$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer File: c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.cer (raw, json) Hash identifier: VmLQoYoDcc1yvZVaE8VkyKymNx3LFW0X4P+0k6pUp/Q= Subject key identifier: 68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285843B98668D5EB4267911B2A85C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Oct 2023 19:07:34 +0000 Certificate not after: Sun 01 Feb 2026 20:07:34 +0000 Subordinate resources: AS: 53949 IP: 162.213.172.0/22 IP: 173.225.144.0/20 IP: 192.119.134.0/24 IP: 198.98.208.0/20 IP: 206.198.204.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:b9:86:68:d5:eb:42:67:91:1b:2a:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Oct 30 19:07:34 2023 GMT Not After : Feb 1 20:07:34 2026 GMT Subject: CN=c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:dc:cc:c9:1d:8b:26:c7:b2:94:99:6a:a0: 90:3a:08:e5:e6:34:14:d8:12:35:43:7f:e6:62:a9: 79:93:1d:c3:d3:d0:f8:74:00:37:aa:07:d8:38:21: 70:8c:40:ab:b0:9e:96:94:70:dc:99:29:ae:da:e9: f0:d6:47:4d:34:dd:ff:4f:b3:45:ce:3f:3d:e5:ab: cc:94:cc:30:00:8d:ad:a8:c7:f9:bc:e3:93:cc:da: d8:9e:e9:17:55:17:97:50:a2:8f:80:5e:48:6c:3a: 2c:a3:52:9d:97:60:ea:7a:16:27:bc:d0:ba:42:ec: 1f:29:0f:d1:0f:6f:90:c6:4f:d2:55:de:35:46:1d: 69:0e:70:aa:6b:71:42:37:6e:a9:a6:37:a4:9d:a2: 3a:b2:81:c2:0e:3e:c6:51:65:1e:31:02:cd:10:a7: 71:5b:1c:ca:3a:fb:2d:ec:69:ff:f5:12:27:cf:95: 4c:9c:c2:05:4f:de:db:ee:a5:1e:88:02:6a:11:3a: 85:bc:d1:ca:1c:f5:76:93:d5:f4:da:56:7c:ef:e7: 93:da:c3:b6:22:74:41:fc:31:10:01:b7:e4:22:fb: 9c:fb:b4:0b:82:30:eb:d7:37:5b:8f:de:7f:29:0f: 93:a2:fe:0f:75:dd:f4:8c:dd:82:8c:2b:61:b8:41: df:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EC:9F:C2:39:B4:58:A9:D4:94:38:0B:AF:C1:58:1D:E8:59:BD:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc/c9b06c52-c68d-44ec-ae65-7ebb2a99d6cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 162.213.172.0/22 173.225.144.0/20 192.119.134.0/24 198.98.208.0/20 206.198.204.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53949 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:61:1f:ce:79:b6:68:b5:33:4b:0c:f9:80:43:c8:bd:2e:67: a0:af:ac:a7:cc:29:df:2e:66:59:85:a0:ae:a8:bc:65:27:fb: 7b:ee:f0:8c:48:6d:d6:91:9c:0e:55:62:e6:93:0e:50:21:93: 09:11:94:f7:08:62:45:66:d3:c3:b3:8c:91:09:82:d1:f5:eb: d5:21:7d:80:6f:e7:1e:49:49:04:1b:4d:15:50:49:13:6c:f1: 21:be:e3:eb:46:1b:61:f0:0f:e2:1f:99:34:7d:e3:22:eb:8b: 6d:ce:60:79:ee:15:10:89:ed:fb:fe:d1:f4:f1:3c:4f:7b:49: 95:1b:c2:b3:88:17:7a:9b:fe:f1:66:f0:16:45:47:ae:36:2e: d0:71:2a:be:b0:67:dc:2b:5e:7d:f2:1f:63:ab:ed:23:c6:38: e4:9f:a5:77:b1:6e:1e:b6:d4:c6:e6:55:44:75:db:9d:13:47: 36:8a:3b:b2:da:7f:dc:0d:9c:81:33:1d:47:bc:66:6d:f7:e4: 01:43:60:1a:e5:98:92:c9:6d:19:90:17:b2:1a:d8:b2:80:e5: 25:e3:c8:1a:9a:d0:41:63:52:ef:39:af:e8:12:c6:d7:fe:c1: cb:14:b1:29:36:06:26:4b:e9:a8:fa:54:bc:55:34:fc:c8:e6: a0:be:9d:13 -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEO5hmjV60JnkRsqhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTAzMDE5MDczNFoXDTI2MDIwMTIwMDczNFowLzEtMCsGA1UEAxMk YzliMDZjNTItYzY4ZC00NGVjLWFlNjUtN2ViYjJhOTlkNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9PczMkdiybHspSZaqCQOgjl5jQU2BI1Q3/m Yql5kx3D09D4dAA3qgfYOCFwjECrsJ6WlHDcmSmu2unw1kdNNN3/T7NFzj895avM lMwwAI2tqMf5vOOTzNrYnukXVReXUKKPgF5IbDoso1Kdl2DqehYnvNC6QuwfKQ/R D2+Qxk/SVd41Rh1pDnCqa3FCN26ppjeknaI6soHCDj7GUWUeMQLNEKdxWxzKOvst 7Gn/9RInz5VMnMIFT97b7qUeiAJqETqFvNHKHPV2k9X02lZ87+eT2sO2InRB/DEQ AbfkIvuc+7QLgjDr1zdbj95/KQ+Tov4Pdd30jN2CjCthuEHf7wIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFGjsn8I5tFip1JQ4C6/BWB3oWb1/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j OWIwNmM1Mi1jNjhkLTQ0ZWMtYWU2NS03ZWJiMmE5OWQ2Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2M5YjA2YzUyLWM2OGQtNDRlYy1h ZTY1LTdlYmIyYTk5ZDZjYy9jOWIwNmM1Mi1jNjhkLTQ0ZWMtYWU2NS03ZWJiMmE5 OWQ2Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAKi1awDBASt4ZADBADAd4YDBATGYtADBALOxsww GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANK9MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG9hH855tmi1M0sM +YBDyL0uZ6CvrKfMKd8uZlmFoK6ovGUn+3vu8IxIbdaRnA5VYuaTDlAhkwkRlPcI YkVm08OzjJEJgtH169UhfYBv5x5JSQQbTRVQSRNs8SG+4+tGG2HwD+IfmTR94yLr i23OYHnuFRCJ7fv+0fTxPE97SZUbwrOIF3qb/vFm8BZFR642LtBxKr6wZ9wrXn3y H2Or7SPGOOSfpXexbh621MbmVUR1250TRzaKO7Laf9wNnIEzHUe8Zm335AFDYBrl mJLJbRmQF7Ia2LKA5SXjyBqa0EFjUu85r+gSxtf+wcsUsSk2BiZL6aj6VLxVNPzI 5qC+nRM= -----END CERTIFICATE-----Generated at Fri May 10 17:25:44 2024 by rpki-client on console-fra.rpki-client.org