$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820.cer File: 34468021-d790-42b8-b3cd-5d1592500820.cer (raw, json) Hash identifier: bMh7AICofWuNtH1N0wrV70RslXNDeWEtMICQNFx9kUs= Subject key identifier: 19:F8:D5:36:C3:9B:08:64:5A:8B:23:D7:BD:26:24:E7:59:FD:95:D9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584569DD016E9FBC83F17B980C04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Apr 2024 15:51:15 +0000 Certificate not after: Mon 15 Sep 2025 22:18:17 +0000 Subordinate resources: AS: 399912 IP: 207.228.212.0/22 IP: 216.73.188.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:69:dd:01:6e:9f:bc:83:f1:7b:98:0c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Apr 2 15:51:15 2024 GMT Not After : Sep 15 22:18:17 2025 GMT Subject: CN=34468021-d790-42b8-b3cd-5d1592500820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:23:24:99:5b:b5:8c:e6:3c:89:bd:5c:61:18: 26:1c:84:b1:ca:42:a6:f4:48:a9:15:99:86:38:cf: 2d:93:94:fc:8c:ab:f8:77:52:b4:46:af:d3:7a:98: 1c:c4:3e:ec:5c:58:85:ca:27:31:55:e8:f8:1d:88: dd:14:2a:2a:8d:67:c3:97:1d:4b:9d:1e:8e:a2:93: 22:d4:3b:c6:0e:be:df:7c:f7:aa:0d:73:60:c8:0b: 6f:c0:83:5f:3d:f1:7a:c2:45:b2:aa:31:e7:5e:a2: 35:11:2e:fb:80:90:7b:7a:08:19:cb:97:9e:f2:1d: 63:f2:54:29:1f:69:41:ef:92:e1:53:89:53:01:1d: 72:81:d4:11:89:61:c9:55:af:1a:d9:eb:b9:f4:27: d3:84:b4:12:59:5d:7d:e6:5d:f0:f5:e1:6c:67:4c: be:27:5f:ab:e1:a6:6c:20:29:34:cc:0a:70:79:99: 02:f6:93:a7:15:6e:17:e5:9c:1a:85:e1:15:fe:d5: 61:50:d8:dd:23:70:f0:8a:a2:0a:c9:1a:3f:9c:b6: 26:77:b5:e4:cc:02:df:c7:a0:44:5d:5e:d9:1a:0d: b1:53:f1:8f:c0:14:ba:4e:32:49:99:e1:9a:e8:28: 38:bf:5e:12:d6:45:6e:3c:d2:27:3f:62:c4:12:0f: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F8:D5:36:C3:9B:08:64:5A:8B:23:D7:BD:26:24:E7:59:FD:95:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 207.228.212.0/22 216.73.188.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399912 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d1:ec:7b:89:81:3a:b1:14:4e:a1:ad:21:1e:bb:89:d1:a5: 5a:34:ca:df:d8:38:9f:86:75:3f:56:e4:ce:38:c5:93:fa:48: 9d:76:c9:f7:fa:37:52:a6:80:3f:71:49:a2:c3:17:02:38:19: df:b8:d9:92:4e:df:10:65:11:db:03:b1:c7:83:d7:64:65:70: bd:8f:3a:5e:6d:34:81:a0:4b:7a:eb:dd:62:16:2f:3a:6d:78: 43:85:92:ae:82:77:21:83:c4:10:08:67:39:64:5a:7f:5a:bc: 29:5d:40:de:b7:a5:68:c6:c4:3a:2f:c0:28:c0:9e:2b:40:0b: 10:d6:17:c2:3a:8b:68:94:20:51:f8:b9:0b:1c:2a:79:20:fd: 8e:38:7f:68:9d:67:94:27:0c:15:90:24:ec:e3:5b:f3:79:dc: 1b:85:82:a4:95:5d:24:a5:6a:36:57:2a:2b:15:10:53:60:0c: b4:20:0a:aa:a3:35:d4:4f:73:91:a4:5b:7d:14:cb:6f:65:51: 07:03:56:a3:d1:af:94:bb:0e:33:92:31:b6:5b:b5:8e:b7:c5: 14:40:5f:0f:64:ba:d6:13:7f:0b:4d:84:3c:0c:b9:a9:fc:6c: 0e:c6:66:40:46:c9:c3:58:28:2d:9e:55:a2:b7:de:2a:12:a4: 96:bf:b4:e8 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEVp3QFun7yD8XuYDAQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDQwMjE1NTExNVoXDTI1MDkxNTIyMTgxN1owLzEtMCsGA1UEAxMk MzQ0NjgwMjEtZDc5MC00MmI4LWIzY2QtNWQxNTkyNTAwODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyMkmVu1jOY8ib1cYRgmHISxykKm9EipFZmG OM8tk5T8jKv4d1K0Rq/TepgcxD7sXFiFyicxVej4HYjdFCoqjWfDlx1LnR6OopMi 1DvGDr7ffPeqDXNgyAtvwINfPfF6wkWyqjHnXqI1ES77gJB7eggZy5ee8h1j8lQp H2lB75LhU4lTAR1ygdQRiWHJVa8a2eu59CfThLQSWV195l3w9eFsZ0y+J1+r4aZs ICk0zApweZkC9pOnFW4X5ZwaheEV/tVhUNjdI3DwiqIKyRo/nLYmd7XkzALfx6BE XV7ZGg2xU/GPwBS6TjJJmeGa6Cg4v14S1kVuPNInP2LEEg/luwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFBn41TbDmwhkWosj170mJOdZ/ZXZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z NDQ2ODAyMS1kNzkwLTQyYjgtYjNjZC01ZDE1OTI1MDA4MjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzM0NDY4MDIxLWQ3OTAtNDJiOC1i M2NkLTVkMTU5MjUwMDgyMC8zNDQ2ODAyMS1kNzkwLTQyYjgtYjNjZC01ZDE1OTI1 MDA4MjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALP5NQDBADYSbwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhooMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJbR7HuJgTqxFE6hrSEeu4nRpVo0yt/YOJ+GdT9W 5M44xZP6SJ12yff6N1KmgD9xSaLDFwI4Gd+42ZJO3xBlEdsDsceD12RlcL2POl5t NIGgS3rr3WIWLzpteEOFkq6CdyGDxBAIZzlkWn9avCldQN63pWjGxDovwCjAnitA CxDWF8I6i2iUIFH4uQscKnkg/Y44f2idZ5QnDBWQJOzjW/N53BuFgqSVXSSlajZX KisVEFNgDLQgCqqjNdRPc5GkW30Uy29lUQcDVqPRr5S7DjOSMbZbtY63xRRAXw9k utYTfwtNhDwMuan8bA7GZkBGycNYKC2eVaK33ioSpJa/tOg= -----END CERTIFICATE-----Generated at Fri May 10 17:22:08 2024 by rpki-client on console-fra.rpki-client.org