$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer File: 133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer (raw, json) Hash identifier: I5Jz7fgToN87c2GahesbWPQ1lX+XNFUItoI6UbfGAng= Subject key identifier: D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285844AD2D593BCCCBEC7E96347180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jan 2024 01:45:21 +0000 Certificate not after: Thu 30 Apr 2026 00:45:21 +0000 Subordinate resources: AS: 62579 IP: 147.160.48.0/24 IP: 148.59.127.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ad:2d:59:3b:cc:cb:ec:7e:96:34:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jan 26 01:45:21 2024 GMT Not After : Apr 30 00:45:21 2026 GMT Subject: CN=133f2e91-cc80-4b10-bfd8-32bfcceeb10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:ae:2f:e3:8d:dc:f7:9e:08:0d:45:54:6b: 92:71:99:1c:f8:84:07:d9:d9:6e:c8:56:61:f4:03: 31:de:cb:a0:b9:25:a5:d6:02:eb:b8:e2:a6:48:5f: 24:27:9a:4e:ec:c7:65:ab:ca:0d:f5:27:8e:ab:7d: a7:61:37:0f:a7:be:45:c2:17:e9:70:27:03:b0:bf: c8:9c:4e:68:34:62:63:0c:a8:f0:9c:73:49:9c:01: 5f:31:59:a7:08:b5:31:a3:b8:a0:94:3e:8a:d5:0c: 1b:d2:70:20:49:7d:39:ae:80:d3:91:7a:3a:9d:25: 9d:fe:b7:04:97:bb:fc:00:d5:cd:af:0c:a4:cf:ce: d2:25:07:fa:42:e3:15:c7:01:5f:d5:cb:2f:a9:dc: f2:83:4b:82:a7:59:05:fe:45:5e:b6:65:d0:da:de: 48:ca:70:c9:c5:95:b7:af:61:9b:81:e1:da:2a:ed: a2:90:46:d7:cd:6d:36:c6:96:59:0c:16:b3:87:2b: f8:38:70:2b:c8:59:c5:c6:5b:b9:ec:10:a4:70:e6: 16:69:ad:f3:e0:eb:57:a6:b9:b5:b5:8b:e2:75:5c: 06:4c:d2:eb:ef:79:3f:fa:4a:c5:85:ed:7e:0b:f1: dd:1c:8a:99:ee:45:51:9d:29:ed:37:30:4b:e2:79: df:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 147.160.48.0/24 148.59.127.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62579 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b0:26:4a:98:bd:a5:39:01:dd:91:85:8a:60:13:03:55:72: b7:e5:bd:b8:0b:bd:5a:4b:62:6e:e8:27:15:c2:c5:a7:e4:34: 49:c1:b8:a5:ee:ba:0f:cb:cf:6c:15:84:83:9f:36:fd:63:02: 3c:fa:d1:7a:61:e3:bc:28:04:22:ca:d5:e8:a0:83:71:75:91: b4:f9:a1:a1:c3:52:5e:98:1b:97:6e:8a:9f:b9:57:b5:ba:20: 1e:46:1a:1e:ab:ed:db:83:5b:28:56:89:c3:17:8b:df:ef:82: 05:db:99:6d:d8:ce:1f:60:bf:61:0e:e9:b7:7b:7f:88:c0:05: 2d:20:01:9f:be:0d:e6:32:41:62:1a:f8:bd:65:fb:b8:66:2d: b6:fb:48:8b:88:b3:44:c1:de:27:d7:ac:85:d2:9e:03:e2:af: 45:90:b8:49:96:1b:c8:36:52:7f:60:b3:1e:68:f0:97:4b:49: 3e:75:22:c7:1c:85:a1:67:31:51:71:03:4c:a5:2e:6a:bd:56: e0:bc:84:7f:2f:09:37:00:44:83:d7:45:4f:84:59:47:a4:6b: 90:4f:9b:db:63:6d:72:64:e7:5f:c2:0e:54:2e:53:e3:64:07: 78:41:3d:75:de:47:dc:b0:e2:ab:2d:ee:cf:1d:d9:e9:80:1d: 12:49:fa:ab -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEStLVk7zMvsfpY0cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MDEyNjAxNDUyMVoXDTI2MDQzMDAwNDUyMVowLzEtMCsGA1UEAxMk MTMzZjJlOTEtY2M4MC00YjEwLWJmZDgtMzJiZmNjZWViMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjWuL+ON3PeeCA1FVGuScZkc+IQH2dluyFZh 9AMx3suguSWl1gLruOKmSF8kJ5pO7Mdlq8oN9SeOq32nYTcPp75FwhfpcCcDsL/I nE5oNGJjDKjwnHNJnAFfMVmnCLUxo7iglD6K1Qwb0nAgSX05roDTkXo6nSWd/rcE l7v8ANXNrwykz87SJQf6QuMVxwFf1csvqdzyg0uCp1kF/kVetmXQ2t5IynDJxZW3 r2GbgeHaKu2ikEbXzW02xpZZDBazhyv4OHAryFnFxlu57BCkcOYWaa3z4OtXprm1 tYvidVwGTNLr73k/+krFhe1+C/HdHIqZ7kVRnSntNzBL4nnfGwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFNCtCYxol5WFt3S5FP5Z0lnV1jyrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x MzNmMmU5MS1jYzgwLTRiMTAtYmZkOC0zMmJmY2NlZWIxMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzEzM2YyZTkxLWNjODAtNGIxMC1i ZmQ4LTMyYmZjY2VlYjEwZC8xMzNmMmU5MS1jYzgwLTRiMTAtYmZkOC0zMmJmY2Nl ZWIxMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACToDADBACUO38wGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPRzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEqwJkqYvaU5Ad2RhYpgEwNVcrflvbgLvVpLYm7o JxXCxafkNEnBuKXuug/Lz2wVhIOfNv1jAjz60Xph47woBCLK1eigg3F1kbT5oaHD Ul6YG5duip+5V7W6IB5GGh6r7duDWyhWicMXi9/vggXbmW3Yzh9gv2EO6bd7f4jA BS0gAZ++DeYyQWIa+L1l+7hmLbb7SIuIs0TB3ifXrIXSngPir0WQuEmWG8g2Un9g sx5o8JdLST51IscchaFnMVFxA0ylLmq9VuC8hH8vCTcARIPXRU+EWUeka5BPm9tj bXJk51/CDlQuU+NkB3hBPXXeR9yw4qst7s8d2emAHRJJ+qs= -----END CERTIFICATE-----Generated at Sat Apr 20 06:50:09 2024 by rpki-client on console-fra.rpki-client.org