$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer File: 6457bd98-4cd5-4766-a190-844b93a354f2.cer (raw, json) Hash identifier: rUEqGVZALvKqlzF+hlIzXKjCf7+XGncBCugyV06MIXI= Subject key identifier: C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285844E3AB05D0A78B2B7ACC8A1C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Feb 2024 14:12:13 +0000 Certificate not after: Sun 08 Mar 2026 03:21:51 +0000 Subordinate resources: AS: 46088 IP: 23.166.232.0/24 IP: 67.209.160.0/20 IP: 2602:f9da::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e3:ab:05:d0:a7:8b:2b:7a:cc:8a:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 14 14:12:13 2024 GMT Not After : Mar 8 03:21:51 2026 GMT Subject: CN=6457bd98-4cd5-4766-a190-844b93a354f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:94:ad:5c:d8:85:87:4a:45:4f:2b:f2:90:0f: 56:f6:3a:75:86:f4:6f:f5:11:8b:2d:b8:ac:4a:5a: 21:3f:9b:1c:c5:98:29:82:35:07:7f:3c:cd:24:23: 72:81:13:d1:4a:a2:56:b8:d9:4e:79:8f:36:fd:92: 1b:e4:d6:86:e2:e3:24:32:9b:f2:98:22:d5:27:d2: 61:4a:09:7e:b0:91:ae:50:86:6c:b0:82:e1:69:af: a4:2e:67:37:61:b1:f2:23:97:3b:c4:36:7e:ac:fe: 26:f9:b5:42:37:38:34:a9:13:fc:a0:62:2a:d4:3b: 3c:aa:b1:f2:a7:14:73:03:52:96:a1:2a:8b:20:0a: ce:9d:c6:a9:4b:0b:a6:23:1d:d5:a0:95:ac:9b:df: c9:06:c5:6f:ed:b7:d6:ba:9e:04:69:63:97:fa:f1: 18:4b:ff:6c:fc:0b:20:ec:85:e3:a6:25:5c:e4:cd: a0:e4:88:f3:b8:fb:5a:87:b0:12:bb:7e:11:c8:40: 0c:6c:f9:a4:0c:c4:4e:2b:1f:c6:42:c6:84:9f:48: 82:09:18:08:e5:dd:5b:3c:11:66:4b:9c:eb:41:d2: 9e:be:44:f8:18:61:55:12:ac:3c:ab:34:2c:56:d4: a5:4e:6d:8b:62:30:cb:c0:4a:1d:cc:41:0f:7b:59: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.166.232.0/24 67.209.160.0/20 IPv6: 2602:f9da::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46088 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:06:2c:e2:9d:b9:ec:03:d2:0d:69:5e:a2:90:cc:52:b6:76: eb:f5:70:74:2c:20:5a:ec:9b:ee:d5:ad:fc:80:b7:97:78:8f: bf:69:cb:dc:78:21:77:ff:3b:21:b4:93:92:b6:81:4e:28:2f: 02:43:60:aa:99:18:85:ef:10:09:e5:3f:bc:77:90:93:36:e4: 6f:43:a1:c1:53:43:1c:09:32:73:8a:0f:ca:f5:f1:0f:91:52: 95:95:18:92:43:f9:49:e5:f0:ef:a9:9d:39:e4:6b:8b:e5:56: bb:02:9e:c6:e8:1d:e1:44:ca:f8:ec:0d:5a:a4:be:7e:a4:e3: cd:72:23:dc:45:4f:df:0a:8e:a4:b6:58:99:68:78:0f:cb:34: 60:cf:b0:cf:70:a1:93:90:32:25:06:4c:bc:a3:18:ed:d6:d0: 3c:54:fa:28:ab:df:53:8f:cd:b5:01:3c:e4:6e:43:f7:e8:72: c8:db:d4:2c:94:93:27:c4:3d:03:a4:fd:92:ff:f0:b1:5c:fb: f2:98:4a:73:cc:26:b5:56:c2:2a:e2:d7:28:b5:6c:76:b4:14: c9:9a:a5:2e:32:f3:55:a7:7c:23:d6:46:6b:96:45:cb:94:09: e6:73:2c:40:a6:4a:ad:1f:d0:32:0e:07:b7:89:13:e2:5a:ee: 98:fe:75:b0 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWETjqwXQp4sresyKHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDIxNDE0MTIxM1oXDTI2MDMwODAzMjE1MVowLzEtMCsGA1UEAxMk NjQ1N2JkOTgtNGNkNS00NzY2LWExOTAtODQ0YjkzYTM1NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpStXNiFh0pFTyvykA9W9jp1hvRv9RGLLbis SlohP5scxZgpgjUHfzzNJCNygRPRSqJWuNlOeY82/ZIb5NaG4uMkMpvymCLVJ9Jh Sgl+sJGuUIZssILhaa+kLmc3YbHyI5c7xDZ+rP4m+bVCNzg0qRP8oGIq1Ds8qrHy pxRzA1KWoSqLIArOncapSwumIx3VoJWsm9/JBsVv7bfWup4EaWOX+vEYS/9s/Asg 7IXjpiVc5M2g5IjzuPtah7ASu34RyEAMbPmkDMROKx/GQsaEn0iCCRgI5d1bPBFm S5zrQdKevkT4GGFVEqw8qzQsVtSlTm2LYjDLwEodzEEPe1nKVwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFMIFzv420tym2QrT5iVrEXzSDng9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 NDU3YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRiOTNhMzU0ZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzY0NTdiZDk4LTRjZDUtNDc2Ni1h MTkwLTg0NGI5M2EzNTRmMi82NDU3YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRiOTNh MzU0ZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXpugDBARD0aAwDgQCAAIwCAMGBCYC+doAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC0CDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsBizinbnsA9INaV6i kMxStnbr9XB0LCBa7Jvu1a38gLeXeI+/acvceCF3/zshtJOStoFOKC8CQ2CqmRiF 7xAJ5T+8d5CTNuRvQ6HBU0McCTJzig/K9fEPkVKVlRiSQ/lJ5fDvqZ055GuL5Va7 Ap7G6B3hRMr47A1apL5+pOPNciPcRU/fCo6ktliZaHgPyzRgz7DPcKGTkDIlBky8 oxjt1tA8VPooq99Tj821ATzkbkP36HLI29QslJMnxD0DpP2S//CxXPvymEpzzCa1 VsIq4tcotWx2tBTJmqUuMvNVp3wj1kZrlkXLlAnmcyxApkqtH9AyDge3iRPiWu6Y /nWw -----END CERTIFICATE-----Generated at Sat May 11 15:35:57 2024 by rpki-client on console-fra.rpki-client.org