$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137.cer File: aed19c9c-a75a-48f8-98f4-685aa357a137.cer (raw, json) Hash identifier: lWSiaKU2ql0pUbx/s6k/GrCxO3Oxkopns1QGq9bl9pc= Subject key identifier: 71:BA:16:13:89:DA:69:E7:49:42:23:6D:82:66:01:57:18:E7:83:22 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584235357377F2549861396FCE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/aed19c9c-a75a-48f8-98f4-685aa357a137.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 Jun 2023 16:50:48 +0000 Certificate not after: Mon 15 Sep 2025 16:50:48 +0000 Subordinate resources: AS: 46883 IP: 199.192.88.0/22 IP: 199.255.184.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:35:35:73:77:f2:54:98:61:39:6f:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 13 16:50:48 2023 GMT Not After : Sep 15 16:50:48 2025 GMT Subject: CN=aed19c9c-a75a-48f8-98f4-685aa357a137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:1b:de:15:6e:db:05:35:46:74:6b:38:1e: d0:1a:93:9a:ad:09:61:aa:a8:32:ae:37:33:66:79: ba:99:e9:6c:3b:e9:a9:6b:89:b1:b9:ff:8e:1e:07: 9c:72:55:51:dd:23:8b:d6:be:7d:e0:b3:ee:db:d4: 5f:6e:f3:03:af:0f:43:4b:ba:49:95:4d:5d:22:95: c1:86:af:36:d3:b3:66:a6:7f:62:98:d9:15:10:eb: d5:d5:80:b8:69:12:ca:9b:6f:12:ca:4a:b8:96:db: 33:82:71:7b:66:2b:b4:79:fc:9c:b4:04:f4:a8:41: 44:ff:bb:9a:c6:8d:ec:0b:c5:c7:de:31:b4:1e:c6: c7:a8:e0:c7:1e:2f:d6:6a:82:0e:e6:c8:02:6c:fa: 6b:4e:da:34:9b:5a:e8:29:2c:b0:d4:24:93:da:30: 74:0e:47:1a:8b:10:19:81:8b:80:5c:49:0a:48:b8: 0e:81:72:9d:4a:05:4d:19:46:2a:2e:ef:92:04:57: fe:6f:5f:b0:a6:b7:1f:0d:d3:c1:e2:2f:6a:9b:a2: 5f:30:49:f5:38:b0:7c:8c:9b:ce:3b:8a:25:06:82: c3:53:f7:de:6d:d5:6c:de:6a:6c:ad:dd:5d:45:a9: 4b:09:23:e7:f7:cc:2a:20:89:90:26:22:66:16:24: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BA:16:13:89:DA:69:E7:49:42:23:6D:82:66:01:57:18:E7:83:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/aed19c9c-a75a-48f8-98f4-685aa357a137.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.192.88.0/22 199.255.184.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46883 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:39:5d:5a:ee:3b:68:d8:52:8d:dd:90:47:7f:99:46:32:3f: 1d:05:f0:6e:c7:ec:8b:b8:cd:ce:d4:6a:9e:60:30:41:9d:7d: c0:61:8f:28:d9:32:fa:d3:14:88:c9:02:99:57:3a:95:a3:1f: e4:6d:b9:b6:c3:27:e2:0f:f7:0b:c1:ae:06:38:39:77:40:2d: 40:ea:fb:b2:25:2e:a3:71:14:7b:b6:31:64:3b:a4:7e:55:5a: 03:49:4e:7b:b0:1e:f7:a1:4a:e6:38:9c:5a:c9:a2:db:ca:2a: c6:41:61:30:48:a8:7f:17:e9:85:a3:cf:56:52:31:10:5f:ac: 83:15:29:85:d1:68:5f:7c:b6:dc:d7:ee:4e:65:00:c5:f8:4a: 80:c5:67:56:32:ea:f9:7e:48:2e:8c:84:a7:70:76:91:89:e8: 67:97:b1:ac:51:47:c6:b9:71:e6:3f:a2:aa:f4:b2:11:2d:62: e4:85:88:57:9b:2e:74:bc:88:bf:af:92:50:66:2c:c6:b5:96: 94:4b:9c:70:f8:66:b1:63:e0:a6:bc:bf:7e:e1:22:72:d5:82: 3e:ba:26:91:65:a2:7f:22:53:40:00:6a:03:08:da:69:0b:93: 62:58:75:69:92:9b:20:7c:42:5f:34:0e:a7:c2:8e:7c:00:67: 78:e8:48:99 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEI1NXN38lSYYTlvzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDYxMzE2NTA0OFoXDTI1MDkxNTE2NTA0OFowLzEtMCsGA1UEAxMk YWVkMTljOWMtYTc1YS00OGY4LTk4ZjQtNjg1YWEzNTdhMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq00b3hVu2wU1RnRrOB7QGpOarQlhqqgyrjcz Znm6melsO+mpa4mxuf+OHgecclVR3SOL1r594LPu29RfbvMDrw9DS7pJlU1dIpXB hq8207Nmpn9imNkVEOvV1YC4aRLKm28Sykq4ltszgnF7Ziu0efyctAT0qEFE/7ua xo3sC8XH3jG0HsbHqODHHi/WaoIO5sgCbPprTto0m1roKSyw1CST2jB0DkcaixAZ gYuAXEkKSLgOgXKdSgVNGUYqLu+SBFf+b1+wprcfDdPB4i9qm6JfMEn1OLB8jJvO O4olBoLDU/febdVs3mpsrd1dRalLCSPn98wqIImQJiJmFiRIDwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFHG6FhOJ2mnnSUIjbYJmAVcY54MiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h ZWQxOWM5Yy1hNzVhLTQ4ZjgtOThmNC02ODVhYTM1N2ExMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FlZDE5YzljLWE3NWEtNDhmOC05 OGY0LTY4NWFhMzU3YTEzNy9hZWQxOWM5Yy1hNzVhLTQ4ZjgtOThmNC02ODVhYTM1 N2ExMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHwFgDBALH/7gwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALcjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJs5XVruO2jYUo3dkEd/mUYyPx0F8G7H7Iu4zc7U ap5gMEGdfcBhjyjZMvrTFIjJAplXOpWjH+RtubbDJ+IP9wvBrgY4OXdALUDq+7Il LqNxFHu2MWQ7pH5VWgNJTnuwHvehSuY4nFrJotvKKsZBYTBIqH8X6YWjz1ZSMRBf rIMVKYXRaF98ttzX7k5lAMX4SoDFZ1Yy6vl+SC6MhKdwdpGJ6GeXsaxRR8a5ceY/ oqr0shEtYuSFiFebLnS8iL+vklBmLMa1lpRLnHD4ZrFj4Ka8v37hInLVgj66JpFl on8iU0AAagMI2mkLk2JYdWmSmyB8Ql80DqfCjnwAZ3joSJk= -----END CERTIFICATE-----Generated at Thu May 9 21:06:22 2024 by rpki-client on console-fra.rpki-client.org