$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer File: 900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer (raw, json) Hash identifier: v4F2FBxSNdZvTMdWYDx2XcBHVTN6QhAPVtGF8W1Jr98= Subject key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847B25F18381A1715465DDEDF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Oct 2024 00:45:26 +0000 Certificate not after: Mon 01 Feb 2027 01:45:26 +0000 Subordinate resources: IP: 69.17.224.0/19 IP: 104.37.80.0/22 IP: 192.154.144.0/20 IP: 216.239.64.0/19 IP: 2607:f530::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b2:5f:18:38:1a:17:15:46:5d:de:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 29 00:45:26 2024 GMT Not After : Feb 1 01:45:26 2027 GMT Subject: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:67:13:ed:99:83:c3:42:82:e6:cb:46:88: d9:d9:7c:cf:f2:a3:62:27:b5:6d:c9:da:57:11:a4: a6:65:08:90:7c:8c:e5:2a:c1:31:1c:07:4b:8f:e5: 14:2b:eb:c2:3a:08:df:a2:2c:9e:a5:c9:34:84:4e: 90:ef:ae:c2:e9:4e:49:71:1d:60:b9:6a:15:fc:48: d1:e0:d4:eb:3b:18:a7:e6:16:18:d2:61:66:b1:b7: 03:a6:eb:3a:fe:e0:4d:f4:2c:e8:2f:9f:97:a9:07: bb:d0:8d:f0:98:43:ef:7b:1e:73:b9:0d:b2:6c:49: 4a:b0:aa:60:9f:e4:cc:a8:df:e2:c6:98:fd:ee:73: ff:d7:ae:a3:98:1c:f5:b3:5b:b8:5a:84:d1:c6:f7: c7:92:7d:1b:b5:c0:96:a4:ba:b4:ee:f2:2f:52:86: d1:06:e8:5e:b2:86:a9:f9:b9:b7:97:54:8d:2d:43: 3c:6b:13:be:c7:9c:13:41:e4:43:b8:a5:d7:88:db: 9d:4a:cf:2c:2e:42:46:c4:06:c9:d7:c4:81:b7:ae: b2:68:a4:53:d6:bd:11:f0:65:8c:c8:65:2d:ed:94: f6:bd:58:f6:92:ea:f6:ea:e6:cf:eb:b0:7f:fb:40: 19:4c:5c:21:01:23:d1:ab:0a:06:35:ea:79:75:46: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 69.17.224.0/19 104.37.80.0/22 192.154.144.0/20 216.239.64.0/19 IPv6: 2607:f530::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:9f:49:16:3f:3f:15:95:4c:9d:f9:d1:25:c7:45:7d:d8:3b: 7e:7f:bb:59:ca:14:03:99:cb:9c:25:1b:e1:c9:17:71:24:10: 96:5f:48:2b:a8:32:18:e3:19:8d:9d:68:62:42:15:9e:f0:af: ce:da:02:96:6f:a0:31:f6:08:4e:08:78:53:5f:dd:97:11:80: f3:26:4e:d1:f6:7f:27:8f:5a:f7:79:60:e4:fc:26:6f:c6:08: b6:73:3f:b0:88:ec:da:4f:df:f7:96:78:a3:c1:a0:84:7b:b1: 30:b4:5c:b8:d9:73:f8:98:ed:94:a9:8e:36:5c:a7:ae:78:52: aa:29:d7:3a:4a:6c:16:e0:51:af:da:10:00:d6:73:fa:6a:d6: f3:0b:9c:4a:c7:58:82:0b:de:eb:40:fb:b6:4f:68:dc:ab:d7: 15:0f:fa:3f:24:e3:60:5b:96:c7:a7:8a:4c:e2:c1:93:d8:33: bf:f3:35:6f:96:f9:34:52:cc:55:10:43:07:f6:51:67:d1:04: 95:88:b4:65:82:80:a0:e9:5a:2f:2f:99:7a:ff:2c:89:66:29: 12:df:b4:d6:39:69:0d:73:f9:34:2c:7e:30:26:e1:3a:b9:24: 68:d7:e3:1f:30:d0:7b:f2:a6:3a:1f:49:9a:e0:85:13:09:0b: a4:4a:19:cc -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEeyXxg4GhcVRl3e3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAyOTAwNDUyNloXDTI3MDIwMTAxNDUyNlowLzEtMCsGA1UEAxMk OTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQyYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqxnE+2Zg8NCgubLRojZ2XzP8qNiJ7VtydpX EaSmZQiQfIzlKsExHAdLj+UUK+vCOgjfoiyepck0hE6Q767C6U5JcR1guWoV/EjR 4NTrOxin5hYY0mFmsbcDpus6/uBN9CzoL5+XqQe70I3wmEPvex5zuQ2ybElKsKpg n+TMqN/ixpj97nP/166jmBz1s1u4WoTRxvfHkn0btcCWpLq07vIvUobRBuhesoap +bm3l1SNLUM8axO+x5wTQeRDuKXXiNudSs8sLkJGxAbJ18SBt66yaKRT1r0R8GWM yGUt7ZT2vVj2kur26ubP67B/+0AZTFwhASPRqwoGNep5dUZ0QQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFLFhH7BMNTSiepLSodZ1pgC2wEN8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzkwMGJjYjVkLTllMDctNDRhMy1h ZjYxLTI1ZTdmMDI0MmFkMC85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAy NDJhZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAVFEeADBAJoJVADBATAmpADBAXY70AwDQQCAAIw BwMFACYH9TAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAMJ9JFj8/FZVMnfnRJcdFfdg7fn+7WcoUA5nLnCUb 4ckXcSQQll9IK6gyGOMZjZ1oYkIVnvCvztoClm+gMfYITgh4U1/dlxGA8yZO0fZ/ J49a93lg5Pwmb8YItnM/sIjs2k/f95Z4o8GghHuxMLRcuNlz+JjtlKmONlynrnhS qinXOkpsFuBRr9oQANZz+mrW8wucSsdYggve60D7tk9o3KvXFQ/6PyTjYFuWx6eK TOLBk9gzv/M1b5b5NFLMVRBDB/ZRZ9EElYi0ZYKAoOlaLy+Zev8siWYpEt+01jlp DXP5NCx+MCbhOrkkaNfjHzDQe/KmOh9JmuCFEwkLpEoZzA== -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:57 2024 by rpki-client on console-ams.rpki-client.org