$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer File: 5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer (raw, json) Hash identifier: Xer+E4aj0XHewN9OzN/coSANz2a76PAdGxUn+GolfCM= Subject key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858451C8983243B09A98E89BB5A60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Mar 2024 23:05:47 +0000 Certificate not after: Mon 08 Jun 2026 22:05:47 +0000 Subordinate resources: IP: 198.184.131.0/24 IP: 198.184.155.0 -- 198.184.158.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1c:89:83:24:3b:09:a9:8e:89:bb:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 5 23:05:47 2024 GMT Not After : Jun 8 22:05:47 2026 GMT Subject: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:39:42:10:4c:f3:1b:e3:4e:f6:a8:b5:e3: d6:74:45:2e:fb:2c:66:19:28:d4:91:6b:72:35:86: 13:b7:29:71:24:d8:0c:e8:e6:eb:3b:90:ca:aa:4b: e1:9e:ab:e9:5c:0b:53:26:fe:f4:4b:a3:95:c8:2d: 53:27:f2:a4:1c:b9:fd:cb:fe:ff:0c:e3:c5:d5:52: 68:a5:40:82:d0:3e:c7:31:50:9d:b7:a9:d9:02:2b: cd:40:78:73:f8:65:19:06:e2:e6:56:b9:86:11:cb: a8:35:9b:c4:2a:60:46:b6:52:58:a2:c9:55:51:ba: 69:66:2a:36:fb:37:46:4a:c3:11:94:de:89:9c:66: be:76:ce:9c:03:df:43:5d:b3:58:03:32:9b:57:57: ef:53:b5:ed:8c:80:15:ba:0c:e6:eb:4e:3a:3a:87: 53:74:13:b8:e2:36:f7:80:a0:36:28:b7:6e:99:2d: 83:48:6a:78:fa:3e:c6:bb:d8:4b:d2:e8:5a:3c:52: 5e:26:94:77:2d:e1:d5:86:d2:9e:0a:d9:a4:13:2f: 07:00:0f:17:0b:6a:72:ca:8c:d7:d7:cc:a0:5c:42: e0:e3:25:f1:68:3a:c2:8a:00:5a:04:12:dc:13:a5: e2:b5:c7:5e:02:69:e7:2b:67:ad:3d:bc:4d:bd:8c: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 198.184.131.0/24 198.184.155.0-198.184.158.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1a:78:65:3a:92:be:1b:b2:96:b9:90:e6:e4:08:8c:c0:eb: a8:01:9c:18:77:f8:bb:b7:e5:ac:87:62:7a:48:3b:0d:43:00: b4:c4:0e:91:49:14:9b:ec:7d:90:94:87:df:8e:2f:a3:86:86: 44:9b:7b:60:4f:d5:c0:a9:0b:31:ae:41:19:ce:19:03:39:4a: 9b:1d:52:59:b4:db:f2:81:a5:1f:1b:85:45:02:ab:16:1e:dc: 39:f1:12:00:56:f5:3f:a8:73:cf:9f:8c:59:48:85:59:c1:69: 92:3f:99:0a:00:3d:56:d5:6d:17:10:d6:0f:ef:44:ad:a6:ba: 69:14:58:a8:21:91:d3:6b:8d:6b:a4:ce:3d:6a:3d:66:ac:b7: 93:08:69:6a:8d:de:f6:6a:4a:b7:d3:bd:b2:0b:e1:aa:02:3c: 3a:e4:d6:12:94:70:12:da:36:63:a3:f6:ef:c5:30:d0:10:c1: 92:d9:d3:ce:a8:55:db:ce:c1:75:6d:b5:76:54:e3:52:0d:44: 16:d8:c3:4e:9c:89:f2:99:e4:a9:58:ac:ce:33:5d:91:57:1d: 52:55:19:8e:68:c6:8b:96:cb:b4:fc:0a:c2:ec:b5:94:04:dc: 81:31:97:e2:f4:ff:94:7a:59:71:a3:9d:23:a6:b7:c9:d0:6d: 9d:f6:0b:19 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEUciYMkOwmpjom7WmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMwNTIzMDU0N1oXDTI2MDYwODIyMDU0N1owLzEtMCsGA1UEAxMk NWQ3ZjgyN2ItZjU5Yy00MGY0LTgzYTUtY2QwYzRiMTZmNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIs5QhBM8xvjTvaotePWdEUu+yxmGSjUkWty NYYTtylxJNgM6ObrO5DKqkvhnqvpXAtTJv70S6OVyC1TJ/KkHLn9y/7/DOPF1VJo pUCC0D7HMVCdt6nZAivNQHhz+GUZBuLmVrmGEcuoNZvEKmBGtlJYoslVUbppZio2 +zdGSsMRlN6JnGa+ds6cA99DXbNYAzKbV1fvU7XtjIAVugzm6046OodTdBO44jb3 gKA2KLdumS2DSGp4+j7Gu9hL0uhaPFJeJpR3LeHVhtKeCtmkEy8HAA8XC2pyyozX 18ygXELg4yXxaDrCigBaBBLcE6XitcdeAmnnK2etPbxNvYzL6wIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFNP17OBeItnP1jSCiPw4iV/mV8IXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIxNmY0MmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzVkN2Y4MjdiLWY1OWMtNDBmNC04 M2E1LWNkMGM0YjE2ZjQyZS81ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIx NmY0MmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBADGuIMwDAMEAMa4mwMEAMa4njBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAC GnhlOpK+G7KWuZDm5AiMwOuoAZwYd/i7t+Wsh2J6SDsNQwC0xA6RSRSb7H2QlIff ji+jhoZEm3tgT9XAqQsxrkEZzhkDOUqbHVJZtNvygaUfG4VFAqsWHtw58RIAVvU/ qHPPn4xZSIVZwWmSP5kKAD1W1W0XENYP70StprppFFioIZHTa41rpM49aj1mrLeT CGlqjd72akq3072yC+GqAjw65NYSlHAS2jZjo/bvxTDQEMGS2dPOqFXbzsF1bbV2 VONSDUQW2MNOnInymeSpWKzOM12RVx1SVRmOaMaLlsu0/ArC7LWUBNyBMZfi9P+U ellxo50jprfJ0G2d9gsZ -----END CERTIFICATE-----Generated at Sat May 11 17:57:12 2024 by rpki-client on console-ams.rpki-client.org