$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer File: 19e347cf-c0cb-49a3-b025-5d36006aab3e.cer (raw, json) Hash identifier: EWRdIkC6nc6WE3hQ6QPy8leicUo9HWZO8wOHn4xFKls= Subject key identifier: A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584235AC712CB60C2916BA317800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Jun 2023 20:50:33 +0000 Certificate not after: Mon 15 Sep 2025 20:50:33 +0000 Subordinate resources: AS: 398537 IP: 198.206.191.0/24 IP: 204.108.164.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:35:ac:71:2c:b6:0c:29:16:ba:31:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 13 20:50:33 2023 GMT Not After : Sep 15 20:50:33 2025 GMT Subject: CN=19e347cf-c0cb-49a3-b025-5d36006aab3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:ac:a6:fd:17:70:3b:f8:1e:14:b2:b1:21: 50:12:7b:cf:3e:83:7d:d2:28:b9:99:23:c4:99:38: 7c:71:ce:ef:4c:9f:aa:5e:bf:e6:87:a3:5e:9b:bb: 1f:78:e7:11:73:af:29:63:96:9d:2b:ce:c3:c9:08: d6:ad:8e:1a:80:e3:aa:2a:8d:35:ae:3e:d8:23:6f: a4:8d:03:6e:48:09:32:b4:4b:6f:8b:96:9e:b6:0e: 3c:17:a4:ec:f8:ad:fa:ba:86:78:05:cb:73:d0:f6: 2a:6d:9c:bb:4a:99:65:22:af:9a:31:a7:91:c6:f1: ec:ab:29:d4:8c:aa:3c:05:a7:f5:86:b8:1b:b5:3c: 0e:2c:13:49:c1:77:ae:c1:fc:2b:63:8a:4a:9d:64: d0:0e:03:ed:62:5d:65:c0:c4:34:32:7d:ec:b5:44: 80:3f:a2:2d:e2:bb:9e:6d:67:b0:7d:e5:41:74:5b: f6:6a:00:dc:20:93:f2:38:af:7c:f9:f3:7e:f8:37: 8b:d5:04:a8:ed:3e:42:34:1c:5b:f6:18:20:fc:60: b1:7b:51:23:57:5c:5a:33:35:a5:3a:51:7f:2f:4f: 37:cd:f0:1d:6c:6b:48:a3:72:90:61:a0:a4:28:03: df:c1:03:52:ff:9e:f9:8f:46:74:cb:22:27:1e:a2: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 198.206.191.0/24 204.108.164.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398537 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:46:e0:e4:40:25:51:13:9c:66:6b:ca:22:30:38:62:06:27: ae:f1:ae:c0:1e:dd:23:7d:fe:cf:1a:e2:31:87:49:6a:a9:f0: 52:f1:53:29:5a:32:f6:0a:a4:42:26:63:35:cc:b4:b9:6c:a1: dc:04:4d:6d:5a:f4:31:91:70:a8:06:fc:c1:4f:3b:6d:be:78: 99:05:a3:1b:79:f3:2f:c5:62:8e:50:62:8e:4a:5f:69:f3:dc: 61:5b:0e:4a:c6:8f:91:ac:66:5d:08:26:d1:9c:63:32:3f:a6: 45:b1:c4:91:e6:4d:b2:1a:90:e8:45:83:e7:69:d8:10:a6:ab: c2:6e:bb:f8:0a:ab:45:89:ca:c0:51:27:45:e9:46:65:68:df: 76:67:40:0e:cd:db:e0:6b:b8:78:2d:18:15:d5:20:0f:15:e3: c1:84:8a:9d:a6:3b:e4:37:9e:a6:49:a5:25:ce:12:43:c3:bf: 39:00:f0:fc:b4:27:3c:f9:f8:e7:94:00:97:89:ae:1a:0c:ef: 89:0e:62:1b:bc:0b:6a:22:97:ef:21:6f:07:6d:03:67:80:2b: 9e:17:a2:02:38:2a:6d:b0:6e:31:a1:8a:33:3e:76:91:df:5c: 00:14:8c:49:aa:6f:6d:26:be:1b:63:a1:20:15:c4:42:8c:61: 19:1f:76:e5 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEI1rHEstgwpFroxeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDYxMzIwNTAzM1oXDTI1MDkxNTIwNTAzM1owLzEtMCsGA1UEAxMk MTllMzQ3Y2YtYzBjYi00OWEzLWIwMjUtNWQzNjAwNmFhYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+qspv0XcDv4HhSysSFQEnvPPoN90ii5mSPE mTh8cc7vTJ+qXr/mh6Nem7sfeOcRc68pY5adK87DyQjWrY4agOOqKo01rj7YI2+k jQNuSAkytEtvi5aetg48F6Ts+K36uoZ4Bctz0PYqbZy7SpllIq+aMaeRxvHsqynU jKo8Baf1hrgbtTwOLBNJwXeuwfwrY4pKnWTQDgPtYl1lwMQ0Mn3stUSAP6It4rue bWewfeVBdFv2agDcIJPyOK98+fN++DeL1QSo7T5CNBxb9hgg/GCxe1EjV1xaMzWl OlF/L083zfAdbGtIo3KQYaCkKAPfwQNS/575j0Z0yyInHqI4OwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFKNhe00c2meBmxfwoU7R1bOnNtm1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x OWUzNDdjZi1jMGNiLTQ5YTMtYjAyNS01ZDM2MDA2YWFiM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzE5ZTM0N2NmLWMwY2ItNDlhMy1i MDI1LTVkMzYwMDZhYWIzZS8xOWUzNDdjZi1jMGNiLTQ5YTMtYjAyNS01ZDM2MDA2 YWFiM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGzr8DBAHMbKQwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhTJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIZG4ORAJVETnGZryiIwOGIGJ67xrsAe3SN9/s8a 4jGHSWqp8FLxUylaMvYKpEImYzXMtLlsodwETW1a9DGRcKgG/MFPO22+eJkFoxt5 8y/FYo5QYo5KX2nz3GFbDkrGj5GsZl0IJtGcYzI/pkWxxJHmTbIakOhFg+dp2BCm q8Juu/gKq0WJysBRJ0XpRmVo33ZnQA7N2+BruHgtGBXVIA8V48GEip2mO+Q3nqZJ pSXOEkPDvzkA8Py0Jzz5+OeUAJeJrhoM74kOYhu8C2oil+8hbwdtA2eAK54XogI4 Km2wbjGhijM+dpHfXAAUjEmqb20mvhtjoSAVxEKMYRkfduU= -----END CERTIFICATE-----Generated at Thu May 9 21:06:14 2024 by rpki-client on console-fra.rpki-client.org