$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.cer File: 2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.cer (raw, json) Hash identifier: lT/gf5tFWImyFf6xrd8pE852xk8qRNu1Zwo9Nq7xBWI= Subject key identifier: C3:7B:88:E1:FD:E8:A3:6E:EF:C4:55:AF:8F:16:0C:A6:CB:51:4F:99 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847993EF09FF25D7BB30EBF0C10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Oct 2024 00:45:26 +0000 Certificate not after: Sat 23 Jan 2027 01:45:26 +0000 Subordinate resources: IP: 199.184.142.0/23 IP: 208.85.36.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:99:3e:f0:9f:f2:5d:7b:b3:0e:bf:0c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 20 00:45:26 2024 GMT Not After : Jan 23 01:45:26 2027 GMT Subject: CN=2a645ece-ac51-4737-8d2b-c6ab6d2e79fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4c:12:f1:8a:6a:62:59:e6:c7:07:69:ee:c1: a5:8a:bb:98:57:25:16:41:22:8e:7c:86:1e:72:5d: 0a:9b:d8:6d:f7:dd:30:dd:4c:28:29:7f:08:ea:ee: 43:39:f1:23:7e:19:b3:5a:c7:8f:82:59:a3:3f:cf: 96:54:71:80:bf:ba:9f:c1:15:dc:65:f9:02:2a:f1: 43:67:e0:ee:56:03:30:f2:f1:45:9e:e1:c8:06:17: 2a:e3:e0:9a:03:c0:a8:c7:b0:1f:01:f3:4e:f7:7f: 96:6c:02:fe:0b:f8:53:1b:f3:9e:0c:c2:66:29:16: 4b:84:bf:a9:39:dd:3d:bf:19:23:b2:41:66:40:04: 5d:a8:82:9f:37:88:5c:71:0a:c4:68:08:a5:1e:c3: c4:6b:6c:b9:60:cb:50:5c:b9:01:96:af:a7:fe:76: 38:06:f5:7b:a1:94:a1:71:c8:75:4a:22:90:b5:09: 08:5a:0a:63:78:fc:9a:61:3e:19:5a:71:50:a3:83: be:db:a5:c8:0a:f9:9f:2e:ae:58:30:4f:58:ee:1a: ab:fd:10:be:bf:fb:64:28:5a:d0:80:20:54:e3:26: 5e:8b:6d:d0:02:e5:f3:b9:e4:fc:c0:b0:d6:13:49: 0b:31:2c:a8:f9:5d:dc:ae:56:18:9e:15:be:64:92: 4e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7B:88:E1:FD:E8:A3:6E:EF:C4:55:AF:8F:16:0C:A6:CB:51:4F:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.184.142.0/23 208.85.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:59:54:b5:c4:47:d4:a6:07:fb:aa:1d:9a:6c:c0:a9:a0:bc: 93:e0:c5:be:0c:1f:0e:8f:24:5d:91:0a:37:37:6c:e0:b3:90: 3b:62:92:85:c4:05:39:01:2d:d9:70:e4:41:49:31:84:04:ac: 7c:46:24:39:81:1d:f4:fa:8e:92:d7:1c:67:f3:6b:96:6f:ac: 3e:8f:54:3b:a7:04:0e:8b:6b:e9:90:49:b4:47:c9:e9:38:17: 30:9d:48:f6:1e:48:f6:c7:d9:a4:b1:56:28:a1:66:72:df:34: ee:c2:0c:05:18:44:13:47:2d:0b:5d:19:20:41:d3:e6:19:f0: ff:d1:76:b0:43:21:4f:cf:6f:ae:3e:79:88:ee:2c:91:7c:0e: 14:ec:28:9b:ce:b1:c2:a7:ff:96:8d:cc:62:8b:c0:d8:4d:b7: 73:f4:ad:3b:26:06:61:29:a5:8b:e7:fe:ed:da:5c:e2:27:8f: 49:1e:75:47:e4:26:aa:5f:bb:b0:e3:62:f1:a6:14:4a:83:1d: 18:04:f2:01:48:23:a9:8c:67:43:c2:9b:06:55:0f:c4:19:39: c6:77:27:81:e4:85:e4:f1:2f:19:bf:eb:40:03:57:ae:e3:6b: 76:60:6b:76:3d:21:45:eb:06:20:27:a8:a5:60:d5:2d:5d:c3: ce:ca:db:2a -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEeZPvCf8l17sw6/DBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAyMDAwNDUyNloXDTI3MDEyMzAxNDUyNlowLzEtMCsGA1UEAxMk MmE2NDVlY2UtYWM1MS00NzM3LThkMmItYzZhYjZkMmU3OWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kwS8YpqYlnmxwdp7sGliruYVyUWQSKOfIYe cl0Km9ht990w3UwoKX8I6u5DOfEjfhmzWsePglmjP8+WVHGAv7qfwRXcZfkCKvFD Z+DuVgMw8vFFnuHIBhcq4+CaA8Cox7AfAfNO93+WbAL+C/hTG/OeDMJmKRZLhL+p Od09vxkjskFmQARdqIKfN4hccQrEaAilHsPEa2y5YMtQXLkBlq+n/nY4BvV7oZSh cch1SiKQtQkIWgpjePyaYT4ZWnFQo4O+26XICvmfLq5YME9Y7hqr/RC+v/tkKFrQ gCBU4yZei23QAuXzueT8wLDWE0kLMSyo+V3crlYYnhW+ZJJOhwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFMN7iOH96KNu78RVr48WDKbLUU+ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y YTY0NWVjZS1hYzUxLTQ3MzctOGQyYi1jNmFiNmQyZTc5ZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzJhNjQ1ZWNlLWFjNTEtNDczNy04 ZDJiLWM2YWI2ZDJlNzlmYS8yYTY0NWVjZS1hYzUxLTQ3MzctOGQyYi1jNmFiNmQy ZTc5ZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHHuI4DBALQVSQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcllUtcRH1KYH +6odmmzAqaC8k+DFvgwfDo8kXZEKNzds4LOQO2KShcQFOQEt2XDkQUkxhASsfEYk OYEd9PqOktccZ/Nrlm+sPo9UO6cEDotr6ZBJtEfJ6TgXMJ1I9h5I9sfZpLFWKKFm ct807sIMBRhEE0ctC10ZIEHT5hnw/9F2sEMhT89vrj55iO4skXwOFOwom86xwqf/ lo3MYovA2E23c/StOyYGYSmli+f+7dpc4iePSR51R+Qmql+7sONi8aYUSoMdGATy AUgjqYxnQ8KbBlUPxBk5xncngeSF5PEvGb/rQANXruNrdmBrdj0hResGICeopWDV LV3DzsrbKg== -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:41 2024 by rpki-client on console-ams.rpki-client.org