$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.cer File: 40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.cer (raw, json) Hash identifier: s4QOqLAVoi4J3gWWZzh983nAPSNobN8Ao81GAEGl2no= Subject key identifier: 7F:D3:9B:6F:A3:A8:01:69:70:33:DE:39:D2:34:D9:F5:37:DC:D5:81 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584597223D0F78D311FFFA23D640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Apr 2024 21:02:07 +0000 Certificate not after: Wed 22 Jul 2026 21:02:07 +0000 Subordinate resources: AS: 399675 IP: 23.183.144.0/24 IP: 45.41.0.0/22 IP: 2606:5a40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:97:22:3d:0f:78:d3:11:ff:fa:23:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 18 21:02:07 2024 GMT Not After : Jul 22 21:02:07 2026 GMT Subject: CN=40f0d7cc-64f4-4c77-bfcb-4e33d93d8733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:a6:34:62:5c:17:3e:d9:76:36:cf:c7:95: 86:40:fc:f9:76:fc:76:4b:70:3e:18:40:9b:cd:2e: dd:c3:5f:e8:e3:fe:b7:05:56:e2:3c:5f:cb:ca:c3: 18:67:dc:e0:b1:36:99:e2:2b:bf:84:33:f4:61:be: b5:34:c4:65:04:be:30:2d:60:95:3e:0e:0e:18:81: 28:d3:32:2d:5d:e7:c6:d3:ef:3e:cc:7f:1a:a8:ae: 2b:ab:14:5b:c0:05:73:8d:9a:67:34:d6:50:27:43: 80:19:5c:fe:6d:e4:e9:fd:17:4c:e5:e2:35:da:90: 94:8b:0b:1b:25:2d:8a:d2:54:9d:76:f9:2b:08:75: cd:5b:4c:a7:18:90:64:00:71:d0:91:ef:ff:9b:5d: ad:a3:d9:b6:76:17:3f:e6:87:41:42:82:6f:20:22: 85:98:8c:21:cb:d7:93:60:1f:3b:fc:c3:67:f8:3a: cf:3b:13:36:d7:fc:d4:21:00:30:e6:fa:9c:4a:c0: 94:0c:40:0c:20:5c:10:32:fc:62:cb:e3:ff:80:26: 30:d9:fc:28:4e:8c:2e:76:bd:7b:db:9f:85:a0:d0: f6:89:d8:72:15:6a:04:01:cb:9d:a1:13:cd:20:6d: 0d:e1:3f:3f:ca:8a:70:1b:bb:16:e4:ae:9a:72:b1: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D3:9B:6F:A3:A8:01:69:70:33:DE:39:D2:34:D9:F5:37:DC:D5:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733/40f0d7cc-64f4-4c77-bfcb-4e33d93d8733.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.183.144.0/24 45.41.0.0/22 IPv6: 2606:5a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399675 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:be:01:15:0a:7d:71:31:05:0b:4f:07:c6:ba:de:37:65:4e: 64:9c:41:29:c5:db:8d:f9:6d:1f:e4:78:a1:b5:84:47:8e:39: 60:d6:11:80:fa:17:15:50:c4:46:9f:b5:12:da:36:2f:67:d7: 58:c4:24:86:62:e1:44:97:c7:cc:4f:67:a4:74:d8:de:a3:b3: 59:96:e4:99:03:dc:dd:51:e5:ad:1b:bc:c2:b8:0f:20:4e:f6: e2:46:fd:a9:52:59:5a:a5:15:9f:0a:df:78:fa:c0:c9:af:c1: 4d:11:66:0b:68:1e:bc:6e:b2:1a:b1:02:e2:0c:24:36:e9:69: cd:16:6d:c6:63:7e:d3:0e:0c:e6:8a:12:6a:f2:12:21:71:08: af:c0:09:f6:11:a4:e6:57:c4:9d:38:3f:4f:c8:85:8a:b0:20: 1b:f8:3b:44:c8:a4:ad:88:19:07:13:87:d6:67:4a:53:9e:b6: 14:e0:a7:7d:3f:c9:4d:cf:3d:2c:6e:93:f5:6d:a0:4d:ea:6d: 08:5b:3a:8a:5c:df:4f:e5:cc:d0:ce:fa:da:e2:5a:50:47:a6: b8:27:32:ba:b6:1d:fd:df:fd:1a:59:b2:08:06:01:48:3c:de: 47:1b:9f:54:48:44:71:3d:12:9b:7c:80:3f:22:1b:da:28:45: c4:37:a4:67 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEWXIj0PeNMR//oj1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQxODIxMDIwN1oXDTI2MDcyMjIxMDIwN1owLzEtMCsGA1UEAxMk NDBmMGQ3Y2MtNjRmNC00Yzc3LWJmY2ItNGUzM2Q5M2Q4NzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYimNGJcFz7ZdjbPx5WGQPz5dvx2S3A+GECb zS7dw1/o4/63BVbiPF/LysMYZ9zgsTaZ4iu/hDP0Yb61NMRlBL4wLWCVPg4OGIEo 0zItXefG0+8+zH8aqK4rqxRbwAVzjZpnNNZQJ0OAGVz+beTp/RdM5eI12pCUiwsb JS2K0lSddvkrCHXNW0ynGJBkAHHQke//m12to9m2dhc/5odBQoJvICKFmIwhy9eT YB87/MNn+DrPOxM21/zUIQAw5vqcSsCUDEAMIFwQMvxiy+P/gCYw2fwoTowudr17 25+FoND2idhyFWoEAcudoRPNIG0N4T8/yopwG7sW5K6acrFkowIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFH/Tm2+jqAFpcDPeOdI02fU33NWBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80 MGYwZDdjYy02NGY0LTRjNzctYmZjYi00ZTMzZDkzZDg3MzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzQwZjBkN2NjLTY0ZjQtNGM3Ny1i ZmNiLTRlMzNkOTNkODczMy80MGYwZDdjYy02NGY0LTRjNzctYmZjYi00ZTMzZDkz ZDg3MzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXt5ADBAItKQAwDQQCAAIwBwMFACYGWkAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhk7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIy+ARUKfXExBQtPB8a6 3jdlTmScQSnF2435bR/keKG1hEeOOWDWEYD6FxVQxEaftRLaNi9n11jEJIZi4USX x8xPZ6R02N6js1mW5JkD3N1R5a0bvMK4DyBO9uJG/alSWVqlFZ8K33j6wMmvwU0R ZgtoHrxushqxAuIMJDbpac0WbcZjftMODOaKEmryEiFxCK/ACfYRpOZXxJ04P0/I hYqwIBv4O0TIpK2IGQcTh9ZnSlOethTgp30/yU3PPSxuk/VtoE3qbQhbOopc30/l zNDO+triWlBHprgnMrq2Hf3f/RpZsggGAUg83kcbn1RIRHE9Ept8gD8iG9ooRcQ3 pGc= -----END CERTIFICATE-----Generated at Fri May 10 20:14:31 2024 by rpki-client on console-fra.rpki-client.org