$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer File: 3d9879da-145f-4f21-a7c3-da6b59a01625.cer (raw, json) Hash identifier: wDuWAiY2vVQXeybV0TMa9ZTcDnfWjpSNeTxsH3Cl2Ck= Subject key identifier: 20:E6:59:D4:F9:42:52:0A:6E:BE:B6:CB:78:83:6D:26:EC:FA:4D:E4 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844C025834ED68FCC32F81D9B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Feb 2024 20:49:55 +0000 Certificate not after: Wed 06 May 2026 19:49:55 +0000 Subordinate resources: AS: 46766 IP: 23.170.72.0/24 IP: 2602:f9a2::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:c0:25:83:4e:d6:8f:cc:32:f8:1d:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 1 20:49:55 2024 GMT Not After : May 6 19:49:55 2026 GMT Subject: CN=3d9879da-145f-4f21-a7c3-da6b59a01625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:05:4e:af:7d:fe:02:2d:1a:e4:a2:fa:52: e0:e9:e9:d5:ac:2f:59:44:ad:c6:de:e8:06:1d:17: 50:f2:84:79:b4:cc:5f:b0:d0:13:79:ff:fd:3b:d1: 9b:ad:59:ca:e5:8f:14:bd:d1:c1:73:16:2d:fa:33: 48:f6:f4:0d:91:2e:10:55:5c:b8:20:9a:28:b7:60: c9:8a:04:12:11:8c:42:17:81:35:66:10:7a:45:e3: ce:97:e2:d4:1b:df:2e:30:4e:9d:32:e5:25:9b:d2: 9e:09:d9:c9:42:9a:28:fc:c1:b6:2e:de:ab:b5:aa: 9d:10:b2:5d:02:e5:ee:39:3a:da:b0:22:d3:52:a2: 53:23:c4:80:3c:01:55:fb:9c:98:a0:de:78:cc:ba: 16:ef:29:cc:24:11:97:f5:cf:d1:f1:7d:32:ae:8f: 9a:1b:28:e8:6f:94:11:b6:98:40:5f:35:4e:d8:e3: bb:e0:07:41:52:fc:3c:1a:33:4e:d6:56:4d:a9:02: d7:a6:40:a3:bb:87:77:8c:9c:bb:78:00:c2:ce:12: ca:2d:45:54:9d:2f:d5:24:d8:ed:6b:43:85:72:4c: 8b:fa:df:14:0d:51:61:b5:de:f8:cb:ac:f3:4e:de: ec:15:0c:fa:9c:6d:d8:27:82:01:34:3c:01:1d:b6: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E6:59:D4:F9:42:52:0A:6E:BE:B6:CB:78:83:6D:26:EC:FA:4D:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.72.0/24 IPv6: 2602:f9a2::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46766 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ea:ff:e9:a2:e2:ae:a9:63:76:9a:81:ed:1b:ea:1d:ef:e3: ad:c6:52:23:83:4b:24:86:cd:4c:e8:f5:7d:af:2a:18:3a:f4: c6:6f:43:95:b0:96:06:d9:0f:54:b3:34:50:e3:99:28:98:2b: ad:11:00:55:5c:f7:77:62:e2:cb:54:4f:02:67:b6:d0:98:de: 23:69:cb:27:13:93:21:c2:bb:49:b6:1a:25:99:b5:32:d0:7e: fc:de:67:ba:66:ed:a1:91:c3:75:9d:70:b1:78:b4:2c:23:72: 88:63:4f:46:d0:e9:a7:be:37:0a:e6:ba:25:14:4c:dd:1d:7a: 41:82:d1:d8:e5:0d:4c:34:aa:0a:af:7e:ee:59:45:36:27:eb: 37:02:67:94:ae:1c:3e:1d:4c:1c:1d:0b:4b:ad:0b:af:e3:8e: 15:a7:d5:bb:7b:c4:f1:72:bd:6d:13:82:c5:b0:e1:bf:5b:b9: 5e:54:fe:ec:d4:3e:eb:b1:75:d6:86:03:07:88:04:05:cf:a8: 0f:00:a9:2a:08:30:1b:23:0a:24:1b:86:ae:5f:bb:c8:27:bd: bb:d2:5f:8f:02:25:7f:06:d5:da:e1:cf:9d:27:3f:5a:4d:67: a8:a9:b5:c0:8d:59:98:d1:03:1e:33:33:87:4f:05:e1:8f:c2: 5c:90:ca:24 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWETAJYNO1o/MMvgdmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIwMTIwNDk1NVoXDTI2MDUwNjE5NDk1NVowLzEtMCsGA1UEAxMk M2Q5ODc5ZGEtMTQ1Zi00ZjIxLWE3YzMtZGE2YjU5YTAxNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9cFTq99/gItGuSi+lLg6enVrC9ZRK3G3ugG HRdQ8oR5tMxfsNATef/9O9GbrVnK5Y8UvdHBcxYt+jNI9vQNkS4QVVy4IJoot2DJ igQSEYxCF4E1ZhB6RePOl+LUG98uME6dMuUlm9KeCdnJQpoo/MG2Lt6rtaqdELJd AuXuOTrasCLTUqJTI8SAPAFV+5yYoN54zLoW7ynMJBGX9c/R8X0yro+aGyjob5QR tphAXzVO2OO74AdBUvw8GjNO1lZNqQLXpkCju4d3jJy7eADCzhLKLUVUnS/VJNjt a0OFckyL+t8UDVFhtd74y6zzTt7sFQz6nG3YJ4IBNDwBHbabJwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCDmWdT5QlIKbr62y3iDbSbs+k3kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z ZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1kYTZiNTlhMDE2MjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNkOTg3OWRhLTE0NWYtNGYyMS1h N2MzLWRhNmI1OWEwMTYyNS8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1kYTZiNTlh MDE2MjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqkgwDgQCAAIwCAMGACYC+aIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC2rjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAG6v/pouKuqWN2moHtG+od7+Ot xlIjg0skhs1M6PV9ryoYOvTGb0OVsJYG2Q9UszRQ45komCutEQBVXPd3YuLLVE8C Z7bQmN4jacsnE5MhwrtJtholmbUy0H783me6Zu2hkcN1nXCxeLQsI3KIY09G0Omn vjcK5rolFEzdHXpBgtHY5Q1MNKoKr37uWUU2J+s3AmeUrhw+HUwcHQtLrQuv444V p9W7e8Txcr1tE4LFsOG/W7leVP7s1D7rsXXWhgMHiAQFz6gPAKkqCDAbIwokG4au X7vIJ7270l+PAiV/BtXa4c+dJz9aTWeoqbXAjVmY0QMeMzOHTwXhj8JckMok -----END CERTIFICATE-----Generated at Fri May 10 20:55:08 2024 by rpki-client on console-ams.rpki-client.org