$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2.cer File: a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2.cer (raw, json) Hash identifier: Li9IMHZf8x75Uats8BlXgVYghNhLkcBm72kL/zDC/qg= Subject key identifier: 99:EB:BB:7C:51:64:A0:B3:0F:3E:1B:08:53:94:79:52:DD:C5:AE:F5 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584473B9AF97804FB7E3CD0CC640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Jan 2024 11:51:14 +0000 Certificate not after: Mon 23 Mar 2026 12:38:12 +0000 Subordinate resources: AS: 19330 IP: 23.168.24.0/24 IP: 2602:f9ba::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:73:b9:af:97:80:4f:b7:e3:cd:0c:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 5 11:51:14 2024 GMT Not After : Mar 23 12:38:12 2026 GMT Subject: CN=a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:63:0b:64:f4:ec:ac:75:aa:99:3d:a1:25:6c: c0:94:c6:39:88:25:a7:a9:b1:ac:3b:88:b7:1d:60: f4:bf:85:b8:51:3c:7c:ca:e8:81:4f:85:59:3d:15: fe:38:76:2e:55:1c:4d:4e:2a:83:51:5f:3a:e7:fa: 90:c2:b8:11:d7:42:0a:35:c6:95:5d:e3:5e:05:68: 6a:98:4a:7f:c9:8a:0f:f2:29:0e:33:73:54:4a:a2: b9:1d:fe:40:f5:fa:5d:7f:8b:f7:46:f4:19:65:25: 2b:67:dd:df:03:89:07:e3:24:59:4d:87:7e:70:0d: bf:fd:01:7e:2b:cc:28:55:12:ed:f4:5f:63:0f:1b: 8b:c0:86:eb:57:91:20:93:c3:d2:e9:b0:f8:81:33: 0b:5b:b2:45:d4:5a:3f:26:ae:b9:8b:8c:22:5c:66: 3e:54:e8:ac:b7:d0:e0:a0:b5:9f:5d:6a:60:22:1b: f3:80:a0:fe:2d:54:83:a5:06:61:ed:cd:8f:07:e3: 14:47:ad:58:39:54:2e:f5:f1:ac:f5:4f:42:a6:9f: 88:d2:2c:cd:e6:3c:af:cb:1b:ab:79:2a:4b:86:ef: 66:f4:f5:b7:72:ca:bc:6d:59:ea:3b:78:fc:d2:61: 4c:9d:c3:df:a4:3e:d4:a8:0a:b1:ad:83:73:50:ec: f9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EB:BB:7C:51:64:A0:B3:0F:3E:1B:08:53:94:79:52:DD:C5:AE:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.168.24.0/24 IPv6: 2602:f9ba::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19330 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:cc:e5:7b:13:81:f7:21:e9:18:7d:79:f6:c5:b6:e7:b4:ca: 2d:08:20:5e:4b:31:0f:4a:55:73:94:09:c2:96:aa:cf:eb:6d: a9:54:e8:bd:37:bf:1e:6d:38:cc:69:b2:cd:ab:da:3e:ef:a7: 0a:ea:59:e0:06:36:47:b7:ea:bd:24:ae:8d:a1:02:d4:0b:4d: cb:e0:62:de:b4:d5:27:fa:50:f2:c5:4e:f3:4a:54:a7:8d:4f: ac:92:d2:aa:a5:ca:f4:59:cb:37:2b:c8:12:cd:f5:3c:53:b1: 3c:ed:06:fd:45:7b:15:90:bd:83:55:c7:e8:fd:dd:16:26:9f: eb:83:5c:7b:62:69:44:42:ea:c4:db:54:dc:1d:67:85:fd:25: 6f:87:bd:4f:3b:0e:46:ed:2d:b7:09:c2:b1:f9:98:c2:3b:c5: 8f:a5:18:94:f2:eb:32:2c:7a:dc:17:91:14:f0:8b:ea:39:79: a1:8a:b3:1a:09:34:5c:2e:42:23:4a:1f:ad:fd:1a:3d:d8:7c: 95:a4:b6:0f:83:2e:8a:38:10:8e:f1:10:74:d1:77:94:ca:60: fd:b5:08:02:11:67:89:26:94:48:11:df:f4:70:e1:ae:e2:1a: 5d:b8:1d:a3:48:b3:10:6c:2b:0b:84:bf:11:e1:c8:9a:35:7f: 1f:de:6a:a8 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWERzua+XgE+3480MxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDEwNTExNTExNFoXDTI2MDMyMzEyMzgxMlowLzEtMCsGA1UEAxMk YTdkNzRmZTItZTdiOC00NzNlLWI1ZjUtZDFhMjU5ZWQxNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmMLZPTsrHWqmT2hJWzAlMY5iCWnqbGsO4i3 HWD0v4W4UTx8yuiBT4VZPRX+OHYuVRxNTiqDUV865/qQwrgR10IKNcaVXeNeBWhq mEp/yYoP8ikOM3NUSqK5Hf5A9fpdf4v3RvQZZSUrZ93fA4kH4yRZTYd+cA2//QF+ K8woVRLt9F9jDxuLwIbrV5Egk8PS6bD4gTMLW7JF1Fo/Jq65i4wiXGY+VOist9Dg oLWfXWpgIhvzgKD+LVSDpQZh7c2PB+MUR61YOVQu9fGs9U9Cpp+I0izN5jyvyxur eSpLhu9m9PW3csq8bVnqO3j80mFMncPfpD7UqAqxrYNzUOz5CwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJnru3xRZKCzDz4bCFOUeVLdxa71MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9h N2Q3NGZlMi1lN2I4LTQ3M2UtYjVmNS1kMWEyNTllZDE1YTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2E3ZDc0ZmUyLWU3YjgtNDczZS1i NWY1LWQxYTI1OWVkMTVhMi9hN2Q3NGZlMi1lN2I4LTQ3M2UtYjVmNS1kMWEyNTll ZDE1YTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqBgwDgQCAAIwCAMGBCYC+boAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkuCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFvM5XsTgfch6Rh9efbFtue0yi0I IF5LMQ9KVXOUCcKWqs/rbalU6L03vx5tOMxpss2r2j7vpwrqWeAGNke36r0kro2h AtQLTcvgYt601Sf6UPLFTvNKVKeNT6yS0qqlyvRZyzcryBLN9TxTsTztBv1FexWQ vYNVx+j93RYmn+uDXHtiaURC6sTbVNwdZ4X9JW+HvU87DkbtLbcJwrH5mMI7xY+l GJTy6zIsetwXkRTwi+o5eaGKsxoJNFwuQiNKH639Gj3YfJWktg+DLoo4EI7xEHTR d5TKYP21CAIRZ4kmlEgR3/Rw4a7iGl24HaNIsxBsKwuEvxHhyJo1fx/eaqg= -----END CERTIFICATE-----Generated at Sat May 11 15:32:37 2024 by rpki-client on console-ams.rpki-client.org