$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6a4a3343-beaf-4d66-8016-fcabfc12e95d.cer File: 6a4a3343-beaf-4d66-8016-fcabfc12e95d.cer (raw, json) Hash identifier: NpsMg/yrBj4fBql72w8fdvtp8S2HdF40LS82/h0cvi0= Subject key identifier: 20:C6:2E:8B:1D:CC:E6:A4:7C:92:1B:FB:C7:07:D9:6E:9E:FE:A1:54 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F4328584571D4070F3B2D086277FD3900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6a4a3343-beaf-4d66-8016-fcabfc12e95d/6a4a3343-beaf-4d66-8016-fcabfc12e95d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6a4a3343-beaf-4d66-8016-fcabfc12e95d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Apr 2024 12:19:38 +0000 Certificate not after: Thu 09 Jul 2026 12:19:38 +0000 Subordinate resources: AS: 18865 IP: 74.123.224.0/22 IP: 2604:ee00::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:71:d4:07:0f:3b:2d:08:62:77:fd:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 5 12:19:38 2024 GMT Not After : Jul 9 12:19:38 2026 GMT Subject: CN=6a4a3343-beaf-4d66-8016-fcabfc12e95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:5c:56:3c:62:db:d5:d4:e9:34:fc:cc:6b: 41:03:2e:62:dc:d1:1c:0b:25:79:76:17:f9:72:99: f0:6d:e4:96:c2:f9:20:77:b7:e9:9c:f3:02:77:c0: 5b:da:05:2e:89:0f:29:93:08:bb:53:09:2b:80:d5: ef:41:34:27:29:ed:aa:a0:7b:f8:d1:11:19:a3:71: a9:b8:75:2b:6a:d7:a8:47:b2:a5:e3:52:7c:a5:51: e2:4e:bc:f8:d5:c7:57:31:9e:6d:9a:a8:b9:43:e4: a1:a8:29:2e:43:0e:e8:e7:ab:5e:4d:3d:8d:45:2b: eb:9b:f4:f9:9a:ce:cd:7a:97:f4:a0:94:1c:42:84: 06:6a:12:81:a9:cb:49:c8:5d:23:03:79:ee:00:22: 57:6c:09:cd:6e:9c:4a:04:59:b4:fc:51:c8:c8:f7: 19:7d:73:63:6e:98:7d:6c:48:5a:25:7c:74:29:cc: 75:bf:57:38:59:92:f5:97:4a:34:f8:fc:dd:9f:d4: ae:5b:ae:c7:a7:ba:41:e5:a7:bb:2f:bc:9d:9f:17: 6d:20:47:30:5a:2d:d1:c1:fd:20:ec:c0:3f:cb:51: eb:35:3c:ec:ca:64:bf:4b:84:57:1f:14:f6:00:d9: 37:1d:f5:f0:23:54:ac:fa:25:88:1d:8b:bd:6b:37: a4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C6:2E:8B:1D:CC:E6:A4:7C:92:1B:FB:C7:07:D9:6E:9E:FE:A1:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6a4a3343-beaf-4d66-8016-fcabfc12e95d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6a4a3343-beaf-4d66-8016-fcabfc12e95d/6a4a3343-beaf-4d66-8016-fcabfc12e95d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 74.123.224.0/22 IPv6: 2604:ee00::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18865 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:dd:21:4e:67:fd:07:0b:07:87:9d:08:42:ba:d9:d4:cd:66: 1c:0e:32:d4:c9:96:a6:3a:24:cc:f5:e2:dc:18:fa:90:0b:42: 2d:29:24:d7:d9:d9:6f:4f:54:51:23:48:46:e3:46:44:cb:98: 3e:e2:4c:bf:b6:cf:fb:ab:7d:fa:48:64:d2:c7:86:30:f3:26: 64:c0:18:ab:75:de:db:84:c6:13:73:63:2d:a5:51:a7:fb:a4: bd:1a:58:80:db:ea:e4:5f:c8:b8:9b:0d:19:54:73:bd:6e:83: 79:d3:2c:05:6d:4d:85:56:0f:7f:9c:06:61:c3:b7:5a:c0:50: 30:d5:0f:15:eb:00:b7:eb:3f:4d:da:08:ac:93:09:48:2e:1d: e0:a9:5d:de:30:64:15:df:92:14:44:da:ee:d6:3d:32:ee:ae: e3:23:6a:59:7f:6b:d1:ce:a9:76:15:9c:e7:f7:a3:07:fb:38: 5b:0f:c8:b7:43:f1:97:9d:4a:be:d2:93:6c:82:a6:60:99:5f: 2b:23:31:6f:f8:8d:10:31:c2:31:f8:23:6f:36:4b:5f:de:2a: 73:d2:73:08:0a:40:64:70:88:77:ee:eb:64:ab:2e:ac:13:52: 63:aa:e2:4c:2f:41:f8:ba:ae:30:3b:03:9b:de:ff:97:32:52: da:81:f1:76 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEVx1AcPOy0IYnf9OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQwNTEyMTkzOFoXDTI2MDcwOTEyMTkzOFowLzEtMCsGA1UEAxMk NmE0YTMzNDMtYmVhZi00ZDY2LTgwMTYtZmNhYmZjMTJlOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+dcVjxi29XU6TT8zGtBAy5i3NEcCyV5dhf5 cpnwbeSWwvkgd7fpnPMCd8Bb2gUuiQ8pkwi7UwkrgNXvQTQnKe2qoHv40REZo3Gp uHUrateoR7Kl41J8pVHiTrz41cdXMZ5tmqi5Q+ShqCkuQw7o56teTT2NRSvrm/T5 ms7Nepf0oJQcQoQGahKBqctJyF0jA3nuACJXbAnNbpxKBFm0/FHIyPcZfXNjbph9 bEhaJXx0Kcx1v1c4WZL1l0o0+Pzdn9SuW67Hp7pB5ae7L7ydnxdtIEcwWi3Rwf0g 7MA/y1HrNTzsymS/S4RXHxT2ANk3HfXwI1Ss+iWIHYu9azekyQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCDGLosdzOakfJIb+8cH2W6e/qFUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82 YTRhMzM0My1iZWFmLTRkNjYtODAxNi1mY2FiZmMxMmU5NWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzZhNGEzMzQzLWJlYWYtNGQ2Ni04 MDE2LWZjYWJmYzEyZTk1ZC82YTRhMzM0My1iZWFmLTRkNjYtODAxNi1mY2FiZmMx MmU5NWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAJKe+AwDgQCAAIwCAMGBCYE7gAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkmxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIzdIU5n/QcLB4edCEK62dTNZhwO MtTJlqY6JMz14twY+pALQi0pJNfZ2W9PVFEjSEbjRkTLmD7iTL+2z/urffpIZNLH hjDzJmTAGKt13tuExhNzYy2lUaf7pL0aWIDb6uRfyLibDRlUc71ug3nTLAVtTYVW D3+cBmHDt1rAUDDVDxXrALfrP03aCKyTCUguHeCpXd4wZBXfkhRE2u7WPTLuruMj all/a9HOqXYVnOf3owf7OFsPyLdD8ZedSr7Sk2yCpmCZXysjMW/4jRAxwjH4I282 S1/eKnPScwgKQGRwiHfu62SrLqwTUmOq4kwvQfi6rjA7A5ve/5cyUtqB8XY= -----END CERTIFICATE-----Generated at Fri May 10 20:14:32 2024 by rpki-client on console-fra.rpki-client.org