$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445.cer File: 65b40bd5-5bac-4926-93a3-fd16c7c31445.cer (raw, json) Hash identifier: 2LCk2wPULgT21VO9iE2YtJEV6FybEKpV72EGWgOxfDE= Subject key identifier: 37:DC:87:18:3B:B3:7C:17:41:53:1C:63:6B:18:62:08:05:1E:52:B4 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844CA7902DF78DF6107FC34D7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Feb 2024 13:36:15 +0000 Certificate not after: Tue 05 May 2026 13:27:08 +0000 Subordinate resources: AS: 32712 IP: 2607:8840::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ca:79:02:df:78:df:61:07:fc:34:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 5 13:36:15 2024 GMT Not After : May 5 13:27:08 2026 GMT Subject: CN=65b40bd5-5bac-4926-93a3-fd16c7c31445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:d5:92:c1:3b:8e:b2:6b:31:9b:7c:66:a4: 02:eb:80:c6:fc:5e:c8:c1:db:5f:88:b0:60:0d:6b: da:2f:72:ce:ff:88:0d:b6:8b:91:7f:80:09:73:2d: ae:30:63:e1:54:38:cf:d8:f9:1a:4c:c3:30:8f:2d: f4:26:9d:dc:17:e7:4b:68:0a:e5:94:ad:47:e1:8d: 11:8e:e6:12:e2:04:e6:56:d6:71:af:77:fb:09:7e: d3:c4:5d:fa:98:a4:a6:0f:98:0c:5a:cc:67:85:f0: 63:f2:0f:4c:ba:7f:e7:50:31:33:f2:8d:59:09:ad: 52:04:ec:24:bf:ee:e1:dc:61:e1:4e:ca:f0:9d:45: f2:fb:93:ef:21:94:75:ee:5f:ec:d2:62:51:ce:4b: 0b:97:72:46:30:c6:2c:cc:7e:a3:f0:c2:e2:be:73: 5b:53:39:08:dc:25:57:12:12:b1:6c:66:3b:56:70: bd:6f:85:6e:0b:cb:a5:1e:fc:91:0d:59:03:86:a6: 41:e0:12:10:c0:c3:64:0e:9a:46:7e:aa:4a:c3:6b: af:c9:1c:b6:c3:fe:2f:c9:e2:0c:c1:58:a9:9a:6b: 49:c5:55:dd:d1:55:8c:e1:67:e8:eb:1a:08:47:fb: 03:8e:01:45:cc:74:6f:d1:99:48:78:d2:8e:9b:16: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DC:87:18:3B:B3:7C:17:41:53:1C:63:6B:18:62:08:05:1E:52:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65b40bd5-5bac-4926-93a3-fd16c7c31445/65b40bd5-5bac-4926-93a3-fd16c7c31445.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv6: 2607:8840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32712 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a6:04:d0:d3:13:3e:f7:ac:f0:fb:cb:ae:1c:6c:3f:77:de: ff:9f:35:f7:43:b8:43:3d:a6:ac:1c:8f:d8:e5:48:b1:eb:3c: 77:1c:88:28:b5:15:27:19:d1:bf:f6:16:e9:c8:3f:e1:92:51: 07:6f:17:6e:ec:4f:37:5b:72:f1:9b:ed:c7:2e:10:8e:36:5f: 30:2b:96:d7:e0:d8:41:0b:2b:9d:6b:f7:9c:a1:b9:d6:d2:c9: ec:6a:42:fe:77:ec:d4:42:fb:ce:0a:84:fc:3e:11:b2:77:6e: 3a:45:22:94:87:da:2c:a9:24:c4:03:d4:b8:5a:d2:75:ce:f1: 44:ed:dd:f5:bf:05:ee:c0:3e:e0:d0:74:f9:10:5e:27:94:c0: a7:7b:b8:26:25:c4:d3:e3:53:d1:c2:8c:c4:63:51:2e:57:4c: 84:b9:fc:3c:96:d5:80:10:72:a2:a7:fc:57:fd:33:4f:2a:e9: af:97:ee:5c:81:19:ed:ed:ea:ff:53:f4:c8:42:ee:b6:2b:ed: 6e:8a:fd:81:4c:58:e5:60:41:44:0a:db:22:c2:88:5b:4a:7f: 38:05:6c:de:f2:95:e6:a0:f0:14:08:42:ba:8c:4b:62:80:54: 1c:da:26:6a:59:b0:eb:7b:a4:81:d8:90:af:eb:47:97:f0:c2: 59:a4:7f:b8 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWETKeQLfeN9hB/w018AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIwNTEzMzYxNVoXDTI2MDUwNTEzMjcwOFowLzEtMCsGA1UEAxMk NjViNDBiZDUtNWJhYy00OTI2LTkzYTMtZmQxNmM3YzMxNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbrVksE7jrJrMZt8ZqQC64DG/F7IwdtfiLBg DWvaL3LO/4gNtouRf4AJcy2uMGPhVDjP2PkaTMMwjy30Jp3cF+dLaArllK1H4Y0R juYS4gTmVtZxr3f7CX7TxF36mKSmD5gMWsxnhfBj8g9Mun/nUDEz8o1ZCa1SBOwk v+7h3GHhTsrwnUXy+5PvIZR17l/s0mJRzksLl3JGMMYszH6j8MLivnNbUzkI3CVX EhKxbGY7VnC9b4VuC8ulHvyRDVkDhqZB4BIQwMNkDppGfqpKw2uvyRy2w/4vyeIM wVipmmtJxVXd0VWM4Wfo6xoIR/sDjgFFzHRv0ZlIeNKOmxYTCQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDfchxg7s3wXQVMcY2sYYggFHlK0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 NWI0MGJkNS01YmFjLTQ5MjYtOTNhMy1mZDE2YzdjMzE0NDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzY1YjQwYmQ1LTViYWMtNDkyNi05 M2EzLWZkMTZjN2MzMTQ0NS82NWI0MGJkNS01YmFjLTQ5MjYtOTNhMy1mZDE2Yzdj MzE0NDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB4hAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC An/IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHKmBNDTEz73rPD7y64cbD933v+fNfdDuEM9pqwcj9jlSLHr PHcciCi1FScZ0b/2FunIP+GSUQdvF27sTzdbcvGb7ccuEI42XzArltfg2EELK51r 95yhudbSyexqQv537NRC+84KhPw+EbJ3bjpFIpSH2iypJMQD1Lha0nXO8UTt3fW/ Be7APuDQdPkQXieUwKd7uCYlxNPjU9HCjMRjUS5XTIS5/DyW1YAQcqKn/Ff9M08q 6a+X7lyBGe3t6v9T9MhC7rYr7W6K/YFMWOVgQUQK2yLCiFtKfzgFbN7yleag8BQI QrqMS2KAVBzaJmpZsOt7pIHYkK/rR5fwwlmkf7g= -----END CERTIFICATE-----Generated at Sat May 11 18:14:42 2024 by rpki-client on console-fra.rpki-client.org