$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer File: ef1239e6-3ae7-43be-966b-2f5b9671c29d.cer (raw, json) Hash identifier: ktXURA+k1FPF2XfWGh9ndmD0hvssjqgbezhN+DTiAWo= Subject key identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285845322D9FCB622941154136D080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Mar 2024 17:08:25 +0000 Certificate not after: Tue 16 Jun 2026 17:08:25 +0000 Subordinate resources: AS: 399525 IP: 23.185.176.0/24 IP: 2602:fc9e::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:32:2d:9f:cb:62:29:41:15:41:36:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 13 17:08:25 2024 GMT Not After : Jun 16 17:08:25 2026 GMT Subject: CN=ef1239e6-3ae7-43be-966b-2f5b9671c29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:25:cd:2d:be:e1:73:17:91:81:29:59:e4: fe:b7:ec:41:08:4f:1b:5f:50:e4:1f:dd:02:43:c2: 53:98:8d:70:b0:da:3f:f7:7e:cd:58:7f:5c:4c:fe: 51:6d:9a:a8:39:14:6c:2d:f1:73:8e:19:32:1b:0f: 09:22:83:44:9b:c4:62:1a:fc:7a:61:81:46:4c:73: f4:dc:5d:ef:7e:f2:f1:51:45:1e:28:78:83:25:6f: f2:53:f1:af:4b:4f:d9:26:04:3d:ce:a4:dd:59:13: 57:02:17:9f:72:c9:9d:20:32:25:43:45:5a:91:83: 1f:6f:ac:db:a7:da:09:84:56:cd:56:ec:d2:37:89: 85:17:07:1b:2d:63:a8:6b:fc:a1:a9:34:93:eb:05: c4:31:bb:2f:fb:23:04:09:53:2a:9f:cd:f6:eb:63: f0:75:fb:7e:3f:4a:99:8c:14:66:42:b7:9b:41:32: 79:11:1e:c1:35:db:6e:a1:1a:99:f5:d8:50:ba:c3: f2:a5:7e:af:7e:7e:47:36:e1:5f:08:2b:76:1f:20: db:15:eb:a6:9d:be:99:7a:7b:17:bd:2d:e2:7f:48: 10:97:47:cc:18:fd:f1:c5:9a:1d:82:de:07:5a:4e: 81:20:42:84:4c:7c:c6:d1:10:65:1c:23:3b:74:3c: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BD:1B:B2:8A:59:ED:B6:BB:54:9D:83:C9:CC:BC:AC:43:B7:B4:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ef1239e6-3ae7-43be-966b-2f5b9671c29d/ef1239e6-3ae7-43be-966b-2f5b9671c29d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.185.176.0/24 IPv6: 2602:fc9e::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399525 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:80:c0:b2:42:c8:75:7d:cc:41:0d:67:fd:a1:d3:6e:a7:a7: 6b:b6:d9:b6:90:6b:0f:e7:0e:4a:7f:c1:11:4e:75:d1:ee:1d: 26:f9:db:6e:4e:01:46:ec:92:fe:13:e0:3e:8f:85:12:02:19: 28:b0:f6:60:f6:4e:f8:9a:32:e8:1c:09:98:c0:71:80:5f:9a: f6:83:17:42:30:fd:27:dd:1d:bb:cd:5c:0e:48:fa:5d:66:26: 40:f6:fb:af:c1:fd:83:50:46:fe:76:41:d7:fc:7c:0a:2b:56: dd:d1:c2:06:87:a1:05:55:82:af:28:d8:97:e3:41:25:86:30: 2c:8b:76:0e:1a:00:dd:41:3c:11:0b:cf:73:3a:cd:e5:03:18: bc:28:d9:41:03:0e:aa:8a:54:cd:af:7b:33:4f:83:c6:b0:49: 54:6a:c5:ef:d8:36:77:38:67:d5:37:11:3a:f5:c0:45:b8:b5: 12:d2:3d:c4:bd:96:73:31:93:52:0c:fb:95:8a:00:d8:ff:65: 63:f9:54:70:36:c4:9e:e8:e0:af:31:7f:55:0f:ba:40:52:88: d7:61:cd:31:11:b5:f5:2e:a8:a7:b2:71:e7:d8:e3:60:40:00: 00:ce:cd:f8:9e:48:5d:af:34:1a:4d:4d:12:8c:4a:45:08:0e: ec:8b:35:63 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEUyLZ/LYilBFUE20IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMxMzE3MDgyNVoXDTI2MDYxNjE3MDgyNVowLzEtMCsGA1UEAxMk ZWYxMjM5ZTYtM2FlNy00M2JlLTk2NmItMmY1Yjk2NzFjMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlMlzS2+4XMXkYEpWeT+t+xBCE8bX1DkH90C Q8JTmI1wsNo/937NWH9cTP5RbZqoORRsLfFzjhkyGw8JIoNEm8RiGvx6YYFGTHP0 3F3vfvLxUUUeKHiDJW/yU/GvS0/ZJgQ9zqTdWRNXAhefcsmdIDIlQ0VakYMfb6zb p9oJhFbNVuzSN4mFFwcbLWOoa/yhqTST6wXEMbsv+yMECVMqn83262Pwdft+P0qZ jBRmQrebQTJ5ER7BNdtuoRqZ9dhQusPypX6vfn5HNuFfCCt2HyDbFeumnb6ZensX vS3if0gQl0fMGP3xxZodgt4HWk6BIEKETHzG0RBlHCM7dDwvlQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPy9G7KKWe22u1Sdg8nMvKxDt7TJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l ZjEyMzllNi0zYWU3LTQzYmUtOTY2Yi0yZjViOTY3MWMyOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2VmMTIzOWU2LTNhZTctNDNiZS05 NjZiLTJmNWI5NjcxYzI5ZC9lZjEyMzllNi0zYWU3LTQzYmUtOTY2Yi0yZjViOTY3 MWMyOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXubAwDgQCAAIwCAMGACYC/J4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYYpTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSgMCyQsh1fcxBDWf9odNup6dr ttm2kGsP5w5Kf8ERTnXR7h0m+dtuTgFG7JL+E+A+j4USAhkosPZg9k74mjLoHAmY wHGAX5r2gxdCMP0n3R27zVwOSPpdZiZA9vuvwf2DUEb+dkHX/HwKK1bd0cIGh6EF VYKvKNiX40ElhjAsi3YOGgDdQTwRC89zOs3lAxi8KNlBAw6qilTNr3szT4PGsElU asXv2DZ3OGfVNxE69cBFuLUS0j3EvZZzMZNSDPuVigDY/2Vj+VRwNsSe6OCvMX9V D7pAUojXYc0xEbX1LqinsnHn2ONgQAAAzs34nkhdrzQaTU0SjEpFCA7sizVj -----END CERTIFICATE-----Generated at Sat May 11 15:26:15 2024 by rpki-client on console-ams.rpki-client.org