$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e.cer File: 86f1a799-fc40-4fe1-b430-8eb80d44fe2e.cer (raw, json) Hash identifier: s7Cu22s3WXNLEolrTekkomrwKkAuhh8mscZYHYmFG1U= Subject key identifier: E1:B1:0A:D3:18:AE:FB:3F:69:4E:02:7D:71:BC:23:B5:DB:A9:A0:80 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858471608CBB0AB6F3238C5C624A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/86f1a799-fc40-4fe1-b430-8eb80d44fe2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Sep 2024 00:45:27 +0000 Certificate not after: Mon 07 Dec 2026 01:45:27 +0000 Subordinate resources: IP: 192.152.127.0/24 IP: 204.235.144.0/20 IP: 204.235.162.0 -- 204.235.167.255 IP: 204.235.174.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:16:08:cb:b0:ab:6f:32:38:c5:c6:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 3 00:45:27 2024 GMT Not After : Dec 7 01:45:27 2026 GMT Subject: CN=86f1a799-fc40-4fe1-b430-8eb80d44fe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:34:ad:18:70:43:0a:da:ee:3d:8b:be:0e: 89:3f:d5:3d:a7:67:e6:e8:48:2c:60:e4:e2:1f:12: 95:67:95:7a:17:d6:f1:ad:eb:ad:4a:c5:a2:57:21: cd:d2:83:6e:80:fd:df:5b:6f:fc:c0:21:46:79:14: 65:80:c4:0c:38:71:19:d5:65:98:0c:b1:56:57:26: 5a:b3:2b:d4:04:53:42:3b:c4:45:0d:61:95:cb:eb: 75:4c:e6:ac:69:f3:f3:ac:48:68:45:21:9e:15:88: 1f:b0:b4:b9:83:7d:ee:fe:6d:76:5c:7d:0f:ba:6c: 59:d8:07:1c:02:2e:65:93:13:d4:2b:7d:90:5b:cc: bd:37:dc:bf:cc:98:4d:b2:ce:fc:6f:f2:d6:17:f3: e4:a0:44:c3:79:10:ed:88:05:72:f3:b6:d5:e6:80: cd:2d:50:25:f1:5c:86:0c:10:32:f0:59:56:df:43: 96:7c:bc:9e:a7:47:9e:bb:81:cc:49:62:67:a3:ea: e6:07:f7:0e:88:4a:19:20:27:ad:11:4d:14:b1:9c: 80:c3:c2:00:22:61:21:0a:fe:d8:ce:0c:4e:e3:53: ea:95:69:2b:a1:f9:47:e8:6f:6b:bd:28:b5:cf:f1: cf:6e:f3:8a:77:02:39:51:c6:40:e0:c6:7b:d1:71: b8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B1:0A:D3:18:AE:FB:3F:69:4E:02:7D:71:BC:23:B5:DB:A9:A0:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/86f1a799-fc40-4fe1-b430-8eb80d44fe2e/86f1a799-fc40-4fe1-b430-8eb80d44fe2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.152.127.0/24 204.235.144.0/20 204.235.162.0-204.235.167.255 204.235.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:43:3b:d0:84:79:ad:94:bb:47:be:d0:75:fb:53:9d:ed:43: a0:da:c8:a4:d0:0a:c6:77:9a:a6:e0:8b:f2:f0:8d:24:a0:69: 6a:cc:53:98:17:8a:5e:04:db:90:d4:6c:13:f6:92:ed:f6:a0: bd:2c:f8:55:e4:f7:da:01:a6:ca:79:aa:ef:ea:bd:51:35:ff: df:57:54:4d:09:a6:74:6e:83:6f:68:80:1b:3d:3d:cd:dd:f0: 65:62:0a:bf:9a:d8:63:c9:29:e0:5c:65:f0:c3:4c:6c:a7:4d: ab:f1:13:c2:b5:b1:6c:c6:89:3a:f5:0f:6b:82:fc:01:94:9d: 4a:94:9b:6b:18:4f:c0:47:ab:af:25:dc:a7:03:33:53:a6:0f: 98:d3:e6:bc:2d:84:b6:0b:d7:68:fe:bf:26:ae:59:9d:60:db: c3:43:51:47:1f:50:33:cc:d7:b3:95:17:08:6e:7e:92:3a:6d: fb:0a:0a:cc:dd:00:24:64:f1:c9:d1:70:7f:cd:e7:3d:c4:d6: bc:15:97:91:77:28:a2:fe:9d:f8:82:ae:49:35:e3:f7:2d:1c: a5:41:80:c7:cf:99:ef:c9:30:dc:c6:e9:67:a1:2c:f1:90:73: 11:66:74:31:bd:bb:dd:71:62:a2:17:e9:e6:ed:58:b4:e9:1a: c0:1d:10:40 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEcWCMuwq28yOMXGJKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkwMzAwNDUyN1oXDTI2MTIwNzAxNDUyN1owLzEtMCsGA1UEAxMk ODZmMWE3OTktZmM0MC00ZmUxLWI0MzAtOGViODBkNDRmZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskI0rRhwQwra7j2Lvg6JP9U9p2fm6EgsYOTi HxKVZ5V6F9bxreutSsWiVyHN0oNugP3fW2/8wCFGeRRlgMQMOHEZ1WWYDLFWVyZa syvUBFNCO8RFDWGVy+t1TOasafPzrEhoRSGeFYgfsLS5g33u/m12XH0PumxZ2Acc Ai5lkxPUK32QW8y9N9y/zJhNss78b/LWF/PkoETDeRDtiAVy87bV5oDNLVAl8VyG DBAy8FlW30OWfLyep0eeu4HMSWJno+rmB/cOiEoZICetEU0UsZyAw8IAImEhCv7Y zgxO41PqlWkroflH6G9rvSi1z/HPbvOKdwI5UcZA4MZ70XG4YwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFOGxCtMYrvs/aU4CfXG8I7XbqaCAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 NmYxYTc5OS1mYzQwLTRmZTEtYjQzMC04ZWI4MGQ0NGZlMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzg2ZjFhNzk5LWZjNDAtNGZlMS1i NDMwLThlYjgwZDQ0ZmUyZS84NmYxYTc5OS1mYzQwLTRmZTEtYjQzMC04ZWI4MGQ0 NGZlMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMCYEAgABMCADBADAmH8DBATM65AwDAMEAczrogMEA8zroAMEAczr rjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQArQzvQhHmtlLtHvtB1+1Od7UOg2sik0ArGd5qm4Ivy8I0koGlq zFOYF4peBNuQ1GwT9pLt9qC9LPhV5PfaAabKearv6r1RNf/fV1RNCaZ0boNvaIAb PT3N3fBlYgq/mthjySngXGXww0xsp02r8RPCtbFsxok69Q9rgvwBlJ1KlJtrGE/A R6uvJdynAzNTpg+Y0+a8LYS2C9do/r8mrlmdYNvDQ1FHH1AzzNezlRcIbn6SOm37 CgrM3QAkZPHJ0XB/zec9xNa8FZeRdyii/p34gq5JNeP3LRylQYDHz5nvyTDcxuln oSzxkHMRZnQxvbvdcWKiF+nm7Vi06RrAHRBA -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:57 2024 by rpki-client on console-ams.rpki-client.org