$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer File: 3d318897-eed6-4fd9-a18c-91026968b3e2.cer (raw, json) Hash identifier: ak2khLX4yfJ24QeGMbZn2fPVtsX4tDgkYOzYSHxhrT4= Subject key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285845C9D154DA8E6BAB313A14F4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 May 2024 00:45:20 +0000 Certificate not after: Mon 10 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 800 IP: 23.160.32.0/24 IP: 162.120.72.0/23 IP: 207.32.208.0/22 IP: 2604:fdc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jul 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c9:d1:54:da:8e:6b:ab:31:3a:14:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 7 00:45:20 2024 GMT Not After : Aug 10 00:45:20 2026 GMT Subject: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:25:ce:7c:d1:f8:6e:e4:94:34:8d:99:5e:69: aa:54:da:68:47:ce:3e:15:b1:ea:e2:92:f8:85:c2: 06:7b:fb:3f:fe:38:0a:c5:a6:00:13:1f:0d:1b:c8: 18:43:be:92:6f:9d:44:74:10:9e:bf:3d:5d:6c:84: 53:2e:55:3b:70:e7:14:c3:3a:60:db:1e:24:df:83: 87:3f:37:8e:43:3a:a4:73:ec:6a:dc:66:f3:06:ed: e5:f0:0d:a4:ed:1a:f2:9c:98:f3:7f:bb:73:86:e7: 21:5e:46:bd:c6:e4:9e:f4:ff:7f:5b:f0:d2:c4:f8: 1f:6c:b8:92:7d:b6:21:fe:e5:a1:65:58:4a:85:c4: 47:de:5a:a8:a0:8c:ef:ce:ab:cb:33:15:45:bc:3e: 58:fe:79:90:06:9a:1a:d1:53:56:3a:64:ce:60:fc: 65:88:f2:09:28:bb:cf:ba:9a:20:d5:22:32:ff:33: c8:68:84:55:a0:fc:71:7b:c8:52:3a:4f:7b:12:5b: 57:fb:f4:20:db:0f:66:f6:20:f9:9a:ec:ad:1a:5d: 7f:45:f0:33:d6:c0:7a:e8:03:88:1f:c3:e2:ca:f1: 50:77:bc:2f:2e:af:ba:9a:e4:cf:88:20:1c:01:ed: 4b:23:f8:d4:36:a8:e4:e8:e7:c5:07:91:2d:61:69: 36:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 23.160.32.0/24 162.120.72.0/23 207.32.208.0/22 IPv6: 2604:fdc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 800 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c3:35:f7:f9:50:56:77:f8:a5:1c:d5:e4:60:df:dd:b6:96: bc:33:30:14:79:1e:42:52:dc:8c:2a:c8:1c:d4:76:9e:91:b9: fc:e2:f7:ca:c3:ff:35:f9:a4:af:d4:d6:7d:02:cd:a4:30:d7: 58:0d:2d:c2:1f:14:ab:46:97:9f:06:45:2d:46:1e:84:e0:f8: 28:68:1f:7c:75:53:88:43:d4:db:01:18:29:97:a5:01:4c:42: 45:8e:9a:da:8b:ad:37:7a:c4:45:49:b4:3f:30:7a:24:94:30: d3:82:a9:c4:f6:58:ef:e6:8f:8b:06:83:7d:99:43:a6:45:9a: 62:60:d8:15:1e:4d:e8:9a:84:c0:94:6b:7f:90:a2:7d:e5:e6: cd:14:d2:be:99:ac:a0:7e:e7:f0:4b:3d:8c:0d:5e:ea:4f:13: 9b:0f:2c:ea:bc:68:bd:ed:fa:68:13:fd:2c:7a:a6:92:23:0b: 78:15:be:66:15:fd:31:c5:5e:d9:fa:b6:66:d6:b4:7b:5b:eb: fd:81:e7:c7:dc:1c:3b:1b:42:71:9b:cf:c3:d4:c3:4c:ad:f5: e7:e3:f8:39:d7:6b:b0:1a:31:c2:e2:99:f4:f4:e9:28:52:f7: b8:9e:f9:e1:e7:b8:01:2e:73:cd:a1:64:f9:4e:03:00:c6:0c: 4a:9a:3e:31 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEXJ0VTajmurMToU9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDUwNzAwNDUyMFoXDTI2MDgxMDAwNDUyMFowLzEtMCsGA1UEAxMk M2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5NjhiM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSXOfNH4buSUNI2ZXmmqVNpoR84+FbHq4pL4 hcIGe/s//jgKxaYAEx8NG8gYQ76Sb51EdBCevz1dbIRTLlU7cOcUwzpg2x4k34OH PzeOQzqkc+xq3GbzBu3l8A2k7RrynJjzf7tzhuchXka9xuSe9P9/W/DSxPgfbLiS fbYh/uWhZVhKhcRH3lqooIzvzqvLMxVFvD5Y/nmQBpoa0VNWOmTOYPxliPIJKLvP upog1SIy/zPIaIRVoPxxe8hSOk97EltX+/Qg2w9m9iD5muytGl1/RfAz1sB66AOI H8PiyvFQd7wvLq+6muTPiCAcAe1LI/jUNqjk6OfFB5EtYWk2vwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFHPE0Cw2kaPqn8z+1arA4CKIwzylMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z ZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzNkMzE4ODk3LWVlZDYtNGZkOS1h MThjLTkxMDI2OTY4YjNlMi8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2 OGIzZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXoCADBAGieEgDBALPINAwDQQCAAIwBwMFACYE /cAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICAyAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANcM19/lQVnf4 pRzV5GDf3baWvDMwFHkeQlLcjCrIHNR2npG5/OL3ysP/Nfmkr9TWfQLNpDDXWA0t wh8Uq0aXnwZFLUYehOD4KGgffHVTiEPU2wEYKZelAUxCRY6a2outN3rERUm0PzB6 JJQw04KpxPZY7+aPiwaDfZlDpkWaYmDYFR5N6JqEwJRrf5CifeXmzRTSvpmsoH7n 8Es9jA1e6k8Tmw8s6rxove36aBP9LHqmkiMLeBW+ZhX9McVe2fq2Zta0e1vr/YHn x9wcOxtCcZvPw9TDTK315+P4OddrsBoxwuKZ9PTpKFL3uJ754ee4AS5zzaFk+U4D AMYMSpo+MQ== -----END CERTIFICATE-----Generated at Fri Jul 26 16:47:31 2024 by rpki-client on console-ams.rpki-client.org