$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e.cer File: 86f1a799-fc40-4fe1-b430-8eb80d44fe2e.cer (raw, json) Hash identifier: kY6uz8NC0tB34CEkPLf/wyK4str/uh9AWkjF/dqExkQ= Subject key identifier: E1:B1:0A:D3:18:AE:FB:3F:69:4E:02:7D:71:BC:23:B5:DB:A9:A0:80 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842114D7012A67370A57DEBD500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/86f1a799-fc40-4fe1-b430-8eb80d44fe2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 31 May 2023 20:10:02 +0000 Certificate not after: Tue 02 Sep 2025 20:10:02 +0000 Subordinate resources: IP: 192.152.127.0/24 IP: 204.235.144.0/20 IP: 204.235.162.0 -- 204.235.167.255 IP: 204.235.174.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:11:4d:70:12:a6:73:70:a5:7d:eb:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: May 31 20:10:02 2023 GMT Not After : Sep 2 20:10:02 2025 GMT Subject: CN=86f1a799-fc40-4fe1-b430-8eb80d44fe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:34:ad:18:70:43:0a:da:ee:3d:8b:be:0e: 89:3f:d5:3d:a7:67:e6:e8:48:2c:60:e4:e2:1f:12: 95:67:95:7a:17:d6:f1:ad:eb:ad:4a:c5:a2:57:21: cd:d2:83:6e:80:fd:df:5b:6f:fc:c0:21:46:79:14: 65:80:c4:0c:38:71:19:d5:65:98:0c:b1:56:57:26: 5a:b3:2b:d4:04:53:42:3b:c4:45:0d:61:95:cb:eb: 75:4c:e6:ac:69:f3:f3:ac:48:68:45:21:9e:15:88: 1f:b0:b4:b9:83:7d:ee:fe:6d:76:5c:7d:0f:ba:6c: 59:d8:07:1c:02:2e:65:93:13:d4:2b:7d:90:5b:cc: bd:37:dc:bf:cc:98:4d:b2:ce:fc:6f:f2:d6:17:f3: e4:a0:44:c3:79:10:ed:88:05:72:f3:b6:d5:e6:80: cd:2d:50:25:f1:5c:86:0c:10:32:f0:59:56:df:43: 96:7c:bc:9e:a7:47:9e:bb:81:cc:49:62:67:a3:ea: e6:07:f7:0e:88:4a:19:20:27:ad:11:4d:14:b1:9c: 80:c3:c2:00:22:61:21:0a:fe:d8:ce:0c:4e:e3:53: ea:95:69:2b:a1:f9:47:e8:6f:6b:bd:28:b5:cf:f1: cf:6e:f3:8a:77:02:39:51:c6:40:e0:c6:7b:d1:71: b8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B1:0A:D3:18:AE:FB:3F:69:4E:02:7D:71:BC:23:B5:DB:A9:A0:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/86f1a799-fc40-4fe1-b430-8eb80d44fe2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.152.127.0/24 204.235.144.0/20 204.235.162.0-204.235.167.255 204.235.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6b:43:c8:a7:c2:6c:5f:09:b2:e8:6e:eb:f2:e3:46:d0:93: 1a:51:b7:9b:b3:2a:0f:d1:1d:a8:45:7c:4a:25:7e:80:98:8a: b6:01:a7:a7:1e:56:04:5c:10:e5:b6:5b:4b:e4:24:b0:1d:87: 55:0f:80:47:1a:9b:1d:a6:00:a9:a5:2e:3c:be:31:1e:bb:72: 64:36:08:43:34:54:7f:2d:49:01:8d:b3:75:91:8e:27:c1:2b: e3:15:f2:d2:df:4c:8c:81:39:04:cb:12:5a:32:7d:08:f8:55: 54:54:56:6c:9e:f9:13:40:e5:98:0a:ba:3d:d2:2d:5d:69:66: 1c:83:07:98:03:7b:be:a3:15:ea:4b:2e:9c:53:f9:1a:92:8d: 11:b2:e9:08:4f:2d:9f:1c:e1:b4:88:6a:f7:5f:2d:e1:9f:bf: b5:42:a6:52:90:e3:44:5c:28:f9:7d:05:a7:b0:ce:c9:9a:5a: a9:28:e8:77:54:4c:f9:e7:eb:4b:e8:07:1c:22:38:3c:7b:75: 04:71:86:2e:17:ef:6e:f7:63:77:10:bb:de:e3:9a:3a:63:c0: 81:9f:a4:51:0c:a9:24:02:7c:f5:02:45:a9:e5:45:c4:24:84: 2a:cc:f9:a1:bc:77:92:61:f4:f8:95:ec:5c:17:2a:b4:ca:d9: d4:16:9a:7a -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEIRTXASpnNwpX3r1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDUzMTIwMTAwMloXDTI1MDkwMjIwMTAwMlowLzEtMCsGA1UEAxMk ODZmMWE3OTktZmM0MC00ZmUxLWI0MzAtOGViODBkNDRmZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskI0rRhwQwra7j2Lvg6JP9U9p2fm6EgsYOTi HxKVZ5V6F9bxreutSsWiVyHN0oNugP3fW2/8wCFGeRRlgMQMOHEZ1WWYDLFWVyZa syvUBFNCO8RFDWGVy+t1TOasafPzrEhoRSGeFYgfsLS5g33u/m12XH0PumxZ2Acc Ai5lkxPUK32QW8y9N9y/zJhNss78b/LWF/PkoETDeRDtiAVy87bV5oDNLVAl8VyG DBAy8FlW30OWfLyep0eeu4HMSWJno+rmB/cOiEoZICetEU0UsZyAw8IAImEhCv7Y zgxO41PqlWkroflH6G9rvSi1z/HPbvOKdwI5UcZA4MZ70XG4YwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFOGxCtMYrvs/aU4CfXG8I7XbqaCAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 NmYxYTc5OS1mYzQwLTRmZTEtYjQzMC04ZWI4MGQ0NGZlMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzg2ZjFhNzk5LWZjNDAtNGZlMS1i NDMwLThlYjgwZDQ0ZmUyZS84NmYxYTc5OS1mYzQwLTRmZTEtYjQzMC04ZWI4MGQ0 NGZlMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMCYEAgABMCADBADAmH8DBATM65AwDAMEAczrogMEA8zroAMEAczr rjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBla0PIp8JsXwmy6G7r8uNG0JMaUbebsyoP0R2oRXxKJX6AmIq2 AaenHlYEXBDltltL5CSwHYdVD4BHGpsdpgCppS48vjEeu3JkNghDNFR/LUkBjbN1 kY4nwSvjFfLS30yMgTkEyxJaMn0I+FVUVFZsnvkTQOWYCro90i1daWYcgweYA3u+ oxXqSy6cU/kako0RsukITy2fHOG0iGr3Xy3hn7+1QqZSkONEXCj5fQWnsM7Jmlqp KOh3VEz55+tL6AccIjg8e3UEcYYuF+9u92N3ELve45o6Y8CBn6RRDKkkAnz1AkWp 5UXEJIQqzPmhvHeSYfT4lexcFyq0ytnUFpp6 -----END CERTIFICATE-----Generated at Thu May 9 21:06:18 2024 by rpki-client on console-fra.rpki-client.org