$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960.cer File: 4d86c782-c9fe-4446-9e6e-7812e6590960.cer (raw, json) Hash identifier: HxozHx2ZoVoAKh+0FQ3NBfGnZX3TP8QELf5WZR6O4ck= Subject key identifier: E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847D3FD22FA49DB84A369A33440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Nov 2024 01:45:33 +0000 Certificate not after: Sat 13 Feb 2027 01:45:33 +0000 Subordinate resources: IP: 144.80.0.0/16 IP: 192.150.225.0/24 IP: 192.153.123.0/24 IP: 192.231.220.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:d3:fd:22:fa:49:db:84:a3:69:a3:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 10 01:45:33 2024 GMT Not After : Feb 13 01:45:33 2027 GMT Subject: CN=4d86c782-c9fe-4446-9e6e-7812e6590960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:8f:0e:60:2b:7b:34:a5:92:90:45:97:41: dc:b6:8d:4a:39:44:90:9b:34:97:95:0f:f3:78:c8: d8:41:0e:68:73:47:7a:db:7d:7f:66:0c:bd:25:af: 4c:5d:2f:7e:7d:d2:7b:3f:f5:5c:08:9d:cb:5d:3a: 2e:40:56:30:fd:81:3b:a8:f7:bf:f2:6e:a4:7a:82: 40:16:9e:bf:f9:99:fd:1e:96:57:28:1e:2e:35:2b: da:67:d1:8e:41:54:64:7e:e6:13:9a:94:7b:02:0e: 28:08:e4:eb:a8:aa:72:1c:44:97:8e:71:a4:14:a1: e0:dc:76:c9:ef:fc:f7:29:b7:f5:9e:8a:18:84:88: 49:3a:bc:3d:d9:cd:3d:db:f1:8e:be:16:75:da:ce: 6e:65:24:86:0b:88:c0:22:c8:89:0d:65:2a:e2:2d: 54:84:e6:f2:b5:f7:ca:64:48:13:c7:11:18:97:64: 65:1e:5c:1d:25:6e:0b:90:2d:d5:10:42:56:ad:fa: a3:14:20:d1:1b:17:dc:07:eb:a1:14:bb:eb:f2:2f: fe:f3:0d:2e:50:24:7a:96:52:1c:53:13:23:ec:6f: 3d:20:45:46:60:76:a9:a8:fc:90:31:c2:5e:ae:93: d0:33:a5:5a:15:17:f2:ed:91:d8:32:62:b6:55:91: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 144.80.0.0/16 192.150.225.0/24 192.153.123.0/24 192.231.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:a2:f2:62:94:ae:4b:fe:78:e5:91:0c:34:98:e2:60:0c:d1: c0:9d:9c:03:50:5a:95:fc:2c:48:5e:39:42:1c:39:6c:8c:e7: 9f:cd:6f:ee:ce:58:a2:46:cb:cb:0a:42:22:1f:a9:e3:89:82: 08:9c:cc:44:c8:8f:5a:0b:e7:eb:85:43:f6:2b:f6:a9:f7:87: bb:1d:a4:d9:32:46:e3:e7:ad:56:8a:d3:f6:78:b2:e4:84:0b: 30:fc:c4:5b:33:c4:61:6b:22:32:8b:e6:ed:d3:31:2b:7e:b8: 50:7c:77:20:e0:17:cf:97:91:44:37:f7:ce:ba:27:88:41:dd: c1:c5:86:eb:56:e0:4f:fa:af:55:fc:d2:4c:cd:6e:26:ed:43: f1:a5:f6:91:c9:d3:1c:d7:78:83:38:cb:54:83:92:e6:85:98: 4c:9d:a8:04:c5:81:3b:49:44:cd:08:ff:f2:cc:36:5b:4b:54: cd:2a:04:83:cd:57:a1:80:e2:16:1d:e6:f7:41:f3:74:da:6d: 8a:2b:4b:68:3a:e4:47:75:e2:cc:fb:4d:f0:11:ee:17:3f:ca: d2:e4:8b:55:3c:fa:06:19:62:e4:48:6a:b3:86:89:65:69:df: 99:70:01:3d:50:7d:cc:a0:b0:bb:50:55:37:1c:69:0c:52:88: 63:2d:ec:4e -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEfT/SL6SduEo2mjNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTExMDAxNDUzM1oXDTI3MDIxMzAxNDUzM1owLzEtMCsGA1UEAxMk NGQ4NmM3ODItYzlmZS00NDQ2LTllNmUtNzgxMmU2NTkwOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxWPDmArezSlkpBFl0Hcto1KOUSQmzSXlQ/z eMjYQQ5oc0d6231/Zgy9Ja9MXS9+fdJ7P/VcCJ3LXTouQFYw/YE7qPe/8m6keoJA Fp6/+Zn9HpZXKB4uNSvaZ9GOQVRkfuYTmpR7Ag4oCOTrqKpyHESXjnGkFKHg3HbJ 7/z3Kbf1nooYhIhJOrw92c092/GOvhZ12s5uZSSGC4jAIsiJDWUq4i1UhObytffK ZEgTxxEYl2RlHlwdJW4LkC3VEEJWrfqjFCDRGxfcB+uhFLvr8i/+8w0uUCR6llIc UxMj7G89IEVGYHapqPyQMcJerpPQM6VaFRfy7ZHYMmK2VZGDnwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFOFjOZD8fqoeNHxTD/NWTC8bkQdIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 ZDg2Yzc4Mi1jOWZlLTQ0NDYtOWU2ZS03ODEyZTY1OTA5NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzRkODZjNzgyLWM5ZmUtNDQ0Ni05 ZTZlLTc4MTJlNjU5MDk2MC80ZDg2Yzc4Mi1jOWZlLTQ0NDYtOWU2ZS03ODEyZTY1 OTA5NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwCQUAMEAMCW4QMEAMCZewMEAMDn3DBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCSovJilK5L/njlkQw0mOJgDNHAnZwDUFqV/CxIXjlCHDlsjOefzW/uzliiRsvL CkIiH6njiYIInMxEyI9aC+frhUP2K/ap94e7HaTZMkbj561WitP2eLLkhAsw/MRb M8RhayIyi+bt0zErfrhQfHcg4BfPl5FEN/fOuieIQd3BxYbrVuBP+q9V/NJMzW4m 7UPxpfaRydMc13iDOMtUg5LmhZhMnagExYE7SUTNCP/yzDZbS1TNKgSDzVehgOIW Heb3QfN02m2KK0toOuRHdeLM+03wEe4XP8rS5ItVPPoGGWLkSGqzhollad+ZcAE9 UH3MoLC7UFU3HGkMUohjLexO -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:20 2024 by rpki-client on console-fra.rpki-client.org