$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer File: 1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer (raw, json) Hash identifier: 7OFiqhz+fJpg7+MNFtXyVWUGX7tmMwE/Pi96hxCYd/8= Subject key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Authority key identifier: 55:EC:4A:AB:30:17:4B:93:40:74:E2:6F:A8:9B:CE:C7:C0:E3:55:D7 Certificate issuer: /CN=aaa76394-48fc-4ff3-b6aa-0693c55d758f Certificate serial: 010D0C9F43285845F888252CCB63E008C9814B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/notification.xml Certificate not before: Thu 23 May 2024 18:20:52 +0000 Certificate not after: Wed 26 Aug 2026 18:20:52 +0000 Subordinate resources: IP: 15.135.0.0/16 IP: 15.189.0.0/16 IP: 15.201.0.0/16 IP: 15.203.0.0/16 IP: 15.225.0.0/16 IP: 15.227.0.0/16 IP: 199.61.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f8:88:25:2c:cb:63:e0:08:c9:81:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa76394-48fc-4ff3-b6aa-0693c55d758f Validity Not Before: May 23 18:20:52 2024 GMT Not After : Aug 26 18:20:52 2026 GMT Subject: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:15:8b:f1:ff:ea:2c:57:66:37:19:2c:44: 72:de:25:21:cb:6d:61:1a:47:00:67:ee:29:50:77: ac:ab:37:38:94:66:63:8d:86:1a:2e:fb:39:29:83: c6:e1:5e:ab:0e:89:78:aa:5e:d6:df:c4:6c:26:27: cb:5b:e9:f1:84:27:4f:e8:63:3b:0e:32:7e:5d:b5: b0:18:5e:31:8f:25:e5:03:84:d5:ce:15:c9:1e:5d: a6:70:02:7a:6d:58:18:9e:3f:b7:e5:59:98:5a:fe: 4e:12:1e:78:41:dc:87:ca:9c:45:18:4a:6e:f6:02: 2d:52:d6:86:b4:8f:c6:8a:8a:0c:93:24:c1:1c:c7: b8:8f:e7:80:c1:1f:fb:d3:96:a5:fa:45:2e:a5:0e: 14:0c:0d:4a:99:89:81:d3:2f:e2:6d:a5:4b:ea:b8: 15:34:eb:6f:d9:da:aa:d9:47:49:59:40:78:25:df: 80:6f:16:0a:84:73:66:c2:80:d0:15:73:2a:07:92: d4:7c:7a:b0:65:ad:ce:80:1b:0a:6a:32:10:48:06: ee:74:85:e4:2e:48:86:a5:a5:62:8c:c0:c5:29:f1: e7:20:fa:ca:57:aa:56:03:55:b4:9d:ee:28:b1:d6: e7:dd:0d:c3:55:70:d5:34:05:cf:a1:c4:0e:5f:26: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/aaa76394-48fc-4ff3-b6aa-0693c55d758f.crl X509v3 Authority Key Identifier: keyid:55:EC:4A:AB:30:17:4B:93:40:74:E2:6F:A8:9B:CE:C7:C0:E3:55:D7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f.cer sbgp-ipAddrBlock: critical IPv4: 15.135.0.0/16 15.189.0.0/16 15.201.0.0/16 15.203.0.0/16 15.225.0.0/16 15.227.0.0/16 199.61.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b7:56:ae:aa:99:74:03:c9:33:32:c3:df:f6:31:59:be:77: 88:5d:bf:7e:70:9f:55:26:d3:b4:16:31:86:95:0b:dd:68:7f: e8:18:29:e3:6c:81:4b:89:3c:9c:f8:43:59:5f:6c:ae:b8:d9: e1:5d:6e:f4:2f:c2:18:52:0c:7a:51:2a:ef:d3:58:6e:58:97: 00:ad:f1:1b:c5:1a:92:47:9c:04:bb:36:f5:cb:f1:f9:85:40: e9:e3:e4:d3:39:b8:0c:d2:90:25:e8:ad:c2:9e:36:83:07:61: f7:1f:33:fc:5d:e5:63:dc:2e:7b:12:34:02:d8:ba:15:05:48: 5b:d3:da:6a:30:91:0d:20:23:0e:0d:6d:e6:34:64:ab:ce:d9: 46:ed:07:3a:76:75:64:e8:68:90:08:c6:eb:58:c2:3c:ff:b8: 4d:d8:08:0a:e7:35:7b:71:e7:e0:08:f2:3a:f9:9b:70:4c:00: 4e:fc:2e:f3:80:da:ef:a8:64:b7:5f:dc:9f:db:60:70:a7:af: 2c:6d:72:3c:dc:7d:46:65:b4:d1:a8:32:4a:61:5b:18:8c:39: 7a:dc:3a:48:da:04:6e:ef:71:82:4b:6c:1d:41:4f:fa:ed:4b: b8:26:c9:cd:9a:23:3a:1f:2a:11:db:c6:9f:f9:7c:12:09:89: f7:25:06:d7 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEX4iCUsy2PgCMmBS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFhNzYzOTQtNDhmYy00ZmYzLWI2YWEtMDY5M2M1NWQ3 NThmMB4XDTI0MDUyMzE4MjA1MloXDTI2MDgyNjE4MjA1MlowPTE7MDkGA1UEAxMy MWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAx MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCptRWL8f/qLFdmNxks RHLeJSHLbWEaRwBn7ilQd6yrNziUZmONhhou+zkpg8bhXqsOiXiqXtbfxGwmJ8tb 6fGEJ0/oYzsOMn5dtbAYXjGPJeUDhNXOFckeXaZwAnptWBieP7flWZha/k4SHnhB 3IfKnEUYSm72Ai1S1oa0j8aKigyTJMEcx7iP54DBH/vTlqX6RS6lDhQMDUqZiYHT L+JtpUvquBU062/Z2qrZR0lZQHgl34BvFgqEc2bCgNAVcyoHktR8erBlrc6AGwpq MhBIBu50heQuSIalpWKMwMUp8ecg+spXqlYDVbSd7iix1ufdDcNVcNU0Bc+hxA5f JsgZAgMBAAGjggQNMIIECTAdBgNVHQ4EFgQUFfTvBPWvI5bJXxZC43kHi0iMFgsw ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3 ODMtNGEwYi1hNThkLTZkYzhlMjQzM2QzMy8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZh ODRlLTk3ODMtNGEwYi1hNThkLTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9N Rmp4WXNkUXRBUWMubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2ZmOWZhODRlLTk3ODMtNGEwYi1h NThkLTZkYzhlMjQzM2QzMy9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiL2FhYTc2Mzk0LTQ4ZmMtNGZmMy1iNmFhLTA2OTNjNTVkNzU4Zi9hYWE3NjM5 NC00OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYuY3JsMB8GA1UdIwQYMBaAFFXs SqswF0uTQHTib6ibzsfA41XXMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy81YjdmYjEyMi1kZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFh NzYzOTQtNDhmYy00ZmYzLWI2YWEtMDY5M2M1NWQ3NThmLmNlcjA8BggrBgEFBQcB BwEB/wQtMCswKQQCAAEwIwMDAA+HAwMAD70DAwAPyQMDAA/LAwMAD+EDAwAP4wMD AMc9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAW3Vq6qmXQDyTMyw9/2MVm+d4hdv35wn1Um07QWMYaVC91o f+gYKeNsgUuJPJz4Q1lfbK642eFdbvQvwhhSDHpRKu/TWG5YlwCt8RvFGpJHnAS7 NvXL8fmFQOnj5NM5uAzSkCXorcKeNoMHYfcfM/xd5WPcLnsSNALYuhUFSFvT2mow kQ0gIw4NbeY0ZKvO2UbtBzp2dWToaJAIxutYwjz/uE3YCArnNXtx5+AI8jr5m3BM AE78LvOA2u+oZLdf3J/bYHCnryxtcjzcfUZltNGoMkphWxiMOXrcOkjaBG7vcYJL bB1BT/rtS7gmyc2aIzofKhHbxp/5fBIJifclBtc= -----END CERTIFICATE-----Generated at Sat May 25 21:23:11 2024 by rpki-client on console-fra.rpki-client.org