$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99.cer File: 4113c935-d29d-41b5-bec0-a7395bdeac99.cer (raw, json) Hash identifier: 2iOwgMi+3CRJxUZgrmRmp3yaiYH/ibSGoKjXt+vRb3w= Subject key identifier: 18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858453E3B21B0C187171E08188080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Mar 2024 00:45:19 +0000 Certificate not after: Sun 21 Jun 2026 00:45:19 +0000 Subordinate resources: IP: 192.241.8.0/22 IP: 199.195.156.0/22 IP: 2604:3440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:3e:3b:21:b0:c1:87:17:1e:08:18:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 18 00:45:19 2024 GMT Not After : Jun 21 00:45:19 2026 GMT Subject: CN=4113c935-d29d-41b5-bec0-a7395bdeac99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:47:59:f2:f6:db:ae:c2:a8:2e:d9:f9:0c: 0c:0f:dc:4b:10:97:84:2e:58:99:62:60:d7:04:6b: 51:a0:48:c0:2a:d7:af:f3:f5:a2:f2:b3:b5:3d:57: 7b:3c:26:25:d4:16:61:c7:ee:cb:f1:6c:6b:0b:fd: 26:24:a3:45:4a:ed:27:ee:b0:7a:ca:d5:45:07:24: d9:96:83:fe:e9:00:50:9d:81:68:28:86:58:c8:8e: f3:d1:c1:9d:05:5f:2b:31:42:f4:2d:fe:f4:9c:5b: f0:ab:8d:cc:42:bd:ac:d1:c1:8c:60:e2:f5:21:1f: 53:0c:f8:03:d8:ac:29:62:a2:70:c0:8d:6e:c0:f6: 6f:b1:3b:f4:1d:1b:a3:01:d3:c3:fc:a2:e5:7f:4a: ab:12:4e:6f:fe:e0:e6:42:59:cb:c7:d1:1b:de:c8: fc:ad:dc:ff:e5:6a:a5:31:91:5f:15:96:64:11:b4: ba:0c:b4:c6:45:0d:e8:87:b3:0a:ff:7d:a9:ed:66: 05:4f:5a:f1:e4:b2:73:ef:dd:54:fe:86:0c:62:21: b5:78:0e:17:06:7c:46:44:9a:62:e4:c9:88:1e:2a: 9d:7b:b6:0c:64:11:ab:46:af:bc:d0:82:d0:c4:8a: 3b:f3:58:2e:c6:d3:71:58:dc:9e:d6:90:af:75:3b: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:30:D1:6A:A1:F8:EF:BF:B7:21:4E:6C:0F:F1:7A:50:59:98:0E:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4113c935-d29d-41b5-bec0-a7395bdeac99/4113c935-d29d-41b5-bec0-a7395bdeac99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.241.8.0/22 199.195.156.0/22 IPv6: 2604:3440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:70:7b:a4:48:72:7f:d4:ed:fa:dc:59:ac:2c:bc:09:f9:fa: f4:7c:7c:8b:aa:90:76:b4:60:91:75:92:fd:6d:7d:f8:cd:59: d9:84:26:87:36:e4:20:6f:5d:09:22:86:39:6e:49:a8:9c:a4: 8b:9b:85:81:57:22:bc:50:35:5b:93:7f:ac:e4:6b:5b:a2:1b: 54:6a:12:f5:80:ac:84:b2:95:94:9a:95:97:a0:b4:17:43:46: 98:a8:93:30:30:e6:76:95:a0:eb:71:1a:ce:c2:c9:8b:84:5c: 96:09:90:7b:06:ac:5e:10:61:8e:7b:2e:55:d3:06:38:75:9e: 0f:60:3f:89:1b:71:81:94:23:b4:44:dc:55:90:36:06:22:b1: 7e:17:1e:cb:65:60:89:d9:07:15:04:e3:0f:9e:c0:99:8c:39: 79:4e:66:73:93:a4:3f:58:8e:3b:51:69:b0:14:37:5f:50:ec: d9:76:0b:35:04:f9:97:4c:24:7b:d4:ae:45:b7:a9:35:d6:b5: 97:c5:e4:e3:f2:3d:b9:26:3f:06:de:0b:f4:b6:17:06:9f:fb: 32:03:2a:2c:49:8d:c2:01:71:55:15:ee:cd:6b:22:83:37:de: 0a:09:50:c8:aa:c8:b4:ab:1c:06:62:a8:dd:f1:5e:13:31:8f: 99:28:ba:3a -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEU+OyGwwYcXHggYgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDMxODAwNDUxOVoXDTI2MDYyMTAwNDUxOVowLzEtMCsGA1UEAxMk NDExM2M5MzUtZDI5ZC00MWI1LWJlYzAtYTczOTViZGVhYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkRHWfL2267CqC7Z+QwMD9xLEJeELliZYmDX BGtRoEjAKtev8/Wi8rO1PVd7PCYl1BZhx+7L8WxrC/0mJKNFSu0n7rB6ytVFByTZ loP+6QBQnYFoKIZYyI7z0cGdBV8rMUL0Lf70nFvwq43MQr2s0cGMYOL1IR9TDPgD 2KwpYqJwwI1uwPZvsTv0HRujAdPD/KLlf0qrEk5v/uDmQlnLx9Eb3sj8rdz/5Wql MZFfFZZkEbS6DLTGRQ3oh7MK/32p7WYFT1rx5LJz791U/oYMYiG1eA4XBnxGRJpi 5MmIHiqde7YMZBGrRq+80ILQxIo781guxtNxWNye1pCvdTsZcwIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFBgw0Wqh+O+/tyFObA/xelBZmA7GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 MTEzYzkzNS1kMjlkLTQxYjUtYmVjMC1hNzM5NWJkZWFjOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQxMTNjOTM1LWQyOWQtNDFiNS1i ZWMwLWE3Mzk1YmRlYWM5OS80MTEzYzkzNS1kMjlkLTQxYjUtYmVjMC1hNzM5NWJk ZWFjOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALA8QgDBALHw5wwDQQCAAIwBwMFACYENEAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVnB7pEhyf9Tt+txZrCy8Cfn69Hx8i6qQdrRgkXWS/W19+M1Z2YQmhzbk IG9dCSKGOW5JqJyki5uFgVcivFA1W5N/rORrW6IbVGoS9YCshLKVlJqVl6C0F0NG mKiTMDDmdpWg63EazsLJi4RclgmQewasXhBhjnsuVdMGOHWeD2A/iRtxgZQjtETc VZA2BiKxfhcey2VgidkHFQTjD57AmYw5eU5mc5OkP1iOO1FpsBQ3X1Ds2XYLNQT5 l0wke9SuRbepNda1l8Xk4/I9uSY/Bt4L9LYXBp/7MgMqLEmNwgFxVRXuzWsigzfe CglQyKrItKscBmKo3fFeEzGPmSi6Og== -----END CERTIFICATE-----Generated at Fri May 3 01:32:07 2024 by rpki-client on console-fra.rpki-client.org