$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer File: 8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer (raw, json) Hash identifier: 7NojxsyOhVL3HXU00EB1d90eA+EcuiEom51RR/gD86s= Subject key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285844CDEA7263325CC348D66D0660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Feb 2024 19:12:14 +0000 Certificate not after: Wed 24 Sep 2025 19:48:53 +0000 Subordinate resources: AS: 26284 IP: 64.251.208.0/23 IP: 216.250.0.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:cd:ea:72:63:32:5c:c3:48:d6:6d:06:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 6 19:12:14 2024 GMT Not After : Sep 24 19:48:53 2025 GMT Subject: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5e:5b:43:a6:3c:4c:34:69:5b:c3:a1:f2:f7: f2:38:28:f6:fa:eb:1e:d5:7d:37:6b:c7:2c:49:d8: 86:99:09:9f:f1:a7:dd:24:6b:3b:e6:eb:05:85:ca: fa:56:7a:c8:60:1d:dc:15:95:5e:41:f6:04:a6:3a: 72:fb:bc:b3:ff:30:85:76:90:d3:4c:57:74:8d:9e: 50:59:5a:8b:16:06:8e:ea:8d:44:2d:0a:00:c1:a0: 1e:8f:ec:7a:63:a3:38:44:a9:9e:d4:56:67:e5:cb: 95:42:ca:8b:6f:68:d1:e3:de:b0:5d:70:64:d6:5e: 5c:34:3c:e6:a6:17:d6:91:fb:f3:15:e1:66:d9:d7: bb:43:04:21:78:6e:34:cd:32:53:0e:57:d5:87:22: b0:fa:e5:8f:ea:6e:a5:8a:22:ec:3a:f6:0f:cc:48: 08:94:6e:24:b7:91:39:db:da:e5:31:98:a7:2f:84: fa:b4:57:4b:35:3f:1c:c7:03:4a:fe:72:2f:70:70: 62:a4:57:75:ea:f3:1a:8e:20:4b:a2:9c:02:1c:b3: 81:c2:8f:99:1c:aa:4a:fb:17:02:61:4a:6a:a5:d8: 69:e7:eb:b3:7b:3d:8c:96:13:46:4b:de:e8:31:ed: 2d:f2:49:be:9e:7d:66:98:5a:b4:7f:10:04:38:79: 1e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.251.208.0/23 216.250.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26284 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:cd:a0:96:39:71:5f:c4:ca:bb:b5:df:bb:59:07:fb:ed:5a: 48:f7:fc:36:61:db:34:8b:41:5e:88:ea:72:a9:02:de:cb:21: 70:de:40:e0:4c:90:e4:37:0d:59:5a:66:b4:a3:c3:e9:06:25: af:83:9c:21:9d:46:82:4f:8a:39:b8:78:f3:b2:b6:a3:08:30: f5:f3:57:c2:02:2b:b3:f6:a9:ea:42:64:e5:77:2b:a5:af:40: 35:5a:e5:a6:80:df:2e:88:e1:1e:69:bb:22:e9:18:f1:be:dc: 52:7f:40:1e:59:f5:bf:91:85:7c:db:20:75:a4:87:b9:4d:90: 70:92:7e:fd:0c:bb:68:f9:19:b7:13:91:4e:b9:48:85:2f:c9: 43:df:cd:07:fc:9f:7d:af:22:19:dd:03:8d:23:36:c8:ed:c4: 49:36:13:e7:96:33:c9:b8:00:94:f3:73:e3:38:84:63:0b:16: 68:d9:11:0b:f4:0e:1a:17:56:4e:43:73:89:46:68:07:80:ca: 96:91:12:b3:d1:95:b2:27:8a:8f:74:38:26:c5:aa:eb:8d:19: ff:a4:77:a1:bf:19:e0:0a:86:2d:10:d2:34:fd:f7:0b:89:7e: d6:f7:a5:e4:70:a9:59:da:6b:2d:bb:e7:5f:cc:13:41:87:0b: 33:3c:50:40 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWETN6nJjMlzDSNZtBmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDIwNjE5MTIxNFoXDTI1MDkyNDE5NDg1M1owLzEtMCsGA1UEAxMk OGVlNTJiMGQtYjE1Yy00YjljLWFhM2EtM2Q0YTRkMzZhZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l5bQ6Y8TDRpW8Oh8vfyOCj2+use1X03a8cs SdiGmQmf8afdJGs75usFhcr6VnrIYB3cFZVeQfYEpjpy+7yz/zCFdpDTTFd0jZ5Q WVqLFgaO6o1ELQoAwaAej+x6Y6M4RKme1FZn5cuVQsqLb2jR496wXXBk1l5cNDzm phfWkfvzFeFm2de7QwQheG40zTJTDlfVhyKw+uWP6m6liiLsOvYPzEgIlG4kt5E5 29rlMZinL4T6tFdLNT8cxwNK/nIvcHBipFd16vMajiBLopwCHLOBwo+ZHKpK+xcC YUpqpdhp5+uzez2MlhNGS97oMe0t8km+nn1mmFq0fxAEOHkenwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFOB0OSrblObUIzRdqWG7DyjksnbYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 ZWU1MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRhNGQzNmFkMjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzhlZTUyYjBkLWIxNWMtNGI5Yy1h YTNhLTNkNGE0ZDM2YWQyMS84ZWU1MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRhNGQz NmFkMjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAFA+9ADBALY+gAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICZqwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEARM2gljlxX8TKu7Xfu1kH++1aSPf8NmHbNItBXojq cqkC3sshcN5A4EyQ5DcNWVpmtKPD6QYlr4OcIZ1Ggk+KObh487K2owgw9fNXwgIr s/ap6kJk5Xcrpa9ANVrlpoDfLojhHmm7IukY8b7cUn9AHln1v5GFfNsgdaSHuU2Q cJJ+/Qy7aPkZtxORTrlIhS/JQ9/NB/yffa8iGd0DjSM2yO3ESTYT55YzybgAlPNz 4ziEYwsWaNkRC/QOGhdWTkNziUZoB4DKlpESs9GVsieKj3Q4JsWq640Z/6R3ob8Z 4AqGLRDSNP33C4l+1vel5HCpWdprLbvnX8wTQYcLMzxQQA== -----END CERTIFICATE-----Generated at Thu May 9 20:34:18 2024 by rpki-client on console-ams.rpki-client.org