$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer File: b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.cer (raw, json) Hash identifier: xzFEk0HzqFB6RkMH7j2NLrX0MSy9Z2WXdx1OlxHDUOM= Subject key identifier: ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858441DCF490621350FB36A8EB780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Dec 2023 17:15:14 +0000 Certificate not after: Mon 06 Oct 2025 00:45:17 +0000 Subordinate resources: IP: 23.142.82.0 -- 23.142.84.255 IP: 2602:fafe::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Apr 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:1d:cf:49:06:21:35:0f:b3:6a:8e:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Dec 5 17:15:14 2023 GMT Not After : Oct 6 00:45:17 2025 GMT Subject: CN=b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9c:06:41:9a:9e:cc:13:ae:7b:bb:37:c4:95: 50:77:9d:d0:b4:95:fd:24:fe:40:81:77:77:68:9e: c6:c5:fe:f0:25:d5:45:73:34:1d:fc:ae:86:97:08: bc:28:8a:4b:05:00:9e:b8:51:15:9e:2c:74:4a:fa: 22:59:1e:be:25:1a:10:99:f1:75:cf:e3:b7:7d:57: 06:10:20:dc:39:21:a4:d0:68:fe:70:38:26:0c:1c: c4:07:6b:97:3f:37:58:54:bf:a0:45:04:33:32:c3: ab:c2:8b:9a:13:47:f9:0d:b6:d5:19:20:e2:fb:78: 17:20:9d:33:81:18:1f:9f:85:59:21:67:9a:77:a6: 72:46:b9:30:06:2a:8d:2e:9a:c2:54:ae:a1:f2:b2: 25:14:7a:5c:ba:ca:91:48:c3:5e:9b:9b:26:4e:f2: 9f:c3:2e:66:33:05:2a:f0:05:d2:3f:fa:b5:3f:f8: 43:1e:89:41:18:c5:23:f7:62:8e:b5:0f:88:62:84: b6:39:a4:59:e4:ca:eb:72:75:22:05:92:5a:d1:4d: 1f:9b:9b:26:53:75:70:c9:66:13:e7:e3:d6:c6:fb: 4a:53:85:8a:8b:33:10:fe:8d:b5:78:5a:11:1d:a3: a8:be:fb:88:cf:79:be:04:d9:13:bc:66:85:49:35: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:70:2C:A6:48:67:EF:6F:70:AD:9F:77:F4:71:49:6F:6C:DD:64:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de/b11a9b61-2f33-4a7e-b2c7-d6bfdd92f4de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.142.82.0-23.142.84.255 IPv6: 2602:fafe::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f1:d5:46:e2:e6:8d:c1:e8:5a:b2:ef:18:b4:c8:67:2e:b5: 8c:10:5a:04:e5:81:11:9f:4c:a8:50:ff:4b:90:b6:ee:c7:da: 80:fc:c7:a7:96:41:32:b3:2f:98:36:e7:da:3e:04:01:e7:b1: 30:11:fc:91:ba:92:64:7e:f9:46:5a:7b:13:51:bf:d9:aa:31: be:30:c5:07:32:3d:46:61:8e:1e:fb:b2:4f:e4:13:1b:9c:ae: ae:01:7f:65:23:a6:eb:25:d6:68:1e:ee:31:58:4c:bf:dc:1d: eb:d5:31:6c:f0:69:c1:2c:18:08:3a:80:5f:56:f1:60:27:d3: 61:10:e3:ad:d6:fd:c1:e4:f5:57:d3:28:59:86:74:19:8e:ef: 43:66:98:ab:63:bd:9d:70:e3:82:0a:63:c3:f1:33:21:66:e0: 00:c8:b2:8b:f3:bd:cb:79:8d:32:65:a5:47:29:18:7f:38:ba: 5c:5d:a6:58:39:3e:1a:51:0f:46:c2:c9:55:a0:da:7e:96:ea: 1d:95:a0:dd:f6:27:2d:51:e0:03:74:65:cb:3f:84:df:f6:d0: 29:78:be:e2:f4:43:b4:66:26:45:3c:87:9d:55:c8:c9:34:cf: 3d:fa:ee:e9:e8:29:88:40:25:99:d0:44:48:fd:4e:1e:c8:ed: 2b:e2:3a:a4 -----BEGIN CERTIFICATE----- MIIHBTCCBe2gAwIBAgIUAQ0Mn0MoWEQdz0kGITUPs2qOt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTIzMTIwNTE3MTUxNFoXDTI1MTAwNjAwNDUxN1owLzEtMCsGA1UEAxMk YjExYTliNjEtMmYzMy00YTdlLWIyYzctZDZiZmRkOTJmNGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpwGQZqezBOue7s3xJVQd53QtJX9JP5AgXd3 aJ7Gxf7wJdVFczQd/K6Glwi8KIpLBQCeuFEVnix0SvoiWR6+JRoQmfF1z+O3fVcG ECDcOSGk0Gj+cDgmDBzEB2uXPzdYVL+gRQQzMsOrwouaE0f5DbbVGSDi+3gXIJ0z gRgfn4VZIWead6ZyRrkwBiqNLprCVK6h8rIlFHpcusqRSMNem5smTvKfwy5mMwUq 8AXSP/q1P/hDHolBGMUj92KOtQ+IYoS2OaRZ5MrrcnUiBZJa0U0fm5smU3VwyWYT 5+PWxvtKU4WKizMQ/o21eFoRHaOovvuIz3m+BNkTvGaFSTU5LQIDAQABo4IEFzCC BBMwHQYDVR0OBBYEFO1wLKZIZ+9vcK2fd/RxSW9s3WQfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9i MTFhOWI2MS0yZjMzLTRhN2UtYjJjNy1kNmJmZGQ5MmY0ZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2IxMWE5YjYxLTJmMzMtNGE3ZS1i MmM3LWQ2YmZkZDkyZjRkZS9iMTFhOWI2MS0yZjMzLTRhN2UtYjJjNy1kNmJmZGQ5 MmY0ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMBQEAgABMA4wDAMEAReOUgMEABeOVDAOBAIAAjAIAwYEJgL6/gAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHPHVRuLmjcHoWrLvGLTIZy61jBBaBOWBEZ9MqFD/S5C27sfagPzH p5ZBMrMvmDbn2j4EAeexMBH8kbqSZH75Rlp7E1G/2aoxvjDFBzI9RmGOHvuyT+QT G5yurgF/ZSOm6yXWaB7uMVhMv9wd69UxbPBpwSwYCDqAX1bxYCfTYRDjrdb9weT1 V9MoWYZ0GY7vQ2aYq2O9nXDjggpjw/EzIWbgAMiyi/O9y3mNMmWlRykYfzi6XF2m WDk+GlEPRsLJVaDafpbqHZWg3fYnLVHgA3Rlyz+E3/bQKXi+4vRDtGYmRTyHnVXI yTTPPfru6egpiEAlmdBESP1OHsjtK+I6pA== -----END CERTIFICATE-----Generated at Tue Apr 23 18:34:47 2024 by rpki-client on console-fra.rpki-client.org