$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer File: 7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer (raw, json) Hash identifier: bvs5hlMDXSQQo0YXrYTD3Vl5XjtyEIxISxVovABeBxQ= Subject key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584322B2B89E8058FC4AB54499C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Sep 2023 18:29:47 +0000 Certificate not after: Tue 09 Dec 2025 19:29:47 +0000 Subordinate resources: IP: 192.54.242.0/24 IP: 192.219.236.0 -- 192.219.240.255 IP: 205.189.16.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:22:b2:b8:9e:80:58:fc:4a:b5:44:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 6 18:29:47 2023 GMT Not After : Dec 9 19:29:47 2025 GMT Subject: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9b:96:97:f8:b1:41:a4:da:f1:77:bf:a4:ee: fb:4b:d2:e6:4c:e7:00:77:43:0d:d1:8d:55:d3:81: e1:63:42:9e:0f:95:15:c4:fc:91:e5:d0:e1:54:99: 9d:2d:a5:b9:b6:9d:82:bf:eb:89:4f:b2:36:a0:3c: e2:08:8f:05:d3:c7:09:a9:9e:48:9b:19:d7:77:08: ad:ee:64:a3:17:6d:69:f1:e6:98:fd:bf:fa:99:fa: b0:6f:eb:7a:06:f5:c1:57:05:a6:81:6d:d7:72:58: 9e:1c:d9:a3:a7:b0:26:f8:89:97:89:9a:60:c9:a4: 4d:b8:0c:9c:27:73:90:9f:33:74:bb:e6:d0:1b:e6: eb:c7:2f:59:af:96:69:7c:ab:9d:58:d6:08:15:d4: 6e:d7:75:d6:f1:09:db:9a:df:90:28:fb:76:76:37: 94:a3:57:a5:27:d0:cc:ac:28:f2:5e:bb:65:c9:24: de:5c:89:2d:f7:39:68:52:7c:46:da:d9:7b:1d:a8: 39:ec:00:e1:3b:d9:49:13:0a:17:fe:b2:6b:27:bd: 1f:7d:a8:bb:a5:74:5a:3f:66:38:e0:26:d1:02:83: 2a:bc:17:b0:0b:cd:23:ca:4e:5d:82:af:5b:5c:62: 08:c5:ea:16:17:d2:b2:b8:eb:57:eb:66:66:00:17: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.54.242.0/24 192.219.236.0-192.219.240.255 205.189.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c1:4f:07:09:d5:f3:49:97:c2:c2:d2:df:2c:81:6b:07:fe: 2a:e2:94:b2:3b:ce:93:49:95:5c:77:d3:1d:e8:be:93:fe:b4: ac:26:43:59:73:dc:6d:97:06:76:50:a8:4c:5f:48:c2:a4:99: 69:51:f1:43:21:00:ee:32:25:6e:5f:5e:25:9b:ab:a9:b1:09: a5:97:b1:23:4c:9d:9f:8c:81:5e:08:16:25:61:fa:d0:6b:14: 79:d4:45:08:3b:37:eb:d7:5a:92:a7:bb:07:2a:c6:11:14:cd: a3:5a:89:59:9e:00:79:46:79:69:b6:1d:e8:22:86:f0:2c:d5: a6:97:7c:2c:cc:01:7e:32:b8:18:65:55:bd:bf:2d:57:19:d0: 54:4d:8d:ac:cd:14:e9:1d:32:2d:48:ad:24:e7:46:74:3f:25: 60:6c:33:cb:37:41:47:58:ac:34:5a:62:9a:0d:d7:eb:a1:32: 90:c2:7e:76:b8:44:83:bf:f4:1c:f4:50:2f:5a:ab:9d:dc:ec: 1f:3f:74:3b:1d:d6:dd:0d:b4:5d:7e:10:c1:94:ea:dd:13:39: 69:a8:c7:cb:16:9c:08:b7:d7:05:e2:c9:a1:9e:25:70:65:98: 47:89:dd:83:6e:3c:a0:b1:4e:5e:bf:a0:e2:01:ae:a1:bc:27: 32:b7:59:31 -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWEMisriegFj8SrVEmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDkwNjE4Mjk0N1oXDTI1MTIwOTE5Mjk0N1owLzEtMCsGA1UEAxMk N2MxNGVmN2MtMTI4OS00N2VkLTgxNDQtYzdiM2ZlYWNmNWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JuWl/ixQaTa8Xe/pO77S9LmTOcAd0MN0Y1V 04HhY0KeD5UVxPyR5dDhVJmdLaW5tp2Cv+uJT7I2oDziCI8F08cJqZ5ImxnXdwit 7mSjF21p8eaY/b/6mfqwb+t6BvXBVwWmgW3XclieHNmjp7Am+ImXiZpgyaRNuAyc J3OQnzN0u+bQG+brxy9Zr5ZpfKudWNYIFdRu13XW8Qnbmt+QKPt2djeUo1elJ9DM rCjyXrtlySTeXIkt9zloUnxG2tl7Hag57ADhO9lJEwoX/rJrJ70ffai7pXRaP2Y4 4CbRAoMqvBewC80jyk5dgq9bXGIIxeoWF9KyuOtX62ZmABfMqQIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFLDfGO15CcM9i2d9Ra/WgfZlPCscMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83 YzE0ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2IzZmVhY2Y1YWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzdjMTRlZjdjLTEyODktNDdlZC04 MTQ0LWM3YjNmZWFjZjVhZi83YzE0ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2IzZmVh Y2Y1YWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBADANvIwDAMEAsDb7AMEAMDb8AMEBM29EDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCRwU8HCdXzSZfCwtLfLIFrB/4q4pSyO86TSZVcd9Md6L6T/rSsJkNZc9xt lwZ2UKhMX0jCpJlpUfFDIQDuMiVuX14lm6upsQmll7EjTJ2fjIFeCBYlYfrQaxR5 1EUIOzfr11qSp7sHKsYRFM2jWolZngB5Rnlpth3oIobwLNWml3wszAF+MrgYZVW9 vy1XGdBUTY2szRTpHTItSK0k50Z0PyVgbDPLN0FHWKw0WmKaDdfroTKQwn52uESD v/Qc9FAvWqud3OwfP3Q7HdbdDbRdfhDBlOrdEzlpqMfLFpwIt9cF4smhniVwZZhH id2DbjygsU5ev6DiAa6hvCcyt1kx -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:53 2024 by rpki-client on console-ams.rpki-client.org