$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer File: e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer (raw, json) Hash identifier: ar14Q3yRuvgBj+9faKhuQz5WXEK9RdK88S8XnLedvCM= Subject key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285845F946F5D57B5B6CAC328A6400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 24 May 2024 00:45:20 +0000 Certificate not after: Thu 27 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 10430 IP: 66.96.64.0/20 IP: 67.201.192.0/18 IP: 68.179.192.0/19 IP: 69.56.64.0/18 IP: 72.233.128.0/17 IP: 173.229.32.0/19 IP: 207.180.96.0/19 IP: 216.186.0.0/17 IP: 216.210.0.0/18 IP: 2607:fa78::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jul 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f9:46:f5:d5:7b:5b:6c:ac:32:8a:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 24 00:45:20 2024 GMT Not After : Aug 27 00:45:20 2026 GMT Subject: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cd:d6:e1:3a:52:01:8e:9a:0f:b2:ba:eb:e8: 90:81:8e:ec:41:8e:93:3f:1b:38:20:ad:09:ef:54: 39:59:7d:96:4f:57:73:66:a9:7d:93:a4:81:88:5b: d0:65:1d:f1:0d:59:56:a2:b2:cf:4b:8c:cc:18:a0: 48:0a:41:ce:49:55:4b:d7:60:6f:bf:30:ef:f2:1b: e8:a4:2f:3f:d8:bd:41:5d:79:9c:a0:6c:ed:f2:10: ab:43:c7:b0:1e:c2:52:75:ad:32:55:4b:e1:d4:fa: 57:2a:c1:83:2c:d4:9e:83:22:9b:e5:3f:71:0d:02: b6:02:92:48:d9:9d:ff:26:d3:58:32:d3:42:05:ed: 2c:7e:74:87:32:16:eb:49:01:3b:96:a3:7e:eb:ad: 55:c1:81:6f:f7:dd:53:79:17:f8:85:3d:57:b8:2a: e3:53:07:0d:64:c3:3b:b1:98:36:99:c6:09:a8:e8: dd:1c:4e:42:d1:d2:c1:10:68:e5:0b:2a:39:7c:e9: 45:95:f7:6f:56:a1:5e:d1:94:cc:11:24:36:5d:c3: 40:af:c6:47:0b:59:c3:f4:a3:56:43:70:d9:bd:b1: 95:d6:32:c5:2b:80:7e:cc:aa:6b:5f:e9:e2:06:d3: ee:e3:80:21:b9:e8:f6:81:55:19:c5:96:c8:b0:23: 2c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 66.96.64.0/20 67.201.192.0/18 68.179.192.0/19 69.56.64.0/18 72.233.128.0/17 173.229.32.0/19 207.180.96.0/19 216.186.0.0/17 216.210.0.0/18 IPv6: 2607:fa78::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10430 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:1e:f7:22:fe:ae:f0:ff:3a:d1:9d:5c:24:80:86:3b:64:d7: 8a:a4:96:f7:a4:d4:20:89:b5:89:bd:35:8f:af:02:17:d9:95: ac:c1:09:b0:ba:7d:e0:f4:42:a3:22:01:70:86:48:ce:b6:ec: d7:5d:d4:63:e0:6e:b1:75:1a:dd:16:bb:f8:d0:9e:10:10:bc: 77:d1:c9:84:86:e9:07:d8:96:f0:3b:fd:ce:1c:c9:e3:a6:3f: 32:f6:83:25:a0:27:d5:43:0f:ce:16:54:e0:9d:6c:a4:37:97: 94:16:00:ba:ba:62:ad:19:d0:53:d1:56:53:fd:fc:6e:1f:20: fb:d6:fb:38:81:63:aa:55:ba:c9:b0:18:0d:d9:ac:5a:9a:cf: f6:37:9b:01:7f:78:65:00:7c:0b:45:23:3b:ce:bb:5b:d2:4d: a5:61:a2:5d:b2:cf:17:3a:f4:22:c9:11:f9:6a:5b:61:e4:76: ec:98:1a:3e:2b:1c:aa:ec:04:f4:4f:70:7d:53:aa:c8:3e:75: 6b:51:47:e8:7d:0c:fb:44:33:8b:9d:9e:f4:33:ad:7a:25:02: ae:1b:ee:64:d3:7d:04:9d:96:c1:b1:7c:5d:52:52:46:bf:04: dc:0d:64:21:8b:2b:58:c6:81:fa:8f:3e:fc:c6:ff:09:bf:a3: 4c:49:52:f2 -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWEX5RvXVe1tsrDKKZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDUyNDAwNDUyMFoXDTI2MDgyNzAwNDUyMFowLzEtMCsGA1UEAxMk ZTliYmIwNmEtZTc1Yi00MWNiLWI5ZGEtMmNiMjhmNGMzNzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM3W4TpSAY6aD7K66+iQgY7sQY6TPxs4IK0J 71Q5WX2WT1dzZql9k6SBiFvQZR3xDVlWorLPS4zMGKBICkHOSVVL12BvvzDv8hvo pC8/2L1BXXmcoGzt8hCrQ8ewHsJSda0yVUvh1PpXKsGDLNSegyKb5T9xDQK2ApJI 2Z3/JtNYMtNCBe0sfnSHMhbrSQE7lqN+661VwYFv991TeRf4hT1XuCrjUwcNZMM7 sZg2mcYJqOjdHE5C0dLBEGjlCyo5fOlFlfdvVqFe0ZTMESQ2XcNAr8ZHC1nD9KNW Q3DZvbGV1jLFK4B+zKprX+niBtPu44Ahuej2gVUZxZbIsCMsJwIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFBTveelp8wU4n4xa3j2FN9WYxXULMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l OWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0YzM3M2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U5YmJiMDZhLWU3NWItNDFjYi1i OWRhLTJjYjI4ZjRjMzczZi9lOWJiYjA2YS1lNzViLTQxY2ItYjlkYS0yY2IyOGY0 YzM3M2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBARCYEADBAZDycADBAVEs8ADBAZFOEADBAdI6YAD BAWt5SADBAXPtGADBAfYugADBAbY0gAwDQQCAAIwBwMFACYH+ngwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICKL4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEx73Iv6u8P860Z1cJICGO2TXiqSW 96TUIIm1ib01j68CF9mVrMEJsLp94PRCoyIBcIZIzrbs113UY+BusXUa3Ra7+NCe EBC8d9HJhIbpB9iW8Dv9zhzJ46Y/MvaDJaAn1UMPzhZU4J1spDeXlBYAurpirRnQ U9FWU/38bh8g+9b7OIFjqlW6ybAYDdmsWprP9jebAX94ZQB8C0UjO867W9JNpWGi XbLPFzr0IskR+WpbYeR27JgaPiscquwE9E9wfVOqyD51a1FH6H0M+0Qzi52e9DOt eiUCrhvuZNN9BJ2WwbF8XVJSRr8E3A1kIYsrWMaB+o8+/Mb/Cb+jTElS8g== -----END CERTIFICATE-----Generated at Fri Jul 26 15:59:30 2024 by rpki-client on console-fra.rpki-client.org