$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer File: e8950c3d-3b43-45b8-93cb-fbf99568c311.cer (raw, json) Hash identifier: dMHL74VRTy6lJKyu7TXNCFsmrEPaYA0YOubNzY5v+zg= Subject key identifier: 70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858455CA0D40C2B34BCB98F7C9F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Mar 2024 22:04:30 +0000 Certificate not after: Wed 01 Jul 2026 22:04:30 +0000 Subordinate resources: AS: 394868 IP: 23.174.0.0 -- 23.174.4.255 IP: 2606:e780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5c:a0:d4:0c:2b:34:bc:b9:8f:7c:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 28 22:04:30 2024 GMT Not After : Jul 1 22:04:30 2026 GMT Subject: CN=e8950c3d-3b43-45b8-93cb-fbf99568c311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:27:5b:e6:fc:fc:19:20:62:f8:6a:5e:87:4e: 23:d9:d6:a3:e2:ed:b9:96:38:03:e7:f4:d5:98:c8: 64:d6:bb:81:c0:44:af:31:0a:e3:5e:35:38:58:cc: 5e:8f:7d:ac:89:5f:97:b7:44:fd:48:80:bb:d5:40: 0d:d9:b0:fd:9f:d3:f1:5b:9c:12:a5:c2:98:c7:64: 5f:c9:ef:cd:23:e9:58:12:02:9f:a6:ff:d5:c4:85: 02:3a:c5:98:a3:2d:92:b5:9b:b4:8b:60:21:89:a4: c1:07:94:3b:16:ca:a9:c3:fe:c0:a2:cf:7b:71:21: 66:a7:4d:ec:80:b6:e7:61:76:b3:66:d7:e5:40:40: 02:e9:ea:14:c0:2c:89:72:86:f9:f8:57:21:70:7a: c5:18:7c:64:77:b1:4b:84:14:f3:69:e3:15:be:0b: 60:d0:57:e3:cb:f7:00:3b:11:38:1d:73:13:7d:6a: a1:64:d8:41:5e:c7:c6:16:fd:cf:d2:66:31:ae:19: 10:35:99:ac:aa:19:ac:b5:56:a8:8a:c3:e4:18:28: 25:9e:dc:3f:49:6b:30:2d:e8:2d:4f:fc:3d:b7:c9: 08:41:1f:ae:f6:fd:84:4f:da:21:0f:f8:cd:d9:05: 25:87:4d:34:36:6d:c1:fc:e0:b7:7c:fb:79:14:80: 7a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.174.0.0-23.174.4.255 IPv6: 2606:e780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394868 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0f:12:f8:93:63:08:63:7d:6c:23:ff:7b:61:17:10:66:48: fe:90:86:3d:00:84:65:bb:ca:6c:af:08:c0:30:95:9e:17:7f: 8c:85:b2:42:ef:ee:84:1f:fb:0e:cc:5f:84:27:2d:d9:ef:ea: a8:1f:c7:bc:48:ba:b1:17:ec:29:7f:56:e7:c0:98:03:bd:75: 96:a6:bb:89:5f:6b:87:b9:1a:22:81:65:34:cf:a2:4b:2b:fd: 75:49:0f:dd:e6:3c:56:7f:cf:1a:3b:e8:f1:53:51:3b:2c:08: ff:0c:96:12:f2:99:8e:f5:68:c0:fa:2a:98:a5:7a:66:3e:a5: b3:dc:52:2b:6f:21:69:a7:78:e9:a0:05:9f:a8:67:3b:29:7d: 3c:54:cf:9a:ca:a0:ac:7d:7c:25:01:48:e6:08:a3:8d:1d:83: 3d:ff:6b:f6:3c:d5:36:3f:f5:43:65:9e:76:3b:c7:22:da:7d: ac:e8:b9:a5:1b:ba:62:a0:4a:ed:f7:92:e8:7f:60:fa:a8:65: b4:ea:ce:73:c7:70:09:98:b0:6f:5a:39:b9:34:4f:7d:43:16: b0:b8:d1:cc:fd:2e:15:f4:10:8b:8b:6c:fd:20:68:52:43:c0: 66:e1:3f:70:45:05:f1:65:47:88:58:50:ea:88:a2:04:47:47: 8a:d2:b6:fe -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEVcoNQMKzS8uY98n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMyODIyMDQzMFoXDTI2MDcwMTIyMDQzMFowLzEtMCsGA1UEAxMk ZTg5NTBjM2QtM2I0My00NWI4LTkzY2ItZmJmOTk1NjhjMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkydb5vz8GSBi+Gpeh04j2daj4u25ljgD5/TV mMhk1ruBwESvMQrjXjU4WMxej32siV+Xt0T9SIC71UAN2bD9n9PxW5wSpcKYx2Rf ye/NI+lYEgKfpv/VxIUCOsWYoy2StZu0i2AhiaTBB5Q7Fsqpw/7Aos97cSFmp03s gLbnYXazZtflQEAC6eoUwCyJcob5+FchcHrFGHxkd7FLhBTzaeMVvgtg0Ffjy/cA OxE4HXMTfWqhZNhBXsfGFv3P0mYxrhkQNZmsqhmstVaoisPkGCglntw/SWswLegt T/w9t8kIQR+u9v2ET9ohD/jN2QUlh000Nm3B/OC3fPt5FIB63QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFHCFSDO2ppb13bfg8lTKiimA/0mKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l ODk1MGMzZC0zYjQzLTQ1YjgtOTNjYi1mYmY5OTU2OGMzMTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U4OTUwYzNkLTNiNDMtNDViOC05 M2NiLWZiZjk5NTY4YzMxMS9lODk1MGMzZC0zYjQzLTQ1YjgtOTNjYi1mYmY5OTU2 OGMzMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBMEAgABMA0wCwMDAReuAwQAF64EMA0EAgACMAcDBQAmBueAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYGdDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZDxL4k2MIY31sI/97 YRcQZkj+kIY9AIRlu8psrwjAMJWeF3+MhbJC7+6EH/sOzF+EJy3Z7+qoH8e8SLqx F+wpf1bnwJgDvXWWpruJX2uHuRoigWU0z6JLK/11SQ/d5jxWf88aO+jxU1E7LAj/ DJYS8pmO9WjA+iqYpXpmPqWz3FIrbyFpp3jpoAWfqGc7KX08VM+ayqCsfXwlAUjm CKONHYM9/2v2PNU2P/VDZZ52O8ci2n2s6LmlG7pioErt95Lof2D6qGW06s5zx3AJ mLBvWjm5NE99QxawuNHM/S4V9BCLi2z9IGhSQ8Bm4T9wRQXxZUeIWFDqiKIER0eK 0rb+ -----END CERTIFICATE-----Generated at Thu Nov 21 15:31:25 2024 by rpki-client on console-fra.rpki-client.org