$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer File: 67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.cer (raw, json) Hash identifier: islEBJ6suJR1Gq9uC8GDSe7uWmq6Hlt/QpftK5Z85yo= Subject key identifier: 67:DA:C6:BF:E8:CF:4F:99:CC:7D:E4:76:F2:D7:C1:1D:D2:53:70:2A Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75 Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96 Certificate serial: 096AA731B999CFE0D3BA96A5A044BD82E6609D50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2 Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 18 Jul 2023 18:53:01 +0000 Certificate not after: Tue 16 Jul 2024 18:58:01 +0000 Subordinate resources: IP: 128.254.204.0/24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:6a:a7:31:b9:99:cf:e0:d3:ba:96:a5:a0:44:bd:82:e6:60:9d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96 Validity Not Before: Jul 18 18:53:01 2023 GMT Not After : Jul 16 18:58:01 2024 GMT Subject: CN=67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:01:22:e4:75:a8:20:fc:68:27:42:2a:66: 11:56:8e:36:30:6d:91:6e:84:ba:3a:4f:f7:5b:e4: a1:56:5a:22:6b:f9:ef:0e:ed:49:15:1c:ad:9e:c8: c0:6b:b5:df:3a:3c:51:3d:49:b2:7e:42:d0:9b:f6: 15:bf:22:7a:8d:39:e0:3d:c6:db:3c:95:46:6d:a8: da:ae:1e:3b:51:03:be:46:50:3c:94:91:e2:19:1d: 1b:e9:20:fc:52:ea:9d:97:dc:25:9b:5c:ef:2d:07: d1:32:dd:0f:47:3b:47:4a:a0:a9:32:d7:dc:02:50: 10:3e:67:f6:f2:07:73:bd:33:53:d0:6d:df:d5:bc: aa:cc:73:b7:ef:25:5e:1f:8c:d2:8e:38:27:8d:73: 6b:c1:02:cc:6c:55:26:b4:cc:5a:6c:49:6a:51:98: 94:6a:d2:b4:44:93:e3:d5:86:24:a5:bc:6a:56:ee: 7d:e0:1f:8a:67:08:d0:02:02:a7:5f:85:e2:ed:98: b7:bd:84:d2:74:da:25:f3:5c:92:c0:e5:80:ba:04: 66:05:11:b5:22:db:8e:ce:84:6f:64:ef:9d:67:b8: ba:ab:f5:81:0c:e4:90:c6:76:45:2e:1d:fc:b8:3d: e5:64:d9:0d:24:7d:b7:79:44:ee:76:e1:d9:2e:79: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:DA:C6:BF:E8:CF:4F:99:CC:7D:E4:76:F2:D7:C1:1D:D2:53:70:2A X509v3 Authority Key Identifier: keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2 RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ad0eb3cf-9a1b-4112-a607-ae98c2ab12a7/2/67DAC6BFE8CF4F99CC7DE476F2D7C11DD253702A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.254.204.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:b1:9a:3a:23:1c:dc:c7:30:68:3e:a7:ce:6c:88:21:70:4b: c1:c5:4a:f2:45:45:49:8e:f8:58:17:7b:f5:87:08:71:4f:65: 1b:5c:89:9e:48:78:a6:ec:20:ad:6e:ac:98:19:34:a7:eb:53: f2:2c:0c:a9:b0:81:6c:f9:e7:7c:ac:2d:b7:e1:93:99:cc:d2: 66:11:c8:52:1d:89:ce:9d:13:1f:96:98:82:1d:82:b6:4d:27: a2:dd:e3:91:06:97:75:96:ef:75:af:8b:20:42:f6:83:8d:bf: 17:33:7a:a1:43:21:4d:75:d7:10:0d:dc:fe:5a:c7:64:12:b3: 49:2d:e7:f1:f6:c7:4f:6d:bc:67:fc:e5:c5:37:0d:f8:4b:c7: d1:ee:75:70:f0:d5:a6:5a:f7:1b:62:4e:2a:bb:d6:49:3a:6a: f5:8c:9c:68:fd:7c:10:ac:31:4c:24:c0:28:8b:b4:53:c9:a6: 34:ac:48:f0:30:9e:76:cc:be:07:84:65:91:8f:e5:9b:48:30: cd:a7:51:b0:dc:cf:ce:75:09:16:07:43:02:64:86:ba:b3:b1: c1:24:61:0c:7e:69:9c:d1:5d:fd:fe:e7:b3:87:77:bc:c2:09: f6:50:53:27:4d:fc:5f:eb:37:e8:a4:f6:dc:d5:7d:38:56:22: 23:80:ca:c0 -----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIUCWqnMbmZz+DTupaloES9guZgnVAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1 ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjMwNzE4MTg1MzAxWhcNMjQwNzE2MTg1ODAx WjAzMTEwLwYDVQQDEyg2N0RBQzZCRkU4Q0Y0Rjk5Q0M3REU0NzZGMkQ3QzExREQy NTM3MDJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvioBIuR1qCD8 aCdCKmYRVo42MG2RboS6Ok/3W+ShVloia/nvDu1JFRytnsjAa7XfOjxRPUmyfkLQ m/YVvyJ6jTngPcbbPJVGbajarh47UQO+RlA8lJHiGR0b6SD8Uuqdl9wlm1zvLQfR Mt0PRztHSqCpMtfcAlAQPmf28gdzvTNT0G3f1byqzHO37yVeH4zSjjgnjXNrwQLM bFUmtMxabElqUZiUatK0RJPj1YYkpbxqVu594B+KZwjQAgKnX4Xi7Zi3vYTSdNol 81ySwOWAugRmBRG1ItuOzoRvZO+dZ7i6q/WBDOSQxnZFLh38uD3lZNkNJH23eUTu duHZLnlcuQIDAQABo4IDYDCCA1wwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU Z9rGv+jPT5nMfeR28tfBHdJTcCowHwYDVR0jBBgwFoAUDwMxLuWePegnNfZrVJQV 3kRkeHUwDgYDVR0PAQH/BAQDAgEGMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzov L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAx ODU3NTVjOTFiZTNmOWQvMS8wRjAzMzEyRUU1OUUzREU4MjczNUY2NkI1NDk0MTVE RTQ0NjQ3ODc1LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdj LTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxZTk5N2MtYjg5ZS00N2MyLThkNzkt ZDMxZTU4YmMzY2E0L2VlY2Y4NDdkN2EzZTU3OTU5YmViZDY5N2E3ZTA2N2E3NWUx OGJiNjI5OGIxZDNiZjk2LmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXgYIKwYB BQUHMAWGUnJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvYWQwZWIzY2YtOWExYi00MTEyLWE2MDctYWU5OGMyYWIxMmE3LzIwgYsGCCsG AQUFBzAKhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L2FkMGViM2NmLTlhMWItNDExMi1hNjA3LWFlOThjMmFiMTJhNy8yLzY3REFD NkJGRThDRjRGOTlDQzdERTQ3NkYyRDdDMTFERDI1MzcwMkEubWZ0MDwGCCsGAQUF BzANhjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlv bi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAID+zDANBgkqhkiG9w0BAQsFAAOCAQEATbGaOiMc3McwaD6n zmyIIXBLwcVK8kVFSY74WBd79YcIcU9lG1yJnkh4puwgrW6smBk0p+tT8iwMqbCB bPnnfKwtt+GTmczSZhHIUh2Jzp0TH5aYgh2Ctk0not3jkQaXdZbvda+LIEL2g42/ FzN6oUMhTXXXEA3c/lrHZBKzSS3n8fbHT228Z/zlxTcN+EvH0e51cPDVplr3G2JO KrvWSTpq9YycaP18EKwxTCTAKIu0U8mmNKxI8DCedsy+B4RlkY/lm0gwzadRsNzP znUJFgdDAmSGurOxwSRhDH5pnNFd/f7ns4d3vMIJ9lBTJ038X+s36KT23NV9OFYi I4DKwA== -----END CERTIFICATE-----Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org