$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.cer File: 94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.cer (raw, json) Hash identifier: /mVs0KezFHr+OPUd0zfqcFh0xdFJ5bV7ZcuFrREpW5A= Subject key identifier: 94:89:8B:0A:CE:E9:CF:62:56:CF:0D:5C:BB:FB:73:C2:6F:D2:11:A4 Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75 Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96 Certificate serial: 7876FEF9FAFF26BA386B0569AF454AE836CCEE78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 04 Oct 2024 19:50:04 +0000 Certificate not after: Fri 03 Oct 2025 19:55:04 +0000 Subordinate resources: IP: 128.254.205.0/24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 03:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:76:fe:f9:fa:ff:26:ba:38:6b:05:69:af:45:4a:e8:36:cc:ee:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96 Validity Not Before: Oct 4 19:50:04 2024 GMT Not After : Oct 3 19:55:04 2025 GMT Subject: CN=94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:6e:d9:5e:f6:1e:ea:62:d1:b0:86:0f:34: bb:71:ca:a7:24:1b:fc:1d:e2:4f:48:e5:1f:39:ee: 1a:52:40:5b:d2:a6:89:b6:b9:a0:dc:63:9b:99:a0: c9:60:94:b2:2e:c3:15:60:b8:8c:ee:ee:2c:86:68: c2:f9:4f:7d:f7:20:ce:96:07:51:11:fe:9d:8a:82: eb:a6:ce:ee:19:6d:46:a8:dd:2e:5b:18:3f:b7:7d: 7f:ca:99:62:9c:e5:b3:98:f7:d4:ff:44:0d:e5:ce: 89:e9:be:7d:26:9c:af:e5:3e:7e:4b:ea:ae:bf:07: e9:89:9c:a8:aa:80:0b:22:d2:26:a1:f1:7c:5b:91: 3d:a9:a7:9f:2d:fd:64:ce:da:22:b3:c8:ef:78:72: 43:14:78:68:c3:28:64:77:fc:8d:ed:2e:52:bf:fb: 5c:0a:83:3b:43:3f:bc:e2:17:c0:08:9b:36:39:0d: 9d:c5:a0:62:20:25:62:ce:1e:b4:de:84:4a:ee:31: 4a:d1:97:70:19:d6:52:e8:22:50:28:31:e8:aa:4a: 02:95:0d:1f:c3:16:1c:61:83:d7:e9:e2:db:2c:f5: 2d:2f:45:6b:45:c3:11:dc:22:08:b6:a1:45:75:b3: 0a:f1:37:48:7a:46:34:51:af:63:fe:2e:2b:cb:ca: 8c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:89:8B:0A:CE:E9:CF:62:56:CF:0D:5C:BB:FB:73:C2:6F:D2:11:A4 X509v3 Authority Key Identifier: keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/6/94898B0ACEE9CF6256CF0D5CBBFB73C26FD211A4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.254.205.0/24 Signature Algorithm: sha256WithRSAEncryption ab:d0:5e:e4:a7:14:57:a1:c2:34:09:cc:d1:be:6f:3b:cb:e8: 3e:ab:c2:f2:21:7f:0e:46:05:2d:41:15:2d:c9:d9:51:7b:e6: 34:cf:e0:58:35:93:04:ab:e7:89:76:e0:73:92:ff:f6:3f:63: a7:b7:e1:89:eb:2d:23:41:76:22:15:8c:e9:de:01:ef:36:17: d8:48:75:2d:f2:3d:44:d7:5c:91:b4:f4:33:e3:5a:a0:22:bf: 14:f1:6c:a0:86:d7:48:42:00:43:9b:ed:e4:d0:eb:46:9a:7c: ec:95:fa:cb:fc:b6:2f:8b:d6:ee:c3:70:29:da:ea:19:72:32: 6b:19:2f:50:d3:e6:dc:2f:10:64:5b:ff:b0:70:2f:25:01:b6: ff:15:58:5a:3a:27:2d:3e:e0:18:73:b6:17:b5:16:9d:ea:76: f7:5a:91:bd:39:2b:7b:37:0f:64:e2:d2:25:73:d6:fa:68:96: 5f:e2:bd:0a:67:d0:5a:71:9c:00:09:20:e4:6a:89:2b:a1:3c: f6:2a:ab:94:69:a2:af:fa:7a:5f:bb:2e:c2:16:21:3e:d1:87: b4:56:2c:63:c3:52:0b:b9:7f:a4:54:4c:7f:fb:36:0f:e6:07: e2:88:4a:e8:d0:b6:94:74:6f:0a:30:69:35:15:ea:8e:be:f2: 20:1f:75:82 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUeHb++fr/Jro4awVpr0VK6DbM7ngwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1 ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjQxMDA0MTk1MDA0WhcNMjUxMDAzMTk1NTA0 WjAzMTEwLwYDVQQDEyg5NDg5OEIwQUNFRTlDRjYyNTZDRjBENUNCQkZCNzNDMjZG RDIxMUE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgZu2V72Hupi 0bCGDzS7ccqnJBv8HeJPSOUfOe4aUkBb0qaJtrmg3GObmaDJYJSyLsMVYLiM7u4s hmjC+U999yDOlgdREf6dioLrps7uGW1GqN0uWxg/t31/yplinOWzmPfU/0QN5c6J 6b59Jpyv5T5+S+quvwfpiZyoqoALItImofF8W5E9qaefLf1kztois8jveHJDFHho wyhkd/yN7S5Sv/tcCoM7Qz+84hfACJs2OQ2dxaBiICVizh603oRK7jFK0ZdwGdZS 6CJQKDHoqkoClQ0fwxYcYYPX6eLbLPUtL0VrRcMR3CIItqFFdbMK8TdIekY0Ua9j /i4ry8qMQQIDAQABo4IDYTCCA10wDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU lImLCs7pz2JWzw1cu/tzwm/SEaQwHwYDVR0jBBgwFoAUDwMxLuWePegnNfZrVJQV 3kRkeHUwDgYDVR0PAQH/BAQDAgEGMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzov L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAx ODU3NTVjOTFiZTNmOWQvMS8wRjAzMzEyRUU1OUUzREU4MjczNUY2NkI1NDk0MTVE RTQ0NjQ3ODc1LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdj LTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTAxZTk5N2MtYjg5ZS00N2MyLThkNzkt ZDMxZTU4YmMzY2E0L2VlY2Y4NDdkN2EzZTU3OTU5YmViZDY5N2E3ZTA2N2E3NWUx OGJiNjI5OGIxZDNiZjk2LmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXwYIKwYB BQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzYvMIGLBggr BgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS8zMjUzZDk3My1kNWJmLTQ1NDEtYmNjMS0yNzY1NDNhMjVjN2QvNi85NDg5 OEIwQUNFRTlDRjYyNTZDRjBENUNCQkZCNzNDMjZGRDIxMUE0Lm1mdDA8BggrBgEF BQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRp b24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACA/s0wDQYJKoZIhvcNAQELBQADggEBAKvQXuSnFFehwjQJ zNG+bzvL6D6rwvIhfw5GBS1BFS3J2VF75jTP4Fg1kwSr54l24HOS//Y/Y6e34Ynr LSNBdiIVjOneAe82F9hIdS3yPUTXXJG09DPjWqAivxTxbKCG10hCAEOb7eTQ60aa fOyV+sv8ti+L1u7DcCna6hlyMmsZL1DT5twvEGRb/7BwLyUBtv8VWFo6Jy0+4Bhz the1Fp3qdvdakb05K3s3D2Ti0iVz1vpoll/ivQpn0FpxnAAJIORqiSuhPPYqq5Rp oq/6el+7LsIWIT7Rh7RWLGPDUgu5f6RUTH/7Ng/mB+KISujQtpR0bwowaTUV6o6+ 8iAfdYI= -----END CERTIFICATE-----Generated at Thu Nov 21 05:36:48 2024 by rpki-client on console-ams.rpki-client.org