$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer File: 00fd3378-4bc3-4216-94f7-90c7efb47d80.cer (raw, json) Hash identifier: ijya7V+P90cf0WnbubXLjKHOKsjWGtnvxUqqNiYAopo= Subject key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285843362C45703747B60CD1933A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Sep 2023 17:55:03 +0000 Certificate not after: Tue 16 Dec 2025 18:55:03 +0000 Subordinate resources: AS: 31852 AS: 46133 IP: 2.57.164.0/22 IP: 208.103.174.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:36:2c:45:70:37:47:b6:0c:d1:93:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 13 17:55:03 2023 GMT Not After : Dec 16 18:55:03 2025 GMT Subject: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:cd:5e:82:8d:50:c8:b3:23:15:cd:d8:60: 5d:e3:73:25:f3:c6:75:f5:d0:69:28:8f:66:a4:bc: b6:95:f4:e9:33:cd:ae:3f:78:3c:2f:09:1b:d1:ff: 5d:ca:39:7c:53:81:ea:ed:0c:cb:98:b4:bb:8a:c4: d1:14:d2:69:3c:85:70:c5:88:03:99:c1:74:4b:92: fe:97:82:7f:ce:20:34:3a:e0:47:3b:97:69:d0:c6: 4b:a1:f5:92:73:09:ec:89:2c:3c:0d:fe:84:53:1a: 09:90:a2:df:0e:da:76:a8:95:2d:81:0d:e9:63:72: 0d:d9:02:5b:98:54:7a:2d:84:b8:10:9a:e4:64:43: 1d:e7:4c:54:da:b5:29:47:d0:f7:8c:82:9a:e6:4e: 66:c3:13:51:2e:40:68:a4:a7:1f:75:d9:24:6a:a2: 19:9c:f3:af:df:26:d3:e5:16:9b:c0:b2:2d:a4:e4: ee:73:d9:25:22:62:f4:76:cf:f5:05:be:4e:13:95: 38:19:17:b2:11:81:f1:d3:d8:dc:c6:f0:6a:26:88: 3e:5d:0e:d6:24:35:4b:1d:1d:bf:f8:67:cf:b5:05: af:01:2e:00:dc:36:52:03:fb:91:54:a0:c7:c8:40: c8:2c:49:42:86:5c:27:65:e4:c3:31:8d:c8:48:df: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 2.57.164.0/22 208.103.174.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31852 46133 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7c:c5:c7:d7:5a:54:11:6b:50:34:7c:c9:f7:62:f2:4c:af: 8f:c6:57:b0:91:45:a4:cf:99:26:e8:3a:c0:39:67:24:91:ea: fd:a1:de:b1:47:1d:14:69:b0:ad:fa:e8:6a:32:13:d9:e1:6b: f7:f1:9c:00:f6:93:fc:cb:81:85:8d:96:6e:29:1b:20:a5:f3: 0c:63:3c:bd:ad:65:72:0a:ba:5d:86:28:3e:07:26:bc:89:4c: 3e:7f:a4:95:bd:b7:e6:e5:75:7e:61:56:1e:0e:c6:bd:d3:e4: 87:8a:c7:4e:de:77:11:d9:93:98:fc:5b:26:11:39:da:c5:2b: d8:1b:0b:89:4c:4a:b4:17:a3:39:c6:21:66:24:84:fc:91:4e: 02:53:9d:f6:40:53:9e:49:5c:6d:48:e1:ec:c7:7e:c2:72:97: ee:05:80:f8:dc:c5:be:cc:35:63:83:55:7f:49:ac:70:35:05: b7:e4:c2:5b:f9:55:10:1a:54:b7:d8:e4:01:84:e0:cb:da:69: ed:a8:d6:f8:f0:2b:78:10:10:ba:f3:d3:eb:fd:c2:5a:87:5a: ad:d3:c3:aa:d3:33:e5:7b:ed:a2:62:69:aa:7a:18:a5:09:da: 68:1c:fd:d1:08:57:2b:77:58:6b:c4:2f:8c:fe:43:bf:50:30: eb:8c:f5:eb -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWEM2LEVwN0e2DNGTOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDkxMzE3NTUwM1oXDTI1MTIxNjE4NTUwM1owLzEtMCsGA1UEAxMk MDBmZDMzNzgtNGJjMy00MjE2LTk0ZjctOTBjN2VmYjQ3ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPLNXoKNUMizIxXN2GBd43Ml88Z19dBpKI9m pLy2lfTpM82uP3g8Lwkb0f9dyjl8U4Hq7QzLmLS7isTRFNJpPIVwxYgDmcF0S5L+ l4J/ziA0OuBHO5dp0MZLofWScwnsiSw8Df6EUxoJkKLfDtp2qJUtgQ3pY3IN2QJb mFR6LYS4EJrkZEMd50xU2rUpR9D3jIKa5k5mwxNRLkBopKcfddkkaqIZnPOv3ybT 5RabwLItpOTuc9klImL0ds/1Bb5OE5U4GReyEYHx09jcxvBqJog+XQ7WJDVLHR2/ +GfPtQWvAS4A3DZSA/uRVKDHyEDILElChlwnZeTDMY3ISN99nwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFE3pn8mDfoNWEzmvkZaakTW9CCJPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w MGZkMzM3OC00YmMzLTQyMTYtOTRmNy05MGM3ZWZiNDdkODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzAwZmQzMzc4LTRiYzMtNDIxNi05 NGY3LTkwYzdlZmI0N2Q4MC8wMGZkMzM3OC00YmMzLTQyMTYtOTRmNy05MGM3ZWZi NDdkODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAICOaQDBADQZ64wHgYIKwYBBQUHAQgBAf8EDzAN oAswCQICfGwCAwC0NTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYfMXH11pUEWtQNHzJ92LyTK+PxlewkUWk z5km6DrAOWckker9od6xRx0UabCt+uhqMhPZ4Wv38ZwA9pP8y4GFjZZuKRsgpfMM Yzy9rWVyCrpdhig+Bya8iUw+f6SVvbfm5XV+YVYeDsa90+SHisdO3ncR2ZOY/Fsm ETnaxSvYGwuJTEq0F6M5xiFmJIT8kU4CU532QFOeSVxtSOHsx37CcpfuBYD43MW+ zDVjg1V/SaxwNQW35MJb+VUQGlS32OQBhODL2mntqNb48Ct4EBC689Pr/cJah1qt 08Oq0zPle+2iYmmqehilCdpoHP3RCFcrd1hrxC+M/kO/UDDrjPXr -----END CERTIFICATE-----Generated at Fri May 10 16:51:42 2024 by rpki-client on console-ams.rpki-client.org