$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/474c8b23-c0b5-431f-9412-f10681ae3ddb.cer File: 474c8b23-c0b5-431f-9412-f10681ae3ddb.cer (raw, json) Hash identifier: 6vFLPfipplH3z6O3q6Hh2rZ0B8UvBPjP7b2TmEpUscg= Subject key identifier: CC:D7:A2:91:EC:6D:AF:F6:88:09:53:91:33:33:4A:37:61:CD:4A:E4 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584314C8EAE8E00009C273434A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/474c8b23-c0b5-431f-9412-f10681ae3ddb/474c8b23-c0b5-431f-9412-f10681ae3ddb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/474c8b23-c0b5-431f-9412-f10681ae3ddb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Sep 2023 18:53:11 +0000 Certificate not after: Thu 04 Dec 2025 19:53:11 +0000 Subordinate resources: IP: 137.48.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:14:c8:ea:e8:e0:00:09:c2:73:43:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 1 18:53:11 2023 GMT Not After : Dec 4 19:53:11 2025 GMT Subject: CN=474c8b23-c0b5-431f-9412-f10681ae3ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4d:30:90:d8:af:fd:ab:2f:e3:bb:db:ca:d9: 0f:e3:94:34:44:f3:4e:03:d1:8e:60:e9:6b:c5:3a: 15:0f:f2:17:ad:97:47:ee:04:a0:c4:2f:38:73:67: cf:e1:a5:02:d0:05:03:bc:ff:5a:dc:7a:d4:40:08: 60:1f:d5:cb:7d:c6:af:ba:69:67:91:db:d2:87:90: 06:a3:e6:71:1b:fa:9d:94:ff:c1:23:1d:25:55:b8: a0:b2:39:69:8c:e2:61:1a:b7:7c:5c:f6:46:60:4b: be:52:bd:21:04:fb:e6:6a:63:d0:b6:42:db:a0:e9: 38:f7:91:ba:fb:e3:99:d3:48:40:30:38:a8:94:39: 92:5b:42:e3:f1:3f:7c:dd:df:28:85:ca:81:11:3f: 0e:c8:92:bb:97:4e:1d:af:b3:5d:82:cd:82:dc:1e: 5a:55:99:b8:04:72:29:52:f9:1d:24:c3:b7:65:79: 6c:72:25:76:10:11:71:81:4e:5e:65:bd:02:8c:c6: a9:f5:d8:55:8d:39:ee:fd:ce:61:85:7d:f8:ff:a8: 45:c0:ca:8d:7f:ce:5a:ea:b5:d4:40:fa:12:43:9b: 66:d9:fa:43:ea:ab:d6:03:29:2f:ac:be:7e:3c:a9: 6a:82:b6:5c:07:94:6d:05:b6:bc:b7:92:1e:46:87: 5e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D7:A2:91:EC:6D:AF:F6:88:09:53:91:33:33:4A:37:61:CD:4A:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/474c8b23-c0b5-431f-9412-f10681ae3ddb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/474c8b23-c0b5-431f-9412-f10681ae3ddb/474c8b23-c0b5-431f-9412-f10681ae3ddb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 137.48.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8d:db:97:f5:60:ed:62:45:32:3d:f7:cc:de:0f:45:b7:1e: 04:6b:80:69:73:7c:c5:da:4e:13:04:63:f0:d4:77:bd:a6:10: b4:5b:81:ff:85:36:82:11:88:90:5d:a5:f1:97:98:7f:91:60: 94:48:c5:ef:8e:b4:3a:88:aa:68:10:fc:b4:ec:40:42:51:9f: bd:f6:b5:cc:a0:12:cf:33:79:5b:22:b4:97:b0:12:57:18:1c: 51:18:32:5f:f4:e6:80:c4:88:e0:28:25:53:54:1e:36:46:c8: ab:ac:dc:89:98:f0:d9:ec:f0:ef:4c:4a:77:ad:a7:4f:e0:b4: 2c:8b:38:4d:b4:f8:6d:b6:fb:e5:d3:20:26:e3:ae:54:00:46: d5:33:e4:3b:5c:65:d3:74:2d:66:1f:2b:cc:7f:c7:2b:56:7f: d1:22:c8:79:70:33:df:63:a6:d1:30:e8:f5:86:13:75:fe:af: 4f:54:0d:68:f7:8f:6d:73:76:3f:c3:b6:5c:5f:a0:b1:bf:4a: de:8c:6d:f5:7b:bd:30:6b:0a:9b:76:b0:e9:37:12:32:dc:c1: 93:22:33:33:8d:8f:cb:90:2f:b8:d2:3f:d9:70:e9:44:a7:58: 60:63:b4:8e:e5:c2:cd:c3:e1:83:20:9e:4d:f6:d9:79:e2:be: ae:eb:c8:ee -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEMUyOro4AAJwnNDSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDkwMTE4NTMxMVoXDTI1MTIwNDE5NTMxMVowLzEtMCsGA1UEAxMk NDc0YzhiMjMtYzBiNS00MzFmLTk0MTItZjEwNjgxYWUzZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU0wkNiv/asv47vbytkP45Q0RPNOA9GOYOlr xToVD/IXrZdH7gSgxC84c2fP4aUC0AUDvP9a3HrUQAhgH9XLfcavumlnkdvSh5AG o+ZxG/qdlP/BIx0lVbigsjlpjOJhGrd8XPZGYEu+Ur0hBPvmamPQtkLboOk495G6 ++OZ00hAMDiolDmSW0Lj8T983d8ohcqBET8OyJK7l04dr7Ndgs2C3B5aVZm4BHIp UvkdJMO3ZXlsciV2EBFxgU5eZb0CjMap9dhVjTnu/c5hhX34/6hFwMqNf85a6rXU QPoSQ5tm2fpD6qvWAykvrL5+PKlqgrZcB5RtBba8t5IeRodeOQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFMzXopHsba/2iAlTkTMzSjdhzUrkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 NzRjOGIyMy1jMGI1LTQzMWYtOTQxMi1mMTA2ODFhZTNkZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzQ3NGM4YjIzLWMwYjUtNDMxZi05 NDEyLWYxMDY4MWFlM2RkYi80NzRjOGIyMy1jMGI1LTQzMWYtOTQxMi1mMTA2ODFh ZTNkZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCJMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAXjduX9WDtYkUyPffM3g9F tx4Ea4Bpc3zF2k4TBGPw1He9phC0W4H/hTaCEYiQXaXxl5h/kWCUSMXvjrQ6iKpo EPy07EBCUZ+99rXMoBLPM3lbIrSXsBJXGBxRGDJf9OaAxIjgKCVTVB42RsirrNyJ mPDZ7PDvTEp3radP4LQsizhNtPhttvvl0yAm465UAEbVM+Q7XGXTdC1mHyvMf8cr Vn/RIsh5cDPfY6bRMOj1hhN1/q9PVA1o949tc3Y/w7ZcX6Cxv0rejG31e70wawqb drDpNxIy3MGTIjMzjY/LkC+40j/ZcOlEp1hgY7SO5cLNw+GDIJ5N9tl54r6u68ju -----END CERTIFICATE-----Generated at Fri May 10 17:22:09 2024 by rpki-client on console-fra.rpki-client.org