$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f.cer File: f9c69ad2-7fee-4064-9683-23ee7a48db4f.cer (raw, json) Hash identifier: q07qZoJPMFR6W/vWl2/k/O20sgvaGT6laBlickeL1r4= Subject key identifier: 71:D5:8C:34:F1:35:24:6F:25:FA:0A:4A:4D:A5:86:82:19:59:C4:2D Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858455C23A0D4C82CE03CC783B980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/f9c69ad2-7fee-4064-9683-23ee7a48db4f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Mar 2024 17:52:14 +0000 Certificate not after: Wed 01 Jul 2026 17:52:14 +0000 Subordinate resources: IP: 23.174.168.0/24 IP: 2602:f935::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5c:23:a0:d4:c8:2c:e0:3c:c7:83:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Mar 28 17:52:14 2024 GMT Not After : Jul 1 17:52:14 2026 GMT Subject: CN=f9c69ad2-7fee-4064-9683-23ee7a48db4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:11:52:f4:8b:5d:8d:db:00:ad:9f:56:3d: 4c:75:dd:af:34:9a:09:c5:00:db:24:c2:47:28:35: f6:a3:ea:3a:a7:5f:26:6c:94:b5:c5:e6:ac:75:62: 57:ef:11:13:4d:0d:e3:cd:5e:64:8e:4f:a7:68:8b: 46:7f:c1:fc:ed:b2:38:bb:8b:53:d0:96:3d:9d:70: a6:17:54:25:fd:27:d7:49:23:7a:03:1e:40:9a:fa: b8:c6:fd:cd:cc:8a:91:0b:36:4e:af:8a:53:0b:79: 97:5c:1f:6d:22:df:0b:b7:cf:b5:77:32:48:8d:a9: 19:a2:79:fe:e2:e5:1a:b4:5e:ff:74:03:88:2f:36: 0c:8a:9b:08:70:ab:fd:02:6f:86:b5:48:c5:1b:74: ed:58:1c:d4:a4:4c:e5:35:f8:56:29:33:17:06:ba: 0b:3d:c4:d5:d8:49:b3:e7:cc:78:92:36:be:64:6c: 0f:52:c1:69:54:64:4e:6f:d3:54:2b:28:58:2d:95: f4:84:b3:bc:4e:84:23:bc:4d:4b:ed:60:0f:4d:99: 52:e2:29:b0:a4:a3:1e:b3:7d:a0:44:fe:32:f7:fe: ec:21:c8:d8:bc:37:34:02:cf:d7:c5:2c:3c:a8:4a: f7:8e:6a:3e:04:66:55:06:14:ed:3c:38:f4:eb:6b: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D5:8C:34:F1:35:24:6F:25:FA:0A:4A:4D:A5:86:82:19:59:C4:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f9c69ad2-7fee-4064-9683-23ee7a48db4f/f9c69ad2-7fee-4064-9683-23ee7a48db4f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.174.168.0/24 IPv6: 2602:f935::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:6c:30:62:84:69:74:e2:29:ca:9d:bb:f1:28:f4:30:5e:92: 74:81:0e:64:c2:5f:27:04:a1:28:61:e8:e0:83:fe:10:00:35: 33:5e:a0:2d:93:f4:47:44:3e:54:cd:1a:f4:d5:3f:a2:8d:c0: da:64:d6:bc:a7:a5:52:95:ad:37:50:29:3a:cc:11:1e:01:d8: ee:8f:6f:a7:17:42:43:5e:60:fb:46:1c:39:c4:46:66:34:f1: 70:e4:f9:46:d0:f9:8e:f0:4b:e7:55:92:ac:1e:3a:26:bd:4f: 15:49:be:7d:38:8d:8e:10:e3:db:e1:0e:92:1f:26:89:4e:e0: 46:f2:46:d1:66:da:a9:51:2e:f0:13:bc:38:ac:c6:2e:49:61: c3:c3:37:dd:ec:90:f7:3b:5a:84:f3:f2:ac:51:fb:d4:74:66: af:77:2b:02:aa:2f:a1:7f:a1:d7:f1:67:12:c1:30:3c:db:1b: 93:fe:9e:35:25:0f:ee:90:3b:34:e1:7c:07:b3:d7:be:29:e3: d8:3c:b8:6e:07:28:ab:2e:43:41:1d:b7:64:bf:4d:ae:23:90: bd:cf:c1:95:fb:fc:50:ca:9f:57:d1:9b:74:1d:44:5d:31:ba: 3a:d9:39:68:4c:5f:e7:44:6c:70:04:52:f5:07:41:a7:95:bc: a2:e9:cd:77 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEVcI6DUyCzgPMeDuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDMyODE3NTIxNFoXDTI2MDcwMTE3NTIxNFowLzEtMCsGA1UEAxMk ZjljNjlhZDItN2ZlZS00MDY0LTk2ODMtMjNlZTdhNDhkYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqsRUvSLXY3bAK2fVj1Mdd2vNJoJxQDbJMJH KDX2o+o6p18mbJS1xeasdWJX7xETTQ3jzV5kjk+naItGf8H87bI4u4tT0JY9nXCm F1Ql/SfXSSN6Ax5Amvq4xv3NzIqRCzZOr4pTC3mXXB9tIt8Lt8+1dzJIjakZonn+ 4uUatF7/dAOILzYMipsIcKv9Am+GtUjFG3TtWBzUpEzlNfhWKTMXBroLPcTV2Emz 58x4kja+ZGwPUsFpVGROb9NUKyhYLZX0hLO8ToQjvE1L7WAPTZlS4imwpKMes32g RP4y9/7sIcjYvDc0As/XxSw8qEr3jmo+BGZVBhTtPDj062sE6wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFHHVjDTxNSRvJfoKSk2lhoIZWcQtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m OWM2OWFkMi03ZmVlLTQwNjQtOTY4My0yM2VlN2E0OGRiNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2Y5YzY5YWQyLTdmZWUtNDA2NC05 NjgzLTIzZWU3YTQ4ZGI0Zi9mOWM2OWFkMi03ZmVlLTQwNjQtOTY4My0yM2VlN2E0 OGRiNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXrqgwDgQCAAIwCAMGACYC+TUAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ABBsMGKEaXTiKcqdu/Eo9DBeknSBDmTCXycEoShh6OCD/hAANTNeoC2T9EdEPlTN GvTVP6KNwNpk1rynpVKVrTdQKTrMER4B2O6Pb6cXQkNeYPtGHDnERmY08XDk+UbQ +Y7wS+dVkqweOia9TxVJvn04jY4Q49vhDpIfJolO4EbyRtFm2qlRLvATvDisxi5J YcPDN93skPc7WoTz8qxR+9R0Zq93KwKqL6F/odfxZxLBMDzbG5P+njUlD+6QOzTh fAez174p49g8uG4HKKsuQ0Edt2S/Ta4jkL3PwZX7/FDKn1fRm3QdRF0xujrZOWhM X+dEbHAEUvUHQaeVvKLpzXc= -----END CERTIFICATE-----Generated at Sat May 11 17:57:36 2024 by rpki-client on console-ams.rpki-client.org