$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer File: fb430428-a25a-4e8b-acc0-f9f5cc044175.cer (raw, json) Hash identifier: eqdCzTzmwr878iDEVAhLEZs0jkAF1ksgmw9X+Ysnkes= Subject key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285844D0B011D3DBA944AF3CBE4680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Feb 2024 19:02:02 +0000 Certificate not after: Tue 12 May 2026 18:02:02 +0000 Subordinate resources: AS: 396905 IP: 66.187.96.0/20 IP: 138.43.60.0/22 IP: 149.19.208.0/20 IP: 192.43.156.0/22 IP: 192.82.44.0/22 IP: 192.105.176.0/20 IP: 216.226.160.0/20 IP: 2606:a740::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d0:b0:11:d3:db:a9:44:af:3c:be:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Feb 7 19:02:02 2024 GMT Not After : May 12 18:02:02 2026 GMT Subject: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:79:f7:28:12:31:88:d8:59:cd:eb:09:5e:6e: df:90:ed:d9:ad:bf:c5:b5:be:88:1f:7e:08:9f:35: 93:c3:b0:68:ca:5e:51:c4:22:45:65:48:e2:8b:fc: 62:fc:40:e6:7b:10:9e:84:6a:50:54:78:c3:55:c3: 87:64:33:9a:c2:1c:e4:30:45:8f:b9:1c:aa:f6:7f: b3:ee:69:2d:ee:81:39:57:8f:da:10:95:18:6c:8e: 51:72:89:0f:c3:f4:97:6a:45:bb:c1:5d:00:d2:0e: b0:b1:82:07:4f:f1:94:5e:d6:e5:eb:6f:75:e7:ed: 15:69:72:b1:4c:bd:ae:b0:c1:3d:26:11:df:70:55: 4f:9b:67:a7:74:60:d9:97:69:d5:df:fa:4b:6e:95: d0:f4:06:fc:05:4e:51:38:83:66:24:61:44:91:43: 41:a6:48:a7:ef:97:f3:a4:9b:8b:2f:79:31:f8:ea: 9d:b9:d5:60:d8:ba:44:f0:e0:de:f9:32:42:47:28: 9b:85:e6:69:0d:e4:2f:1d:2f:32:71:fe:08:ea:95: 67:19:67:f2:f4:c9:68:84:12:6f:c8:87:d2:1f:91: de:31:51:be:2e:14:af:59:c0:ad:cb:e6:9e:a6:be: a5:5b:75:0d:ba:17:b2:e4:4b:b5:67:92:6e:2c:ee: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 66.187.96.0/20 138.43.60.0/22 149.19.208.0/20 192.43.156.0/22 192.82.44.0/22 192.105.176.0/20 216.226.160.0/20 IPv6: 2606:a740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396905 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5c:6e:b0:d2:c6:4f:4b:c7:fe:f7:de:d7:e1:1c:94:6d:2c: 1a:a4:6e:f7:43:80:ce:69:c1:fd:6c:fa:ac:40:70:0a:55:f9: b0:bb:ff:2a:ac:34:b4:46:1e:c3:34:69:64:fe:0c:a6:1a:9b: 4a:05:a5:12:f4:79:25:ae:d6:52:3e:e2:ab:b5:7b:d8:59:8e: a7:ec:79:6b:bd:15:0f:58:2c:dc:82:0e:17:3a:f5:bf:2f:9f: ce:8a:79:a2:ce:96:3f:9a:44:00:71:c3:ea:fa:97:48:50:9c: 4a:2d:a0:67:89:4d:5b:44:15:25:b8:b3:7d:9b:2c:54:18:9c: 2b:c4:b7:2c:47:33:b8:bd:c8:af:2b:58:40:10:e2:72:57:41: 21:30:49:df:72:f2:ef:a3:80:93:d1:f4:55:4b:cc:e5:c2:87: ba:c7:46:8b:2c:fe:d5:e8:b2:df:49:36:dd:f6:3a:f5:f6:cc: 2c:3e:8f:2c:77:90:30:14:79:d8:96:b4:2d:86:cf:c0:f1:eb: f1:f3:27:04:6b:f0:3c:52:6f:64:c0:a2:ee:68:1a:0e:c8:19: eb:1d:8c:4c:30:e0:79:87:c3:c7:eb:bc:8c:fe:f7:27:f8:cc: 7e:17:9b:c6:f4:3f:a2:72:0d:e3:4c:60:cd:82:02:03:6c:b6: 54:0a:6f:9e -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWETQsBHT26lErzy+RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDIwNzE5MDIwMloXDTI2MDUxMjE4MDIwMlowLzEtMCsGA1UEAxMk ZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43n3KBIxiNhZzesJXm7fkO3Zrb/Ftb6IH34I nzWTw7Boyl5RxCJFZUjii/xi/EDmexCehGpQVHjDVcOHZDOawhzkMEWPuRyq9n+z 7mkt7oE5V4/aEJUYbI5RcokPw/SXakW7wV0A0g6wsYIHT/GUXtbl62915+0VaXKx TL2usME9JhHfcFVPm2endGDZl2nV3/pLbpXQ9Ab8BU5ROINmJGFEkUNBpkin75fz pJuLL3kx+OqdudVg2LpE8ODe+TJCRyibheZpDeQvHS8ycf4I6pVnGWfy9MlohBJv yIfSH5HeMVG+LhSvWcCty+aepr6lW3UNuhey5Eu1Z5JuLO69nQIDAQABo4IETjCC BEowHQYDVR0OBBYEFGHenci/b3gJ5x8ZSOU0yxRP1926MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m YjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ZiNDMwNDI4LWEyNWEtNGU4Yi1h Y2MwLWY5ZjVjYzA0NDE3NS9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2Mw NDQxNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBARCu2ADBAKKKzwDBASVE9ADBALAK5wDBALAUiwD BATAabADBATY4qAwDQQCAAIwBwMFACYGp0AwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBg5pMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAEVcbrDSxk9Lx/733tfhHJRtLBqkbvdDgM5pwf1s+qxA cApV+bC7/yqsNLRGHsM0aWT+DKYam0oFpRL0eSWu1lI+4qu1e9hZjqfseWu9FQ9Y LNyCDhc69b8vn86KeaLOlj+aRABxw+r6l0hQnEotoGeJTVtEFSW4s32bLFQYnCvE tyxHM7i9yK8rWEAQ4nJXQSEwSd9y8u+jgJPR9FVLzOXCh7rHRoss/tXost9JNt32 OvX2zCw+jyx3kDAUediWtC2Gz8Dx6/HzJwRr8DxSb2TAou5oGg7IGesdjEww4HmH w8frvIz+9yf4zH4Xm8b0P6JyDeNMYM2CAgNstlQKb54= -----END CERTIFICATE-----Generated at Sat May 11 17:57:36 2024 by rpki-client on console-ams.rpki-client.org