$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer File: 9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer (raw, json) Hash identifier: m6b061Xj6VCZig8ak7z83vQathkpo8bHQ3gOVt0RhFE= Subject key identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F432858446F168A082553321266CE1100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Jan 2024 19:59:17 +0000 Certificate not after: Tue 07 Apr 2026 18:59:17 +0000 Subordinate resources: AS: 35870 IP: 23.144.200.0/24 IP: 2602:fac0::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:6f:16:8a:08:25:53:32:12:66:ce:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 3 19:59:17 2024 GMT Not After : Apr 7 18:59:17 2026 GMT Subject: CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dd:66:0a:8c:c2:ec:31:dc:b8:d5:bf:5b:b1: 3d:8a:1f:c1:b0:6b:37:3c:ff:a6:bb:3d:03:2d:77: bc:c7:db:47:8d:77:f5:eb:55:9e:cf:a8:bb:7c:87: a2:7e:f7:1f:04:aa:9c:57:3c:a6:04:6b:4c:62:09: e9:3f:73:25:ff:24:6d:d8:a0:d1:4e:00:00:ae:1d: aa:f2:5b:da:1d:d9:66:4c:d5:fa:b5:d1:9d:e2:3b: cf:b7:7a:e5:e9:5f:e1:5a:ff:35:f6:40:c3:2d:9e: 57:be:8b:22:62:09:b9:09:b9:58:7b:9f:bb:69:08: 0b:3e:7f:ad:4d:6c:52:a3:a1:d4:4d:0e:c8:0b:f4: fb:68:9a:57:53:f6:e7:8d:b5:5f:f2:e7:dd:15:fe: 0b:d5:aa:30:63:11:50:ea:99:3b:16:0a:f6:c0:aa: f7:57:bd:f5:68:30:89:ce:ae:5a:02:9e:ff:b5:9b: fc:d9:ab:04:8a:c6:ca:3e:1c:e9:1d:86:1b:6f:73: 5c:cb:cc:73:ca:56:a3:da:bd:a8:7a:9b:a2:ab:2c: ad:0c:59:ab:3f:8c:49:45:7a:aa:b1:d9:21:7b:1b: 6b:72:09:00:a0:32:85:a7:1e:ac:e3:cd:2a:4f:24: ff:74:a0:f4:06:47:fc:7f:bb:91:9f:2e:4c:31:29: b7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.144.200.0/24 IPv6: 2602:fac0::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35870 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:17:46:19:1b:88:45:dd:3e:92:8f:45:43:cd:7c:89:c4:2c: eb:fb:a9:ed:9e:22:71:40:0b:ca:38:27:ba:5d:81:4b:72:77: 6c:bf:15:7f:c6:1c:20:4a:f8:36:11:ed:e7:5e:ad:58:39:4a: 17:6e:f3:26:7e:b6:de:ca:b8:b0:0e:78:85:4f:d9:e3:11:27: 38:d5:61:b7:e0:39:94:f5:a2:fc:39:52:39:45:b0:ab:c3:ca: a0:88:08:c4:77:80:f7:32:9e:99:34:b2:d0:f5:3d:90:64:c9: 79:25:40:40:02:21:db:97:3d:45:9e:4f:62:ae:64:c1:ab:1b: 09:e0:d2:5b:4b:40:29:09:70:51:9c:53:9d:cd:a5:24:55:f1: d3:f1:9a:da:9c:e9:d6:e7:1f:78:f6:70:ab:2d:a0:85:92:e7: 60:57:5b:95:77:be:66:48:e3:6a:26:1f:db:ab:d4:02:fa:7b: 68:f8:ef:90:d0:c5:57:fb:41:3a:52:38:b3:29:67:15:c1:68: 6a:d3:b4:f7:ab:82:c3:50:d1:de:b6:04:d9:8e:25:f7:3e:54: f4:c1:eb:05:09:b0:1a:c7:59:a1:4d:31:a5:5f:4b:19:46:b0: 83:2b:d6:65:33:51:84:7a:49:b2:dd:75:9c:bd:57:2e:33:32: 3e:b6:aa:8f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWERvFooIJVMyEmbOEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDEwMzE5NTkxN1oXDTI2MDQwNzE4NTkxN1owLzEtMCsGA1UEAxMk OWY5Y2EwMmMtNzIxZS00Y2E4LTk2ZDQtNmViMTBkOGVhMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt1mCozC7DHcuNW/W7E9ih/BsGs3PP+muz0D LXe8x9tHjXf161Wez6i7fIeifvcfBKqcVzymBGtMYgnpP3Ml/yRt2KDRTgAArh2q 8lvaHdlmTNX6tdGd4jvPt3rl6V/hWv819kDDLZ5XvosiYgm5CblYe5+7aQgLPn+t TWxSo6HUTQ7IC/T7aJpXU/bnjbVf8ufdFf4L1aowYxFQ6pk7Fgr2wKr3V731aDCJ zq5aAp7/tZv82asEisbKPhzpHYYbb3Ncy8xzylaj2r2oepuiqyytDFmrP4xJRXqq sdkhextrcgkAoDKFpx6s480qTyT/dKD0Bkf8f7uRny5MMSm3EwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKY7GW5MMQhndFcFaq0dKOO/A8r1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85 ZjljYTAyYy03MjFlLTRjYTgtOTZkNC02ZWIxMGQ4ZWEzOGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzlmOWNhMDJjLTcyMWUtNGNhOC05 NmQ0LTZlYjEwZDhlYTM4ZS85ZjljYTAyYy03MjFlLTRjYTgtOTZkNC02ZWIxMGQ4 ZWEzOGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkMgwDgQCAAIwCAMGACYC+sAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCMHjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnF0YZG4hF3T6Sj0VDzXyJxCzr +6ntniJxQAvKOCe6XYFLcndsvxV/xhwgSvg2Ee3nXq1YOUoXbvMmfrbeyriwDniF T9njESc41WG34DmU9aL8OVI5RbCrw8qgiAjEd4D3Mp6ZNLLQ9T2QZMl5JUBAAiHb lz1Fnk9irmTBqxsJ4NJbS0ApCXBRnFOdzaUkVfHT8ZranOnW5x949nCrLaCFkudg V1uVd75mSONqJh/bq9QC+nto+O+Q0MVX+0E6UjizKWcVwWhq07T3q4LDUNHetgTZ jiX3PlT0wesFCbAax1mhTTGlX0sZRrCDK9ZlM1GEekmy3XWcvVcuMzI+tqqP -----END CERTIFICATE-----Generated at Sat May 11 15:32:37 2024 by rpki-client on console-ams.rpki-client.org