$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer File: 8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer (raw, json) Hash identifier: eFSa4ny30W7NL2/wt7yYrvUbEjWd8hgsRUzb6TUBqYs= Subject key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844877A5AB0881A7F341A744400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 12 Jan 2024 13:39:48 +0000 Certificate not after: Thu 16 Apr 2026 12:39:48 +0000 Subordinate resources: AS: 33410 AS: 54125 IP: 198.200.141.0/24 IP: 205.233.0.0/24 IP: 216.71.112.0/22 IP: 2602:807:f000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:87:7a:5a:b0:88:1a:7f:34:1a:74:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jan 12 13:39:48 2024 GMT Not After : Apr 16 12:39:48 2026 GMT Subject: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:79:8f:ba:ff:39:e5:3b:bd:32:89:2c:13:d5: eb:38:c4:a5:71:25:15:f0:cb:62:f6:56:c1:e5:86: 60:4d:37:66:ed:d5:21:1f:69:fe:f2:a9:9e:3d:2e: 58:98:cd:bd:16:70:3d:94:bf:d8:35:fa:50:62:4c: 98:cc:64:88:73:39:28:a2:9a:a8:ee:e4:dc:32:be: 47:7a:0a:05:c3:92:88:c5:59:42:5e:98:c9:21:a5: 37:78:3a:34:6b:cb:f7:94:d6:19:2a:35:8e:41:45: 99:f1:dc:96:77:7e:d2:69:b0:7e:26:8a:98:f2:ee: bd:f9:7b:fc:b4:58:8e:9c:70:74:a3:1d:30:5f:9a: 03:02:18:6b:dd:37:7f:82:98:e2:36:40:7f:e8:6d: 41:93:d8:55:38:47:1a:75:03:e1:2f:b9:03:e0:e4: f3:dc:d7:09:b2:49:c1:20:b6:7a:0f:3d:f0:35:a9: 60:e6:d1:97:be:c3:fc:ba:ba:73:59:1a:22:ec:a8: 06:b9:98:64:3b:66:7d:ac:62:dd:c9:40:d6:4c:80: eb:66:77:5e:65:0c:8d:3a:c2:58:a8:3b:be:8d:e7: 69:57:48:bf:7c:e4:8e:02:85:98:dd:d0:96:6a:ff: 1b:8b:0a:c6:5b:7e:36:3f:8c:76:95:20:e5:86:20: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 198.200.141.0/24 205.233.0.0/24 216.71.112.0/22 IPv6: 2602:807:f000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33410 54125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:67:9c:51:0a:0c:fb:17:42:6b:d0:ac:22:77:5f:2f:a3:aa: 39:ec:9d:9c:2d:59:4a:8c:e5:3d:d8:01:9e:13:80:93:0a:5d: 7f:35:c3:cd:e3:37:17:5f:02:7f:55:8c:42:a0:e2:aa:7f:2b: 94:8f:97:42:e4:b6:02:08:a2:54:c7:35:ac:2c:d9:52:34:00: a9:3d:83:f7:6b:ae:ed:b1:9b:93:c5:1b:bf:4e:bc:87:27:cc: ac:94:42:69:10:5e:d0:e5:ab:63:20:2e:69:7a:bc:a5:bc:bd: 8a:9b:99:be:1b:13:e1:1a:85:a9:86:1b:72:d3:d1:ed:7f:76: 05:26:59:82:ff:e9:4c:05:d0:e5:1b:c2:2e:1f:25:8d:96:8a: d6:08:40:0b:6a:0d:f3:1b:63:e1:5d:e5:3c:3d:90:28:b7:9b: 75:01:06:26:20:ac:38:0d:18:56:76:fe:40:06:ea:7a:22:c1: 37:75:2a:a6:c9:d5:93:c6:7e:ce:17:a2:3c:c8:bd:f3:83:60: 8f:70:3e:35:13:38:96:ce:45:dd:e7:7c:6b:19:d2:5c:32:1c: 51:d1:8f:6b:17:17:89:ad:84:f6:77:ae:72:a4:1e:d5:bc:2d: 0e:bb:d0:18:90:c6:c3:1c:88:52:40:b1:e2:04:a8:09:36:75: 06:80:41:2d -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWESHelqwiBp/NBp0RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDExMjEzMzk0OFoXDTI2MDQxNjEyMzk0OFowLzEtMCsGA1UEAxMk OGIzNTVhYTMtY2YyOC00YTUzLTk2YzUtZGRmM2JiODAwNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nmPuv855Tu9MoksE9XrOMSlcSUV8Mti9lbB 5YZgTTdm7dUhH2n+8qmePS5YmM29FnA9lL/YNfpQYkyYzGSIczkoopqo7uTcMr5H egoFw5KIxVlCXpjJIaU3eDo0a8v3lNYZKjWOQUWZ8dyWd37SabB+JoqY8u69+Xv8 tFiOnHB0ox0wX5oDAhhr3Td/gpjiNkB/6G1Bk9hVOEcadQPhL7kD4OTz3NcJsknB ILZ6Dz3wNalg5tGXvsP8urpzWRoi7KgGuZhkO2Z9rGLdyUDWTIDrZndeZQyNOsJY qDu+jedpV0i/fOSOAoWY3dCWav8biwrGW342P4x2lSDlhiBzUQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFMtSqJHMdI+OMqVz7Q8ag89B9SR4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84 YjM1NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYzYmI4MDA0MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzhiMzU1YWEzLWNmMjgtNGE1My05 NmM1LWRkZjNiYjgwMDQxOC84YjM1NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYzYmI4 MDA0MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBADGyI0DBADN6QADBALYR3AwDgQCAAIwCAMGACYC CAfwMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCCggIDANNtMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADRn nFEKDPsXQmvQrCJ3Xy+jqjnsnZwtWUqM5T3YAZ4TgJMKXX81w83jNxdfAn9VjEKg 4qp/K5SPl0LktgIIolTHNaws2VI0AKk9g/drru2xm5PFG79OvIcnzKyUQmkQXtDl q2MgLml6vKW8vYqbmb4bE+EahamGG3LT0e1/dgUmWYL/6UwF0OUbwi4fJY2WitYI QAtqDfMbY+Fd5Tw9kCi3m3UBBiYgrDgNGFZ2/kAG6noiwTd1KqbJ1ZPGfs4XojzI vfODYI9wPjUTOJbORd3nfGsZ0lwyHFHRj2sXF4mthPZ3rnKkHtW8LQ670BiQxsMc iFJAseIEqAk2dQaAQS0= -----END CERTIFICATE-----Generated at Fri May 10 20:55:20 2024 by rpki-client on console-ams.rpki-client.org