$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7.cer File: eb622fc4-4fd0-4955-b02b-48229b06ccb7.cer (raw, json) Hash identifier: DGPXH7pACV5SRn7GHzKXFpJcLCUlnOUaD+bxb30gKUI= Subject key identifier: 9F:9F:2A:ED:1A:36:E3:DE:28:CF:E0:98:00:0B:9E:E0:DA:32:EF:E7 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858456D23E147434A23F6AE2B1200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/eb622fc4-4fd0-4955-b02b-48229b06ccb7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Apr 2024 20:01:29 +0000 Certificate not after: Tue 07 Jul 2026 20:01:29 +0000 Subordinate resources: AS: 12125 IP: 104.129.144.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6d:23:e1:47:43:4a:23:f6:ae:2b:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 3 20:01:29 2024 GMT Not After : Jul 7 20:01:29 2026 GMT Subject: CN=eb622fc4-4fd0-4955-b02b-48229b06ccb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6c:f5:e5:c8:2e:28:4d:1c:b9:79:1e:b7:da: 06:de:e5:b1:a9:ed:2f:7f:63:96:31:24:1a:36:b0: c6:70:38:e0:4b:b2:ee:0b:d4:41:51:98:36:d6:1e: 1a:27:f6:b7:f9:40:34:b4:60:12:dd:89:90:11:70: 92:7d:94:e9:21:20:20:eb:6c:bc:0d:09:08:33:9d: 12:76:24:1d:ba:96:9b:64:1b:d8:20:cd:1c:92:43: 11:f1:80:20:cd:c9:69:c4:30:79:9e:64:21:15:35: 1b:15:7c:a5:e9:ac:dd:20:a4:c4:61:fb:21:f7:6c: 96:c1:cc:70:9a:4d:19:44:1a:f3:e0:08:f0:4d:78: 78:1c:ed:61:ca:49:68:f5:3d:1c:a5:a3:29:c8:1c: 5d:3a:46:a9:64:08:78:8d:66:a7:eb:0a:f1:e9:0e: f4:a1:73:79:55:85:b1:e4:7b:2e:06:d8:68:dc:1e: 74:d5:b8:6e:5f:36:8e:7c:f9:d7:f1:54:7b:02:90: 23:50:20:ba:50:4f:76:d3:73:83:01:9c:d3:39:b9: d6:84:a8:b3:39:29:02:ee:a1:15:a5:31:e6:a6:9a: 7c:d5:d2:10:b1:6a:86:65:32:0f:46:f9:62:4f:16: 61:94:d6:80:b9:05:3f:e1:bd:65:89:9d:d4:49:d8: c8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9F:2A:ED:1A:36:E3:DE:28:CF:E0:98:00:0B:9E:E0:DA:32:EF:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb622fc4-4fd0-4955-b02b-48229b06ccb7/eb622fc4-4fd0-4955-b02b-48229b06ccb7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 104.129.144.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b4:1a:77:0b:91:1b:21:ca:c3:23:4b:07:39:a2:76:91:43: a1:46:25:7f:ce:27:aa:9e:c5:fc:4e:cb:9f:68:dc:41:ab:03: 5a:99:a2:cc:6c:55:e8:6c:4f:0f:6a:5a:de:90:2c:04:dd:65: 4b:ad:02:96:86:ed:93:cb:a8:48:18:6c:00:4a:80:53:9f:b8: c0:50:62:ba:42:e1:44:7c:7c:d3:fe:b8:c6:22:7a:13:a0:c8: 63:28:20:4f:35:ce:0a:87:ce:c1:b3:b9:b6:ea:a8:58:49:da: a7:cb:6b:5a:94:bd:85:12:3e:23:22:03:97:2b:15:e6:1e:fa: 9e:db:60:cd:e9:65:f5:f2:ba:c4:a6:ec:5d:ef:3e:87:bb:61: b8:ab:d8:58:72:0a:a3:e5:2d:ec:45:cb:f0:15:be:68:9b:76: 15:1f:04:eb:33:81:e3:64:e8:33:cb:b3:e9:96:af:fa:15:4f: 5d:69:fe:ff:46:09:f0:a1:97:6f:e4:9a:6f:e2:40:30:0c:2f: c0:b9:a5:0d:3d:a3:da:f1:c2:7c:c3:e5:35:fe:05:d8:55:ce: 0f:c0:fb:05:65:b3:cf:d3:ef:4c:64:c3:87:1f:a7:45:79:17: 85:00:78:32:d1:1d:7c:ef:c6:40:2a:27:62:49:df:d7:0d:2d: fb:40:ef:87 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEVtI+FHQ0oj9q4rEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQwMzIwMDEyOVoXDTI2MDcwNzIwMDEyOVowLzEtMCsGA1UEAxMk ZWI2MjJmYzQtNGZkMC00OTU1LWIwMmItNDgyMjliMDZjY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2z15cguKE0cuXket9oG3uWxqe0vf2OWMSQa NrDGcDjgS7LuC9RBUZg21h4aJ/a3+UA0tGAS3YmQEXCSfZTpISAg62y8DQkIM50S diQdupabZBvYIM0ckkMR8YAgzclpxDB5nmQhFTUbFXyl6azdIKTEYfsh92yWwcxw mk0ZRBrz4AjwTXh4HO1hyklo9T0cpaMpyBxdOkapZAh4jWan6wrx6Q70oXN5VYWx 5HsuBtho3B501bhuXzaOfPnX8VR7ApAjUCC6UE9203ODAZzTObnWhKizOSkC7qEV pTHmppp81dIQsWqGZTIPRvliTxZhlNaAuQU/4b1liZ3USdjIDwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJ+fKu0aNuPeKM/gmAALnuDaMu/nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l YjYyMmZjNC00ZmQwLTQ5NTUtYjAyYi00ODIyOWIwNmNjYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ViNjIyZmM0LTRmZDAtNDk1NS1i MDJiLTQ4MjI5YjA2Y2NiNy9lYjYyMmZjNC00ZmQwLTQ5NTUtYjAyYi00ODIyOWIw NmNjYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJogZAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC L10wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAjrQadwuRGyHKwyNLBzmidpFDoUYlf84nqp7F/E7Ln2jcQasD WpmizGxV6GxPD2pa3pAsBN1lS60Clobtk8uoSBhsAEqAU5+4wFBiukLhRHx80/64 xiJ6E6DIYyggTzXOCofOwbO5tuqoWEnap8trWpS9hRI+IyIDlysV5h76nttgzell 9fK6xKbsXe8+h7thuKvYWHIKo+Ut7EXL8BW+aJt2FR8E6zOB42ToM8uz6Zav+hVP XWn+/0YJ8KGXb+Sab+JAMAwvwLmlDT2j2vHCfMPlNf4F2FXOD8D7BWWzz9PvTGTD hx+nRXkXhQB4MtEdfO/GQConYknf1w0t+0Dvhw== -----END CERTIFICATE-----Generated at Fri May 10 20:14:48 2024 by rpki-client on console-fra.rpki-client.org