$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer File: 7c13aa5c-d4a3-425b-b898-1c456c6426d7.cer (raw, json) Hash identifier: tM41/fx9B5KWuqz0+qwaR14OMimwo0KkqFlBptoIwN8= Subject key identifier: AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858456A6D86AD6547661E0584EA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Apr 2024 20:42:26 +0000 Certificate not after: Mon 06 Jul 2026 20:42:26 +0000 Subordinate resources: AS: 46886 IP: 104.36.252.0/22 IP: 104.193.128.0/22 IP: 158.51.192.0/22 IP: 165.140.16.0/22 IP: 170.178.140.0/22 IP: 2602:ffa4::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6a:6d:86:ad:65:47:66:1e:05:84:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 2 20:42:26 2024 GMT Not After : Jul 6 20:42:26 2026 GMT Subject: CN=7c13aa5c-d4a3-425b-b898-1c456c6426d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:86:d7:16:09:b6:9c:19:a2:ee:47:da:24: 0b:a8:f5:92:18:b9:28:6d:74:4d:1c:ad:93:30:1f: 0f:4f:b6:b0:70:c0:64:4e:fd:b3:4a:b6:fb:a8:a4: 13:d3:98:c3:c8:7d:67:e2:db:08:e7:7d:52:fe:93: 84:e4:55:b0:b3:3d:0c:6b:d8:4a:c7:9f:ff:34:df: 6f:50:e0:ec:60:95:e8:96:91:dd:8a:17:f2:87:0f: f7:e2:68:ac:ca:3e:3f:fa:81:12:c0:4d:f5:41:f7: 3e:94:89:51:c4:f6:bf:6e:82:b9:c4:a5:da:fd:87: 31:41:71:d0:d2:be:ff:5e:08:59:bf:43:3d:e6:2e: 5e:d8:de:42:2c:49:3a:09:3b:34:08:4c:d9:87:cf: 46:3a:35:94:2a:97:88:9a:0b:26:c2:99:33:df:29: 64:47:1a:33:47:56:88:73:11:b1:c4:fe:e0:be:48: c5:73:91:ef:e9:7b:e7:48:71:b3:e6:92:b1:7b:99: 21:54:fc:34:72:81:91:b7:e5:47:f0:58:b2:2a:8f: 7f:a4:13:b8:d1:d2:3f:ac:57:4d:02:3c:8d:bf:d2: 72:63:00:da:b5:c6:7f:11:dc:6d:be:37:27:33:de: b4:3a:3e:06:b1:f7:ca:b1:f8:b2:ef:7a:10:d4:2f: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:03:E7:2E:3F:2F:B8:43:7A:DC:13:B1:DC:AA:B4:64:45:46:FF:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7c13aa5c-d4a3-425b-b898-1c456c6426d7/7c13aa5c-d4a3-425b-b898-1c456c6426d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 104.36.252.0/22 104.193.128.0/22 158.51.192.0/22 165.140.16.0/22 170.178.140.0/22 IPv6: 2602:ffa4::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46886 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:2e:7e:31:9d:4c:e2:3a:7f:29:5d:33:29:85:60:93:45:57: 2d:14:d6:ff:5c:90:42:57:b6:52:8a:f5:98:f2:91:d9:fb:ed: c7:2a:74:ad:f3:6f:31:f8:8a:a2:03:fc:1a:b6:84:d4:84:11: b2:9d:45:23:bc:ea:8d:0f:7f:f4:0c:71:15:27:c0:64:1d:6c: c5:8c:88:e4:bf:3a:e3:a5:2b:b1:ab:1d:3b:ae:09:d7:34:e5: cc:ea:fa:ee:93:a6:19:0b:f9:c8:21:29:33:86:02:29:65:76: b9:d2:9d:81:1a:76:a5:51:51:0c:12:94:48:bc:8a:70:18:f6: 08:ed:0f:21:fe:9a:d7:a1:4f:d9:c2:cd:dd:86:45:06:90:9d: 1c:f1:db:03:56:5a:bd:92:8a:53:17:60:38:9c:4d:69:9b:10: 19:9a:3c:71:1f:87:ed:cf:66:7f:6e:e4:0f:7f:d9:67:e0:a6: f2:7c:06:8c:14:23:d3:11:10:31:ae:c2:f4:95:fc:e0:a4:d5: cb:63:b2:59:99:d7:4e:98:0a:4c:52:30:12:c6:0f:13:7c:d6: 02:8e:80:b4:69:64:0c:f9:d8:95:35:af:93:53:ed:fe:38:b8: 29:ff:79:d7:2d:67:3f:39:43:1f:dd:34:92:8c:e9:6e:9d:78: b0:59:bb:30 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEVqbYatZUdmHgWE6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQwMjIwNDIyNloXDTI2MDcwNjIwNDIyNlowLzEtMCsGA1UEAxMk N2MxM2FhNWMtZDRhMy00MjViLWI4OTgtMWM0NTZjNjQyNmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMuG1xYJtpwZou5H2iQLqPWSGLkobXRNHK2T MB8PT7awcMBkTv2zSrb7qKQT05jDyH1n4tsI531S/pOE5FWwsz0Ma9hKx5//NN9v UODsYJXolpHdihfyhw/34misyj4/+oESwE31Qfc+lIlRxPa/boK5xKXa/YcxQXHQ 0r7/XghZv0M95i5e2N5CLEk6CTs0CEzZh89GOjWUKpeImgsmwpkz3ylkRxozR1aI cxGxxP7gvkjFc5Hv6XvnSHGz5pKxe5khVPw0coGRt+VH8FiyKo9/pBO40dI/rFdN AjyNv9JyYwDatcZ/EdxtvjcnM960Oj4GsffKsfiy73oQ1C+GYwIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFKsD5y4/L7hDetwTsdyqtGRFRv++MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83 YzEzYWE1Yy1kNGEzLTQyNWItYjg5OC0xYzQ1NmM2NDI2ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzdjMTNhYTVjLWQ0YTMtNDI1Yi1i ODk4LTFjNDU2YzY0MjZkNy83YzEzYWE1Yy1kNGEzLTQyNWItYjg5OC0xYzQ1NmM2 NDI2ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBAJoJPwDBAJowYADBAKeM8ADBAKljBADBAKqsoww DgQCAAIwCAMGBCYC/6QAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC3JjBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCOLn4xnUziOn8pXTMphWCTRVctFNb/XJBCV7ZSivWY8pHZ++3HKnSt828x +IqiA/watoTUhBGynUUjvOqND3/0DHEVJ8BkHWzFjIjkvzrjpSuxqx07rgnXNOXM 6vruk6YZC/nIISkzhgIpZXa50p2BGnalUVEMEpRIvIpwGPYI7Q8h/prXoU/Zws3d hkUGkJ0c8dsDVlq9kopTF2A4nE1pmxAZmjxxH4ftz2Z/buQPf9ln4KbyfAaMFCPT ERAxrsL0lfzgpNXLY7JZmddOmApMUjASxg8TfNYCjoC0aWQM+diVNa+TU+3+OLgp /3nXLWc/OUMf3TSSjOlunXiwWbsw -----END CERTIFICATE-----Generated at Fri May 10 20:55:20 2024 by rpki-client on console-ams.rpki-client.org