$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.cer File: 2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.cer (raw, json) Hash identifier: x5veF8KmSGFT/pCvjbyiwqLRCOMPxhC1wQy+C/6R+N0= Subject key identifier: C3:7B:88:E1:FD:E8:A3:6E:EF:C4:55:AF:8F:16:0C:A6:CB:51:4F:99 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584294AE9F95B566CA08FC65C980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Jul 2023 21:36:45 +0000 Certificate not after: Sun 19 Oct 2025 21:36:45 +0000 Subordinate resources: IP: 199.184.142.0/23 IP: 208.85.36.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:94:ae:9f:95:b5:66:ca:08:fc:65:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 17 21:36:45 2023 GMT Not After : Oct 19 21:36:45 2025 GMT Subject: CN=2a645ece-ac51-4737-8d2b-c6ab6d2e79fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4c:12:f1:8a:6a:62:59:e6:c7:07:69:ee:c1: a5:8a:bb:98:57:25:16:41:22:8e:7c:86:1e:72:5d: 0a:9b:d8:6d:f7:dd:30:dd:4c:28:29:7f:08:ea:ee: 43:39:f1:23:7e:19:b3:5a:c7:8f:82:59:a3:3f:cf: 96:54:71:80:bf:ba:9f:c1:15:dc:65:f9:02:2a:f1: 43:67:e0:ee:56:03:30:f2:f1:45:9e:e1:c8:06:17: 2a:e3:e0:9a:03:c0:a8:c7:b0:1f:01:f3:4e:f7:7f: 96:6c:02:fe:0b:f8:53:1b:f3:9e:0c:c2:66:29:16: 4b:84:bf:a9:39:dd:3d:bf:19:23:b2:41:66:40:04: 5d:a8:82:9f:37:88:5c:71:0a:c4:68:08:a5:1e:c3: c4:6b:6c:b9:60:cb:50:5c:b9:01:96:af:a7:fe:76: 38:06:f5:7b:a1:94:a1:71:c8:75:4a:22:90:b5:09: 08:5a:0a:63:78:fc:9a:61:3e:19:5a:71:50:a3:83: be:db:a5:c8:0a:f9:9f:2e:ae:58:30:4f:58:ee:1a: ab:fd:10:be:bf:fb:64:28:5a:d0:80:20:54:e3:26: 5e:8b:6d:d0:02:e5:f3:b9:e4:fc:c0:b0:d6:13:49: 0b:31:2c:a8:f9:5d:dc:ae:56:18:9e:15:be:64:92: 4e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7B:88:E1:FD:E8:A3:6E:EF:C4:55:AF:8F:16:0C:A6:CB:51:4F:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.184.142.0/23 208.85.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4a:8e:b8:d6:d2:d9:b2:42:a4:57:d3:f1:c9:15:e3:5c:10: cf:e4:ee:27:1b:d7:44:21:a2:3a:88:bc:58:4b:a9:b1:05:9e: af:98:2f:c7:3a:8c:57:df:f6:29:37:2f:30:02:59:92:85:62: 5f:21:7b:36:a9:ba:0f:fd:30:88:de:8a:7c:04:41:54:96:a4: 50:7b:89:75:d6:43:2f:87:7a:24:3f:a5:25:e9:f3:8a:e5:71: 4a:d8:21:51:c0:ea:49:f2:78:68:0a:a2:56:77:98:74:90:1e: d6:0e:27:fd:05:33:7c:dd:0d:ab:7c:70:16:14:c1:1f:ef:ce: 63:d7:2d:2b:7e:c6:f5:3b:f2:a4:46:84:6f:5e:ee:59:39:53: 2c:ae:f4:e9:38:f3:61:52:66:ba:59:d3:ec:63:73:b1:85:ab: 87:34:4c:0a:2c:b1:91:ac:d2:5d:4b:23:98:44:94:71:e6:e7: 16:58:f6:9d:e8:a6:7c:52:35:a1:d7:71:3f:32:4d:4b:81:d5: 54:39:fe:1a:10:d0:91:44:ca:e8:7e:21:78:36:68:0a:4a:f5: 78:e6:d4:0c:dc:eb:37:cb:02:74:e7:5c:49:de:67:c7:44:d1: fb:47:b2:3c:5e:da:16:2c:19:c2:cd:98:e1:13:5b:cc:24:70: 14:a0:55:82 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEKUrp+VtWbKCPxlyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcxNzIxMzY0NVoXDTI1MTAxOTIxMzY0NVowLzEtMCsGA1UEAxMk MmE2NDVlY2UtYWM1MS00NzM3LThkMmItYzZhYjZkMmU3OWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kwS8YpqYlnmxwdp7sGliruYVyUWQSKOfIYe cl0Km9ht990w3UwoKX8I6u5DOfEjfhmzWsePglmjP8+WVHGAv7qfwRXcZfkCKvFD Z+DuVgMw8vFFnuHIBhcq4+CaA8Cox7AfAfNO93+WbAL+C/hTG/OeDMJmKRZLhL+p Od09vxkjskFmQARdqIKfN4hccQrEaAilHsPEa2y5YMtQXLkBlq+n/nY4BvV7oZSh cch1SiKQtQkIWgpjePyaYT4ZWnFQo4O+26XICvmfLq5YME9Y7hqr/RC+v/tkKFrQ gCBU4yZei23QAuXzueT8wLDWE0kLMSyo+V3crlYYnhW+ZJJOhwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFMN7iOH96KNu78RVr48WDKbLUU+ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y YTY0NWVjZS1hYzUxLTQ3MzctOGQyYi1jNmFiNmQyZTc5ZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzJhNjQ1ZWNlLWFjNTEtNDczNy04 ZDJiLWM2YWI2ZDJlNzlmYS8yYTY0NWVjZS1hYzUxLTQ3MzctOGQyYi1jNmFiNmQy ZTc5ZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHHuI4DBALQVSQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUkqOuNbS2bJC pFfT8ckV41wQz+TuJxvXRCGiOoi8WEupsQWer5gvxzqMV9/2KTcvMAJZkoViXyF7 Nqm6D/0wiN6KfARBVJakUHuJddZDL4d6JD+lJenziuVxStghUcDqSfJ4aAqiVneY dJAe1g4n/QUzfN0Nq3xwFhTBH+/OY9ctK37G9TvypEaEb17uWTlTLK706TjzYVJm ulnT7GNzsYWrhzRMCiyxkazSXUsjmESUcebnFlj2neimfFI1oddxPzJNS4HVVDn+ GhDQkUTK6H4heDZoCkr1eObUDNzrN8sCdOdcSd5nx0TR+0eyPF7aFiwZws2Y4RNb zCRwFKBVgg== -----END CERTIFICATE-----Generated at Thu May 9 21:06:15 2024 by rpki-client on console-fra.rpki-client.org