$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer File: 5028ee72-1629-4552-a11f-947b5a925519.cer (raw, json) Hash identifier: zNAEbh3ojKERvsrQZtcElWj+k83bA9QiYOXtyG9kQIw= Subject key identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584567AA622320BDC1C1B44B1640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Apr 2024 20:57:38 +0000 Certificate not after: Sun 05 Jul 2026 20:57:38 +0000 Subordinate resources: IP: 45.42.214.0/23 IP: 161.129.180.0/22 IP: 204.136.10.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:67:aa:62:23:20:bd:c1:c1:b4:4b:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 1 20:57:38 2024 GMT Not After : Jul 5 20:57:38 2026 GMT Subject: CN=5028ee72-1629-4552-a11f-947b5a925519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:db:ee:ca:8c:0f:e0:b7:87:d5:9f:e0:fa: f2:b0:52:73:15:65:fa:a3:7c:c3:e5:d0:05:e0:c8: 35:5b:55:be:c4:21:c9:93:2d:bf:c3:81:e6:3b:b5: dc:f4:2d:59:f3:a4:ad:1e:c7:ab:70:2a:46:25:72: 71:7b:6b:70:b2:6d:48:64:eb:2f:16:f3:54:2c:a3: 43:a0:d4:71:97:93:3a:3a:2e:04:42:0e:53:91:66: ad:9b:e5:bf:a9:83:52:35:10:c0:0e:36:91:67:6b: 87:3f:ea:52:45:8a:75:ad:f0:a5:f6:84:81:21:e7: 60:3f:67:18:54:83:07:02:1f:6a:6c:17:2f:12:ea: f3:8e:a7:63:82:bc:e2:1e:b0:dc:84:8a:eb:0b:59: f6:b4:ff:e0:8f:ed:b4:70:52:66:13:56:a2:ef:5d: cb:ea:59:b2:7f:5c:3b:c8:bf:96:ce:f9:54:6c:6d: f6:9c:68:82:6a:83:e9:e4:b2:2a:de:b6:cc:85:84: dd:ec:34:3a:43:65:8d:b5:39:5d:c5:6d:2e:fb:4a: d7:67:a6:8a:43:8f:65:b7:1d:b3:2d:49:e3:52:d9: 72:fa:b4:3c:27:30:5e:d9:f9:94:08:db:a2:0e:14: 0a:4b:dd:21:78:f7:b3:7c:a0:0c:b7:e0:e9:73:07: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 45.42.214.0/23 161.129.180.0/22 204.136.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:0d:62:4e:23:5d:51:df:fc:a0:e3:41:69:d4:8e:e2:b9:8d: 2a:a3:89:cd:f5:4e:97:e4:ea:83:54:10:42:1a:88:c7:ba:68: 28:bc:94:de:2e:46:a5:dd:1c:0d:39:d5:3f:e9:22:c6:f3:1a: de:9b:66:b3:d6:f7:54:fc:9c:f9:df:77:f2:65:04:89:85:96: 3d:e7:5b:42:a0:74:7f:51:4b:40:18:bf:13:ea:83:a6:a3:29: cd:f6:1a:8f:5a:92:f6:0c:5d:89:dc:ff:c8:41:2d:d3:aa:25: 1e:56:ab:d1:bc:a3:42:73:d6:b3:27:4a:84:21:e0:cc:86:5a: 81:11:be:5f:a5:13:ce:d8:79:8a:be:cb:9b:6d:6e:71:e0:73: a9:cb:ac:0b:44:1a:f3:64:58:c9:b7:a8:a0:b3:8b:4f:73:b5: 11:af:62:61:6b:0c:40:97:4b:be:14:3c:ed:62:4e:f5:0d:d9: 85:38:14:f9:28:ef:45:05:6e:ac:0f:0c:25:23:bd:77:a0:b8: c4:5a:80:a0:30:df:0e:6f:25:39:47:15:6d:e1:38:c7:26:fb: 5d:af:f1:26:9e:3e:69:37:88:46:33:70:65:4a:36:c0:5a:7b: 4c:41:c7:a4:6a:1d:07:b5:57:d6:1b:62:41:63:70:0e:1c:f8: 8b:06:d2:28 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEVnqmIjIL3BwbRLFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQwMTIwNTczOFoXDTI2MDcwNTIwNTczOFowLzEtMCsGA1UEAxMk NTAyOGVlNzItMTYyOS00NTUyLWExMWYtOTQ3YjVhOTI1NTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDvb7sqMD+C3h9Wf4PrysFJzFWX6o3zD5dAF 4Mg1W1W+xCHJky2/w4HmO7Xc9C1Z86StHsercCpGJXJxe2twsm1IZOsvFvNULKND oNRxl5M6Oi4EQg5TkWatm+W/qYNSNRDADjaRZ2uHP+pSRYp1rfCl9oSBIedgP2cY VIMHAh9qbBcvEurzjqdjgrziHrDchIrrC1n2tP/gj+20cFJmE1ai713L6lmyf1w7 yL+WzvlUbG32nGiCaoPp5LIq3rbMhYTd7DQ6Q2WNtTldxW0u+0rXZ6aKQ49ltx2z LUnjUtly+rQ8JzBe2fmUCNuiDhQKS90hePezfKAMt+Dpcwe6HQIDAQABo4IECzCC BAcwHQYDVR0OBBYEFLVAiDxdXPtmRYSsc1S01vkIHXjiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 MDI4ZWU3Mi0xNjI5LTQ1NTItYTExZi05NDdiNWE5MjU1MTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzUwMjhlZTcyLTE2MjktNDU1Mi1h MTFmLTk0N2I1YTkyNTUxOS81MDI4ZWU3Mi0xNjI5LTQ1NTItYTExZi05NDdiNWE5 MjU1MTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAEtKtYDBAKhgbQDBAHMiAowVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmA1i TiNdUd/8oONBadSO4rmNKqOJzfVOl+Tqg1QQQhqIx7poKLyU3i5Gpd0cDTnVP+ki xvMa3ptms9b3VPyc+d938mUEiYWWPedbQqB0f1FLQBi/E+qDpqMpzfYaj1qS9gxd idz/yEEt06olHlar0byjQnPWsydKhCHgzIZagRG+X6UTzth5ir7Lm21uceBzqcus C0Qa82RYybeooLOLT3O1Ea9iYWsMQJdLvhQ87WJO9Q3ZhTgU+SjvRQVurA8MJSO9 d6C4xFqAoDDfDm8lOUcVbeE4xyb7Xa/xJp4+aTeIRjNwZUo2wFp7TEHHpGodB7VX 1htiQWNwDhz4iwbSKA== -----END CERTIFICATE-----Generated at Sat May 11 18:14:41 2024 by rpki-client on console-fra.rpki-client.org