06:0e:09:b1:78:24: 1f:cb:1f:39:c3:d3:1d:df:5b:ca:ee:77:f7:26:d9:77:83:b9: 0c:53:67:2b:9c:9b:12:e9:af:35:c2:d2:dc:3e:aa:a5:02:86: a6:9b:d4:b7:bb:71:a6:e8:6a:b0:15:e4:0b:2b:ab:8b:4f:8b: c4:98:f9:a2:82:d5:65:6a:8f:8d:48:06:d7:40:37:7c:ea:06: 17:e1:f4:86:b0:f3:57:b6:0f:89:9c:4f:90:d4:5b:48:d9:37: 1b:17:58:a4:7c:a0:74:9e:57:34:79:fe:73:80:3b:4e:05:45: 4c:2a:3b:a0:92:0c:80:d5:80:70:06:4f:d2:9a:21:e7:a3:26: bc:a9:16:73:66:fb:66:3c:14:f4:05:09:0c:45:ae:bc:fe:ce: b2:0d:51:28:dd:aa:ac:12:72:58:20:23:9b:1a:cb:08:87:fc: 5e:ef:e8:7a:43:9c:be:c9:ca:96:ed:bc:03:67:cf:78:f5:21: d8:41:72:67 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEVsD9a60L9gpOSKhqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQwMzEwNDUxN1oXDTI2MDcwNzEwNDUxN1owLzEtMCsGA1UEAxMk MzVmYmM1YjMtNDc5Yi00MDVkLTg1NzgtZjdjNzkyYTFmMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFuDd8BUIGxyGrOMqaLe9irbLYBpCxJ9z8ye QbOaTpQEdfbVc+arWZItNpZQQ/uWC+dXrPU5QgFoM69RoIp2dU9jwvzlpTGTRzjj 6sUKeYt7Esi5wbHNOFGYcEpfHFS3ANYIsAHOfgZHOnDIuCyRSFIB3gm0n21IatKz TEPk/ZWQyiwlTSpqhh8MCAKRybBEqYuAPruSQTxJwDfZhFZBVMSe8ZsBM5dUCkG+ GNKi5tA90rTP3yYLeKPFBCt4+T6sAMIjzGQs+JYp/XsC/gSX4ZXKqgl7f41mlPNc 9Kqqa8MzqGtIetFIvtBlE8NPXGVPNZ9dVfCefy3XqjzOyvoYoQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAyWVjAHLhmyuUxcFvcifiyGxG+IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z NWZiYzViMy00NzliLTQwNWQtODU3OC1mN2M3OTJhMWYzNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM1ZmJjNWIzLTQ3OWItNDA1ZC04 NTc4LWY3Yzc5MmExZjM3NS8zNWZiYzViMy00NzliLTQwNWQtODU3OC1mN2M3OTJh MWYzNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKCM2QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bg8PMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABqzybN4/fSA9bj3yDROT0PDINaOZvknuM4/fZVsjcU++bKD H7b35+sD86+roucoYmY8fT3GS5sJsESIW8qFtvHu7AYOCbF4JB/LHznD0x3fW8ru d/cm2XeDuQxTZyucmxLprzXC0tw+qqUChqab1Le7caboarAV5Asrq4tPi8SY+aKC 1WVqj41IBtdAN3zqBhfh9Iaw81e2D4mcT5DUW0jZNxsXWKR8oHSeVzR5/nOAO04F RUwqO6CSDIDVgHAGT9KaIeejJrypFnNm+2Y8FPQFCQxFrrz+zrINUSjdqqwSclgg I5saywiH/F7v6HpDnL7JypbtvANnz3j1IdhBcmc= -----END CERTIFICATE-----Generated at Sat May 11 18:14:39 2024 by rpki-client on console-fra.rpki-client.org