$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer File: d2e35455-e012-4897-80f6-c6386a9f779c.cer (raw, json) Hash identifier: woa/tXvgoi/9HVoFRAWyNgA55Eh3/BmKttt7J5LgHWk= Subject key identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844D6ABEC11D9449976BB828AA4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Feb 2024 22:28:32 +0000 Certificate not after: Thu 14 May 2026 21:28:32 +0000 Subordinate resources: AS: 26520 IP: 23.171.88.0/24 IP: 2602:f987::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d6:ab:ec:11:d9:44:99:76:bb:82:8a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 9 22:28:32 2024 GMT Not After : May 14 21:28:32 2026 GMT Subject: CN=d2e35455-e012-4897-80f6-c6386a9f779c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:4a:83:70:39:d7:7d:1f:46:b8:3c:b8:8d: 32:dd:49:24:90:68:04:05:7a:fd:7f:00:70:e8:4f: 45:8d:7d:ca:43:a9:ff:39:b4:21:fd:20:48:ff:cf: 9e:7b:82:ad:08:3c:45:17:0f:11:79:99:0b:ad:d3: ed:aa:b2:30:a1:03:f1:02:87:08:01:be:0e:96:b3: b2:f1:e3:2f:c0:35:b4:8d:da:99:af:df:2d:73:dc: 70:31:a7:8e:85:0a:d7:2a:b1:10:f3:fb:98:99:91: a4:2c:9e:ca:0c:dd:6b:c0:ef:c4:90:38:86:35:3f: 5d:fb:42:c8:22:7d:08:5f:20:9a:23:ee:71:f4:b9: 06:1e:1e:df:8a:b8:07:80:48:2a:88:44:2e:c8:97: 3e:87:e8:d1:48:43:99:f1:a2:cd:b0:2a:f3:2e:3e: d7:1c:ae:1f:2e:6e:0f:8a:a7:bf:8b:bb:4f:17:6a: 53:e6:3b:40:2d:37:ac:b1:63:88:d8:28:97:78:cc: 6a:45:7c:b5:64:90:a3:34:86:b4:68:b6:d7:1a:70: c8:58:62:e6:f4:29:5f:82:86:77:60:1b:d7:f6:1c: 57:ee:2b:52:f7:41:86:6c:0e:88:31:59:07:e5:5b: ea:13:12:0e:b3:61:dd:b2:1b:78:be:c5:67:fb:47: c8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.171.88.0/24 IPv6: 2602:f987::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26520 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:38:c7:39:e1:10:e1:f2:1c:30:85:b8:1d:74:55:72:0c:49: ca:16:71:33:72:bf:30:e3:e0:57:79:a5:f1:8f:7e:e1:3f:1d: f2:5a:ed:a8:d8:17:83:47:45:3e:a7:5b:1e:3d:c7:49:b5:43: e1:4a:19:0d:45:7e:03:bb:9a:ef:20:20:4e:47:fb:41:66:56: c0:e1:05:2f:c7:af:a6:5b:1e:12:6f:cd:99:ac:1f:72:c7:6d: ea:00:82:a3:6f:18:fa:6e:4c:98:25:43:5b:b2:ee:3e:d1:33: e8:70:c2:b9:6e:cf:47:3b:92:39:52:89:e2:34:3a:09:c4:3e: e3:a2:8d:d2:f9:26:0b:69:d1:61:c2:ab:ab:64:4f:09:58:57: 1d:57:02:54:a7:b3:4a:55:34:dc:a3:3d:99:c7:09:d6:02:58: 71:a5:07:9e:04:3b:11:aa:21:de:92:4e:cb:35:9a:40:2d:82: d7:8e:85:15:6e:d1:74:e1:cd:96:82:e7:8d:a3:b4:ab:ea:90: ab:35:ef:1b:b7:8c:2d:d4:45:e6:2a:d6:f3:c4:5e:15:3c:75: b2:bc:34:fc:04:d7:ce:60:4e:fd:2b:47:08:44:8f:0a:17:87: 2c:25:d3:4a:4a:bd:1e:e5:c0:b9:23:86:97:57:c5:02:ff:ed: 9e:33:8c:2e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWETWq+wR2USZdruCiqQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIwOTIyMjgzMloXDTI2MDUxNDIxMjgzMlowLzEtMCsGA1UEAxMk ZDJlMzU0NTUtZTAxMi00ODk3LTgwZjYtYzYzODZhOWY3NzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApANKg3A5130fRrg8uI0y3UkkkGgEBXr9fwBw 6E9FjX3KQ6n/ObQh/SBI/8+ee4KtCDxFFw8ReZkLrdPtqrIwoQPxAocIAb4OlrOy 8eMvwDW0jdqZr98tc9xwMaeOhQrXKrEQ8/uYmZGkLJ7KDN1rwO/EkDiGNT9d+0LI In0IXyCaI+5x9LkGHh7firgHgEgqiEQuyJc+h+jRSEOZ8aLNsCrzLj7XHK4fLm4P iqe/i7tPF2pT5jtALTessWOI2CiXeMxqRXy1ZJCjNIa0aLbXGnDIWGLm9ClfgoZ3 YBvX9hxX7itS90GGbA6IMVkH5VvqExIOs2Hdsht4vsVn+0fI9wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLxFhMNomNTNm+Z2g1wzU8NjqBd7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9k MmUzNTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4NmE5Zjc3OWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2QyZTM1NDU1LWUwMTItNDg5Ny04 MGY2LWM2Mzg2YTlmNzc5Yy9kMmUzNTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4NmE5 Zjc3OWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXq1gwDgQCAAIwCAMGBCYC+YcAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmeYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIM4xznhEOHyHDCFuB10VXIMScoW cTNyvzDj4Fd5pfGPfuE/HfJa7ajYF4NHRT6nWx49x0m1Q+FKGQ1FfgO7mu8gIE5H +0FmVsDhBS/Hr6ZbHhJvzZmsH3LHbeoAgqNvGPpuTJglQ1uy7j7RM+hwwrluz0c7 kjlSieI0OgnEPuOijdL5Jgtp0WHCq6tkTwlYVx1XAlSns0pVNNyjPZnHCdYCWHGl B54EOxGqId6STss1mkAtgteOhRVu0XThzZaC542jtKvqkKs17xu3jC3UReYq1vPE XhU8dbK8NPwE185gTv0rRwhEjwoXhywl00pKvR7lwLkjhpdXxQL/7Z4zjC4= -----END CERTIFICATE-----Generated at Fri May 10 20:55:24 2024 by rpki-client on console-ams.rpki-client.org