$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae.cer File: 6ae88fcc-f987-4b2c-abc0-89a278cc29ae.cer (raw, json) Hash identifier: HDrS4Ce3QPRiWOJo8aiqpgES+QtTJmFQzr21wUYkgc4= Subject key identifier: 86:F7:AC:0C:C6:B3:3F:93:49:73:97:29:65:70:FC:1A:3A:90:32:38 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F4328584312AD053CF41EC33A7C928300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/6ae88fcc-f987-4b2c-abc0-89a278cc29ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Sep 2023 00:45:21 +0000 Certificate not after: Thu 04 Dec 2025 01:45:21 +0000 Subordinate resources: IP: 24.170.208.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:12:ad:05:3c:f4:1e:c3:3a:7c:92:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 1 00:45:21 2023 GMT Not After : Dec 4 01:45:21 2025 GMT Subject: CN=6ae88fcc-f987-4b2c-abc0-89a278cc29ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:39:2b:86:96:16:22:c1:80:61:00:5d:4d: e2:38:8c:06:e9:11:5d:38:c0:7b:39:95:7c:f3:f7: e1:d7:36:db:1f:d5:38:c1:0b:82:af:fb:2e:67:7a: 06:64:0e:54:22:38:4f:24:7f:62:56:23:53:46:f0: 09:81:e5:f2:52:17:d5:b6:71:53:01:e5:04:27:e6: 4e:64:4c:0e:20:08:7f:83:c1:3e:01:a4:d4:6b:66: ea:40:d1:f6:75:0d:29:d9:09:4f:72:43:50:78:d0: 5a:2a:14:49:2b:96:6b:fb:f1:ae:5b:09:5e:de:9b: f8:4e:e9:3b:6a:5f:be:2c:e7:e1:cf:49:4d:e3:74: 8b:21:3b:0d:66:b5:9b:9c:35:1b:77:5a:2f:db:c2: 05:ee:ed:89:0f:c2:13:ae:28:d6:a2:d8:fa:4c:61: 4c:d1:d0:36:06:c7:51:aa:27:cd:24:0d:e3:e9:96: be:c2:bc:d9:03:2b:bf:a6:78:26:1d:fb:2a:17:85: 23:01:29:f2:e4:4a:3b:5b:b3:4c:70:97:47:19:29: 43:e0:df:3e:c9:0d:99:6b:7a:0a:51:94:1c:37:a6: 36:07:b9:8a:68:d6:d5:46:4a:fa:8c:38:1b:cc:0e: 39:70:c2:22:f4:62:b9:bc:27:29:6e:20:10:7e:45: 22:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F7:AC:0C:C6:B3:3F:93:49:73:97:29:65:70:FC:1A:3A:90:32:38 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/6ae88fcc-f987-4b2c-abc0-89a278cc29ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 24.170.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:8b:35:e3:8f:e1:ea:f1:16:bd:5c:f4:12:df:f8:07:05:df: 67:c2:85:e5:41:d1:cb:9a:bf:ca:cc:54:5d:6a:54:bd:f1:ee: 47:61:5f:59:ff:56:c5:e5:7a:7a:ac:a7:56:e3:3d:1c:0f:fb: 91:da:2a:f7:d4:4a:72:ed:84:3d:0f:87:42:02:82:7e:19:7a: 60:2a:da:7f:72:62:ee:78:66:67:e8:5f:67:d3:b7:56:12:26: 79:05:d9:34:bd:50:e4:cc:db:b9:10:f2:96:ae:ce:02:aa:a8: 4e:af:83:5f:a7:b3:6b:77:10:06:aa:e7:58:1d:62:8a:12:26: 40:9d:c5:0e:a1:cf:bd:50:e0:af:c7:ec:59:d5:fd:33:c9:9b: 0a:d2:52:56:4e:d6:be:b2:ad:02:5a:9d:3d:64:84:4a:30:14: 2a:8f:3d:c9:f6:d7:c5:8f:39:49:26:81:59:1a:6c:14:21:63: 42:c4:3a:96:93:5c:ab:be:61:0e:2c:63:35:26:f9:b1:af:e4: 5b:7d:db:28:7a:40:d5:52:29:e4:2e:76:92:44:13:a3:2a:c9: 1f:2d:eb:58:38:46:21:91:df:37:39:29:e4:71:8b:8d:72:ed: fc:94:fc:c7:3e:72:4e:1a:7f:fb:6e:3c:c3:d7:ff:8d:25:93: c8:c3:0e:04 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEMSrQU89B7DOnySgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDkwMTAwNDUyMVoXDTI1MTIwNDAxNDUyMVowLzEtMCsGA1UEAxMk NmFlODhmY2MtZjk4Ny00YjJjLWFiYzAtODlhMjc4Y2MyOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQs5K4aWFiLBgGEAXU3iOIwG6RFdOMB7OZV8 8/fh1zbbH9U4wQuCr/suZ3oGZA5UIjhPJH9iViNTRvAJgeXyUhfVtnFTAeUEJ+ZO ZEwOIAh/g8E+AaTUa2bqQNH2dQ0p2QlPckNQeNBaKhRJK5Zr+/GuWwle3pv4Tuk7 al++LOfhz0lN43SLITsNZrWbnDUbd1ov28IF7u2JD8ITrijWotj6TGFM0dA2BsdR qifNJA3j6Za+wrzZAyu/pngmHfsqF4UjASny5Eo7W7NMcJdHGSlD4N8+yQ2Za3oK UZQcN6Y2B7mKaNbVRkr6jDgbzA45cMIi9GK5vCcpbiAQfkUilQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIb3rAzGsz+TSXOXKWVw/Bo6kDI4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82 YWU4OGZjYy1mOTg3LTRiMmMtYWJjMC04OWEyNzhjYzI5YWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzZhZTg4ZmNjLWY5ODctNGIyYy1h YmMwLTg5YTI3OGNjMjlhZS82YWU4OGZjYy1mOTg3LTRiMmMtYWJjMC04OWEyNzhj YzI5YWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAQYqtAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa4s144/h6vEWvVz0Et/4 BwXfZ8KF5UHRy5q/ysxUXWpUvfHuR2FfWf9WxeV6eqynVuM9HA/7kdoq99RKcu2E PQ+HQgKCfhl6YCraf3Ji7nhmZ+hfZ9O3VhImeQXZNL1Q5MzbuRDylq7OAqqoTq+D X6eza3cQBqrnWB1iihImQJ3FDqHPvVDgr8fsWdX9M8mbCtJSVk7WvrKtAlqdPWSE SjAUKo89yfbXxY85SSaBWRpsFCFjQsQ6lpNcq75hDixjNSb5sa/kW33bKHpA1VIp 5C52kkQToyrJHy3rWDhGIZHfNzkp5HGLjXLt/JT8xz5yThp/+248w9f/jSWTyMMO BA== -----END CERTIFICATE-----Generated at Fri May 3 06:32:28 2024 by rpki-client on console-fra.rpki-client.org