$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7.cer File: 53c2cca8-3817-42e5-a92f-da9eff96d7a7.cer (raw, json) Hash identifier: WDPjGvTD1/t3d8xQ+TlWJC+kHuFX6oA9vlsa0cjNJ6Y= Subject key identifier: 77:AC:E4:87:D1:CC:2C:04:32:06:65:33:BA:E0:F6:ED:0B:45:FC:17 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844D64948CB291FB6C1C7064117 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/53c2cca8-3817-42e5-a92f-da9eff96d7a7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Feb 2024 19:09:47 +0000 Certificate not after: Thu 14 May 2026 18:09:47 +0000 Subordinate resources: AS: 46295 IP: 63.135.172.0/22 IP: 195.85.62.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d6:49:48:cb:29:1f:b6:c1:c7:06:41:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 9 19:09:47 2024 GMT Not After : May 14 18:09:47 2026 GMT Subject: CN=53c2cca8-3817-42e5-a92f-da9eff96d7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cb:19:02:06:06:6a:ac:cd:a3:48:3e:1e:74: 6e:39:ac:2c:c3:d3:27:c1:c2:83:b5:be:12:b1:3e: ae:91:e4:54:73:4e:8f:d7:01:1a:be:89:dd:c4:7f: a4:dc:f0:38:7c:36:e5:7b:3e:78:88:33:4c:87:04: 00:4b:2f:71:8c:26:a3:c0:2b:ad:16:5a:6d:22:b7: 96:88:df:76:9a:2b:19:d7:b8:27:d6:53:78:88:28: 28:21:32:1e:cc:0a:d4:87:4d:ee:3b:f2:7e:2b:ce: f5:e5:6f:4f:36:01:85:ff:ed:3f:80:ae:f8:1d:2f: de:f6:37:04:55:78:4e:9b:17:01:af:1d:a8:c7:ac: ee:d3:0b:67:20:4e:74:36:6f:8c:25:27:a4:51:1e: d9:61:44:fe:4d:c6:92:ee:a7:b7:d5:91:da:2a:24: 39:34:4b:2f:83:e1:10:c9:d1:b8:62:ec:48:b4:2c: 69:e2:5b:8e:94:bb:69:37:87:76:53:d7:53:1b:35: 1d:48:f4:f9:de:e2:b5:b4:3f:fb:51:0b:bf:6a:1c: d1:a1:98:01:a8:21:e1:b0:b8:f5:e3:05:dc:f1:3d: d5:12:7e:d4:13:2f:12:80:eb:00:d0:4c:46:0c:23: ac:f1:e8:8b:61:bd:a1:f8:ee:7b:a7:5a:21:1d:ee: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AC:E4:87:D1:CC:2C:04:32:06:65:33:BA:E0:F6:ED:0B:45:FC:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/53c2cca8-3817-42e5-a92f-da9eff96d7a7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 63.135.172.0/22 195.85.62.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46295 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9d:2b:b8:a7:d7:68:be:ea:4b:86:b6:10:69:9a:cd:10:17: 01:cf:ab:15:ce:55:6b:74:57:ca:42:e2:a7:3e:9c:b3:ac:2d: 3f:2c:8f:c9:1f:a0:c7:7b:6f:22:29:d6:ba:99:d8:76:ad:1e: e1:c4:1b:75:ac:a9:f4:b7:3c:f7:a2:5c:57:63:55:82:47:27: 2a:15:ad:20:64:08:88:4a:72:ad:56:76:c1:65:c1:05:ac:13: 52:34:42:31:d4:3f:aa:82:d2:a9:3b:39:6b:24:58:eb:1d:c7: ef:35:4b:d3:a2:86:19:68:cb:10:75:c7:7e:1d:71:7a:b2:8e: 54:4d:80:59:87:5c:8d:94:5f:c4:1f:f9:bc:58:f9:f7:7e:cb: e6:5a:24:36:25:ca:e4:f7:b3:fc:c9:d4:82:97:9d:16:8e:82: 21:8d:b5:17:ed:f9:49:91:da:c8:f3:ec:a4:64:41:0a:5a:3d: 23:e5:e9:6b:56:4d:98:70:52:37:23:ed:68:68:2b:aa:32:46: 80:eb:79:a4:e0:56:81:ac:07:a2:ae:49:ee:7e:eb:34:1f:3a: 43:99:69:48:16:52:54:d4:dd:a6:b6:25:27:78:87:cc:53:cd: 3b:52:a7:a3:ed:dc:38:c1:e9:00:5d:b4:68:7a:e6:02:28:70: 04:48:bf:ef -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWETWSUjLKR+2wccGQRcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIwOTE5MDk0N1oXDTI2MDUxNDE4MDk0N1owLzEtMCsGA1UEAxMk NTNjMmNjYTgtMzgxNy00MmU1LWE5MmYtZGE5ZWZmOTZkN2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcsZAgYGaqzNo0g+HnRuOawsw9MnwcKDtb4S sT6ukeRUc06P1wEavondxH+k3PA4fDblez54iDNMhwQASy9xjCajwCutFlptIreW iN92misZ17gn1lN4iCgoITIezArUh03uO/J+K8715W9PNgGF/+0/gK74HS/e9jcE VXhOmxcBrx2ox6zu0wtnIE50Nm+MJSekUR7ZYUT+TcaS7qe31ZHaKiQ5NEsvg+EQ ydG4YuxItCxp4luOlLtpN4d2U9dTGzUdSPT53uK1tD/7UQu/ahzRoZgBqCHhsLj1 4wXc8T3VEn7UEy8SgOsA0ExGDCOs8eiLYb2h+O57p1ohHe4dLQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFHes5IfRzCwEMgZlM7rg9u0LRfwXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 M2MyY2NhOC0zODE3LTQyZTUtYTkyZi1kYTllZmY5NmQ3YTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzUzYzJjY2E4LTM4MTctNDJlNS1h OTJmLWRhOWVmZjk2ZDdhNy81M2MyY2NhOC0zODE3LTQyZTUtYTkyZi1kYTllZmY5 NmQ3YTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAI/h6wDBAHDVT4wGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALTXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAISdK7in12i+6kuGthBpms0QFwHPqxXOVWt0V8pC 4qc+nLOsLT8sj8kfoMd7byIp1rqZ2HatHuHEG3WsqfS3PPeiXFdjVYJHJyoVrSBk CIhKcq1WdsFlwQWsE1I0QjHUP6qC0qk7OWskWOsdx+81S9OihhloyxB1x34dcXqy jlRNgFmHXI2UX8Qf+bxY+fd+y+ZaJDYlyuT3s/zJ1IKXnRaOgiGNtRft+UmR2sjz 7KRkQQpaPSPl6WtWTZhwUjcj7WhoK6oyRoDreaTgVoGsB6KuSe5+6zQfOkOZaUgW UlTU3aa2JSd4h8xTzTtSp6Pt3DjB6QBdtGh65gIocARIv+8= -----END CERTIFICATE-----Generated at Fri May 10 20:14:31 2024 by rpki-client on console-fra.rpki-client.org