$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer File: 6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.cer (raw, json) Hash identifier: ClYpizeOGKvx2gBfh99LBL27bA+3r187tareBXBOeWY= Subject key identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285844FA585D8398DD51F4A1CBD280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 Feb 2024 17:09:16 +0000 Certificate not after: Tue 03 Mar 2026 16:17:47 +0000 Subordinate resources: AS: 6508 AS: 11648 AS: 20148 IP: 205.143.192.0/21 IP: 205.159.1.0/24 IP: 208.83.88.0/22 IP: 2001:5c8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:fa:58:5d:83:98:dd:51:f4:a1:cb:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Feb 22 17:09:16 2024 GMT Not After : Mar 3 16:17:47 2026 GMT Subject: CN=6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c8:3d:45:1e:2e:c2:f1:3c:ee:39:50:48:ca: 48:05:45:92:5d:03:07:e4:30:a7:ab:0f:bf:cc:90: 59:31:bb:ff:d4:91:69:aa:0f:8a:5b:fb:aa:1a:5b: de:56:00:f9:fe:a8:d8:55:71:2c:eb:d0:83:31:be: 0c:2c:b7:a4:d6:1a:ee:b9:fc:1b:d0:d8:c8:41:74: e7:29:89:f1:af:33:af:c3:bd:fe:37:11:53:57:b2: 44:65:27:9d:4f:1c:7b:bc:3b:fd:90:d9:2d:ae:91: f3:09:dc:6e:a4:02:5d:a2:0f:94:9b:56:9c:47:0e: f5:dd:b4:f8:55:3f:0c:f4:6a:58:b3:43:25:b4:6d: 68:b0:7a:74:09:41:90:f5:bc:e4:c1:8d:9d:fd:ba: 21:c8:4f:c7:a4:9d:e2:c3:56:7c:ea:2e:48:43:3f: 18:ed:7c:cf:8d:0e:a6:ca:dd:7f:06:95:4f:bb:0b: 1e:4f:13:39:37:91:8e:54:f6:c0:4f:75:49:8a:96: 0c:0e:b7:98:82:41:81:32:ed:cb:9a:bd:59:d6:b5: 52:3d:e1:22:9e:04:64:5e:ef:16:e7:62:c3:e3:06: 50:71:2e:be:65:3a:ee:19:1f:e9:04:96:32:41:cd: 71:e2:27:af:20:81:66:82:b8:03:ca:ab:b7:0e:b6: 41:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9E:CF:8C:81:61:19:CD:F4:09:E4:64:A0:B8:79:AD:56:57:81:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c/6b1bfb9d-3ce5-4fa0-87a2-7353ee8cc29c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 205.143.192.0/21 205.159.1.0/24 208.83.88.0/22 IPv6: 2001:5c8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6508 11648 20148 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f1:b7:61:eb:3f:6d:52:9a:49:1b:27:24:3a:2f:72:72:81: e7:ec:ac:6c:59:26:65:16:ec:59:1f:70:64:19:0c:44:30:d7: e6:82:c2:81:be:a2:3e:53:69:c2:37:05:10:e7:fe:3a:b7:2e: c4:74:ce:7a:0d:4e:d7:21:19:53:62:cc:70:7d:28:c5:89:58: ce:57:61:a4:38:95:70:33:d4:47:c0:1f:96:9f:20:8a:34:be: 8d:29:8f:c4:65:df:84:7f:12:bc:8f:ee:c3:c0:76:76:d5:e6: 21:ca:19:3f:84:62:88:46:89:d2:9a:80:36:b2:d5:fb:f7:cd: d0:16:ee:58:e3:e3:37:67:6e:5c:51:d2:30:cf:e8:1e:b2:40: dc:d1:ca:a8:24:6c:6e:5a:ff:be:aa:cb:16:bd:ee:70:d5:0e: 76:28:56:bc:c1:fc:9f:5f:79:46:7b:43:4c:72:71:f6:44:73: a6:23:77:c6:ef:e7:26:ef:fa:be:41:cb:a6:2f:f6:56:49:01: 4c:e1:9f:76:46:9f:59:9e:cc:db:02:1c:87:63:89:a5:ef:57: cf:dc:a8:e8:68:23:c6:6f:1e:be:40:fc:fb:d6:56:90:51:57: 94:70:b2:d3:1b:f4:3e:fb:13:93:e5:db:2f:0d:89:88:59:4e: c6:7d:76:03 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWET6WF2DmN1R9KHL0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDIyMjE3MDkxNloXDTI2MDMwMzE2MTc0N1owLzEtMCsGA1UEAxMk NmIxYmZiOWQtM2NlNS00ZmEwLTg3YTItNzM1M2VlOGNjMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMg9RR4uwvE87jlQSMpIBUWSXQMH5DCnqw+/ zJBZMbv/1JFpqg+KW/uqGlveVgD5/qjYVXEs69CDMb4MLLek1hruufwb0NjIQXTn KYnxrzOvw73+NxFTV7JEZSedTxx7vDv9kNktrpHzCdxupAJdog+Um1acRw713bT4 VT8M9GpYs0MltG1osHp0CUGQ9bzkwY2d/bohyE/HpJ3iw1Z86i5IQz8Y7XzPjQ6m yt1/BpVPuwseTxM5N5GOVPbAT3VJipYMDreYgkGBMu3Lmr1Z1rVSPeEingRkXu8W 52LD4wZQcS6+ZTruGR/pBJYyQc1x4ievIIFmgrgDyqu3DrZB8QIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFImez4yBYRnN9AnkZKC4ea1WV4E0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4Y2MyOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzZiMWJmYjlkLTNjZTUtNGZhMC04 N2EyLTczNTNlZThjYzI5Yy82YjFiZmI5ZC0zY2U1LTRmYTAtODdhMi03MzUzZWU4 Y2MyOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAPNj8ADBADNnwEDBALQU1gwDQQCAAIwBwMFACAB BcgwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICGWwCAi2AAgJOtDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAq 8bdh6z9tUppJGyckOi9ycoHn7KxsWSZlFuxZH3BkGQxEMNfmgsKBvqI+U2nCNwUQ 5/46ty7EdM56DU7XIRlTYsxwfSjFiVjOV2GkOJVwM9RHwB+WnyCKNL6NKY/EZd+E fxK8j+7DwHZ21eYhyhk/hGKIRonSmoA2stX7983QFu5Y4+M3Z25cUdIwz+geskDc 0cqoJGxuWv++qssWve5w1Q52KFa8wfyfX3lGe0NMcnH2RHOmI3fG7+cm7/q+Qcum L/ZWSQFM4Z92Rp9ZnszbAhyHY4ml71fP3KjoaCPGbx6+QPz71laQUVeUcLLTG/Q+ +xOT5dsvDYmIWU7GfXYD -----END CERTIFICATE-----Generated at Sat May 11 15:35:58 2024 by rpki-client on console-fra.rpki-client.org