$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer File: a9e5e2fe-db33-400a-b1ca-805de52eab6a.cer (raw, json) Hash identifier: ozRHf0ieJKoZaDQNHn+jcgLZ0lSQxE4EUBmHp6KWnXM= Subject key identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285845C97492E97011ABFDB8E93080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 May 2024 21:38:26 +0000 Certificate not after: Sun 09 Aug 2026 21:38:26 +0000 Subordinate resources: IP: 23.177.72.0/24 IP: 2602:f90c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c9:74:92:e9:70:11:ab:fd:b8:e9:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: May 6 21:38:26 2024 GMT Not After : Aug 9 21:38:26 2026 GMT Subject: CN=a9e5e2fe-db33-400a-b1ca-805de52eab6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:28:ca:ae:2e:a2:a3:94:c9:3f:4a:22:3d:9d: c3:b3:f3:e0:8b:3d:b4:b1:60:c9:90:92:44:7f:67: fa:22:7c:fe:12:61:9b:65:ea:f0:7a:bb:f0:ba:38: a4:bc:35:6f:9d:56:0c:cb:ae:11:b4:20:a4:b5:a9: 69:54:ae:4e:1b:02:44:3f:15:4b:51:ff:8b:a8:bf: 0b:33:3a:c4:84:b2:4b:c7:66:92:24:c0:2a:dd:c5: 10:81:7b:f5:80:96:9a:cf:a5:2b:6e:b9:2b:30:78: 7b:f3:26:ae:1f:41:36:80:36:a5:3b:45:8e:f1:5d: cc:ce:cc:d2:47:58:25:ee:bd:6e:43:2e:62:77:54: 81:7d:43:f4:1e:33:a7:73:a6:b7:31:64:6a:0f:13: ce:99:8d:d5:a4:3e:8e:45:71:a9:bc:2d:d2:7d:c2: bb:cb:73:06:20:e6:c3:7e:e6:1b:21:38:30:28:51: 65:b6:86:3e:5d:f5:ab:18:5e:f1:83:cd:80:fa:ee: d6:c6:d6:42:88:dc:49:67:61:46:f6:c2:c6:05:7c: ce:c9:73:51:0c:8a:55:15:70:8a:87:34:c7:f2:5a: 4b:9b:fa:4c:90:80:28:b1:bc:05:2f:08:c3:b7:f1: dd:66:9f:1c:be:61:4d:fd:72:fd:ff:e8:bb:9a:88: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D2:88:A5:91:22:50:5E:3F:F9:B4:D7:65:6B:07:6E:8A:06:C9:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9e5e2fe-db33-400a-b1ca-805de52eab6a/a9e5e2fe-db33-400a-b1ca-805de52eab6a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 23.177.72.0/24 IPv6: 2602:f90c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b2:7e:d5:2d:24:d4:2c:fb:35:1d:60:6f:f4:96:c8:53:6f: 2d:80:4c:f4:91:49:68:9c:56:7d:4e:bc:2f:1e:5d:40:3e:6e: 2b:f6:84:d4:6b:95:00:a2:fd:3d:86:c9:9e:fc:95:5d:04:ca: ce:04:48:6a:9c:a8:24:62:c7:c0:c3:cb:2c:18:99:bd:e6:44: 84:23:23:b1:79:3b:29:79:f1:d3:df:db:fc:fa:ee:1d:ce:bb: 0c:cf:a6:5d:79:e3:11:e3:e4:01:eb:e6:b8:f5:01:38:c9:83: af:d5:71:30:89:a6:e5:02:98:c0:06:da:56:5b:1a:ca:c6:01: d1:2f:c6:1f:d2:c7:fd:40:91:d4:f2:e2:8e:cf:37:b0:bb:35: 2c:5e:8d:ee:18:e0:31:12:60:e1:2a:13:ca:9a:69:2b:ed:b0: 69:c5:73:67:34:f5:b3:cf:e4:62:bc:0e:bc:d4:d9:a7:ad:4a: 0b:ff:82:42:61:30:09:2a:70:05:ea:83:89:d8:ef:f7:6e:27: 0f:b4:18:01:70:29:e5:42:a7:99:2d:be:a7:ec:e1:2d:6b:66: 81:a3:03:d5:be:0b:dc:c8:17:10:e7:8b:26:49:04:d3:23:79: 84:ee:0b:8a:07:b1:75:03:5c:6e:d8:4e:08:f8:22:f9:5e:32: 44:11:95:78 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEXJdJLpcBGr/bjpMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDUwNjIxMzgyNloXDTI2MDgwOTIxMzgyNlowLzEtMCsGA1UEAxMk YTllNWUyZmUtZGIzMy00MDBhLWIxY2EtODA1ZGU1MmVhYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiijKri6io5TJP0oiPZ3Ds/Pgiz20sWDJkJJE f2f6Inz+EmGbZerwervwujikvDVvnVYMy64RtCCktalpVK5OGwJEPxVLUf+LqL8L MzrEhLJLx2aSJMAq3cUQgXv1gJaaz6UrbrkrMHh78yauH0E2gDalO0WO8V3MzszS R1gl7r1uQy5id1SBfUP0HjOnc6a3MWRqDxPOmY3VpD6ORXGpvC3SfcK7y3MGIObD fuYbITgwKFFltoY+XfWrGF7xg82A+u7WxtZCiNxJZ2FG9sLGBXzOyXNRDIpVFXCK hzTH8lpLm/pMkIAosbwFLwjDt/HdZp8cvmFN/XL9/+i7moiCrQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFADSiKWRIlBeP/m012VrB26KBsl/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h OWU1ZTJmZS1kYjMzLTQwMGEtYjFjYS04MDVkZTUyZWFiNmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E5ZTVlMmZlLWRiMzMtNDAwYS1i MWNhLTgwNWRlNTJlYWI2YS9hOWU1ZTJmZS1kYjMzLTQwMGEtYjFjYS04MDVkZTUy ZWFiNmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXsUgwDgQCAAIwCAMGACYC+QwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AESyftUtJNQs+zUdYG/0lshTby2ATPSRSWicVn1OvC8eXUA+biv2hNRrlQCi/T2G yZ78lV0Eys4ESGqcqCRix8DDyywYmb3mRIQjI7F5Oyl58dPf2/z67h3OuwzPpl15 4xHj5AHr5rj1ATjJg6/VcTCJpuUCmMAG2lZbGsrGAdEvxh/Sx/1AkdTy4o7PN7C7 NSxeje4Y4DESYOEqE8qaaSvtsGnFc2c09bPP5GK8DrzU2aetSgv/gkJhMAkqcAXq g4nY7/duJw+0GAFwKeVCp5ktvqfs4S1rZoGjA9W+C9zIFxDniyZJBNMjeYTuC4oH sXUDXG7YTgj4IvleMkQRlXg= -----END CERTIFICATE-----Generated at Sat Jun 1 16:25:18 2024 by rpki-client on console-fra.rpki-client.org