$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer File: 8741ed4f-28ba-4cbf-a4a6-384057567d05.cer (raw, json) Hash identifier: c30z0OXLHThwLCqU8bDWssqKnaPGswIIsqBIJlXxIgc= Subject key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844F821EB857275791989A15200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Feb 2024 22:07:57 +0000 Certificate not after: Tue 26 May 2026 21:07:57 +0000 Subordinate resources: AS: 33264 AS: 33292 -- 33293 IP: 66.51.198.0 -- 66.51.207.255 IP: 66.245.240.0/20 IP: 192.81.116.0/22 IP: 206.15.129.0 -- 206.15.191.255 IP: 216.126.204.0/23 IP: 2001:19c8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f8:21:eb:85:72:75:79:19:89:a1:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 21 22:07:57 2024 GMT Not After : May 26 21:07:57 2026 GMT Subject: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:54:46:33:cb:da:38:a9:9b:b6:b4:20:bd: d0:1d:d6:be:94:ab:47:52:6b:b2:30:81:aa:ed:bf: cf:89:6a:cb:4b:b7:1a:0a:36:9c:bd:33:e5:ca:a1: 16:d1:4e:5b:05:f5:0f:9f:fb:25:5c:d0:3a:f3:12: e1:42:5d:56:18:9a:73:07:84:ec:e6:a7:7b:5d:60: 08:c1:41:34:49:5a:f4:dd:4d:54:d5:65:d6:8f:64: f9:d7:56:64:dc:78:60:6c:6c:78:7e:8a:21:80:7a: 7b:69:33:e6:a8:ca:db:17:90:bf:ec:09:b6:a5:b3: a8:d5:f3:85:89:86:f9:81:05:ad:eb:2d:d5:1a:bf: 15:45:7b:fc:9f:e9:98:af:66:dd:2f:ed:68:8c:e7: 55:ab:42:85:2c:28:1d:7a:7f:50:6b:88:8a:08:0e: 5e:7c:f6:e3:86:18:31:51:b8:f6:2b:9d:d1:2b:20: d0:21:ab:19:24:16:2a:aa:42:bb:90:b2:a0:0b:5b: a3:9c:b9:2e:11:e6:87:94:0b:c1:b9:32:70:6d:39: c9:18:92:2e:c4:c6:27:82:25:c2:b6:a3:8c:6e:2a: d3:06:ed:f6:83:9f:83:c7:b1:ac:61:5a:a4:e4:88: 30:d0:a2:86:94:d0:eb:5e:ea:c7:7e:bd:a9:21:a8: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.51.198.0-66.51.207.255 66.245.240.0/20 192.81.116.0/22 206.15.129.0-206.15.191.255 216.126.204.0/23 IPv6: 2001:19c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33264 33292-33293 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:cf:84:5a:3c:18:f5:d8:dd:f1:af:d8:ec:44:6e:5c:43:da: c2:74:af:98:77:39:e7:6e:62:4b:eb:66:f9:8f:31:71:dc:7d: 28:01:4a:4b:d2:91:d5:3a:57:cd:b5:69:62:f2:1f:b0:8c:22: ab:78:19:db:04:6b:32:0a:2f:68:f9:f1:c4:56:cb:0c:f9:7b: 30:1f:28:30:25:cb:a2:8e:b5:75:aa:e3:40:d8:3d:a5:0a:a4: ef:c6:e9:9a:a6:19:79:72:9f:52:e4:63:54:d4:06:2e:39:5a: 7e:10:48:5d:39:fc:ce:3e:45:21:6b:67:39:c0:f7:1b:7a:d7: b5:5b:98:51:35:e1:c0:51:ad:56:e7:ef:c8:d1:bb:c5:61:8a: 74:7e:a2:33:2a:88:6b:97:58:f2:f5:78:33:8e:33:62:5f:8c: 9f:fc:bb:ef:e9:90:a4:e2:41:81:d6:14:26:07:59:77:f3:97: 0e:b8:ac:90:c3:58:99:3f:60:da:7a:9f:bb:c3:88:4f:41:76: 43:a6:2a:62:5b:2b:53:ff:67:dd:46:dc:87:e7:ae:22:cd:f8: 6e:8f:b0:a8:6e:92:f9:23:a6:f8:f4:35:68:aa:78:b2:fd:05: 1a:ea:d8:98:4a:0c:a8:be:c8:1e:03:2d:24:95:4f:1a:7b:a4: 8b:b9:65:e3 -----BEGIN CERTIFICATE----- MIIHTDCCBjSgAwIBAgIUAQ0Mn0MoWET4IeuFcnV5GYmhUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIyMTIyMDc1N1oXDTI2MDUyNjIxMDc1N1owLzEtMCsGA1UEAxMk ODc0MWVkNGYtMjhiYS00Y2JmLWE0YTYtMzg0MDU3NTY3ZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraJURjPL2jipm7a0IL3QHda+lKtHUmuyMIGq 7b/PiWrLS7caCjacvTPlyqEW0U5bBfUPn/slXNA68xLhQl1WGJpzB4Ts5qd7XWAI wUE0SVr03U1U1WXWj2T511Zk3HhgbGx4foohgHp7aTPmqMrbF5C/7Am2pbOo1fOF iYb5gQWt6y3VGr8VRXv8n+mYr2bdL+1ojOdVq0KFLCgden9Qa4iKCA5efPbjhhgx Ubj2K53RKyDQIasZJBYqqkK7kLKgC1ujnLkuEeaHlAvBuTJwbTnJGJIuxMYngiXC tqOMbirTBu32g5+Dx7GsYVqk5Igw0KKGlNDrXurHfr2pIajDuQIDAQABo4IEXjCC BFowHQYDVR0OBBYEFLBP0hxDOAbQJ469mBP1Q8OzSIkgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84 NzQxZWQ0Zi0yOGJhLTRjYmYtYTRhNi0zODQwNTc1NjdkMDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzg3NDFlZDRmLTI4YmEtNGNiZi1h NGE2LTM4NDA1NzU2N2QwNS84NzQxZWQ0Zi0yOGJhLTRjYmYtYTRhNi0zODQwNTc1 NjdkMDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwVgYIKwYBBQUH AQcBAf8ERzBFMDQEAgABMC4wDAMEAUIzxgMEBEIzwAMEBEL18AMEAsBRdDAMAwQA zg+BAwQGzg+AAwQB2H7MMA0EAgACMAcDBQAgARnIMCYGCCsGAQUFBwEIAQH/BBcw FaATMBECAwCB8DAKAgMAggwCAwCCDTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFz4RaPBj12N3xr9jsRG5c Q9rCdK+YdznnbmJL62b5jzFx3H0oAUpL0pHVOlfNtWli8h+wjCKreBnbBGsyCi9o +fHEVssM+XswHygwJcuijrV1quNA2D2lCqTvxumaphl5cp9S5GNU1AYuOVp+EEhd OfzOPkUha2c5wPcbete1W5hRNeHAUa1W5+/I0bvFYYp0fqIzKohrl1jy9XgzjjNi X4yf/Lvv6ZCk4kGB1hQmB1l385cOuKyQw1iZP2Daep+7w4hPQXZDpipiWytT/2fd RtyH564izfhuj7CobpL5I6b49DVoqniy/QUa6tiYSgyovsgeAy0klU8ae6SLuWXj -----END CERTIFICATE-----Generated at Sat May 11 18:14:54 2024 by rpki-client on console-fra.rpki-client.org