$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.cer File: 1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.cer (raw, json) Hash identifier: veEG0oa0Sg8MvXpLIZYz5wsIS3XFg1WaeSrNynA/nYY= Subject key identifier: E7:90:0F:90:F7:AC:34:57:52:82:55:FE:14:E5:FE:A0:AB:18:E2:26 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847A19EFD858583B95560C08200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Oct 2024 00:45:26 +0000 Certificate not after: Tue 26 Jan 2027 01:45:26 +0000 Subordinate resources: IP: 69.64.0.0/20 IP: 173.237.224.0/20 IP: 216.135.64.0/19 IP: 2605:8000::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a1:9e:fd:85:85:83:b9:55:60:c0:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 23 00:45:26 2024 GMT Not After : Jan 26 01:45:26 2027 GMT Subject: CN=1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:b3:dc:62:9e:c7:c7:39:0e:68:c3:89:4a: db:b9:ed:ac:92:88:8c:f0:4a:14:fd:3f:de:2b:01: de:e2:e2:7b:50:9a:8a:64:15:b5:e3:07:79:65:53: d7:65:34:ff:b7:74:f0:50:7e:c5:33:7e:55:58:d0: b7:0f:56:06:1c:0b:a4:9f:8a:5e:09:f4:4f:24:2e: 61:0c:46:2b:c7:0c:48:64:a1:4f:2b:11:a5:a3:2e: b3:3f:74:e0:9c:da:e1:7b:0c:97:66:2f:a3:2a:5b: 27:bb:1f:c2:55:b5:76:6f:51:1b:56:99:7d:79:1c: ec:e5:e3:47:48:3d:3c:43:36:f5:85:a0:5f:0f:89: ee:3c:82:8a:da:49:86:fd:ff:8f:1d:15:2b:26:34: 12:ca:9b:5b:f1:c6:a7:6d:97:b6:e9:ba:ad:81:e4: 4b:80:07:88:55:04:30:5f:9d:5f:48:41:bb:52:b6: cb:13:52:72:8d:49:39:46:dd:95:d6:ca:2b:08:75: e3:b8:9c:2b:01:b6:08:43:bd:4d:a3:16:bb:43:2e: c3:3d:40:4d:c9:27:85:d1:6f:5d:ee:e3:84:e6:41: 8d:63:26:98:79:1d:06:c4:01:4f:cc:19:7e:f1:c1: 65:15:bc:8c:b9:f3:9b:21:09:3a:30:9e:f0:d2:af: f6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:90:0F:90:F7:AC:34:57:52:82:55:FE:14:E5:FE:A0:AB:18:E2:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee/1f01d1d7-8b1e-4de1-8b07-e9342e8d95ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 69.64.0.0/20 173.237.224.0/20 216.135.64.0/19 IPv6: 2605:8000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:57:52:90:ff:b3:e1:3c:96:bf:11:0c:42:64:e8:d5:03:cf: c6:16:01:ee:07:db:a2:2c:e8:49:c0:3c:0f:76:85:c9:59:18: 4c:17:19:f5:89:79:f7:72:26:d2:08:44:98:a8:24:22:f6:cc: 53:4e:34:f8:32:97:1f:f4:8b:fa:30:25:a9:4c:24:05:55:0c: a1:e5:25:c5:9d:63:f4:40:e7:ea:d5:81:e4:15:7f:da:94:1a: b1:ac:b6:2e:83:fd:21:80:a3:c8:ea:16:ef:ec:d9:50:a9:cc: 12:49:3d:bc:2d:5f:73:e7:2a:91:77:e0:9a:87:f2:c8:be:bd: d2:e2:c2:79:1f:da:57:76:4d:1e:a4:c9:35:40:49:37:43:37: 9e:af:56:6c:14:90:bb:5f:3b:50:54:a3:70:4d:9f:9d:9e:ff: b7:66:8f:d4:18:66:3c:b0:83:d0:7e:50:2f:f2:8e:86:07:97: 23:fb:db:1a:67:53:00:b8:23:aa:5f:81:e5:e4:30:0e:bf:76: aa:33:91:60:b7:e8:de:4d:c1:6a:3e:79:8b:05:b7:ca:06:97: 24:85:58:ee:38:c5:c0:83:ae:28:53:92:15:4e:15:1a:07:9a: 5c:eb:64:f9:6d:6d:81:c7:95:93:56:0b:ef:3f:ac:43:2c:a2: 77:98:bd:bc -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEehnv2FhYO5VWDAggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAyMzAwNDUyNloXDTI3MDEyNjAxNDUyNlowLzEtMCsGA1UEAxMk MWYwMWQxZDctOGIxZS00ZGUxLThiMDctZTkzNDJlOGQ5NWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyKz3GKex8c5DmjDiUrbue2skoiM8EoU/T/e KwHe4uJ7UJqKZBW14wd5ZVPXZTT/t3TwUH7FM35VWNC3D1YGHAukn4peCfRPJC5h DEYrxwxIZKFPKxGloy6zP3TgnNrhewyXZi+jKlsnux/CVbV2b1EbVpl9eRzs5eNH SD08Qzb1haBfD4nuPIKK2kmG/f+PHRUrJjQSyptb8canbZe26bqtgeRLgAeIVQQw X51fSEG7UrbLE1JyjUk5Rt2V1sorCHXjuJwrAbYIQ71Noxa7Qy7DPUBNySeF0W9d 7uOE5kGNYyaYeR0GxAFPzBl+8cFlFbyMufObIQk6MJ7w0q/2JQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFOeQD5D3rDRXUoJV/hTl/qCrGOImMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x ZjAxZDFkNy04YjFlLTRkZTEtOGIwNy1lOTM0MmU4ZDk1ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFmMDFkMWQ3LThiMWUtNGRlMS04 YjA3LWU5MzQyZThkOTVlZS8xZjAxZDFkNy04YjFlLTRkZTEtOGIwNy1lOTM0MmU4 ZDk1ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARFQAADBASt7eADBAXYh0AwDQQCAAIwBwMFACYF gAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYFdSkP+z4TyWvxEMQmTo1QPPxhYB7gfboizoScA8D3aFyVkY TBcZ9Yl593Im0ghEmKgkIvbMU040+DKXH/SL+jAlqUwkBVUMoeUlxZ1j9EDn6tWB 5BV/2pQasay2LoP9IYCjyOoW7+zZUKnMEkk9vC1fc+cqkXfgmofyyL690uLCeR/a V3ZNHqTJNUBJN0M3nq9WbBSQu187UFSjcE2fnZ7/t2aP1BhmPLCD0H5QL/KOhgeX I/vbGmdTALgjql+B5eQwDr92qjORYLfo3k3Baj55iwW3ygaXJIVY7jjFwIOuKFOS FU4VGgeaXOtk+W1tgceVk1YL7z+sQyyid5i9vA== -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:14 2024 by rpki-client on console-fra.rpki-client.org