$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef.cer File: 5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef.cer (raw, json) Hash identifier: QD2Bnr0d/xlv2qu9qPzkO8Z3IwKrFSIeNGaf1NV3zt0= Subject key identifier: EC:9C:7B:91:36:F2:C7:2C:F9:90:FF:FB:50:43:0E:7F:8A:8C:7F:BE Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285845406AE5E719DC2AEE2E925898 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Mar 2024 19:33:12 +0000 Certificate not after: Sun 21 Jun 2026 19:33:12 +0000 Subordinate resources: IP: 74.80.234.0/24 IP: 2602:fad0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:40:6a:e5:e7:19:dc:2a:ee:2e:92:58:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 18 19:33:12 2024 GMT Not After : Jun 21 19:33:12 2026 GMT Subject: CN=5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ac:b0:a8:61:c8:b8:b3:73:7d:c5:01:5a:17: 78:c8:5a:ea:9d:47:9b:5f:85:46:67:39:c9:0c:62: 90:51:56:6b:59:1d:ca:ea:9c:f5:6d:58:d4:a5:b3: 21:a4:06:39:98:6e:d5:a5:e0:60:1e:58:c3:c0:4a: b4:83:cc:cc:fe:84:15:c6:21:e8:f7:7b:dd:62:99: 49:69:aa:0b:37:6a:5d:36:23:62:58:b1:04:f8:f1: e3:1f:74:41:52:e0:9d:fb:20:13:e6:d3:66:39:1c: 2e:56:7b:c7:c4:8f:1b:5a:44:24:c6:99:20:eb:da: 81:b4:b0:e3:15:55:05:8d:07:38:a9:3c:e5:85:0e: 04:bd:a8:0f:9c:4c:c3:53:24:d9:b8:25:d6:c8:a4: 2d:eb:2e:6c:95:57:41:7a:c3:61:c9:11:91:42:e3: e6:1c:40:23:ce:e4:8a:18:a4:21:d6:4b:46:0c:17: 77:5d:59:ca:05:df:50:00:44:a1:76:56:e3:2f:bb: 57:e2:49:26:7d:85:92:68:c8:2e:c9:db:f5:ff:e3: 9c:aa:f8:23:75:9c:3e:07:cf:8e:fe:07:e7:b5:e2: d3:c5:ef:a7:49:92:c6:aa:e4:b4:b8:b9:94:cf:78: 9c:22:88:e1:9e:a4:de:6b:af:22:4c:ee:75:f1:20: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9C:7B:91:36:F2:C7:2C:F9:90:FF:FB:50:43:0E:7F:8A:8C:7F:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef/5765dd55-fa83-4dfa-8e9c-ae1b0958d4ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 74.80.234.0/24 IPv6: 2602:fad0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:20:da:f3:16:8f:a7:62:00:68:9c:0b:50:fb:b6:40:cb:04: 7b:b8:42:61:91:fc:12:e2:bc:17:05:77:13:69:54:09:b3:d8: 9e:12:5d:d5:ac:4b:1f:37:e2:3f:d3:1c:e9:5e:07:5b:47:2d: f9:3a:c3:85:ab:b4:18:bf:94:c0:2b:7f:4e:cb:40:00:2e:12: 45:d0:44:dc:2b:03:75:e2:df:f2:bd:b7:d4:49:2c:17:f1:f4: 98:31:42:35:92:b5:41:af:9f:8e:7a:6b:72:27:43:d2:ed:cb: 3b:c5:5c:5e:7d:48:ae:68:ec:f5:52:82:3f:5b:24:9f:22:67: c8:0e:cb:0a:14:a0:20:08:38:82:9a:74:99:93:f7:f0:fa:30: 17:77:7d:d3:0f:0e:67:88:2a:c0:98:96:f1:93:90:01:09:01: 22:b8:48:a2:e3:1b:6c:89:e5:58:c1:2e:d1:de:4c:f6:cd:d9: 83:74:69:0f:15:bd:13:39:e9:5d:55:fb:15:af:c2:c6:ba:49: 3d:a4:73:06:9b:27:cc:43:e9:5b:90:b0:ac:62:19:4d:fd:36: 87:56:d2:3e:32:bb:04:55:08:93:ea:df:3e:43:20:cc:8a:a5: 5a:8a:c8:25:51:af:3a:29:7d:f7:1f:28:0e:b9:48:0b:9f:55: 6e:7d:28:92 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEVAauXnGdwq7i6SWJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMxODE5MzMxMloXDTI2MDYyMTE5MzMxMlowLzEtMCsGA1UEAxMk NTc2NWRkNTUtZmE4My00ZGZhLThlOWMtYWUxYjA5NThkNGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaywqGHIuLNzfcUBWhd4yFrqnUebX4VGZznJ DGKQUVZrWR3K6pz1bVjUpbMhpAY5mG7VpeBgHljDwEq0g8zM/oQVxiHo93vdYplJ aaoLN2pdNiNiWLEE+PHjH3RBUuCd+yAT5tNmORwuVnvHxI8bWkQkxpkg69qBtLDj FVUFjQc4qTzlhQ4EvagPnEzDUyTZuCXWyKQt6y5slVdBesNhyRGRQuPmHEAjzuSK GKQh1ktGDBd3XVnKBd9QAEShdlbjL7tX4kkmfYWSaMguydv1/+OcqvgjdZw+B8+O /gfnteLTxe+nSZLGquS0uLmUz3icIojhnqTea68iTO518SBn5wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFOyce5E28scs+ZD/+1BDDn+KjH++MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 NzY1ZGQ1NS1mYTgzLTRkZmEtOGU5Yy1hZTFiMDk1OGQ0ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzU3NjVkZDU1LWZhODMtNGRmYS04 ZTljLWFlMWIwOTU4ZDRlZi81NzY1ZGQ1NS1mYTgzLTRkZmEtOGU5Yy1hZTFiMDk1 OGQ0ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBABKUOowDgQCAAIwCAMGACYC+tAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AI8g2vMWj6diAGicC1D7tkDLBHu4QmGR/BLivBcFdxNpVAmz2J4SXdWsSx834j/T HOleB1tHLfk6w4WrtBi/lMArf07LQAAuEkXQRNwrA3Xi3/K9t9RJLBfx9JgxQjWS tUGvn456a3InQ9LtyzvFXF59SK5o7PVSgj9bJJ8iZ8gOywoUoCAIOIKadJmT9/D6 MBd3fdMPDmeIKsCYlvGTkAEJASK4SKLjG2yJ5VjBLtHeTPbN2YN0aQ8VvRM56V1V +xWvwsa6ST2kcwabJ8xD6VuQsKxiGU39NodW0j4yuwRVCJPq3z5DIMyKpVqKyCVR rzopffcfKA65SAufVW59KJI= -----END CERTIFICATE-----Generated at Wed May 8 23:45:03 2024 by rpki-client on console-fra.rpki-client.org