$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer File: 32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer (raw, json) Hash identifier: yaUhBHIn3b3D7tCIOvBS1UIIiWoJtzIc+gswjbrTFyA= Subject key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858420EA2898CE682E51F27254600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 May 2023 21:14:04 +0000 Certificate not after: Mon 01 Sep 2025 21:14:04 +0000 Subordinate resources: IP: 199.33.230.0 -- 199.33.233.255 IP: 2001:503:ff40::/46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:0e:a2:89:8c:e6:82:e5:1f:27:25:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: May 30 21:14:04 2023 GMT Not After : Sep 1 21:14:04 2025 GMT Subject: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:1e:29:20:52:d8:06:fd:5f:17:54:de:3a: a1:db:6e:6b:8a:42:98:be:a8:11:c3:54:84:46:47: 41:e1:ff:11:4e:37:e8:0b:f6:d7:93:50:f8:45:2c: c7:6b:c6:f2:a0:bf:4d:ac:47:90:17:f8:a1:29:2f: 3a:56:c6:30:91:cd:6d:0f:d2:41:7b:43:f4:9b:ee: 77:29:df:15:99:0b:ef:26:6f:48:aa:b3:d1:0a:d2: 60:df:51:82:81:cd:60:6d:8c:86:87:b9:a9:e7:46: ce:8e:16:be:00:59:7b:b6:07:95:e7:eb:48:55:be: 93:14:10:a5:3f:5d:50:fb:35:dc:68:5d:f8:0d:82: 52:d7:5a:7f:4d:99:22:af:0d:36:7b:a3:cb:cf:95: b5:01:33:27:98:b8:90:5a:65:44:20:17:41:56:65: 24:4d:22:fc:38:ba:69:fa:0d:0b:9c:1b:e0:bd:16: 07:0a:5d:98:b4:9f:7e:71:a4:e0:40:b2:ae:c8:ba: e9:b8:e7:16:44:08:66:74:ed:91:70:f7:0e:72:85: f1:85:0b:97:cb:35:8c:bb:1a:a5:36:8a:a4:d5:82: 24:29:ba:bc:a4:d0:83:96:14:7a:1f:0b:7a:97:8c: 39:c4:87:0c:da:11:b0:ff:9b:88:0f:52:2c:60:55: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.33.230.0-199.33.233.255 IPv6: 2001:503:ff40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:06:35:e9:71:bd:e0:6f:0f:dd:4c:07:10:b2:b1:73:6d:dd: 78:21:a6:3e:a1:33:88:12:61:db:fd:2e:1f:61:a7:82:44:7e: 18:18:a8:89:62:a2:4f:81:3b:e4:63:f0:11:2a:77:5a:28:f4: 28:1e:c7:dc:85:2e:f9:58:22:56:7d:ed:bf:bf:9c:c6:e8:d6: c6:5f:fb:4c:10:37:43:e4:d1:69:8d:e6:08:83:a1:6a:6c:3f: cf:36:f5:94:e6:92:89:06:d4:fd:22:80:b3:d3:12:c6:36:24: 0a:4d:fc:1a:7a:d3:9d:24:82:cd:19:7a:93:88:ec:9e:b0:f4: 67:26:92:52:f2:c1:48:e2:57:26:10:f5:4a:5e:c3:ee:be:f6: 06:d0:60:ac:fc:b5:e1:b2:a1:37:62:27:33:a9:cd:74:39:96: 31:20:65:c6:26:db:e6:02:b6:ac:74:e3:ff:6f:87:df:b5:1c: d8:12:71:9d:db:a9:06:18:29:04:5e:a8:55:75:31:90:ba:89: 2e:67:82:14:ed:35:22:fb:6e:47:62:17:ca:fc:92:8f:df:c0: 39:9a:e3:d2:0d:95:36:ff:e8:c7:71:3f:9f:4e:57:aa:d8:f4: 59:d2:c5:a2:94:54:b5:f3:f1:e8:55:b1:d2:00:8b:6b:9c:07: ae:4d:ce:9f -----BEGIN CERTIFICATE----- MIIHBjCCBe6gAwIBAgIUAQ0Mn0MoWEIOoomM5oLlHyclRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTIzMDUzMDIxMTQwNFoXDTI1MDkwMTIxMTQwNFowLzEtMCsGA1UEAxMk MzJkOWI2YTctMmVkNS00NDhiLTliY2ItOGQyNjJhY2MzZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU4eKSBS2Ab9XxdU3jqh225rikKYvqgRw1SE RkdB4f8RTjfoC/bXk1D4RSzHa8byoL9NrEeQF/ihKS86VsYwkc1tD9JBe0P0m+53 Kd8VmQvvJm9IqrPRCtJg31GCgc1gbYyGh7mp50bOjha+AFl7tgeV5+tIVb6TFBCl P11Q+zXcaF34DYJS11p/TZkirw02e6PLz5W1ATMnmLiQWmVEIBdBVmUkTSL8OLpp +g0LnBvgvRYHCl2YtJ9+caTgQLKuyLrpuOcWRAhmdO2RcPcOcoXxhQuXyzWMuxql Noqk1YIkKbq8pNCDlhR6Hwt6l4w5xIcM2hGw/5uID1IsYFVVjwIDAQABo4IEGDCC BBQwHQYDVR0OBBYEFD9/qne/r+crKrPK0h6sTBABHaQqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z MmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFjYzNmNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzMyZDliNmE3LTJlZDUtNDQ4Yi05 YmNiLThkMjYyYWNjM2Y3Ni8zMmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFj YzNmNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMBQEAgABMA4wDAMEAcch5gMEAcch6DAPBAIAAjAJAwcCIAEFA/9A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHIGNelxveBvD91MBxCysXNt3Xghpj6hM4gSYdv9Lh9hp4JEfhgY qIliok+BO+Rj8BEqd1oo9Cgex9yFLvlYIlZ97b+/nMbo1sZf+0wQN0Pk0WmN5giD oWpsP8829ZTmkokG1P0igLPTEsY2JApN/Bp6050kgs0ZepOI7J6w9GcmklLywUji VyYQ9Upew+6+9gbQYKz8teGyoTdiJzOpzXQ5ljEgZcYm2+YCtqx04/9vh9+1HNgS cZ3bqQYYKQReqFV1MZC6iS5nghTtNSL7bkdiF8r8ko/fwDma49INlTb/6MdxP59O V6rY9FnSxaKUVLXz8ehVsdIAi2ucB65Nzp8= -----END CERTIFICATE-----Generated at Wed May 1 16:33:25 2024 by rpki-client on console-fra.rpki-client.org