$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer File: 21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer (raw, json) Hash identifier: u0f+HeNxZmYjKQfSBvEgMVrcvucfG23EKvXxrSHJQ/U= Subject key identifier: AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584343DF8356EB925D2102759A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Sep 2023 15:41:43 +0000 Certificate not after: Sun 21 Dec 2025 16:41:43 +0000 Subordinate resources: IP: 205.236.93.0 -- 205.236.95.255 IP: 205.236.144.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:43:df:83:56:eb:92:5d:21:02:75:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 18 15:41:43 2023 GMT Not After : Dec 21 16:41:43 2025 GMT Subject: CN=21d44745-4ec9-4f13-a01d-70bb2f3adb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:0c:a5:2d:a4:c5:d9:7c:90:df:fa:e3:9f: e2:e5:fb:44:dc:c8:93:63:e7:1a:86:52:25:de:f3: 58:fd:5a:80:d8:1a:e3:e9:7c:bd:78:50:88:f8:84: ce:4f:5a:b4:77:98:88:08:f4:35:b3:ab:6c:8d:df: 06:94:d6:f4:f1:c7:e2:c2:43:a5:5f:14:a3:d3:1d: 98:09:e2:21:15:73:c6:3b:49:39:aa:37:2a:28:38: ae:eb:2c:24:db:7f:d1:52:11:af:26:f5:87:74:89: 09:60:d6:2a:93:72:f7:9c:67:e2:93:4b:76:09:79: b5:b2:6f:16:28:c2:91:52:28:25:fc:7c:55:77:35: 38:e7:7b:eb:eb:00:36:7e:27:b4:93:c2:76:f5:fd: ff:55:dd:b2:bb:0b:94:d5:32:b4:8f:04:f6:b6:c1: 2a:55:60:b6:3d:8c:58:3a:fd:8f:dc:c9:01:1a:01: e7:33:67:81:7e:8b:64:29:31:de:8b:78:a6:24:f9: ed:33:6c:2d:c1:24:c9:15:64:5f:62:da:b6:a1:15: 11:d3:2b:b8:75:c6:37:2a:5b:fb:9a:c3:8c:93:b8: af:fd:fa:41:23:81:28:1f:87:42:24:97:d6:5d:34: e6:6b:2c:f6:cc:34:08:ba:39:16:58:39:ac:1f:51: b0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 205.236.93.0-205.236.95.255 205.236.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c2:12:06:1d:40:7d:3d:80:db:8b:10:ab:3a:48:2b:9d:d5: 83:98:45:ea:8a:21:9f:e3:89:2f:b4:9f:71:92:5f:0d:b4:66: e7:d5:83:ab:66:b4:e7:df:3c:02:75:7e:6a:3e:a6:63:e1:ac: 7a:d5:ff:ff:db:43:34:5d:f6:4b:f0:a0:fc:23:1c:36:8b:b3: b3:12:60:c1:96:30:e0:96:b4:00:62:a4:ec:bb:5c:d9:22:13: 4f:ac:7e:18:26:32:f0:38:9f:f8:f2:13:3a:b5:11:86:e9:23: 50:15:8d:5b:8a:29:fe:22:51:94:f2:20:85:f9:24:53:ce:60: 09:c7:7c:a5:23:59:63:a6:8f:36:2f:32:2d:84:75:99:65:6b: 45:ef:8f:5a:5c:d9:9f:7d:82:c5:61:10:ee:a4:1b:6c:44:6a: 6f:e4:7f:47:70:f1:de:6d:72:0f:c7:c1:2d:a5:d3:ed:8e:05: d6:4d:38:47:d4:3b:a9:57:56:fa:af:df:d5:45:77:48:c6:ea: b8:e7:98:68:9a:d1:b9:55:2e:db:f4:ea:5d:50:fe:08:c1:8e: 17:c1:10:42:10:ae:b7:40:0b:78:cb:63:1a:b0:d5:7d:17:a5: 02:4a:25:5a:4b:43:01:41:84:33:cb:e2:45:b4:4d:0b:6a:fe: 54:59:49:5a -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEND34NW65JdIQJ1mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDkxODE1NDE0M1oXDTI1MTIyMTE2NDE0M1owLzEtMCsGA1UEAxMk MjFkNDQ3NDUtNGVjOS00ZjEzLWEwMWQtNzBiYjJmM2FkYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3esMpS2kxdl8kN/645/i5ftE3MiTY+cahlIl 3vNY/VqA2Brj6Xy9eFCI+ITOT1q0d5iICPQ1s6tsjd8GlNb08cfiwkOlXxSj0x2Y CeIhFXPGO0k5qjcqKDiu6ywk23/RUhGvJvWHdIkJYNYqk3L3nGfik0t2CXm1sm8W KMKRUigl/HxVdzU453vr6wA2fie0k8J29f3/Vd2yuwuU1TK0jwT2tsEqVWC2PYxY Ov2P3MkBGgHnM2eBfotkKTHei3imJPntM2wtwSTJFWRfYtq2oRUR0yu4dcY3Klv7 msOMk7iv/fpBI4EoH4dCJJfWXTTmayz2zDQIujkWWDmsH1GwvQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFK00clCxwMXID9TLhpzs39EX7y3nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y MWQ0NDc0NS00ZWM5LTRmMTMtYTAxZC03MGJiMmYzYWRiOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzIxZDQ0NzQ1LTRlYzktNGYxMy1h MDFkLTcwYmIyZjNhZGI4ZC8yMWQ0NDc0NS00ZWM5LTRmMTMtYTAxZC03MGJiMmYz YWRiOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAM3sXQMEBc3sQAMEAM3skDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBE whIGHUB9PYDbixCrOkgrndWDmEXqiiGf44kvtJ9xkl8NtGbn1YOrZrTn3zwCdX5q PqZj4ax61f//20M0XfZL8KD8Ixw2i7OzEmDBljDglrQAYqTsu1zZIhNPrH4YJjLw OJ/48hM6tRGG6SNQFY1biin+IlGU8iCF+SRTzmAJx3ylI1ljpo82LzIthHWZZWtF 749aXNmffYLFYRDupBtsRGpv5H9HcPHebXIPx8EtpdPtjgXWTThH1DupV1b6r9/V RXdIxuq455homtG5VS7b9OpdUP4IwY4XwRBCEK63QAt4y2MasNV9F6UCSiVaS0MB QYQzy+JFtE0Lav5UWUla -----END CERTIFICATE-----Generated at Thu May 9 21:06:14 2024 by rpki-client on console-fra.rpki-client.org