$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a.cer File: e45201d6-ab25-40c8-a762-17e529ce9d0a.cer (raw, json) Hash identifier: V3QSWYn8F89Fljj5KTN4URHaRWSMcA38u/4jYQ51aOc= Subject key identifier: 25:6D:BC:60:18:2B:41:E2:AB:CC:3B:C0:E5:EA:BF:51:94:0C:5F:81 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858454B1EA3DCD5BE72B411972140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/e45201d6-ab25-40c8-a762-17e529ce9d0a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Mar 2024 15:33:26 +0000 Certificate not after: Thu 25 Jun 2026 15:33:26 +0000 Subordinate resources: AS: 29775 AS: 36780 IP: 63.246.154.0/24 IP: 66.111.52.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4b:1e:a3:dc:d5:be:72:b4:11:97:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 22 15:33:26 2024 GMT Not After : Jun 25 15:33:26 2026 GMT Subject: CN=e45201d6-ab25-40c8-a762-17e529ce9d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:97:2d:6a:7d:b1:1a:88:4e:d3:ac:b3:bb:2b: ae:3b:be:26:d5:26:33:0c:7a:d1:c2:99:63:50:2e: cf:ec:67:19:8a:b0:b6:28:3e:89:6a:cf:89:22:e4: 4e:de:fd:fe:1c:60:17:af:0e:c8:25:88:4e:7f:dc: 57:f8:b8:54:e1:f2:00:5d:b8:6e:ea:e5:6b:ad:cb: bf:a4:a1:4e:0f:0f:4b:ce:41:3b:fc:a4:2b:cf:99: 9f:17:1d:5f:c4:01:9a:aa:b4:21:cf:94:2b:33:e3: c3:5e:2b:61:c3:f3:a0:d1:84:b6:62:d1:37:d9:28: 78:92:66:5e:1a:bc:bc:34:ac:5c:05:ca:d2:00:70: c9:15:7b:1d:cc:7e:17:c5:ca:dd:5b:15:4b:9d:78: 5d:4c:aa:7c:3a:a3:9e:f8:93:0e:b1:b2:e1:19:79: e5:01:9b:ec:79:f7:7a:41:e5:d5:b9:6b:03:37:55: 30:76:a5:87:d7:00:82:9f:54:8b:dc:ae:61:ef:86: 65:b3:d6:6b:39:9e:74:ef:c5:f9:60:08:60:4b:90: fe:10:d1:75:d7:e8:78:36:2c:02:da:79:79:c5:2b: b9:ef:e6:40:e2:b3:21:a8:60:27:45:3e:23:a0:a4: 63:4c:a8:0e:57:8d:aa:e1:b4:0f:e1:b7:ba:7a:88: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6D:BC:60:18:2B:41:E2:AB:CC:3B:C0:E5:EA:BF:51:94:0C:5F:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/e45201d6-ab25-40c8-a762-17e529ce9d0a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 63.246.154.0/24 66.111.52.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29775 36780 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ea:fc:4f:c2:d5:0a:0f:0d:29:af:aa:3c:2d:7a:84:76:98: e5:dd:81:88:41:66:8b:67:00:a6:7b:e7:92:67:01:71:ed:d7: 6e:92:73:ab:84:c0:6d:3f:b5:40:98:2f:98:89:82:1b:9c:da: 9b:2a:97:b1:2d:53:d2:1b:a1:31:e4:c3:c9:4d:5d:46:e9:6e: e5:db:34:01:dc:b9:8d:6f:23:32:78:dd:f1:a1:72:ff:fc:1b: de:06:3e:17:cc:db:fb:22:47:7c:15:25:bc:a0:11:0a:13:a9: 7f:f2:50:09:41:ec:dc:af:ce:bf:ef:4f:62:4a:ad:36:5b:9b: 6d:2b:ec:70:6a:a2:99:60:be:97:f7:a5:5a:3c:7d:cd:ab:97: 5c:0c:97:8b:52:d8:45:0d:24:ec:05:f2:31:1c:50:a7:41:80: 2f:df:72:e2:79:21:aa:da:b2:cb:1c:73:e8:1c:47:7e:a2:49: 61:3e:c3:a4:19:eb:2e:97:27:f1:24:8d:c1:80:b7:76:a1:00: 34:6d:53:92:5d:84:c6:a1:3a:7c:ad:c0:cd:82:79:6e:f5:a7: 59:56:dc:a1:55:f9:da:72:cf:63:62:08:68:90:07:11:67:d7: 8f:32:59:05:a4:b2:25:fb:bc:00:38:80:92:83:70:6b:38:e5: 0e:6f:0f:70 -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEVLHqPc1b5ytBGXIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMyMjE1MzMyNloXDTI2MDYyNTE1MzMyNlowLzEtMCsGA1UEAxMk ZTQ1MjAxZDYtYWIyNS00MGM4LWE3NjItMTdlNTI5Y2U5ZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpctan2xGohO06yzuyuuO74m1SYzDHrRwplj UC7P7GcZirC2KD6Jas+JIuRO3v3+HGAXrw7IJYhOf9xX+LhU4fIAXbhu6uVrrcu/ pKFODw9LzkE7/KQrz5mfFx1fxAGaqrQhz5QrM+PDXithw/Og0YS2YtE32Sh4kmZe Gry8NKxcBcrSAHDJFXsdzH4XxcrdWxVLnXhdTKp8OqOe+JMOsbLhGXnlAZvsefd6 QeXVuWsDN1UwdqWH1wCCn1SL3K5h74Zls9ZrOZ5078X5YAhgS5D+ENF11+h4NiwC 2nl5xSu57+ZA4rMhqGAnRT4joKRjTKgOV42q4bQP4be6eoiS/QIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFCVtvGAYK0Hiq8w7wOXqv1GUDF+BMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l NDUyMDFkNi1hYjI1LTQwYzgtYTc2Mi0xN2U1MjljZTlkMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U0NTIwMWQ2LWFiMjUtNDBjOC1h NzYyLTE3ZTUyOWNlOWQwYS9lNDUyMDFkNi1hYjI1LTQwYzgtYTc2Mi0xN2U1Mjlj ZTlkMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAA/9poDBAFCbzQwHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICdE8CAwCPrDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+6vxPwtUKDw0pr6o8LXqEdpjl3YGIQWaL ZwCme+eSZwFx7dduknOrhMBtP7VAmC+YiYIbnNqbKpexLVPSG6Ex5MPJTV1G6W7l 2zQB3LmNbyMyeN3xoXL//BveBj4XzNv7Ikd8FSW8oBEKE6l/8lAJQezcr86/709i Sq02W5ttK+xwaqKZYL6X96VaPH3Nq5dcDJeLUthFDSTsBfIxHFCnQYAv33LieSGq 2rLLHHPoHEd+oklhPsOkGesulyfxJI3BgLd2oQA0bVOSXYTGoTp8rcDNgnlu9adZ VtyhVfnacs9jYghokAcRZ9ePMlkFpLIl+7wAOICSg3BrOOUObw9w -----END CERTIFICATE-----Generated at Sat May 11 17:57:35 2024 by rpki-client on console-ams.rpki-client.org