$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.cer File: 7fb8625e-5dd1-40c0-bda6-2628ddc6717f.cer (raw, json) Hash identifier: 69+wqUhO2l6mh16eyLtLJoIdbcIHlr3MsktEEucjixk= Subject key identifier: 31:1F:D6:BF:74:5F:38:AA:19:D6:20:07:2D:69:85:50:49:A7:17:DC Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285843113AD5BB10606229F2883E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 31 Aug 2023 12:19:29 +0000 Certificate not after: Wed 03 Dec 2025 13:19:29 +0000 Subordinate resources: AS: 393988 IP: 199.244.245.0 -- 199.244.246.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:11:3a:d5:bb:10:60:62:29:f2:88:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 31 12:19:29 2023 GMT Not After : Dec 3 13:19:29 2025 GMT Subject: CN=7fb8625e-5dd1-40c0-bda6-2628ddc6717f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:08:35:b8:8b:15:2f:ad:b1:2c:c7:02:71: 57:16:1f:38:c1:93:71:5e:a4:f4:bc:3f:0f:c9:44: cf:40:a4:9f:b3:5c:39:2a:f2:ec:36:c6:d6:68:d4: 06:c0:66:e2:bb:b7:8a:ba:ef:b6:af:72:3e:b2:2b: 2c:2c:39:37:f5:81:29:57:67:5f:fe:7e:36:3d:56: 72:48:c6:e9:6c:33:21:d6:d2:97:d2:5e:83:4b:89: 06:aa:67:e5:64:36:30:b3:14:33:ed:1c:da:ce:87: 18:b7:57:89:e5:19:71:f0:88:96:73:1c:93:62:7f: 1a:53:bf:31:cd:3d:95:a8:3d:d9:f1:60:fb:7e:67: 18:b9:5d:0e:28:bc:0f:8f:ec:d1:96:c7:89:c5:68: 11:9f:06:a8:2e:39:11:3a:2f:23:85:89:b6:f4:bf: 86:83:d1:33:49:7b:86:c1:cf:66:d8:8a:b7:19:fc: 65:1f:78:77:c1:d5:16:18:75:9b:ba:6d:99:d9:19: 32:99:4d:1b:a9:87:6c:34:2e:97:f1:b5:ae:ae:62: bf:4c:b4:83:64:4a:1f:db:a9:37:a9:27:63:f3:32: 51:24:25:d7:52:fc:dd:2a:62:11:af:3e:b2:9b:a1: 90:bf:6e:3e:6f:d4:51:e5:e4:30:ed:7c:ca:d5:99: c2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1F:D6:BF:74:5F:38:AA:19:D6:20:07:2D:69:85:50:49:A7:17:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.244.245.0-199.244.246.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393988 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:74:cc:25:66:37:f8:0b:dd:cc:8a:a7:f8:00:15:69:50:c2: e7:69:bf:bf:d4:27:b2:03:66:59:0f:26:b3:0b:f6:10:e0:ca: 2c:f0:c0:30:a2:32:d4:c6:f2:bd:70:c2:62:93:0f:06:0c:4d: 9a:84:18:57:93:12:f1:f0:27:8e:80:b2:6e:8d:2f:d6:21:c2: e6:be:8b:ea:b3:e1:10:67:1f:b4:22:58:c4:9d:bd:f7:99:72: 85:cf:36:ab:82:82:4b:da:bb:ac:41:9a:3d:70:6a:b9:ec:66: 09:63:5e:5d:bd:04:90:37:87:f9:6d:27:b4:a5:27:22:19:33: c9:68:50:6f:bc:42:7b:13:bf:0f:32:44:a8:55:d2:38:89:5c: 0c:27:5e:a3:fa:9a:d1:08:59:1b:bb:a1:56:68:d6:02:42:46: 90:78:f7:ec:4c:99:83:6f:2a:6f:c6:90:75:65:f4:4d:d6:23: b2:d0:95:61:4c:8a:ec:65:c1:17:65:6d:e8:2a:a1:9c:2d:10: 48:54:29:7a:98:6c:51:ef:05:90:08:5f:8f:ef:5f:58:8e:22: 83:dd:46:80:22:ef:d3:b7:1b:1d:1a:09:2d:11:bf:a4:96:1b: 50:d8:af:6e:b1:bc:80:64:59:12:ff:81:db:f3:08:db:27:80: 07:16:9b:7c -----BEGIN CERTIFICATE----- MIIHETCCBfmgAwIBAgIUAQ0Mn0MoWEMROtW7EGBiKfKIPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgzMTEyMTkyOVoXDTI1MTIwMzEzMTkyOVowLzEtMCsGA1UEAxMk N2ZiODYyNWUtNWRkMS00MGMwLWJkYTYtMjYyOGRkYzY3MTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl8INbiLFS+tsSzHAnFXFh84wZNxXqT0vD8P yUTPQKSfs1w5KvLsNsbWaNQGwGbiu7eKuu+2r3I+sissLDk39YEpV2df/n42PVZy SMbpbDMh1tKX0l6DS4kGqmflZDYwsxQz7RzazocYt1eJ5Rlx8IiWcxyTYn8aU78x zT2VqD3Z8WD7fmcYuV0OKLwPj+zRlseJxWgRnwaoLjkROi8jhYm29L+Gg9EzSXuG wc9m2Iq3GfxlH3h3wdUWGHWbum2Z2RkymU0bqYdsNC6X8bWurmK/TLSDZEof26k3 qSdj8zJRJCXXUvzdKmIRrz6ym6GQv24+b9RR5eQw7XzK1ZnCPQIDAQABo4IEIzCC BB8wHQYDVR0OBBYEFDEf1r90XziqGdYgBy1phVBJpxfcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83 ZmI4NjI1ZS01ZGQxLTQwYzAtYmRhNi0yNjI4ZGRjNjcxN2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzdmYjg2MjVlLTVkZDEtNDBjMC1i ZGE2LTI2MjhkZGM2NzE3Zi83ZmI4NjI1ZS01ZGQxLTQwYzAtYmRhNi0yNjI4ZGRj NjcxN2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMf09QMEAMf09jAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMGAwQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEARXTMJWY3+AvdzIqn+AAVaVDC52m/v9QnsgNm WQ8mswv2EODKLPDAMKIy1MbyvXDCYpMPBgxNmoQYV5MS8fAnjoCybo0v1iHC5r6L 6rPhEGcftCJYxJ2995lyhc82q4KCS9q7rEGaPXBquexmCWNeXb0EkDeH+W0ntKUn IhkzyWhQb7xCexO/DzJEqFXSOIlcDCdeo/qa0QhZG7uhVmjWAkJGkHj37EyZg28q b8aQdWX0TdYjstCVYUyK7GXBF2Vt6CqhnC0QSFQpephsUe8FkAhfj+9fWI4ig91G gCLv07cbHRoJLRG/pJYbUNivbrG8gGRZEv+B2/MI2yeABxabfA== -----END CERTIFICATE-----Generated at Thu May 9 20:34:17 2024 by rpki-client on console-ams.rpki-client.org