$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer File: d3de683a-04b1-4e1c-94c5-cb45e983323d.cer (raw, json) Hash identifier: fAE7A69lXTbBzofXBXxexsulxH5OYY5e1jwZ+20f2Ns= Subject key identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285845B922A46A221AB0CBC5AA4A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 May 2024 01:20:25 +0000 Certificate not after: Tue 04 Aug 2026 01:20:25 +0000 Subordinate resources: AS: 398888 IP: 128.254.220.0/22 IP: 163.123.216.0/24 IP: 2602:fd02::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b9:22:a4:6a:22:1a:b0:cb:c5:aa:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: May 1 01:20:25 2024 GMT Not After : Aug 4 01:20:25 2026 GMT Subject: CN=d3de683a-04b1-4e1c-94c5-cb45e983323d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:08:e5:d2:16:32:de:b6:dc:01:60:76:f0: 96:0c:33:15:43:41:b6:fd:3d:06:70:5e:bc:3f:9a: 24:16:7a:53:c5:20:3e:98:43:c7:0b:db:dd:53:77: ac:8c:7c:a1:bc:c0:e1:75:f5:f9:57:1d:f1:d2:08: 41:78:40:8e:df:bf:91:5e:4d:18:3e:c9:3e:27:07: 0e:c5:f8:fb:e6:0f:a6:98:f7:4c:19:06:94:df:78: 3d:a6:41:4b:da:4b:7e:3b:07:53:63:35:46:1b:4b: 78:bb:22:19:88:82:cb:66:77:b8:6b:0b:54:f6:35: 20:cb:b2:1e:a6:ec:0a:5f:ca:51:82:8c:1e:8e:61: 83:67:94:ff:d2:fe:97:83:9f:b8:5d:68:fe:8b:c6: 4b:5b:e1:a7:68:b5:d8:16:58:02:01:58:ad:16:fb: 27:d9:5b:41:e8:d5:ea:51:b3:a7:c2:76:3b:d0:b6: 68:55:3d:53:e4:2b:89:de:e4:70:6f:dc:ab:0d:da: c8:cf:0f:60:59:a9:3a:8d:0c:74:ac:58:9e:7c:01: 68:b4:65:46:14:20:c5:19:06:23:54:10:d9:bf:70: 11:e1:27:f1:d2:8f:e0:3f:a0:b4:58:29:46:4e:fe: d8:61:88:69:99:9a:27:fe:53:57:27:cb:16:51:33: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 128.254.220.0/22 163.123.216.0/24 IPv6: 2602:fd02::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398888 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:10:8f:83:ff:9d:35:7e:ac:17:69:e1:02:99:e1:36:39:de: 03:c9:fc:dc:75:f5:ac:da:fb:b9:24:c0:3b:19:cd:61:24:95: 20:8d:f8:2a:62:1e:8c:9d:8f:90:62:7e:7a:e9:d7:20:58:27: e5:2b:f7:27:4e:e8:2e:ad:1c:3c:c8:b0:2f:5d:4a:89:5b:c8: 26:19:97:bc:7e:b8:9a:4a:d8:32:11:e1:fb:e4:6b:b4:81:04: 4b:46:19:c6:24:a0:f7:b3:51:3b:e5:75:52:9c:e4:bf:7e:52: 25:d7:18:7b:35:85:07:7c:f7:8c:cd:1e:a5:10:62:85:12:9b: 6c:87:e1:a1:3f:d2:2d:17:65:da:53:4f:52:e8:89:a9:38:b0: b2:f0:e6:0e:15:49:7a:4a:ea:9d:fc:1e:fc:f5:29:03:9d:a8: d3:e5:f7:a3:98:30:00:c4:e5:52:93:a8:0e:4d:99:67:f1:55: 39:33:04:5c:bf:40:4e:3c:c4:de:e2:e9:64:6b:81:9e:88:e7: 8b:fb:42:1a:ed:53:c9:46:8e:73:75:e0:2b:5f:c3:42:34:56: a6:cd:47:0a:74:fe:07:18:c0:3e:a7:6d:44:05:14:91:e1:19: 1b:ae:43:10:15:41:b8:e5:f2:c1:88:49:1e:cf:6e:e8:6f:7b: df:33:56:23 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEW5IqRqIhqwy8WqSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDUwMTAxMjAyNVoXDTI2MDgwNDAxMjAyNVowLzEtMCsGA1UEAxMk ZDNkZTY4M2EtMDRiMS00ZTFjLTk0YzUtY2I0NWU5ODMzMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y0I5dIWMt623AFgdvCWDDMVQ0G2/T0GcF68 P5okFnpTxSA+mEPHC9vdU3esjHyhvMDhdfX5Vx3x0ghBeECO37+RXk0YPsk+JwcO xfj75g+mmPdMGQaU33g9pkFL2kt+OwdTYzVGG0t4uyIZiILLZne4awtU9jUgy7Ie puwKX8pRgowejmGDZ5T/0v6Xg5+4XWj+i8ZLW+GnaLXYFlgCAVitFvsn2VtB6NXq UbOnwnY70LZoVT1T5CuJ3uRwb9yrDdrIzw9gWak6jQx0rFiefAFotGVGFCDFGQYj VBDZv3AR4Sfx0o/gP6C0WClGTv7YYYhpmZon/lNXJ8sWUTPG0QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFCH9KwgdoWB2o9WQlYuYXT7gm/GkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9k M2RlNjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1ZTk4MzMyM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2QzZGU2ODNhLTA0YjEtNGUxYy05 NGM1LWNiNDVlOTgzMzIzZC9kM2RlNjgzYS0wNGIxLTRlMWMtOTRjNS1jYjQ1ZTk4 MzMyM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAKA/twDBACje9gwDgQCAAIwCAMGBCYC/QIAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYWKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlEI+D/501fqwXaeEC meE2Od4DyfzcdfWs2vu5JMA7Gc1hJJUgjfgqYh6MnY+QYn566dcgWCflK/cnTugu rRw8yLAvXUqJW8gmGZe8friaStgyEeH75Gu0gQRLRhnGJKD3s1E75XVSnOS/flIl 1xh7NYUHfPeMzR6lEGKFEptsh+GhP9ItF2XaU09S6ImpOLCy8OYOFUl6Suqd/B78 9SkDnajT5fejmDAAxOVSk6gOTZln8VU5MwRcv0BOPMTe4ulka4GeiOeL+0Ia7VPJ Ro5zdeArX8NCNFamzUcKdP4HGMA+p21EBRSR4RkbrkMQFUG45fLBiEkez27ob3vf M1Yj -----END CERTIFICATE-----Generated at Sat Jun 1 16:25:18 2024 by rpki-client on console-fra.rpki-client.org