$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer File: 6952cc0b-a365-40b8-a8b3-43408c4c6fe1.cer (raw, json) Hash identifier: 7s9MBpkQ5+r3AxL28MdQZnWEZeLvd1NDI0YDk29dsPI= Subject key identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844BF6A900EBA064C3B958F1740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Feb 2024 14:33:15 +0000 Certificate not after: Thu 23 Apr 2026 14:35:15 +0000 Subordinate resources: IP: 162.252.36.0/22 IP: 170.117.164.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:bf:6a:90:0e:ba:06:4c:3b:95:8f:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 1 14:33:15 2024 GMT Not After : Apr 23 14:35:15 2026 GMT Subject: CN=6952cc0b-a365-40b8-a8b3-43408c4c6fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:e8:d2:4e:de:dd:65:e3:0a:da:91:e2:85: 4a:aa:00:05:18:31:fe:8a:b2:77:aa:67:f4:ba:08: 0c:d4:45:ef:b6:55:ec:98:99:bd:37:8a:1a:72:e8: da:5b:b6:65:b3:94:45:42:22:aa:8b:8a:cf:19:49: 0f:d4:4c:f8:87:ee:a4:15:38:5a:45:62:c4:e7:63: 3d:b3:be:ee:3c:0a:d3:ce:a8:0e:02:5d:23:3d:8b: ed:f8:17:f2:04:74:3e:3b:32:b3:16:8f:bf:4a:a3: 88:f0:fe:e9:d5:7c:65:25:b5:5e:a5:07:79:4c:04: ce:65:6c:34:82:9b:7c:1a:9a:b7:58:61:99:69:5a: 10:d0:98:3e:1c:8e:6b:56:1c:29:f2:95:67:58:ce: 12:08:95:01:a2:03:a8:6d:ee:b3:18:85:b7:ec:0f: 2c:fc:d1:d2:b1:57:e7:cf:15:e3:e4:9a:12:89:d9: b8:80:5e:1f:c0:f4:e3:8e:df:ad:a2:7e:41:4d:55: 35:ca:44:bf:8a:66:9a:28:78:27:27:4f:47:01:9b: e7:0d:9e:e6:1e:57:9f:e1:88:ba:8e:52:28:8f:a8: 8b:ca:83:2a:8e:65:52:0c:46:90:d4:12:8e:85:fc: 7f:1c:f0:79:a4:c1:19:8f:d8:cd:a1:19:d1:76:7f: 90:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:09:5B:4E:B5:FE:37:2E:F3:84:76:17:06:1E:22:F5:17:9C:0A:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6952cc0b-a365-40b8-a8b3-43408c4c6fe1/6952cc0b-a365-40b8-a8b3-43408c4c6fe1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 162.252.36.0/22 170.117.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:94:98:ee:20:d3:07:e4:15:a7:ac:99:c3:6a:43:22:65:f5: 9f:b4:08:c6:94:b9:db:e9:7f:23:db:b3:4e:ea:aa:92:23:ce: 69:f2:14:ee:2d:ea:c4:f4:60:da:27:3f:16:e2:87:96:07:22: 7e:04:c2:be:ad:f6:b2:e0:98:92:63:a1:00:42:33:ad:5c:29: 33:fe:0d:30:b4:8d:06:9a:2c:35:c1:25:be:6f:1e:9e:22:bf: a8:8b:9d:53:26:70:cc:15:12:15:d0:35:cd:e4:0e:a4:81:ce: 1d:b2:dd:bb:06:7f:f3:84:b0:c5:23:92:ed:52:8a:32:c7:e5: 9e:8f:29:63:7f:ae:cf:0e:38:7c:76:57:d7:23:83:69:98:5d: da:97:17:4d:60:3b:96:c7:12:3d:7f:6a:b4:7d:c2:0c:8b:7f: 59:c9:12:17:92:b8:5c:04:94:7e:79:ef:9a:e5:a7:d6:a1:5a: 05:db:48:91:c7:38:fb:1c:24:38:57:d4:10:62:48:d2:af:ed: 27:28:a9:ac:60:05:c7:f2:f9:ee:a1:72:e2:cb:55:5a:13:88: 14:a8:22:98:77:48:a8:8d:33:6d:7f:96:e4:35:21:64:ce:72: bc:c6:0c:ef:75:d0:6c:10:9f:a3:29:fd:27:5f:41:3b:a4:95: cb:c5:52:a8 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWES/apAOugZMO5WPF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIwMTE0MzMxNVoXDTI2MDQyMzE0MzUxNVowLzEtMCsGA1UEAxMk Njk1MmNjMGItYTM2NS00MGI4LWE4YjMtNDM0MDhjNGM2ZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeLo0k7e3WXjCtqR4oVKqgAFGDH+irJ3qmf0 uggM1EXvtlXsmJm9N4oacujaW7Zls5RFQiKqi4rPGUkP1Ez4h+6kFThaRWLE52M9 s77uPArTzqgOAl0jPYvt+BfyBHQ+OzKzFo+/SqOI8P7p1XxlJbVepQd5TATOZWw0 gpt8Gpq3WGGZaVoQ0Jg+HI5rVhwp8pVnWM4SCJUBogOobe6zGIW37A8s/NHSsVfn zxXj5JoSidm4gF4fwPTjjt+ton5BTVU1ykS/imaaKHgnJ09HAZvnDZ7mHlef4Yi6 jlIoj6iLyoMqjmVSDEaQ1BKOhfx/HPB5pMEZj9jNoRnRdn+QwwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFNQJW061/jcu84R2FwYeIvUXnAqEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0YzZmZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzY5NTJjYzBiLWEzNjUtNDBiOC1h OGIzLTQzNDA4YzRjNmZlMS82OTUyY2MwYi1hMzY1LTQwYjgtYThiMy00MzQwOGM0 YzZmZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAKi/CQDBAKqdaQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABpSY7iDTB+QV p6yZw2pDImX1n7QIxpS52+l/I9uzTuqqkiPOafIU7i3qxPRg2ic/FuKHlgcifgTC vq32suCYkmOhAEIzrVwpM/4NMLSNBposNcElvm8eniK/qIudUyZwzBUSFdA1zeQO pIHOHbLduwZ/84SwxSOS7VKKMsflno8pY3+uzw44fHZX1yODaZhd2pcXTWA7lscS PX9qtH3CDIt/WckSF5K4XASUfnnvmuWn1qFaBdtIkcc4+xwkOFfUEGJI0q/tJyip rGAFx/L57qFy4stVWhOIFKgimHdIqI0zbX+W5DUhZM5yvMYM73XQbBCfoyn9J19B O6SVy8VSqA== -----END CERTIFICATE-----Generated at Sat May 11 18:14:42 2024 by rpki-client on console-fra.rpki-client.org