$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer File: b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer (raw, json) Hash identifier: F6ONHzK9u8oeQsMsMh6OeDtMBAnc318uwnUmRgSl140= Subject key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844D5DB3ED49E2BEF45349F0900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Feb 2024 15:28:04 +0000 Certificate not after: Thu 14 May 2026 14:28:04 +0000 Subordinate resources: AS: 13743 AS: 21521 AS: 25813 AS: 36277 IP: 192.252.0.0/21 IP: 207.231.176.0/20 IP: 208.65.4.0/22 IP: 216.9.112.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d5:db:3e:d4:9e:2b:ef:45:34:9f:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 9 15:28:04 2024 GMT Not After : May 14 14:28:04 2026 GMT Subject: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:8d:23:1c:45:8c:b3:39:44:1c:29:a8:ed: 55:8b:f3:8f:6b:d4:08:67:c0:84:7d:60:35:3d:16: 64:aa:1b:a7:01:70:b1:20:e8:e5:ae:4c:bd:51:fe: 14:b7:03:bc:f9:cd:97:01:c9:7c:39:1c:4f:47:ae: 27:d2:84:05:f7:5d:7f:88:2d:19:8e:94:ea:5d:96: 74:4b:0f:60:84:7a:73:59:d5:84:1f:c8:b7:f2:48: 41:b5:2b:29:4c:fa:1f:b8:4b:ea:de:c4:83:46:85: 13:31:67:db:2b:32:27:5a:98:b0:9d:80:ce:fb:4c: 33:74:07:9a:e7:be:08:0c:29:ab:02:e4:d7:54:81: 44:6f:77:63:72:2c:e9:e2:8e:e5:a3:9f:6e:f7:45: 32:92:44:9a:9c:0d:61:8a:9e:15:bb:b0:33:0e:a0: f2:ed:3e:e6:1f:df:b4:3a:86:9f:8a:78:2d:47:6e: a1:52:6a:45:8b:53:75:6f:6a:13:29:ba:d0:bc:4b: fc:13:70:c9:4e:c1:26:8c:03:73:62:54:47:70:d4: bf:d6:b0:70:1f:bf:4c:3a:ab:4d:80:87:85:05:cf: af:ce:3a:72:c4:10:8f:bc:59:c5:e6:e6:12:a0:96: 09:8b:c5:83:39:89:ee:97:35:0f:66:44:4b:97:78: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 192.252.0.0/21 207.231.176.0/20 208.65.4.0/22 216.9.112.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13743 21521 25813 36277 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:dd:ad:25:97:68:3d:df:12:c9:76:ef:9a:58:f0:28:d0:92: 63:b7:98:f0:e6:52:f3:18:05:82:d9:f8:a6:ca:bb:cd:24:6d: 86:46:cc:21:4f:26:91:7e:76:b4:d0:c2:75:fa:45:1c:31:33: 31:cc:d4:53:b3:68:8a:a6:15:59:2e:e0:b4:eb:ac:06:87:34: a3:d1:b4:7f:0e:70:31:7b:3d:51:ad:c5:2e:58:b5:b8:9e:a0: c6:3f:89:4d:7a:fb:26:5e:b1:c1:0f:b5:9a:46:5e:d6:d1:f1: 68:c2:a9:1b:f4:3e:8b:8a:83:5c:ef:47:70:0e:f5:3a:cd:d4: 77:c9:1a:3c:6e:7a:d3:3f:bc:9f:c3:6a:e7:3b:2b:7e:17:84: d3:28:4a:f4:ab:d0:b6:09:a2:d3:10:db:94:0d:bc:a8:b5:b8: 2d:3e:ab:49:2b:32:b8:cc:4f:ea:00:c0:b8:cd:9b:24:61:f0: b5:f7:66:f1:86:c7:52:a6:6e:07:98:13:05:ce:3b:bf:c2:91: 87:56:02:5e:fe:c6:e2:9d:18:bb:33:4b:a4:c4:5c:8f:47:a4: 8f:fb:0b:59:dd:4b:ab:d5:ec:9d:66:ca:ba:ae:29:0a:3f:ab: d6:73:1e:bc:27:2f:0f:de:73:83:ea:a1:a7:2f:c3:15:cd:2a: cc:08:a4:a1 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWETV2z7UnivvRTSfCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIwOTE1MjgwNFoXDTI2MDUxNDE0MjgwNFowLzEtMCsGA1UEAxMk YjJjOTQ1OTItNzNlOS00NTJlLWFkODgtYWFmYzhlM2VlN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiCNIxxFjLM5RBwpqO1Vi/OPa9QIZ8CEfWA1 PRZkqhunAXCxIOjlrky9Uf4UtwO8+c2XAcl8ORxPR64n0oQF911/iC0ZjpTqXZZ0 Sw9ghHpzWdWEH8i38khBtSspTPofuEvq3sSDRoUTMWfbKzInWpiwnYDO+0wzdAea 574IDCmrAuTXVIFEb3djcizp4o7lo59u90UykkSanA1hip4Vu7AzDqDy7T7mH9+0 OoafingtR26hUmpFi1N1b2oTKbrQvEv8E3DJTsEmjANzYlRHcNS/1rBwH79MOqtN gIeFBc+vzjpyxBCPvFnF5uYSoJYJi8WDOYnulzUPZkRLl3g3wQIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFItYs5uEJvB17DmLwPE9QB79d08ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i MmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUzZWU3YTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2IyYzk0NTkyLTczZTktNDUyZS1h ZDg4LWFhZmM4ZTNlZTdhNS9iMmM5NDU5Mi03M2U5LTQ1MmUtYWQ4OC1hYWZjOGUz ZWU3YTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAPA/AADBATP57ADBALQQQQDBATYCXAwJgYIKwYB BQUHAQgBAf8EFzAVoBMwEQICNa8CAlQRAgJk1QIDAI21MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABzdrSWX aD3fEsl275pY8CjQkmO3mPDmUvMYBYLZ+KbKu80kbYZGzCFPJpF+drTQwnX6RRwx MzHM1FOzaIqmFVku4LTrrAaHNKPRtH8OcDF7PVGtxS5YtbieoMY/iU16+yZescEP tZpGXtbR8WjCqRv0PouKg1zvR3AO9TrN1HfJGjxuetM/vJ/Dauc7K34XhNMoSvSr 0LYJotMQ25QNvKi1uC0+q0krMrjMT+oAwLjNmyRh8LX3ZvGGx1KmbgeYEwXOO7/C kYdWAl7+xuKdGLszS6TEXI9HpI/7C1ndS6vV7J1myrquKQo/q9ZzHrwnLw/ec4Pq oacvwxXNKswIpKE= -----END CERTIFICATE-----Generated at Fri May 10 20:14:46 2024 by rpki-client on console-fra.rpki-client.org