$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc.cer File: 02da98c6-6e21-4ea8-be1d-9d78acef1cfc.cer (raw, json) Hash identifier: cKCrk2PzA78VHfSvDBKL67ETU8RqOQUY1isZ17RgT2s= Subject key identifier: 12:6E:12:B4:D9:C8:FC:39:D4:A6:91:F9:8F:36:F6:58:0E:24:D1:76 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843342D3D88BF1FF50AF33B8280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/02da98c6-6e21-4ea8-be1d-9d78acef1cfc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Sep 2023 00:45:23 +0000 Certificate not after: Tue 16 Dec 2025 01:45:23 +0000 Subordinate resources: IP: 205.203.192.0 -- 205.203.215.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:34:2d:3d:88:bf:1f:f5:0a:f3:3b:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 13 00:45:23 2023 GMT Not After : Dec 16 01:45:23 2025 GMT Subject: CN=02da98c6-6e21-4ea8-be1d-9d78acef1cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:df:0b:4e:b1:69:d3:69:2b:9a:af:c8:e0: 3c:c5:7a:9f:b7:29:84:60:b8:db:e9:2b:33:d9:54: 2b:3a:0b:16:a7:2b:81:a4:64:55:32:e3:f4:49:4c: 3b:ed:9d:3e:e3:35:dd:16:8b:0f:63:63:4c:dd:bb: 09:70:dc:59:06:3e:04:45:89:f3:54:64:ac:b4:63: 75:74:53:21:14:f2:2d:41:4e:9b:23:7d:0f:c3:e1: b8:72:26:21:4a:cc:c1:25:ad:92:dd:62:7d:df:d1: 9d:b0:0b:12:2d:58:83:cf:81:77:35:35:f7:57:64: d8:ba:c6:b7:04:8e:11:3c:90:80:14:0f:f4:2f:fe: 6a:6a:90:59:f7:18:64:e0:a7:47:43:09:5c:dc:74: c8:b2:62:36:b6:b8:62:94:6b:de:de:3b:ab:9f:87: b9:62:87:9b:23:e3:99:4f:42:50:5d:f0:d6:82:b1: 26:f6:21:d0:a1:c0:a4:5a:1d:1b:17:92:65:e0:76: ca:ca:ae:cc:86:9f:bc:33:6a:e8:69:c4:8f:42:32: f2:01:45:09:6c:66:d9:78:ec:ad:90:6c:b7:70:ce: 0d:83:09:71:27:de:30:7c:d4:20:6d:81:bc:21:3d: db:5f:96:4f:4d:7c:d1:f4:9d:97:8f:c2:f1:52:76: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6E:12:B4:D9:C8:FC:39:D4:A6:91:F9:8F:36:F6:58:0E:24:D1:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/02da98c6-6e21-4ea8-be1d-9d78acef1cfc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 205.203.192.0-205.203.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1a:10:eb:42:dc:58:49:de:d0:ad:3b:15:c8:5f:0f:5a:1e: 14:2c:c3:b0:a4:9f:08:84:bf:81:7a:8e:f5:d3:44:af:f6:97: a4:80:13:39:2b:47:20:22:f5:d1:63:3a:c0:2b:55:35:d0:69: 7d:4b:d4:21:3d:1d:03:41:87:d0:ce:2f:f2:2a:21:1a:60:3c: 5c:de:75:04:52:90:22:08:fc:8b:f3:92:4f:bb:d9:ad:43:a8: ec:bd:4c:8a:c4:44:b1:d8:12:16:ff:bf:5d:16:8a:db:65:77: 2c:88:23:ac:20:5a:f8:7e:a1:9c:39:1a:9b:b0:1c:b2:10:7b: 68:09:be:dc:96:3d:7d:09:c0:3d:04:09:1d:8d:d0:5c:f4:20: a2:ac:46:7f:1e:a0:f6:66:85:83:ab:93:30:2c:91:08:55:49: 56:37:bf:85:7a:be:7b:6b:f0:2a:e9:71:6c:b1:86:5d:fc:42: ee:49:10:37:ac:12:71:1f:5b:81:a1:ce:fe:07:78:03:de:1f: 24:88:bb:85:d8:11:cc:52:67:9b:fc:87:68:9e:39:7d:d5:3f: b1:99:03:f3:42:44:41:3e:0d:38:b5:62:e9:13:7d:00:27:18: 85:1c:37:74:eb:8d:96:b4:a7:a8:dc:47:8e:12:24:18:af:8b: 27:60:05:e2 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEM0LT2Ivx/1CvM7goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDkxMzAwNDUyM1oXDTI1MTIxNjAxNDUyM1owLzEtMCsGA1UEAxMk MDJkYTk4YzYtNmUyMS00ZWE4LWJlMWQtOWQ3OGFjZWYxY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx53fC06xadNpK5qvyOA8xXqftymEYLjb6Ssz 2VQrOgsWpyuBpGRVMuP0SUw77Z0+4zXdFosPY2NM3bsJcNxZBj4ERYnzVGSstGN1 dFMhFPItQU6bI30Pw+G4ciYhSszBJa2S3WJ939GdsAsSLViDz4F3NTX3V2TYusa3 BI4RPJCAFA/0L/5qapBZ9xhk4KdHQwlc3HTIsmI2trhilGve3jurn4e5YoebI+OZ T0JQXfDWgrEm9iHQocCkWh0bF5Jl4HbKyq7Mhp+8M2roacSPQjLyAUUJbGbZeOyt kGy3cM4NgwlxJ94wfNQgbYG8IT3bX5ZPTXzR9J2Xj8LxUnY1pQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFBJuErTZyPw51KaR+Y829lgOJNF2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w MmRhOThjNi02ZTIxLTRlYTgtYmUxZC05ZDc4YWNlZjFjZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzAyZGE5OGM2LTZlMjEtNGVhOC1i ZTFkLTlkNzhhY2VmMWNmYy8wMmRhOThjNi02ZTIxLTRlYTgtYmUxZC05ZDc4YWNl ZjFjZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBs3LwAMEA83L0DBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1GhDrQtxY Sd7QrTsVyF8PWh4ULMOwpJ8IhL+Beo7100Sv9pekgBM5K0cgIvXRYzrAK1U10Gl9 S9QhPR0DQYfQzi/yKiEaYDxc3nUEUpAiCPyL85JPu9mtQ6jsvUyKxESx2BIW/79d ForbZXcsiCOsIFr4fqGcORqbsByyEHtoCb7clj19CcA9BAkdjdBc9CCirEZ/HqD2 ZoWDq5MwLJEIVUlWN7+Fer57a/Aq6XFssYZd/ELuSRA3rBJxH1uBoc7+B3gD3h8k iLuF2BHMUmeb/Idonjl91T+xmQPzQkRBPg04tWLpE30AJxiFHDd0642WtKeo3EeO EiQYr4snYAXi -----END CERTIFICATE-----Generated at Mon May 13 13:02:37 2024 by rpki-client on console-fra.rpki-client.org