$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer File: e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer (raw, json) Hash identifier: Eqz2FgKenwVXh4ibPumfUolqlrrIV6AHwJK5sy9/uO8= Subject key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584360BCFCC26D69FC65B4EF0680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Sep 2023 23:50:35 +0000 Certificate not after: Thu 01 Jan 2026 00:50:35 +0000 Subordinate resources: AS: 393792 IP: 161.38.208.0/21 IP: 2602:fcee::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:60:bc:fc:c2:6d:69:fc:65:b4:ef:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Sep 28 23:50:35 2023 GMT Not After : Jan 1 00:50:35 2026 GMT Subject: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:88:4b:5f:6a:6d:60:a0:5d:74:c6:4b:3e:c8: 78:fc:55:13:8b:da:9c:ca:d5:a5:3b:7b:1b:a3:eb: b0:c9:55:d1:eb:5f:a4:ae:91:4a:5f:69:30:90:c8: 30:68:a9:b3:ee:88:dc:d5:3b:bf:5f:ed:1c:4e:8d: e2:36:fa:98:e4:da:79:b3:71:cb:37:b3:b7:de:ec: 63:39:cb:9e:c4:f3:e0:17:6b:e0:06:dc:b9:55:8f: 7d:9a:6b:94:a0:a0:5e:0c:1f:93:50:59:45:1a:f2: e8:ac:2d:fc:a3:7b:a1:cc:da:3f:b4:de:22:8c:e7: c8:50:b5:cb:6a:82:b7:71:26:c3:2b:00:e0:76:29: eb:eb:6e:a2:c1:8b:e8:fb:c1:90:21:f3:90:91:a1: e9:c4:c9:75:e4:2c:e0:25:68:14:12:37:7b:29:2b: bf:28:17:fb:bf:21:56:45:c3:8b:91:77:57:34:95: fb:98:f8:9d:99:58:36:3b:e8:7a:f4:98:f3:46:99: ae:0e:ea:e6:8b:1d:7d:2f:ea:f3:9e:bd:5f:02:08: cd:77:5a:8c:63:f4:7b:3b:a9:d2:fa:e7:2b:e0:a6: 29:a4:b8:56:c6:dc:5d:b3:65:ab:2a:90:e8:c7:ea: e1:cd:3a:dc:ef:45:64:e6:c7:47:7a:ea:e5:de:bf: 85:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 161.38.208.0/21 IPv6: 2602:fcee::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393792 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:10:04:6d:e9:28:bb:41:26:29:48:9e:a7:8d:7d:6a:96:c3: 71:1f:3d:c1:06:1a:22:de:9a:47:42:5b:78:ce:d7:87:60:06: ac:ef:b7:41:be:43:50:27:25:3b:6d:1d:00:be:5a:27:e4:26: 5b:a4:57:d8:0e:be:47:a5:14:73:a8:47:b6:01:5d:71:e4:18: f3:a6:10:83:42:6b:4d:aa:e9:44:09:3e:20:88:ad:cc:1b:e3: b3:f6:69:c9:ff:61:69:ed:2a:53:e9:e1:b9:3c:59:f0:95:89: fb:f1:eb:7e:38:f8:4a:d9:b6:ad:32:c2:a9:b8:8f:53:3c:7e: d4:13:aa:ba:fe:3c:f0:7d:d2:fb:5a:c3:fd:01:ce:e6:ec:d1: d9:95:45:8e:18:e0:0d:79:21:e9:f8:40:28:d3:e6:91:eb:b4: 15:53:b2:d4:cd:b6:63:bf:1c:22:50:fd:fe:ae:a2:ea:94:af: 5c:ba:6a:9d:4c:c3:3b:49:ea:2c:7b:0f:14:81:a1:67:e8:41: f9:13:0e:a5:ef:df:c8:85:08:2f:61:a6:92:18:e5:88:10:49: f9:cd:0e:9a:83:2c:d0:fd:14:11:09:94:e7:5c:a8:3f:13:65: 80:0a:53:82:ca:73:19:c0:70:14:03:c8:14:0f:89:ba:40:57: 3f:f2:0f:1b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWENgvPzCbWn8ZbTvBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMDkyODIzNTAzNVoXDTI2MDEwMTAwNTAzNVowLzEtMCsGA1UEAxMk ZTE4MTZhZTYtNTE4Ni00NGY3LWFlNWItZWMxMzM4YjdhNzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYhLX2ptYKBddMZLPsh4/FUTi9qcytWlO3sb o+uwyVXR61+krpFKX2kwkMgwaKmz7ojc1Tu/X+0cTo3iNvqY5Np5s3HLN7O33uxj OcuexPPgF2vgBty5VY99mmuUoKBeDB+TUFlFGvLorC38o3uhzNo/tN4ijOfIULXL aoK3cSbDKwDgdinr626iwYvo+8GQIfOQkaHpxMl15CzgJWgUEjd7KSu/KBf7vyFW RcOLkXdXNJX7mPidmVg2O+h69JjzRpmuDurmix19L+rznr1fAgjNd1qMY/R7O6nS +ucr4KYppLhWxtxds2WrKpDox+rhzTrc70Vk5sdHeurl3r+FRwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFM7OAIOoVVMlZKDC+6MczYq65pwCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l MTgxNmFlNi01MTg2LTQ0ZjctYWU1Yi1lYzEzMzhiN2E3N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2UxODE2YWU2LTUxODYtNDRmNy1h ZTViLWVjMTMzOGI3YTc3YS9lMTgxNmFlNi01MTg2LTQ0ZjctYWU1Yi1lYzEzMzhi N2E3N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAOhJtAwDgQCAAIwCAMGBCYC/O4AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYCQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAfEARt6Si7QSYpSJ6njX1qlsNx Hz3BBhoi3ppHQlt4zteHYAas77dBvkNQJyU7bR0Avlon5CZbpFfYDr5HpRRzqEe2 AV1x5BjzphCDQmtNqulECT4giK3MG+Oz9mnJ/2Fp7SpT6eG5PFnwlYn78et+OPhK 2batMsKpuI9TPH7UE6q6/jzwfdL7WsP9Ac7m7NHZlUWOGOANeSHp+EAo0+aR67QV U7LUzbZjvxwiUP3+rqLqlK9cumqdTMM7Seosew8UgaFn6EH5Ew6l79/IhQgvYaaS GOWIEEn5zQ6agyzQ/RQRCZTnXKg/E2WAClOCynMZwHAUA8gUD4m6QFc/8g8b -----END CERTIFICATE-----Generated at Fri May 10 17:25:45 2024 by rpki-client on console-fra.rpki-client.org