$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer File: ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer (raw, json) Hash identifier: WKBD6xixJfeGchOpzMClCRz3gqYW27xkWBZb2XF767k= Subject key identifier: 10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842760C2E74DE562F6D314E3AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Jul 2023 22:15:11 +0000 Certificate not after: Wed 08 Oct 2025 20:29:29 +0000 Subordinate resources: AS: 23368 IP: 199.66.76.0/22 IP: 2602:fa60::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:76:0c:2e:74:de:56:2f:6d:31:4e:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 6 22:15:11 2023 GMT Not After : Oct 8 20:29:29 2025 GMT Subject: CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8f:eb:c5:2d:3c:39:55:0e:fb:b1:f5:e1:b1: 21:e8:2e:5e:db:e5:82:ac:9d:5a:50:fd:1d:1c:f5: 9f:a4:bd:9e:0b:f0:5f:9c:14:df:7c:d4:94:87:06: e0:23:ef:ce:12:de:ef:9e:d6:c6:65:a1:1e:a4:56: a9:99:75:48:b7:78:72:a7:f9:c0:56:aa:2f:47:dd: 22:1f:8f:72:70:8e:47:18:b7:4c:1e:c0:e6:9c:67: a3:bd:f1:2a:a9:81:a2:87:fb:ca:e7:17:f3:41:94: 0e:d6:52:37:19:e6:6f:78:29:41:17:a5:b8:8d:8e: ce:40:bd:54:d1:66:9b:72:c7:2f:fc:7a:56:9d:48: c8:dc:b0:18:3f:09:44:3c:05:45:f7:97:69:88:69: e7:bb:8f:53:24:2c:81:79:f5:22:8d:14:67:d7:f0: b2:52:78:dd:bc:fd:f8:10:77:41:dc:8d:f5:82:2b: 9b:2e:f3:a0:58:d5:2d:1d:40:9b:7d:9c:9a:5a:dd: 51:9d:67:d6:c6:b9:1a:a0:d5:09:fa:f8:9e:60:8c: af:ff:c0:0b:d0:9f:e6:05:61:d6:3a:0e:bc:d8:b6: 77:55:27:09:ac:d1:df:38:c5:c1:e3:27:18:d1:99: 41:67:de:11:38:c6:4b:4a:89:d2:5c:22:60:99:cb: f1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.66.76.0/22 IPv6: 2602:fa60::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23368 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9d:41:85:67:e4:71:f9:05:da:39:69:b8:5e:5f:76:30:37: 45:c0:30:0e:74:6b:0b:3f:83:69:85:ed:53:f2:b7:74:3d:4f: ae:0b:d4:78:92:3b:a3:cc:e2:da:9b:a7:2a:96:85:b8:63:64: ff:ec:0e:d9:64:6a:bb:fc:df:a8:b6:86:67:a4:f8:28:57:4a: 94:71:28:23:db:c8:b5:cc:37:3f:56:b4:74:41:e1:23:7e:61: a2:a2:1e:8a:08:42:16:21:07:8f:93:4f:b0:34:66:55:ac:6d: c2:3e:7c:37:16:7d:f9:ba:c1:39:08:ab:7d:76:40:f0:df:03: e7:82:65:ba:45:f4:88:57:5b:9e:20:10:0f:b5:1b:5d:df:03: 55:c5:72:58:0d:e9:7b:ab:c6:3d:33:cd:0c:88:20:42:9f:a1: 10:94:39:64:10:11:02:18:c0:19:a9:41:8d:c0:c0:9b:ef:f1: 18:73:f7:72:75:cd:06:a9:0d:5f:fc:c2:b6:5f:97:45:da:2f: 3b:15:88:c3:eb:4c:ed:bd:86:6e:28:7c:86:2e:f1:2f:4f:54: f5:16:3b:3d:1a:44:b6:ac:82:53:20:7a:90:7e:74:2f:4a:a2: 7a:20:ec:10:03:0d:d1:91:57:31:6b:0a:db:14:2f:3c:a6:12: 11:a6:18:c4 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEJ2DC503lYvbTFOOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcwNjIyMTUxMVoXDTI1MTAwODIwMjkyOVowLzEtMCsGA1UEAxMk YWIzZjNhZTgtMWRiNy00MTNlLTk3MTMtYWIwNWMzZmE1ZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY/rxS08OVUO+7H14bEh6C5e2+WCrJ1aUP0d HPWfpL2eC/BfnBTffNSUhwbgI+/OEt7vntbGZaEepFapmXVIt3hyp/nAVqovR90i H49ycI5HGLdMHsDmnGejvfEqqYGih/vK5xfzQZQO1lI3GeZveClBF6W4jY7OQL1U 0Wabcscv/HpWnUjI3LAYPwlEPAVF95dpiGnnu49TJCyBefUijRRn1/CyUnjdvP34 EHdB3I31giubLvOgWNUtHUCbfZyaWt1RnWfWxrkaoNUJ+vieYIyv/8AL0J/mBWHW Og682LZ3VScJrNHfOMXB4ycY0ZlBZ94ROMZLSonSXCJgmcvxewIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBDDgwHhQBcOFNm/x33Hi7PYG3S4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h YjNmM2FlOC0xZGI3LTQxM2UtOTcxMy1hYjA1YzNmYTVkNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FiM2YzYWU4LTFkYjctNDEzZS05 NzEzLWFiMDVjM2ZhNWQ3NS9hYjNmM2FlOC0xZGI3LTQxM2UtOTcxMy1hYjA1YzNm YTVkNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHQkwwDgQCAAIwCAMGBCYC+mAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAltIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADOdQYVn5HH5Bdo5abheX3YwN0XA MA50aws/g2mF7VPyt3Q9T64L1HiSO6PM4tqbpyqWhbhjZP/sDtlkarv836i2hmek +ChXSpRxKCPbyLXMNz9WtHRB4SN+YaKiHooIQhYhB4+TT7A0ZlWsbcI+fDcWffm6 wTkIq312QPDfA+eCZbpF9IhXW54gEA+1G13fA1XFclgN6Xurxj0zzQyIIEKfoRCU OWQQEQIYwBmpQY3AwJvv8Rhz93J1zQapDV/8wrZfl0XaLzsViMPrTO29hm4ofIYu 8S9PVPUWOz0aRLasglMgepB+dC9Konog7BADDdGRVzFrCtsULzymEhGmGMQ= -----END CERTIFICATE-----Generated at Thu May 9 21:06:21 2024 by rpki-client on console-fra.rpki-client.org