$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8.cer File: 70b45451-ee37-49a6-aa31-f94b6a016db8.cer (raw, json) Hash identifier: b9f0jAJoISkOTYVcC7ItScqMKuQCEe5Oe3IqSoOACLM= Subject key identifier: 78:89:A2:DA:91:7D:58:2D:AB:52:DB:70:23:C9:03:F3:B3:37:96:A5 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844B7FA9A114A9B9008D2506E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/70b45451-ee37-49a6-aa31-f94b6a016db8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Jan 2024 22:37:00 +0000 Certificate not after: Sun 03 May 2026 21:37:00 +0000 Subordinate resources: AS: 393521 IP: 206.125.32.0/21 IP: 2607:c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:b7:fa:9a:11:4a:9b:90:08:d2:50:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jan 29 22:37:00 2024 GMT Not After : May 3 21:37:00 2026 GMT Subject: CN=70b45451-ee37-49a6-aa31-f94b6a016db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:13:ab:31:d5:5f:8b:a2:3f:09:06:fb:55: 00:b7:75:0f:43:f6:ca:e0:ca:b2:61:9c:60:c1:0e: b1:7d:e9:6c:32:6d:25:27:14:4a:bb:96:3e:17:9f: 5b:4e:32:64:e0:2b:30:2e:e7:47:b0:1c:36:11:9a: 79:61:50:79:5f:ba:d4:3c:59:3c:98:3d:9f:a5:ab: 3d:4b:29:9b:bf:21:0f:fc:f4:ff:ea:c3:2f:9a:49: be:d0:0a:a9:00:c5:fd:d3:cf:81:50:4c:6a:52:29: 85:80:a3:ef:21:9e:d2:6d:64:bb:02:c6:37:bd:48: 71:fe:dc:7a:5b:b3:f6:fc:79:bf:f4:2a:c0:65:7d: da:8f:1d:69:69:76:92:7b:e4:db:22:5c:2a:0a:81: 14:bc:5b:24:fd:13:42:a8:78:9a:f4:29:4a:e3:84: a3:74:bf:54:bf:a3:b6:3b:5e:92:ee:4a:f8:3d:d3: bc:77:80:2d:4a:0b:ed:54:84:78:ed:7e:d4:bf:e4: 12:d4:1c:e2:b9:bb:6b:e0:35:3f:80:60:c3:78:68: 62:44:cb:f8:51:ab:cc:3b:65:6e:ff:84:23:0b:99: 98:36:1c:24:41:d6:6a:61:df:06:48:7b:7b:f4:ae: 1d:c8:ed:0a:37:cb:cb:34:6e:2a:da:e8:21:ef:1b: 75:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:89:A2:DA:91:7D:58:2D:AB:52:DB:70:23:C9:03:F3:B3:37:96:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70b45451-ee37-49a6-aa31-f94b6a016db8/70b45451-ee37-49a6-aa31-f94b6a016db8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 206.125.32.0/21 IPv6: 2607:c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393521 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:de:4e:b2:e9:44:d0:0b:0c:46:dc:57:c5:64:5a:c2:c2:2a: 09:a3:ee:82:3f:40:d2:73:ed:11:c2:9e:74:db:cc:cb:d0:8b: 4d:03:35:47:4b:d9:09:4d:c6:5f:4c:c6:f2:00:12:9f:c5:1f: ac:8c:e0:50:dc:4b:a8:e4:53:d0:d2:e6:a4:14:a2:16:02:14: 5c:6a:8b:17:27:25:75:dd:98:30:e1:9a:86:42:35:81:17:74: 5a:16:77:ba:10:ee:ee:57:4b:f9:f7:4a:15:15:63:46:0e:f4: 2d:3d:94:a1:c6:e3:84:eb:4b:27:f4:48:36:78:9e:bf:af:5c: cf:60:8d:25:0c:19:76:f9:c2:da:39:c2:bf:10:1c:ad:0c:c5: 7d:f0:62:74:1b:b3:62:10:33:7a:84:1a:f4:a0:56:99:05:9b: e0:33:d9:33:96:b7:1a:1f:8e:85:1e:02:6b:b7:d9:69:7a:0f: 88:34:65:c7:0c:a1:91:64:1f:b8:4b:55:0b:48:52:9b:eb:60: 4b:16:80:52:f4:a1:89:b3:5e:f0:b9:9a:e2:f3:1f:cc:66:df: 56:18:8c:d3:35:ee:1c:31:33:80:b3:55:8b:98:d0:42:74:46: f0:6d:14:8f:79:50:1d:5c:ce:ae:61:08:cc:96:dc:39:56:0b: 64:a1:fc:26 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWES3+poRSpuQCNJQboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDEyOTIyMzcwMFoXDTI2MDUwMzIxMzcwMFowLzEtMCsGA1UEAxMk NzBiNDU0NTEtZWUzNy00OWE2LWFhMzEtZjk0YjZhMDE2ZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ATqzHVX4uiPwkG+1UAt3UPQ/bK4MqyYZxg wQ6xfelsMm0lJxRKu5Y+F59bTjJk4CswLudHsBw2EZp5YVB5X7rUPFk8mD2fpas9 SymbvyEP/PT/6sMvmkm+0AqpAMX908+BUExqUimFgKPvIZ7SbWS7AsY3vUhx/tx6 W7P2/Hm/9CrAZX3ajx1paXaSe+TbIlwqCoEUvFsk/RNCqHia9ClK44SjdL9Uv6O2 O16S7kr4PdO8d4AtSgvtVIR47X7Uv+QS1Bziubtr4DU/gGDDeGhiRMv4UavMO2Vu /4QjC5mYNhwkQdZqYd8GSHt79K4dyO0KN8vLNG4q2ugh7xt1bQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFHiJotqRfVgtq1LbcCPJA/OzN5alMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 MGI0NTQ1MS1lZTM3LTQ5YTYtYWEzMS1mOTRiNmEwMTZkYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzcwYjQ1NDUxLWVlMzctNDlhNi1h YTMxLWY5NGI2YTAxNmRiOC83MGI0NTQ1MS1lZTM3LTQ5YTYtYWEzMS1mOTRiNmEw MTZkYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPOfSAwDQQCAAIwBwMFACYHAMAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgExMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJHeTrLpRNALDEbcV8VkWsLCKgmj 7oI/QNJz7RHCnnTbzMvQi00DNUdL2QlNxl9MxvIAEp/FH6yM4FDcS6jkU9DS5qQU ohYCFFxqixcnJXXdmDDhmoZCNYEXdFoWd7oQ7u5XS/n3ShUVY0YO9C09lKHG44Tr Syf0SDZ4nr+vXM9gjSUMGXb5wto5wr8QHK0MxX3wYnQbs2IQM3qEGvSgVpkFm+Az 2TOWtxofjoUeAmu32Wl6D4g0ZccMoZFkH7hLVQtIUpvrYEsWgFL0oYmzXvC5muLz H8xm31YYjNM17hwxM4CzVYuY0EJ0RvBtFI95UB1czq5hCMyW3DlWC2Sh/CY= -----END CERTIFICATE-----Generated at Fri May 10 20:14:32 2024 by rpki-client on console-fra.rpki-client.org