$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer File: a92da870-be06-471e-89b6-f5063eb7350b.cer (raw, json) Hash identifier: 0Crv8q91fTTOUep/mmd34XYUTAPivYYUMz/3eX28ZFM= Subject key identifier: A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844C0379CEB4AFD7E64E6009000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Feb 2024 21:26:24 +0000 Certificate not after: Wed 06 May 2026 20:26:24 +0000 Subordinate resources: AS: 397050 IP: 168.149.192.0/19 IP: 199.45.168.0/21 IP: 204.144.152.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:c0:37:9c:eb:4a:fd:7e:64:e6:00:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 1 21:26:24 2024 GMT Not After : May 6 20:26:24 2026 GMT Subject: CN=a92da870-be06-471e-89b6-f5063eb7350b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:87:88:76:f9:1f:35:35:18:0a:a0:07:f9:08: ee:58:2b:e6:7c:b5:30:83:22:49:35:39:e5:d6:80: b0:01:be:98:c0:a8:31:9d:39:7d:34:62:2b:d1:8b: 61:12:93:df:77:67:eb:b6:4a:3f:44:e7:f3:8f:35: 82:09:af:f2:ff:89:93:e9:23:fd:28:a5:40:4e:80: fd:24:c3:44:84:8d:ea:d1:0f:dc:a3:48:41:19:8c: 2e:e5:40:02:31:03:cd:4b:d6:5c:7e:51:01:7a:48: b6:69:83:d0:cc:70:5c:e3:c9:ea:0b:fb:67:2d:50: 3f:80:a3:52:0f:48:23:8a:c6:62:4c:d8:a5:c0:30: 37:17:de:00:a1:6c:f0:c6:74:41:8c:f1:bb:75:32: bb:5f:20:6f:17:2e:07:57:8d:2c:94:65:57:d3:32: 12:d6:51:0b:e6:9c:d8:6b:95:53:43:5e:9e:11:39: f9:af:0e:e7:94:01:41:e9:dc:08:a4:24:10:8f:90: 91:1f:3e:34:62:73:6e:88:f4:45:16:bd:dc:78:f2: a2:8b:5f:bf:b7:ba:21:4b:0a:83:28:08:c6:23:ea: 44:5c:9e:06:c5:78:ca:d7:33:b4:49:38:c9:10:30: 80:3b:7d:9a:46:15:1c:6a:fb:b6:28:88:f1:ad:96: ae:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 168.149.192.0/19 199.45.168.0/21 204.144.152.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397050 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:35:b2:82:5a:50:0d:39:50:0b:a4:51:7f:5f:31:0e:10:82: 31:2e:e0:3b:09:83:ca:1d:71:ce:25:20:ae:de:01:23:59:27: 9c:56:37:f0:ed:d1:68:87:24:16:e9:f0:17:82:f9:95:e0:00: 7c:e8:cd:85:00:ba:93:fb:5a:32:ee:07:55:45:98:fd:6e:79: d7:ce:10:c9:54:ad:86:e9:34:c0:61:de:92:6d:9a:df:f5:fa: 46:1c:e4:7d:15:e0:29:57:4f:64:88:8a:a2:98:0c:cc:8b:6f: ad:ba:e8:86:85:5f:5f:1d:dc:d6:98:13:4b:8d:0d:8a:e4:c8: 1a:a1:96:0c:bd:0a:f8:65:36:d2:8a:f0:99:12:24:d2:ea:c1: cb:d0:20:65:83:c9:ee:d9:b9:6c:58:e9:e1:e0:91:f6:cf:be: 11:56:89:81:eb:4f:70:54:2f:9f:57:70:ec:4d:33:fc:98:72: fe:4a:c7:26:33:57:6b:bc:bf:5b:bc:e5:54:14:a0:d0:25:0e: b3:37:b2:1e:33:5a:bd:20:81:e9:1a:7a:48:47:43:28:55:1a: fc:c7:73:c2:48:23:82:b9:14:33:9c:c9:c6:63:f1:93:ca:30: 45:9a:ad:96:6b:b9:ce:14:bf:8d:2f:94:37:85:3a:7e:a6:a2: 3d:f7:b3:a9 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWETAN5zrSv1+ZOYAkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIwMTIxMjYyNFoXDTI2MDUwNjIwMjYyNFowLzEtMCsGA1UEAxMk YTkyZGE4NzAtYmUwNi00NzFlLTg5YjYtZjUwNjNlYjczNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoeIdvkfNTUYCqAH+QjuWCvmfLUwgyJJNTnl 1oCwAb6YwKgxnTl9NGIr0YthEpPfd2frtko/ROfzjzWCCa/y/4mT6SP9KKVAToD9 JMNEhI3q0Q/co0hBGYwu5UACMQPNS9ZcflEBeki2aYPQzHBc48nqC/tnLVA/gKNS D0gjisZiTNilwDA3F94AoWzwxnRBjPG7dTK7XyBvFy4HV40slGVX0zIS1lEL5pzY a5VTQ16eETn5rw7nlAFB6dwIpCQQj5CRHz40YnNuiPRFFr3cePKii1+/t7ohSwqD KAjGI+pEXJ4GxXjK1zO0STjJEDCAO32aRhUcavu2KIjxrZauDQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFKd0LkkVuXAv6LdgUO16pN0Uo3SmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9h OTJkYTg3MC1iZTA2LTQ3MWUtODliNi1mNTA2M2ViNzM1MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2E5MmRhODcwLWJlMDYtNDcxZS04 OWI2LWY1MDYzZWI3MzUwYi9hOTJkYTg3MC1iZTA2LTQ3MWUtODliNi1mNTA2M2Vi NzM1MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAWolcADBAPHLagDBAPMkJgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBg76MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEk1soJaUA05UAukUX9fMQ4QgjEu4DsJ g8odcc4lIK7eASNZJ5xWN/Dt0WiHJBbp8BeC+ZXgAHzozYUAupP7WjLuB1VFmP1u edfOEMlUrYbpNMBh3pJtmt/1+kYc5H0V4ClXT2SIiqKYDMyLb6266IaFX18d3NaY E0uNDYrkyBqhlgy9CvhlNtKK8JkSJNLqwcvQIGWDye7ZuWxY6eHgkfbPvhFWiYHr T3BUL59XcOxNM/yYcv5KxyYzV2u8v1u85VQUoNAlDrM3sh4zWr0ggekaekhHQyhV GvzHc8JII4K5FDOcycZj8ZPKMEWarZZruc4Uv40vlDeFOn6moj33s6k= -----END CERTIFICATE-----Generated at Sat May 11 18:14:56 2024 by rpki-client on console-fra.rpki-client.org