$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer File: b764fe0e-08f6-4216-a719-1ca6386e5571.cer (raw, json) Hash identifier: PnNoosLYvuDgE5Oh7BNTx7hMNgPJeInECQsClvQnEE4= Subject key identifier: 71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858428C8494514F7A9F141ED05740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Jul 2023 23:25:34 +0000 Certificate not after: Thu 16 Oct 2025 23:25:34 +0000 Subordinate resources: AS: 400862 IP: 209.188.110.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:8c:84:94:51:4f:7a:9f:14:1e:d0:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 14 23:25:34 2023 GMT Not After : Oct 16 23:25:34 2025 GMT Subject: CN=b764fe0e-08f6-4216-a719-1ca6386e5571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:d2:f6:de:fa:dc:e5:bd:2d:3f:f9:a9:f9: a0:9a:fa:2e:81:3e:a3:61:b0:fa:bb:fc:a5:29:03: 8a:1d:b7:f5:be:56:28:49:07:b3:23:fb:ca:c5:b6: 34:88:54:8e:de:69:45:c1:a9:47:f5:62:a2:88:8a: a6:ac:43:34:a6:3e:20:4f:18:fc:f1:b1:4a:d1:6f: 99:aa:af:ad:bc:af:c9:b5:7c:39:7f:d0:bf:47:69: 06:b8:68:30:ef:a3:f8:1f:a5:84:1e:4e:3a:2e:1d: 6c:33:d9:4c:ee:df:d6:c6:28:4b:1e:df:36:d7:70: 75:8d:46:a7:2c:38:ac:2d:4f:ca:be:5b:8d:f6:07: 41:24:2e:51:c8:44:11:cb:45:a7:26:db:91:52:79: 93:1c:95:ee:15:3c:28:1d:51:a8:8b:16:82:b1:32: 7c:6c:ef:79:eb:0a:4e:9f:f9:1c:63:9a:85:4b:4c: d1:52:2f:f3:19:ff:e0:24:1c:6c:2f:ca:5b:47:2a: 70:fd:e0:7e:0b:83:9e:de:5f:85:0d:e7:8a:84:d5: a1:9c:83:aa:05:41:0e:01:a5:28:50:7d:2f:c1:8b: b9:25:dd:e8:77:0d:88:1e:40:a7:8d:b8:ba:19:fe: 84:7e:6e:70:17:75:81:02:ab:25:31:b2:bf:b3:8c: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 209.188.110.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400862 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ae:04:a8:64:52:a4:f2:97:ff:5a:7b:db:65:6d:47:93:5d: 1a:62:64:22:02:5a:95:9c:3e:cc:de:81:74:3b:09:00:e4:63: 76:6a:87:b6:7a:30:72:04:27:75:e6:9f:b9:17:9a:6a:b3:6f: 41:15:c9:bf:27:e3:91:e0:9f:98:78:31:7f:41:32:bc:fd:4c: be:98:d6:80:26:98:ec:9f:17:93:5c:0a:70:a2:3a:67:39:87: 0b:0b:bd:20:83:0e:e0:84:c0:92:f4:0e:13:f6:7f:b1:db:cf: 9d:db:79:ff:c3:38:cf:2d:66:49:c5:e3:c2:b3:fb:87:db:fc: 3a:90:33:57:13:22:5d:bb:d5:42:1b:64:c3:8b:59:8a:e4:d3: 6a:d7:6f:99:85:05:21:e1:91:bf:63:f7:b2:54:fc:c9:fb:f6: e9:8c:e1:49:83:61:c1:60:17:c2:00:25:bd:1e:f0:29:2d:1f: 3d:73:82:25:d9:95:bc:db:77:9e:32:be:8e:da:2b:b5:a9:59: 82:28:13:1f:2f:7d:37:40:6a:e4:23:0e:83:d0:d2:00:00:82: 76:39:d1:89:e0:d7:60:f6:f4:c5:ef:3e:9c:44:dc:e8:97:aa: 29:e3:df:65:1c:41:b1:10:98:11:be:14:cf:1c:c5:be:36:0e: cf:0f:a1:57 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEKMhJRRT3qfFB7QV0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcxNDIzMjUzNFoXDTI1MTAxNjIzMjUzNFowLzEtMCsGA1UEAxMk Yjc2NGZlMGUtMDhmNi00MjE2LWE3MTktMWNhNjM4NmU1NTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJTS9t763OW9LT/5qfmgmvougT6jYbD6u/yl KQOKHbf1vlYoSQezI/vKxbY0iFSO3mlFwalH9WKiiIqmrEM0pj4gTxj88bFK0W+Z qq+tvK/JtXw5f9C/R2kGuGgw76P4H6WEHk46Lh1sM9lM7t/WxihLHt8213B1jUan LDisLU/KvluN9gdBJC5RyEQRy0WnJtuRUnmTHJXuFTwoHVGoixaCsTJ8bO956wpO n/kcY5qFS0zRUi/zGf/gJBxsL8pbRypw/eB+C4Oe3l+FDeeKhNWhnIOqBUEOAaUo UH0vwYu5Jd3odw2IHkCnjbi6Gf6Efm5wF3WBAqslMbK/s4zhTQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHG0W262wOYojfAJYLSxcRSP4cvwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i NzY0ZmUwZS0wOGY2LTQyMTYtYTcxOS0xY2E2Mzg2ZTU1NzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2I3NjRmZTBlLTA4ZjYtNDIxNi1h NzE5LTFjYTYzODZlNTU3MS9iNzY0ZmUwZS0wOGY2LTQyMTYtYTcxOS0xY2E2Mzg2 ZTU1NzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADRvG4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh3eMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKWuBKhkUqTyl/9ae9tlbUeTXRpiZCICWpWcPszegXQ7CQDk Y3Zqh7Z6MHIEJ3Xmn7kXmmqzb0EVyb8n45Hgn5h4MX9BMrz9TL6Y1oAmmOyfF5Nc CnCiOmc5hwsLvSCDDuCEwJL0DhP2f7Hbz53bef/DOM8tZknF48Kz+4fb/DqQM1cT Il271UIbZMOLWYrk02rXb5mFBSHhkb9j97JU/Mn79umM4UmDYcFgF8IAJb0e8Ckt Hz1zgiXZlbzbd54yvo7aK7WpWYIoEx8vfTdAauQjDoPQ0gAAgnY50Yng12D29MXv PpxE3OiXqinj32UcQbEQmBG+FM8cxb42Ds8PoVc= -----END CERTIFICATE-----Generated at Thu May 9 20:34:26 2024 by rpki-client on console-ams.rpki-client.org