$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer File: 3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer (raw, json) Hash identifier: RIw2oHUZOfrJavn10O1xEJ7PXnNVZMVz/PNltIl4GDo= Subject key identifier: A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842BC21C5232EED619F9BBEF400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Aug 2023 00:45:16 +0000 Certificate not after: Mon 03 Nov 2025 01:45:16 +0000 Subordinate resources: IP: 24.89.128.0/18 IP: 75.99.0.0/16 IP: 75.127.128.0/17 IP: 96.56.0.0/15 IP: 108.58.0.0/16 IP: 108.162.0.0/18 IP: 108.170.64.0/18 IP: 142.54.64.0/18 IP: 173.220.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:bc:21:c5:23:2e:ed:61:9f:9b:be:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 1 00:45:16 2023 GMT Not After : Nov 3 01:45:16 2025 GMT Subject: CN=3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:3c:a4:f8:d1:7c:be:ad:10:72:e1:af:25: 4a:ef:29:28:01:5c:c1:d1:2e:79:18:db:9c:62:34: d9:0e:e3:92:bc:e9:ba:74:1d:21:55:e3:8b:84:28: dd:15:fc:cc:cc:6d:d1:99:72:5a:f0:a8:31:10:71: f5:f5:d0:ff:7d:1a:57:c7:fb:22:73:b5:d4:93:6b: 65:58:2d:dc:81:ea:3d:e7:c7:87:b2:96:9a:06:1f: fc:3f:4d:f9:df:46:e0:dd:52:88:75:7c:0d:4b:c1: fe:9b:63:d2:4f:8a:09:b2:cc:94:a0:41:6f:ce:90: 3a:8b:54:b4:91:86:83:c8:a2:8e:30:fc:23:63:ca: e7:a2:7e:a7:77:27:2b:7b:87:ff:f5:10:f3:2d:92: 23:bd:7a:46:50:cf:4d:40:d6:7e:a7:76:b4:23:ca: 73:ef:15:1e:0d:ea:90:fd:39:7a:e1:8b:fc:ff:38: 9f:43:12:a1:c0:39:ec:9b:5e:64:50:f6:08:30:fc: a2:4b:b7:ce:4a:70:63:fd:c5:62:36:58:da:87:c7: ea:66:ce:a6:58:2e:6e:5e:f2:46:69:25:86:5b:5a: a8:e5:d4:c8:ce:e8:2c:6f:75:32:d2:dd:3c:43:b6: f6:c2:93:a4:56:e6:2b:0c:0c:28:bc:ea:8f:de:ad: 5b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 24.89.128.0/18 75.99.0.0/16 75.127.128.0/17 96.56.0.0/15 108.58.0.0/16 108.162.0.0/18 108.170.64.0/18 142.54.64.0/18 173.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b6:c1:14:b3:1d:a8:5a:38:36:6f:13:86:a3:41:a4:9b:86: 9d:3a:6a:46:fc:b2:34:99:2c:0a:32:68:4c:fe:25:57:e4:bc: 44:ea:47:fc:8c:ca:61:7d:0d:fc:b1:42:00:6e:5a:d8:a5:2c: bf:3f:79:13:7c:1d:21:9e:c0:26:34:7c:7d:0d:39:13:02:3b: a1:06:2d:56:3f:1b:22:81:ed:bc:78:23:37:db:a3:ef:55:c3: 57:d0:b8:26:fd:b5:a8:4e:ea:6f:e5:aa:b9:ab:80:c7:39:eb: 14:6f:fd:18:cb:65:0e:1d:7b:0f:68:5b:1c:b6:f0:4a:ea:53: f6:45:0c:60:b4:84:70:50:f9:5c:ab:0e:e2:f5:76:09:64:2e: 80:97:d7:75:b3:96:ea:d1:41:af:5c:3e:c6:2c:b5:ac:d4:7b: db:0f:ea:a6:20:d8:39:b4:5d:51:a7:16:09:ab:1e:dc:96:8d: 64:33:2f:9f:ee:28:f5:d8:49:98:f4:68:c8:a9:4c:83:db:98: b4:f3:3c:8f:89:4a:59:63:f6:3a:14:35:08:97:8f:d0:2d:69: bd:29:8a:36:fa:10:16:2b:2f:f6:25:69:96:df:13:b9:71:25: 25:35:c0:40:66:86:e5:1f:d8:cf:a2:49:7c:9f:44:b4:21:8b: dc:d5:b3:99 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEK8IcUjLu1hn5u+9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDgwMTAwNDUxNloXDTI1MTEwMzAxNDUxNlowLzEtMCsGA1UEAxMk M2Y5NWE4YWItZjliMi00MzJjLWExZmQtZDkzNjgzYmMyZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+k8pPjRfL6tEHLhryVK7ykoAVzB0S55GNuc YjTZDuOSvOm6dB0hVeOLhCjdFfzMzG3RmXJa8KgxEHH19dD/fRpXx/sic7XUk2tl WC3cgeo958eHspaaBh/8P03530bg3VKIdXwNS8H+m2PST4oJssyUoEFvzpA6i1S0 kYaDyKKOMPwjY8rnon6ndycre4f/9RDzLZIjvXpGUM9NQNZ+p3a0I8pz7xUeDeqQ /Tl64Yv8/zifQxKhwDnsm15kUPYIMPyiS7fOSnBj/cViNljah8fqZs6mWC5uXvJG aSWGW1qo5dTIzugsb3Uy0t08Q7b2wpOkVuYrDAwovOqP3q1bWQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKXLCHQSKoVFP2iH/cTYxU2phwAGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z Zjk1YThhYi1mOWIyLTQzMmMtYTFmZC1kOTM2ODNiYzJmYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzNmOTVhOGFiLWY5YjItNDMyYy1h MWZkLWQ5MzY4M2JjMmZhOC8zZjk1YThhYi1mOWIyLTQzMmMtYTFmZC1kOTM2ODNi YzJmYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSwYIKwYBBQUH AQcBAf8EPDA6MDgEAgABMDIDBAYYWYADAwBLYwMEB0t/gAMDAWA4AwMAbDoDBAZs ogADBAZsqkADBAaONkADAwCt3DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBytsEUsx2oWjg2bxOGo0Gkm4ad OmpG/LI0mSwKMmhM/iVX5LxE6kf8jMphfQ38sUIAblrYpSy/P3kTfB0hnsAmNHx9 DTkTAjuhBi1WPxsige28eCM326PvVcNX0Lgm/bWoTupv5aq5q4DHOesUb/0Yy2UO HXsPaFsctvBK6lP2RQxgtIRwUPlcqw7i9XYJZC6Al9d1s5bq0UGvXD7GLLWs1Hvb D+qmINg5tF1RpxYJqx7clo1kMy+f7ij12EmY9GjIqUyD25i08zyPiUpZY/Y6FDUI l4/QLWm9KYo2+hAWKy/2JWmW3xO5cSUlNcBAZoblH9jPokl8n0S0IYvc1bOZ -----END CERTIFICATE-----Generated at Fri Apr 19 01:17:43 2024 by rpki-client on console-fra.rpki-client.org