$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer File: fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer (raw, json) Hash identifier: ndzb7lsMCQ16Oi5wNNtppdlWWzmDLyXiU3+nSACLjwY= Subject key identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285844826C32FFFA789259DC5A3600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Jan 2024 18:12:14 +0000 Certificate not after: Wed 08 Apr 2026 19:33:19 +0000 Subordinate resources: AS: 399333 IP: 23.169.120.0/24 IP: 2602:f9ad::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:82:6c:32:ff:fa:78:92:59:dc:5a:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 10 18:12:14 2024 GMT Not After : Apr 8 19:33:19 2026 GMT Subject: CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:79:22:b6:bc:4a:b7:5b:a4:10:63:d5:9c: 54:01:65:cb:6e:7f:bf:0a:c5:f6:c3:ad:69:af:c6: 1d:29:ac:dd:71:78:be:0e:05:d0:88:23:3b:dc:10: c2:27:6f:fd:26:37:be:22:b9:49:05:d2:10:7f:cf: 6b:2a:0b:c0:8d:98:5c:c6:29:a9:c6:52:9f:02:b3: b0:e2:44:a5:0b:88:82:e5:10:78:af:b2:74:b9:e7: af:6f:9b:f6:c5:ff:05:cf:e8:3e:d0:61:2a:92:38: a0:9b:31:05:f0:64:f7:5c:dc:52:dd:60:3b:6d:03: 51:a7:f5:41:7d:64:ce:70:10:56:40:fe:bd:97:c9: 7f:0b:e4:a9:37:8f:4f:a6:6e:a5:3e:d8:f0:5f:07: 41:2f:1a:51:24:11:28:d3:8c:67:0f:4f:8a:86:3a: 9b:6c:11:b3:16:99:62:92:b0:95:f6:4f:4f:b7:bb: 43:0d:84:04:43:35:10:d8:24:1a:67:b0:27:59:10: be:dd:f8:42:9e:93:11:ef:df:ef:12:2e:a0:e2:e0: 31:7f:84:8e:f0:dc:85:0b:49:f5:8d:1a:01:0c:c7: 57:2a:4c:d3:26:46:26:23:0d:8e:af:18:c7:fd:9e: 10:43:7a:f2:e5:7d:5f:61:a0:31:ca:45:4c:f0:6f: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 23.169.120.0/24 IPv6: 2602:f9ad::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399333 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:46:ec:fb:8c:74:60:fa:6d:6b:76:8b:ec:61:50:d6:01:e4: 6a:80:bb:77:a1:9a:98:4b:51:90:ba:97:a9:9c:36:32:d6:07: 7c:6d:bf:0c:68:54:be:23:63:fd:20:be:4e:df:d7:0e:56:dd: 10:5e:39:e4:69:47:20:6e:64:0c:f9:33:7b:2a:27:fc:d7:1f: da:cc:6e:48:7a:55:67:1e:b0:50:4d:1c:ca:06:da:b1:ad:91: 8f:1d:75:02:00:e7:bd:e9:d8:fd:30:50:18:fc:0e:95:a9:5a: 5d:42:24:66:79:11:64:b9:d8:3d:4e:c2:2c:c3:74:7a:a3:1e: 48:5f:39:84:23:9d:60:73:8a:cc:b6:e3:c3:3f:7f:d1:6b:fb: 1e:96:09:0f:47:a7:58:65:a4:0f:80:37:52:25:53:c4:3a:c6: b7:ec:71:00:39:3c:c9:c0:70:54:46:01:0a:74:85:db:a1:e3: cb:5a:44:90:a4:5c:86:63:06:4c:e2:fe:bd:28:f4:d1:fd:3d: bc:c4:3a:3f:9f:ee:67:0e:bf:f1:b7:ff:2d:af:74:ac:38:7d: 44:c2:84:b4:76:18:37:5e:4f:f8:70:5d:de:cb:84:35:5d:3d: 22:e9:2b:e1:cc:08:bf:7a:2a:d2:ab:89:15:c2:9c:ce:b1:7f: c2:69:e9:d9 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWESCbDL/+niSWdxaNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI0MDExMDE4MTIxNFoXDTI2MDQwODE5MzMxOVowLzEtMCsGA1UEAxMk ZmRiM2ZlZTktMGIwMC00YThkLWIzMjAtZTI5M2I2MjdiYjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0p5Ira8SrdbpBBj1ZxUAWXLbn+/CsX2w61p r8YdKazdcXi+DgXQiCM73BDCJ2/9Jje+IrlJBdIQf89rKgvAjZhcximpxlKfArOw 4kSlC4iC5RB4r7J0ueevb5v2xf8Fz+g+0GEqkjigmzEF8GT3XNxS3WA7bQNRp/VB fWTOcBBWQP69l8l/C+SpN49Ppm6lPtjwXwdBLxpRJBEo04xnD0+KhjqbbBGzFpli krCV9k9Pt7tDDYQEQzUQ2CQaZ7AnWRC+3fhCnpMR79/vEi6g4uAxf4SO8NyFC0n1 jRoBDMdXKkzTJkYmIw2OrxjH/Z4QQ3ry5X1fYaAxykVM8G9x9QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFMw1juFcBncsbYnOxArUquQo2SENMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9m ZGIzZmVlOS0wYjAwLTRhOGQtYjMyMC1lMjkzYjYyN2JiMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2ZkYjNmZWU5LTBiMDAtNGE4ZC1i MzIwLWUyOTNiNjI3YmIwNC9mZGIzZmVlOS0wYjAwLTRhOGQtYjMyMC1lMjkzYjYy N2JiMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqXgwDgQCAAIwCAMGACYC+a0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYX5TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADRuz7jHRg+m1rdovsYVDWAeRq gLt3oZqYS1GQupepnDYy1gd8bb8MaFS+I2P9IL5O39cOVt0QXjnkaUcgbmQM+TN7 Kif81x/azG5IelVnHrBQTRzKBtqxrZGPHXUCAOe96dj9MFAY/A6VqVpdQiRmeRFk udg9TsIsw3R6ox5IXzmEI51gc4rMtuPDP3/Ra/selgkPR6dYZaQPgDdSJVPEOsa3 7HEAOTzJwHBURgEKdIXboePLWkSQpFyGYwZM4v69KPTR/T28xDo/n+5nDr/xt/8t r3SsOH1EwoS0dhg3Xk/4cF3ey4Q1XT0i6SvhzAi/eirSq4kVwpzOsX/CaenZ -----END CERTIFICATE-----Generated at Sat May 11 15:32:47 2024 by rpki-client on console-ams.rpki-client.org