$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553.cer File: ceabafc1-2de6-4194-a43b-862ad745c553.cer (raw, json) Hash identifier: eKbbKhXPl7ksO0h/Xb+M86gIandcP9YW6JbRfMYh9Yo= Subject key identifier: F8:33:24:2F:9F:2F:81:01:B2:59:60:AC:16:B7:CF:BC:B4:BB:52:8C Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844AF5D4AD25214FEA1C4CD8CE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jan 2024 20:33:34 +0000 Certificate not after: Thu 30 Apr 2026 19:33:34 +0000 Subordinate resources: AS: 53740 IP: 23.159.32.0/23 IP: 98.142.180.0/24 IP: 2602:fe26::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:af:5d:4a:d2:52:14:fe:a1:c4:cd:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Jan 26 20:33:34 2024 GMT Not After : Apr 30 19:33:34 2026 GMT Subject: CN=ceabafc1-2de6-4194-a43b-862ad745c553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:b4:3f:49:db:7f:2e:e0:32:a9:cf:79:9a: 85:9d:80:4b:5b:0f:a4:e5:eb:02:ab:41:17:24:dd: ce:6c:b0:72:12:5d:2e:48:c8:04:ef:17:b3:e5:0d: b7:51:03:17:e1:f0:ab:2d:94:31:7f:67:45:f9:f6: 08:26:a0:4c:c7:68:21:0e:8f:46:3d:f1:fb:f8:69: 2d:9d:71:0f:4a:6e:6f:6c:30:ab:87:f9:64:bc:7d: ce:22:39:ac:39:35:18:62:c7:61:fd:76:cd:67:03: 97:09:3f:9e:1b:75:e9:67:5c:9c:a8:56:49:39:83: e9:ca:ab:73:ce:15:7e:85:d2:7a:8d:33:b9:ba:33: e2:5e:9f:6d:c7:f6:b3:8a:a2:2d:68:96:1c:7c:25: 48:6a:fa:52:6a:a7:39:89:0b:ea:55:d4:e7:b0:18: 8f:99:94:a1:36:9d:1a:a2:78:f4:43:c7:9b:f9:df: a3:38:ab:9a:59:8a:77:37:4a:5d:84:5d:c2:2e:f1: 29:02:3e:e1:9f:66:15:fd:52:d5:4a:1b:3a:79:81: dc:2a:89:2c:79:41:13:8e:17:50:96:8f:a8:e8:a7: 00:5f:44:4f:81:49:68:57:07:e3:92:66:e9:27:7c: fc:b6:b9:0e:31:cb:cf:c9:00:02:4b:2f:79:a8:ff: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:33:24:2F:9F:2F:81:01:B2:59:60:AC:16:B7:CF:BC:B4:BB:52:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.159.32.0/23 98.142.180.0/24 IPv6: 2602:fe26::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53740 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:58:02:ee:d0:64:7e:d0:1c:9c:28:60:74:cd:e5:51:23:c1: cf:e1:61:40:f5:d1:4b:67:f1:6d:d7:4d:35:a7:73:8c:23:22: e6:73:dc:ca:f5:0d:12:23:84:66:ec:9b:74:dc:ed:9f:64:c9: 3f:21:91:c6:ca:bb:50:74:d2:5f:68:92:ee:07:27:5c:7a:69: f4:90:21:67:d2:61:48:de:1f:1a:97:38:e9:a2:4a:84:dc:b0: 21:a1:0a:64:17:75:f0:5b:8a:6b:5a:4c:62:7c:97:72:75:e7: b1:63:eb:b3:f5:5d:31:9f:83:d4:47:ab:75:8f:3c:28:79:1d: c5:87:d5:af:83:a8:7c:3b:a5:2d:db:d0:90:5e:f3:38:a5:a5: 81:38:9a:f2:4a:9f:c9:4e:b1:3d:14:e3:a9:5a:5c:a4:65:35: 27:9a:53:d2:8b:94:2f:a6:4e:d5:d8:f2:98:dc:b3:63:64:d5: e4:5c:35:ba:bc:ca:df:46:9a:8c:6d:53:ac:4a:79:6f:2a:20: bf:25:12:4b:34:a1:51:19:25:ab:aa:28:90:b6:6c:43:8a:e9: 21:84:fc:5e:dd:b1:b9:9c:58:5b:31:26:6a:d9:99:fc:f5:fe: 80:26:9f:18:a6:9d:7d:ba:bf:5c:86:8f:5c:53:e4:4b:81:13: c3:fd:29:05 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWESvXUrSUhT+ocTNjOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDEyNjIwMzMzNFoXDTI2MDQzMDE5MzMzNFowLzEtMCsGA1UEAxMk Y2VhYmFmYzEtMmRlNi00MTk0LWE0M2ItODYyYWQ3NDVjNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAore0P0nbfy7gMqnPeZqFnYBLWw+k5esCq0EX JN3ObLByEl0uSMgE7xez5Q23UQMX4fCrLZQxf2dF+fYIJqBMx2ghDo9GPfH7+Gkt nXEPSm5vbDCrh/lkvH3OIjmsOTUYYsdh/XbNZwOXCT+eG3XpZ1ycqFZJOYPpyqtz zhV+hdJ6jTO5ujPiXp9tx/aziqItaJYcfCVIavpSaqc5iQvqVdTnsBiPmZShNp0a onj0Q8eb+d+jOKuaWYp3N0pdhF3CLvEpAj7hn2YV/VLVShs6eYHcKokseUETjhdQ lo+o6KcAX0RPgUloVwfjkmbpJ3z8trkOMcvPyQACSy95qP8G/wIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFPgzJC+fL4EBsllgrBa3z7y0u1KMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j ZWFiYWZjMS0yZGU2LTQxOTQtYTQzYi04NjJhZDc0NWM1NTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2NlYWJhZmMxLTJkZTYtNDE5NC1h NDNiLTg2MmFkNzQ1YzU1My9jZWFiYWZjMS0yZGU2LTQxOTQtYTQzYi04NjJhZDc0 NWM1NTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXnyADBABijrQwDgQCAAIwCAMGBCYC/iYAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDR7DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwWALu0GR+0BycKGB0 zeVRI8HP4WFA9dFLZ/Ft1001p3OMIyLmc9zK9Q0SI4Rm7Jt03O2fZMk/IZHGyrtQ dNJfaJLuBydcemn0kCFn0mFI3h8alzjpokqE3LAhoQpkF3XwW4prWkxifJdydeex Y+uz9V0xn4PUR6t1jzwoeR3Fh9Wvg6h8O6Ut29CQXvM4paWBOJrySp/JTrE9FOOp WlykZTUnmlPSi5Qvpk7V2PKY3LNjZNXkXDW6vMrfRpqMbVOsSnlvKiC/JRJLNKFR GSWrqiiQtmxDiukhhPxe3bG5nFhbMSZq2Zn89f6AJp8Ypp19ur9cho9cU+RLgRPD /SkF -----END CERTIFICATE-----Generated at Sat May 11 17:57:35 2024 by rpki-client on console-ams.rpki-client.org