$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.cer File: e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.cer (raw, json) Hash identifier: XLKaiw1G3l+cJ8B8tZC3Jhdk1RZVUTHJ+Gqcu30xzzc= Subject key identifier: 7B:B9:C6:31:68:6D:8C:71:50:01:58:AA:52:57:17:8C:27:F2:0B:1F Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858456C31344C04FA42AB81D46180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 03 Apr 2024 11:52:31 +0000 Certificate not after: Tue 07 Jul 2026 11:52:31 +0000 Subordinate resources: IP: 137.141.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6c:31:34:4c:04:fa:42:ab:81:d4:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 3 11:52:31 2024 GMT Not After : Jul 7 11:52:31 2026 GMT Subject: CN=e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:67:fb:36:f0:2c:5c:e5:88:3b:95:75:ba:49: 1e:0a:cd:4e:66:a2:93:e2:a8:2d:1b:1c:da:96:fe: 00:bc:08:7b:07:5b:45:aa:91:f4:93:54:88:79:0b: 65:06:c4:bb:28:9c:f3:7c:31:7d:78:d7:f5:02:57: 38:d6:e0:11:a6:e0:f1:66:e4:de:08:da:ec:79:25: f6:df:05:ff:2a:5f:cc:2e:cb:9c:1f:6a:ae:1e:d9: e1:db:4f:19:b7:c7:53:9e:89:5e:2b:1a:a6:2d:71: de:fe:ef:09:49:1a:83:95:77:5b:29:cf:79:a7:36: 0c:24:7a:f5:fd:b8:53:a9:62:80:77:6e:8a:89:a6: 65:09:76:54:b9:ea:43:51:a1:ac:04:f3:77:ae:71: dc:12:03:fd:30:23:63:3e:bd:e6:4c:3a:8f:cb:6a: 1c:0e:da:d2:73:c9:cd:b2:a0:08:80:d8:d0:f8:85: fc:e5:41:ac:2a:a8:8f:be:a6:96:0e:fe:31:61:a0: 00:01:70:c7:65:db:45:cf:1b:78:93:41:27:8c:90: b0:15:2c:b2:9c:a1:31:71:8e:a1:c0:c1:f3:e8:67: c8:e1:32:59:a2:3c:e1:30:2b:de:54:b3:4a:d7:fd: ae:4f:3b:73:02:4c:d4:ce:97:f4:8c:fe:d0:21:69: 56:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B9:C6:31:68:6D:8C:71:50:01:58:AA:52:57:17:8C:27:F2:0B:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 137.141.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:51:66:ae:ca:95:68:a6:5d:9f:77:e3:68:67:3a:c9:8d:52: 2d:b1:b4:e2:f1:ed:df:05:af:0d:1d:44:69:d8:7e:2d:43:06: 25:94:4b:12:d3:4e:aa:8c:0c:f3:45:e1:06:ad:30:fb:50:09: 3f:4f:eb:69:a3:66:1c:5f:40:a1:8f:6a:cf:b0:73:fc:c9:9e: 5e:73:82:62:bc:16:22:c7:8c:06:f1:6e:11:cd:e0:28:8f:bc: b7:84:99:2c:3c:f0:82:52:97:ae:16:06:00:36:f4:26:ea:25: 43:f9:22:d4:ff:7d:90:5c:b1:ca:11:32:51:13:14:23:96:8f: c6:f7:1d:10:a7:52:48:88:68:60:07:6b:10:40:7c:db:9f:53: e4:15:bb:fa:73:3f:01:3e:f2:f8:5c:07:58:cb:69:f6:25:2b: 2d:02:80:c5:5e:64:fe:71:4b:a2:ca:7c:7f:aa:02:9f:cb:66: 2c:76:c2:e7:50:35:c6:8d:78:52:ef:f3:ad:c1:24:ae:7c:73: c2:65:ad:b2:62:4a:57:c2:69:b7:19:04:f5:46:51:b3:5c:90: 4b:41:28:3d:0c:55:3f:ed:f7:bf:1f:c8:54:fd:ef:ca:fe:21: 6c:5c:69:bd:5f:68:38:ab:f7:4d:1c:c0:81:d0:c3:1d:af:42: 0b:09:7d:8b -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEVsMTRMBPpCq4HUYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQwMzExNTIzMVoXDTI2MDcwNzExNTIzMVowLzEtMCsGA1UEAxMk ZThmYmZjODQtNWM2Zi00MDBjLWI3YTYtMWFlNGUxNjIzZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGf7NvAsXOWIO5V1ukkeCs1OZqKT4qgtGxza lv4AvAh7B1tFqpH0k1SIeQtlBsS7KJzzfDF9eNf1Alc41uARpuDxZuTeCNrseSX2 3wX/Kl/MLsucH2quHtnh208Zt8dTnoleKxqmLXHe/u8JSRqDlXdbKc95pzYMJHr1 /bhTqWKAd26KiaZlCXZUuepDUaGsBPN3rnHcEgP9MCNjPr3mTDqPy2ocDtrSc8nN sqAIgNjQ+IX85UGsKqiPvqaWDv4xYaAAAXDHZdtFzxt4k0EnjJCwFSyynKExcY6h wMHz6GfI4TJZojzhMCveVLNK1/2uTztzAkzUzpf0jP7QIWlWGQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFHu5xjFobYxxUAFYqlJXF4wn8gsfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9l OGZiZmM4NC01YzZmLTQwMGMtYjdhNi0xYWU0ZTE2MjNkMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2U4ZmJmYzg0LTVjNmYtNDAwYy1i N2E2LTFhZTRlMTYyM2QxZS9lOGZiZmM4NC01YzZmLTQwMGMtYjdhNi0xYWU0ZTE2 MjNkMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCJjTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrUWauypVopl2fd+NoZzrJ jVItsbTi8e3fBa8NHURp2H4tQwYllEsS006qjAzzReEGrTD7UAk/T+tpo2YcX0Ch j2rPsHP8yZ5ec4JivBYix4wG8W4RzeAoj7y3hJksPPCCUpeuFgYANvQm6iVD+SLU /32QXLHKETJRExQjlo/G9x0Qp1JIiGhgB2sQQHzbn1PkFbv6cz8BPvL4XAdYy2n2 JSstAoDFXmT+cUuiynx/qgKfy2YsdsLnUDXGjXhS7/OtwSSufHPCZa2yYkpXwmm3 GQT1RlGzXJBLQSg9DFU/7fe/H8hU/e/K/iFsXGm9X2g4q/dNHMCB0MMdr0ILCX2L -----END CERTIFICATE-----Generated at Sat May 11 17:57:35 2024 by rpki-client on console-ams.rpki-client.org