$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer File: 1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer (raw, json) Hash identifier: eGyi3kxdSTG5e7KLcQNZrb9rO2vqLL/C8RQYTciE95g= Subject key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 Authority key identifier: 85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69 Certificate issuer: /CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a Certificate serial: 010D0C9F432858444501959F50921CB4C4569080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 19 Dec 2023 18:13:06 +0000 Certificate not after: Mon 23 Mar 2026 17:13:06 +0000 Subordinate resources: IP: 23.145.56.0/23 IP: 170.39.49.0/24 IP: 2602:fab8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:45:01:95:9f:50:92:1c:b4:c4:56:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5563e2f9-4d9b-40c3-afa2-ce7045ffd23a Validity Not Before: Dec 19 18:13:06 2023 GMT Not After : Mar 23 17:13:06 2026 GMT Subject: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:97:4b:de:42:a3:c4:f6:7e:fd:cf:ba:14: ab:26:2c:7e:ae:a1:ca:bb:80:0f:bf:25:7d:2b:25: 2b:bf:8c:c0:79:97:6b:5a:58:8e:62:06:21:fe:f0: 9e:59:86:70:28:5e:bc:c6:95:66:0e:61:55:49:c9: 2e:46:b7:6d:9d:22:b0:61:e5:fa:bd:51:39:50:d4: 3f:91:a0:ee:12:2a:36:71:11:40:0e:d2:d7:26:f9: ef:cd:f8:da:15:21:9e:36:8e:5a:6e:30:e0:95:80: 39:9c:20:6b:bc:3c:94:b4:97:e2:88:b7:b3:be:a3: 43:93:16:2f:43:6e:68:6d:5a:7d:7e:8c:a6:fd:02: 8f:52:a4:da:22:7d:a4:0e:15:37:c1:0c:75:bf:b6: 6b:68:a8:3c:b3:69:d9:20:82:19:cb:28:5c:1e:e6: 7c:e9:3f:7e:20:2b:39:bd:5a:6a:29:0b:f4:f1:16: ab:66:e5:cd:0b:5e:81:43:ca:8a:df:bd:54:44:2e: cc:e8:c7:b1:95:62:25:09:c1:65:01:a9:bd:9c:56: b4:a3:d5:cc:cf:5b:d0:bb:dc:c8:71:9c:e3:f9:98: 72:69:ba:57:f0:14:48:bd:d8:e2:42:0d:de:f7:ea: b9:c4:ee:0c:e5:2e:fd:72:12:d3:83:bb:ec:c1:79: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5 Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl X509v3 Authority Key Identifier: keyid:85:B7:88:22:F2:C8:E0:84:D5:01:E6:00:E1:2D:79:41:28:36:A5:69 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer sbgp-ipAddrBlock: critical IPv4: 23.145.56.0/23 170.39.49.0/24 IPv6: 2602:fab8::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:af:c7:fe:47:1a:7b:3a:f2:94:52:e9:85:dc:b9:c0:b1:7d: ac:ab:11:70:a7:bb:0e:01:ae:7b:c9:6f:fe:8b:22:41:83:bf: 9f:94:b5:54:44:4e:e3:f2:db:b7:30:48:83:70:eb:58:09:de: 75:a8:d5:01:f3:0a:3e:60:f3:45:48:20:86:bb:12:80:c5:c7: b5:6c:8f:de:d8:4c:a0:99:16:82:fd:a1:c6:8a:11:d6:de:0a: 78:e4:f2:e6:2d:22:59:73:f3:8b:e7:3e:f4:15:f0:a0:c5:e1: 60:55:76:01:77:3e:62:7b:6e:b6:9c:49:86:c4:5a:28:fc:5b: 44:70:6b:b9:23:10:ab:db:f3:a1:13:5e:4d:9a:e4:70:ed:4e: d0:00:4d:34:75:2f:b5:bd:7f:34:d7:0c:8e:7c:39:5e:91:9a: 50:8f:c2:b9:a7:04:a3:b9:17:5b:17:ee:c3:22:6f:da:4c:7e: 0c:f3:f5:d4:5e:6e:f9:84:4b:e1:c6:83:b0:8b:7d:b5:ae:aa: e1:b4:2b:bc:0f:57:b1:02:1d:30:09:8b:fa:05:1e:01:fd:8d: 57:26:5a:7f:5e:38:88:e9:af:9f:97:e8:c7:52:69:cc:6f:5b: 72:e0:55:49:b0:c7:2c:62:8d:e2:f5:91:3f:36:8a:44:78:cf: b1:ad:fc:f4 -----BEGIN CERTIFICATE----- MIIG0zCCBbugAwIBAgIUAQ0Mn0MoWERFAZWfUJIctMRWkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2M2UyZjktNGQ5Yi00MGMzLWFmYTItY2U3MDQ1ZmZk MjNhMB4XDTIzMTIxOTE4MTMwNloXDTI2MDMyMzE3MTMwNlowPTE7MDkGA1UEAxMy MTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4Zjc5NGRmMzJiZmU5ZWQw NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lJdL3kKjxPZ+/c+6 FKsmLH6uocq7gA+/JX0rJSu/jMB5l2taWI5iBiH+8J5ZhnAoXrzGlWYOYVVJyS5G t22dIrBh5fq9UTlQ1D+RoO4SKjZxEUAO0tcm+e/N+NoVIZ42jlpuMOCVgDmcIGu8 PJS0l+KIt7O+o0OTFi9DbmhtWn1+jKb9Ao9SpNoifaQOFTfBDHW/tmtoqDyzadkg ghnLKFwe5nzpP34gKzm9WmopC/TxFqtm5c0LXoFDyorfvVRELszox7GVYiUJwWUB qb2cVrSj1czPW9C73MhxnOP5mHJpulfwFEi92OJCDd736rnE7gzlLv1yEtODu+zB eXr/AgMBAAGjggPXMIID0zAdBgNVHQ4EFgQUk7ApbDF4d4D+hBMxj9DScIODTMUw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2 NS04YTE2LWRiZmM0NTkzYzFhOC84LzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjZiZDkyZjEtNDE1Yi00 NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzgvOTNCMDI5NkMzMTc4Nzc4MEZFODQxMzMx OEZEMEQyNzA4MzgzNENDNS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkz M2FlNS81NTYzZTJmOS00ZDliLTQwYzMtYWZhMi1jZTcwNDVmZmQyM2EvNTU2M2Uy ZjktNGQ5Yi00MGMzLWFmYTItY2U3MDQ1ZmZkMjNhLmNybDAfBgNVHSMEGDAWgBSF t4gi8sjghNUB5gDhLXlBKDalaTAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzU1 NjNlMmY5LTRkOWItNDBjMy1hZmEyLWNlNzA0NWZmZDIzYS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXkTgDBACqJzEwDgQCAAIwCAMGBCYC+rgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGevx/5HGns68pRS6YXcucCxfayrEXCnuw4BrnvJb/6LIkGDv5+UtVRE TuPy27cwSINw61gJ3nWo1QHzCj5g80VIIIa7EoDFx7Vsj97YTKCZFoL9ocaKEdbe Cnjk8uYtIllz84vnPvQV8KDF4WBVdgF3PmJ7bracSYbEWij8W0Rwa7kjEKvb86ET Xk2a5HDtTtAATTR1L7W9fzTXDI58OV6RmlCPwrmnBKO5F1sX7sMib9pMfgzz9dRe bvmES+HGg7CLfbWuquG0K7wPV7ECHTAJi/oFHgH9jVcmWn9eOIjpr5+X6MdSacxv W3LgVUmwxyxijeL1kT82ikR4z7Gt/PQ= -----END CERTIFICATE-----Generated at Wed May 15 17:50:32 2024 by rpki-client on console-fra.rpki-client.org