$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer File: b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer (raw, json) Hash identifier: yRBXI6KII5G+Hu3Gp7QOpiTxwBAa13q/jMBf4lZK6HI= Subject key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858458E8A9ED5036FD1241204BA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Apr 2024 19:10:10 +0000 Certificate not after: Sun 19 Jul 2026 19:10:10 +0000 Subordinate resources: AS: 400928 IP: 23.173.24.0/24 IP: 104.128.68.0/23 IP: 2602:f961::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:8e:8a:9e:d5:03:6f:d1:24:12:04:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 15 19:10:10 2024 GMT Not After : Jul 19 19:10:10 2026 GMT Subject: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:40:1c:70:48:51:18:36:d0:a2:81:f7:7c: 7c:74:22:63:62:19:a0:d4:a8:0c:3d:1f:a6:ae:2e: cc:3a:66:2d:bd:e5:1e:8b:f8:97:cf:be:ac:fc:47: 0b:82:a6:38:a5:45:da:49:ac:33:bb:a9:58:14:7c: 5e:5d:05:f4:b8:d1:a0:88:0a:16:01:c0:4e:c9:3d: 1d:9d:be:9a:02:e6:ed:ee:d7:cf:bf:cb:03:cb:61: f4:2d:73:3f:3b:25:dc:d6:2c:dc:28:d5:01:8a:23: 61:ed:04:bb:cb:47:71:ed:97:8f:f0:5e:36:16:fd: 6f:88:09:11:35:0e:bd:ee:d3:6d:a8:9e:23:a1:03: 2c:27:ae:e2:96:95:0e:c5:1f:31:c2:49:66:a4:f9: 6a:cc:3c:1a:83:dc:95:22:1d:26:aa:4b:89:33:61: 0b:13:dc:df:96:92:92:cb:6a:d3:56:4a:91:51:25: 76:7c:ec:5f:df:cf:ee:96:d7:8a:0b:57:73:79:b8: d6:af:29:39:d5:56:c1:d7:3d:3c:19:2e:5c:1e:75: 20:c2:fd:f4:6a:89:7d:41:f2:0a:41:88:a6:53:0a: 85:24:d3:48:3f:46:3d:23:cb:45:3f:2e:27:9a:d6: 57:fe:45:f8:11:28:1b:b7:44:c8:02:6c:4f:4f:eb: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.173.24.0/24 104.128.68.0/23 IPv6: 2602:f961::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400928 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:14:1d:ac:78:02:51:98:e8:62:6f:f9:e9:59:c3:68:63:5b: 9e:8d:f7:eb:9f:13:b9:1a:8b:cb:a0:57:fb:a9:cf:0f:61:bd: e6:8f:bb:38:83:4b:12:5f:60:1e:50:b4:9f:43:74:6e:aa:0b: fe:b9:57:d9:a9:82:43:b9:32:9a:65:d1:59:b8:4e:51:c8:cf: f4:5f:d9:75:1f:4e:bd:d8:95:c8:fb:13:f7:c5:4e:97:d8:7e: bd:a8:91:bf:4f:97:79:5c:3c:26:03:61:80:fa:4e:56:8a:75: c9:64:fd:8d:1b:46:c2:23:e7:ef:41:a6:e4:e6:fe:3e:c4:9f: 56:a9:59:1f:27:ec:8b:8c:c0:27:7d:3e:e7:0d:93:82:0f:8d: 9e:ce:b9:60:86:75:f9:07:b2:6b:45:b1:d8:57:a4:33:0e:52: aa:ff:71:39:fd:cb:31:9e:6b:08:f6:33:cc:95:f6:a0:99:90: 25:2a:5e:2f:a1:b7:ff:5b:4b:8d:39:8a:d4:99:f1:95:20:fa: aa:8c:5c:ce:8c:ab:b8:78:7b:54:5a:e0:3c:2d:e8:96:e3:f1: 5c:53:6d:84:ce:58:53:90:9a:35:4c:a1:e4:90:16:ee:c9:58: 0d:8d:19:17:f4:42:fb:7c:90:c5:11:4a:8a:fd:70:bf:22:d5: 2b:2a:68:0c -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEWOip7VA2/RJBIEugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQxNTE5MTAxMFoXDTI2MDcxOTE5MTAxMFowLzEtMCsGA1UEAxMk YjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNiZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIpAHHBIURg20KKB93x8dCJjYhmg1KgMPR+m ri7MOmYtveUei/iXz76s/EcLgqY4pUXaSawzu6lYFHxeXQX0uNGgiAoWAcBOyT0d nb6aAubt7tfPv8sDy2H0LXM/OyXc1izcKNUBiiNh7QS7y0dx7ZeP8F42Fv1viAkR NQ697tNtqJ4joQMsJ67ilpUOxR8xwklmpPlqzDwag9yVIh0mqkuJM2ELE9zflpKS y2rTVkqRUSV2fOxf38/ulteKC1dzebjWryk51VbB1z08GS5cHnUgwv30aol9QfIK QYimUwqFJNNIP0Y9I8tFPy4nmtZX/kX4ESgbt0TIAmxPT+tz7QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFJJ913AftPrufmZdZo8MCYuyk6RgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9i NWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2I1ZGI0NWRiLThjOTItNGI2MS1h M2Q1LWY1YmJiOTkzYmRjMy9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5 M2JkYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXrRgDBAFogEQwDgQCAAIwCAMGACYC+WEAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYeIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCLFB2seAJRmOhib/np WcNoY1uejffrnxO5GovLoFf7qc8PYb3mj7s4g0sSX2AeULSfQ3Ruqgv+uVfZqYJD uTKaZdFZuE5RyM/0X9l1H0692JXI+xP3xU6X2H69qJG/T5d5XDwmA2GA+k5WinXJ ZP2NG0bCI+fvQabk5v4+xJ9WqVkfJ+yLjMAnfT7nDZOCD42ezrlghnX5B7JrRbHY V6QzDlKq/3E5/csxnmsI9jPMlfagmZAlKl4vobf/W0uNOYrUmfGVIPqqjFzOjKu4 eHtUWuA8LeiW4/FcU22EzlhTkJo1TKHkkBbuyVgNjRkX9EL7fJDFEUqK/XC/ItUr KmgM -----END CERTIFICATE-----Generated at Sat May 11 17:57:34 2024 by rpki-client on console-ams.rpki-client.org