$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer File: f240d902-7ba3-4aec-b663-471f0fabfe37.cer (raw, json) Hash identifier: 5GBntguYLSSWYFMbchXtG57wGCY0T6ZOue+gBuByGtI= Subject key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285842CE87416D0A989BDF64908D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:54:18 +0000 Certificate not after: Thu 02 Oct 2025 00:45:17 +0000 Subordinate resources: IP: 66.96.32.0/19 IP: 66.112.128.0/20 IP: 196.27.0.0/18 IP: 200.30.0.0/18 IP: 204.59.0.0/16 IP: 206.48.0.0/15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:87:41:6d:0a:98:9b:df:64:90:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Aug 7 14:54:18 2023 GMT Not After : Oct 2 00:45:17 2025 GMT Subject: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:26:a5:b7:e9:34:2f:29:86:95:d7:6e:fe: 32:1b:88:44:4e:ef:69:aa:5f:4c:e5:17:88:66:29: 4b:f0:4e:0a:91:ba:2b:4f:c6:2e:55:e8:f0:e7:d5: 9c:36:c1:8a:aa:d2:27:ae:09:74:1f:ab:ae:f9:98: f1:46:4b:e1:8a:c5:5d:e9:83:59:d9:80:05:68:91: 05:ad:04:85:8b:c3:6b:5a:84:da:4a:41:16:fa:dc: b6:34:2a:e2:8f:d0:ab:cc:bb:ed:d3:fd:e5:78:3e: 4c:94:b2:53:af:c2:b3:72:c9:ed:55:77:be:e0:05: 00:d3:f3:32:02:72:a3:3b:69:a1:4a:14:77:4e:22: e3:94:ca:28:2d:5c:fe:ba:f3:f7:cc:76:b8:ff:6f: 10:50:46:85:a4:6f:19:cd:54:37:44:ac:6f:10:e9: fd:02:6b:c8:37:7b:b5:4e:a2:0d:33:f8:7e:1d:27: 8e:5c:94:5b:f1:9f:6c:e2:ce:50:18:e2:cf:74:58: 97:24:d6:72:0c:e9:e0:c8:32:d7:7b:d3:7a:de:58: 9a:f1:7b:a7:b0:31:0b:43:5e:c3:e8:61:3e:41:7d: fe:f7:59:7e:0e:bb:b8:52:92:d9:83:c4:98:c6:48: d1:80:45:dd:59:6b:8d:ae:7a:a8:3b:31:f4:12:49: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 66.96.32.0/19 66.112.128.0/20 196.27.0.0/18 200.30.0.0/18 204.59.0.0/16 206.48.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:97:88:61:b6:e6:ca:92:6b:49:8c:9c:1e:1b:03:c8:31:b5: 3f:72:12:de:47:99:9b:ff:62:2c:5b:1f:1c:99:24:43:d7:dc: 3b:75:88:f9:e0:d4:d7:60:c6:8b:f1:97:56:6a:ba:c0:55:96: 18:6e:63:96:93:28:62:d5:2f:60:53:d3:44:e9:80:fb:a5:f4: 38:2a:7f:05:91:77:a3:55:9b:ad:76:2b:9d:e1:22:e6:61:09: 8f:da:91:25:e8:f8:0e:21:4f:e7:93:33:10:91:15:3d:8f:d3: ce:ca:56:52:30:1d:08:53:38:b4:4d:06:92:97:55:d2:93:64: 35:98:95:8c:59:f7:47:3e:82:13:81:26:3d:a6:f5:85:b5:8a: cb:20:9b:d6:29:ae:db:9d:b8:2f:cd:95:2b:fa:75:e7:aa:9e: 42:67:bf:00:cd:e7:ec:7d:13:d0:09:6f:4f:12:78:4d:7a:ea: 5e:aa:3b:80:02:23:9f:41:13:17:ea:98:36:17:c5:eb:7e:22: 01:9b:46:70:7a:21:ea:44:46:2a:09:9e:91:2c:3e:1d:1f:03: a3:c0:cd:3d:9f:11:62:8b:72:90:f7:b0:84:21:b2:d2:74:35: 37:26:dd:56:a5:ba:86:b9:bb:83:5a:b4:c8:a8:74:7f:99:c9: c2:53:92:10 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWELOh0FtCpib32SQjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTIzMDgwNzE0NTQxOFoXDTI1MTAwMjAwNDUxN1owLzEtMCsGA1UEAxMk ZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJmZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xUmpbfpNC8phpXXbv4yG4hETu9pql9M5ReI ZilL8E4KkborT8YuVejw59WcNsGKqtInrgl0H6uu+ZjxRkvhisVd6YNZ2YAFaJEF rQSFi8NrWoTaSkEW+ty2NCrij9CrzLvt0/3leD5MlLJTr8KzcsntVXe+4AUA0/My AnKjO2mhShR3TiLjlMooLVz+uvP3zHa4/28QUEaFpG8ZzVQ3RKxvEOn9AmvIN3u1 TqINM/h+HSeOXJRb8Z9s4s5QGOLPdFiXJNZyDOngyDLXe9N63lia8XunsDELQ17D 6GE+QX3+91l+Dru4UpLZg8SYxkjRgEXdWWuNrnqoOzH0EkmjAwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFORX1SgMCZwqfqilgLFv9rC6TPEeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9m MjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2YyNDBkOTAyLTdiYTMtNGFlYy1i NjYzLTQ3MWYwZmFiZmUzNy9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZh YmZlMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMCgEAgABMCIDBAVCYCADBARCcIADBAbEGwADBAbIHgADAwDMOwMD Ac4wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFCXiGG25sqSa0mMnB4bA8gxtT9yEt5HmZv/YixbHxyZJEPX 3Dt1iPng1Ndgxovxl1ZqusBVlhhuY5aTKGLVL2BT00TpgPul9DgqfwWRd6NVm612 K53hIuZhCY/akSXo+A4hT+eTMxCRFT2P087KVlIwHQhTOLRNBpKXVdKTZDWYlYxZ 90c+ghOBJj2m9YW1issgm9YprtuduC/NlSv6deeqnkJnvwDN5+x9E9AJb08SeE16 6l6qO4ACI59BExfqmDYXxet+IgGbRnB6IepERioJnpEsPh0fA6PAzT2fEWKLcpD3 sIQhstJ0NTcm3Valuoa5u4NatMiodH+ZycJTkhA= -----END CERTIFICATE-----Generated at Thu Apr 18 17:52:39 2024 by rpki-client on console-ams.rpki-client.org