$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer File: 3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer (raw, json) Hash identifier: MTcAi5p+P/kCPQlXB68hx8wfccgDnV682U00nS2hZ3o= Subject key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858448FF43C420C254DC1B98EECA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Jan 2024 14:31:50 +0000 Certificate not after: Sun 19 Apr 2026 13:31:50 +0000 Subordinate resources: IP: 66.209.128.0/20 IP: 68.65.96.0/20 IP: 74.126.64.0/20 IP: 96.45.240.0/20 IP: 209.173.160.0/19 IP: 216.201.0.0/18 IP: 216.255.0.0/18 IP: 2607:fa10::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:8f:f4:3c:42:0c:25:4d:c1:b9:8e:ec:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jan 15 14:31:50 2024 GMT Not After : Apr 19 13:31:50 2026 GMT Subject: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:37:2f:86:fb:17:a5:23:b1:20:b0:b7:6b:5d: 9a:00:93:da:2f:d9:97:e2:da:0c:bc:ce:b1:d8:f5: ad:4c:85:a5:78:26:13:0d:33:07:70:89:9b:fe:b9: 89:80:31:b3:e2:51:40:67:d6:9a:41:fb:52:d0:a1: 3d:6a:83:cf:03:8e:6b:50:da:3a:40:a8:95:8b:18: ee:04:ec:46:cd:80:06:ad:43:de:f0:3d:60:06:79: 8d:2c:91:d4:00:69:00:4c:71:32:6e:1d:0d:7d:85: f8:61:b1:fd:b0:16:a9:01:30:de:b4:ef:cd:1d:1d: 3a:40:5c:f5:93:2e:0e:63:ac:f8:d7:b2:c9:48:aa: 2b:1c:a7:29:16:12:7b:c5:76:2b:d8:1e:e2:70:ce: 38:84:71:8e:12:4f:4b:22:b1:21:11:03:18:a2:07: 27:57:30:b0:57:21:d0:30:63:e2:e3:66:9f:f2:35: 7e:9a:e9:8f:cf:25:32:b7:fb:f9:8e:fa:a1:8e:33: 5e:4b:57:da:4b:8d:c0:1b:ff:09:f0:24:d4:23:cf: 2f:9b:38:f1:e5:69:c8:f5:5e:e2:f8:99:85:e6:a6: 3a:57:25:2f:12:bc:84:d8:4d:82:d8:75:99:17:e5: 56:b4:77:7a:9f:dc:16:08:0c:3e:dc:6a:83:18:81: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.209.128.0/20 68.65.96.0/20 74.126.64.0/20 96.45.240.0/20 209.173.160.0/19 216.201.0.0/18 216.255.0.0/18 IPv6: 2607:fa10::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:df:29:80:73:31:22:7f:c4:14:f8:36:ea:0f:41:82:91:a9: 3a:5c:6f:ac:e5:9b:c9:aa:b4:a7:d7:59:4e:8c:d1:52:7c:18: c4:89:a8:47:d8:9a:43:90:67:24:c5:72:50:9e:48:3e:d5:83: f2:56:c8:34:63:b1:55:cd:b8:84:92:b1:32:71:84:44:71:e7: ea:6b:8f:7e:6b:85:91:8d:80:25:c6:7e:4f:82:08:45:29:ce: ea:d7:fc:0b:4d:a5:dc:61:5a:32:63:6c:3c:ca:33:b2:09:ce: b1:05:98:a9:3b:2a:55:08:e6:dc:62:48:83:e7:d2:29:18:b0: 3e:06:e3:dc:5a:48:55:dc:10:72:2b:eb:00:3d:55:1a:ce:75: 14:50:3e:7a:c1:ed:7b:37:94:e4:12:40:63:d9:36:fc:c6:86: d3:4d:b6:b0:6b:ad:0e:c7:f3:69:98:b5:79:02:3b:cd:56:5c: 4c:63:f3:b9:9b:65:6b:c5:7a:54:63:fa:0f:dd:74:4d:30:6c: 72:0f:a8:99:04:86:ab:b4:6d:60:d8:93:5c:91:78:d3:61:9d: 1c:24:3c:ba:3e:38:9f:a7:0f:81:7b:45:5a:2d:07:ee:fd:8b: 1a:c3:57:dc:4d:5c:f4:62:23:d9:95:8d:4c:67:1c:42:10:08: f9:59:fd:72 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWESP9DxCDCVNwbmO7KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDExNTE0MzE1MFoXDTI2MDQxOTEzMzE1MFowLzEtMCsGA1UEAxMk M2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVkN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTcvhvsXpSOxILC3a12aAJPaL9mX4toMvM6x 2PWtTIWleCYTDTMHcImb/rmJgDGz4lFAZ9aaQftS0KE9aoPPA45rUNo6QKiVixju BOxGzYAGrUPe8D1gBnmNLJHUAGkATHEybh0NfYX4YbH9sBapATDetO/NHR06QFz1 ky4OY6z417LJSKorHKcpFhJ7xXYr2B7icM44hHGOEk9LIrEhEQMYogcnVzCwVyHQ MGPi42af8jV+mumPzyUyt/v5jvqhjjNeS1faS43AG/8J8CTUI88vmzjx5WnI9V7i +JmF5qY6VyUvEryE2E2C2HWZF+VWtHd6n9wWCAw+3GqDGIFIXwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFM90qo8cxYiDcn4atDj/pSd2+JZFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z YWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNhYjZlMzhlLTQ4ZTQtNDM5MC04 ZWVjLTIxMzVhYzM1ZDdmYi8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMz NWQ3ZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBARC0YADBAREQWADBARKfkADBARgLfADBAXRraAD BAbYyQADBAbY/wAwDQQCAAIwBwMFACYH+hAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAht8pgHMxIn/EFPg2 6g9BgpGpOlxvrOWbyaq0p9dZTozRUnwYxImoR9iaQ5BnJMVyUJ5IPtWD8lbINGOx Vc24hJKxMnGERHHn6muPfmuFkY2AJcZ+T4IIRSnO6tf8C02l3GFaMmNsPMozsgnO sQWYqTsqVQjm3GJIg+fSKRiwPgbj3FpIVdwQcivrAD1VGs51FFA+esHtezeU5BJA Y9k2/MaG0022sGutDsfzaZi1eQI7zVZcTGPzuZtla8V6VGP6D910TTBscg+omQSG q7RtYNiTXJF402GdHCQ8uj44n6cPgXtFWi0H7v2LGsNX3E1c9GIj2ZWNTGccQhAI +Vn9cg== -----END CERTIFICATE-----Generated at Fri May 10 20:14:30 2024 by rpki-client on console-fra.rpki-client.org