$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer File: 900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer (raw, json) Hash identifier: yDFBleZcPF5IPiESr5t1uJOjkls3PTJgV1nEMNhlamg= Subject key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842ACCBA222A6F1B21747CCE310 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Jul 2023 12:54:36 +0000 Certificate not after: Tue 28 Oct 2025 12:54:36 +0000 Subordinate resources: IP: 69.17.224.0/19 IP: 104.37.80.0/22 IP: 192.154.144.0/20 IP: 216.239.64.0/19 IP: 2607:f530::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 May 2024 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ac:cb:a2:22:a6:f1:b2:17:47:cc:e3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 26 12:54:36 2023 GMT Not After : Oct 28 12:54:36 2025 GMT Subject: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ac:67:13:ed:99:83:c3:42:82:e6:cb:46:88: d9:d9:7c:cf:f2:a3:62:27:b5:6d:c9:da:57:11:a4: a6:65:08:90:7c:8c:e5:2a:c1:31:1c:07:4b:8f:e5: 14:2b:eb:c2:3a:08:df:a2:2c:9e:a5:c9:34:84:4e: 90:ef:ae:c2:e9:4e:49:71:1d:60:b9:6a:15:fc:48: d1:e0:d4:eb:3b:18:a7:e6:16:18:d2:61:66:b1:b7: 03:a6:eb:3a:fe:e0:4d:f4:2c:e8:2f:9f:97:a9:07: bb:d0:8d:f0:98:43:ef:7b:1e:73:b9:0d:b2:6c:49: 4a:b0:aa:60:9f:e4:cc:a8:df:e2:c6:98:fd:ee:73: ff:d7:ae:a3:98:1c:f5:b3:5b:b8:5a:84:d1:c6:f7: c7:92:7d:1b:b5:c0:96:a4:ba:b4:ee:f2:2f:52:86: d1:06:e8:5e:b2:86:a9:f9:b9:b7:97:54:8d:2d:43: 3c:6b:13:be:c7:9c:13:41:e4:43:b8:a5:d7:88:db: 9d:4a:cf:2c:2e:42:46:c4:06:c9:d7:c4:81:b7:ae: b2:68:a4:53:d6:bd:11:f0:65:8c:c8:65:2d:ed:94: f6:bd:58:f6:92:ea:f6:ea:e6:cf:eb:b0:7f:fb:40: 19:4c:5c:21:01:23:d1:ab:0a:06:35:ea:79:75:46: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 69.17.224.0/19 104.37.80.0/22 192.154.144.0/20 216.239.64.0/19 IPv6: 2607:f530::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b8:57:84:a2:64:b4:29:e3:64:a2:9d:bb:d6:f4:d4:8f:b3: ad:7a:11:a0:26:72:32:5c:6a:7b:b6:aa:0e:b5:41:78:bf:22: 73:7c:e2:e8:7d:87:8b:d6:8f:9c:88:4a:fa:1e:5d:e1:a3:ae: 7c:a0:c1:ca:06:8a:27:16:a1:b3:12:53:9d:06:e8:82:ca:6b: 66:58:62:bc:56:6c:d8:cf:1e:f5:63:ce:e9:1b:a6:85:a4:0d: 19:51:39:49:73:5f:0a:d0:47:2c:fb:35:7f:a4:8b:aa:b2:55: 42:3c:fb:b4:c8:5d:58:15:51:df:09:03:3b:bd:c8:e7:9c:4c: 9e:b7:0f:c3:4b:12:82:eb:1d:71:f9:d8:f2:8b:28:76:50:c6: 32:02:74:f2:78:67:b0:9b:dc:b6:5a:a4:d5:4f:3d:ac:20:d5: 06:0a:b4:da:74:82:23:31:f4:10:6a:6f:15:73:04:a4:d1:5c: ce:57:59:e6:b8:62:8b:56:1e:fc:9f:95:2c:9d:2c:9d:7c:76: b4:68:57:6f:e9:28:dc:a7:b3:32:9e:b0:17:58:a7:ca:23:d4: e3:19:7b:ca:e7:87:d9:b0:e3:dd:f9:c2:8f:80:7a:d7:65:e7: 4a:23:75:f8:94:b8:90:77:39:b6:5f:61:a4:05:ad:f5:34:60: 5f:03:ec:1f -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEKsy6IipvGyF0fM4xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcyNjEyNTQzNloXDTI1MTAyODEyNTQzNlowLzEtMCsGA1UEAxMk OTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQyYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqxnE+2Zg8NCgubLRojZ2XzP8qNiJ7VtydpX EaSmZQiQfIzlKsExHAdLj+UUK+vCOgjfoiyepck0hE6Q767C6U5JcR1guWoV/EjR 4NTrOxin5hYY0mFmsbcDpus6/uBN9CzoL5+XqQe70I3wmEPvex5zuQ2ybElKsKpg n+TMqN/ixpj97nP/166jmBz1s1u4WoTRxvfHkn0btcCWpLq07vIvUobRBuhesoap +bm3l1SNLUM8axO+x5wTQeRDuKXXiNudSs8sLkJGxAbJ18SBt66yaKRT1r0R8GWM yGUt7ZT2vVj2kur26ubP67B/+0AZTFwhASPRqwoGNep5dUZ0QQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFLFhH7BMNTSiepLSodZ1pgC2wEN8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzkwMGJjYjVkLTllMDctNDRhMy1h ZjYxLTI1ZTdmMDI0MmFkMC85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAy NDJhZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAVFEeADBAJoJVADBATAmpADBAXY70AwDQQCAAIw BwMFACYH9TAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAQrhXhKJktCnjZKKdu9b01I+zrXoRoCZyMlxqe7aq DrVBeL8ic3zi6H2Hi9aPnIhK+h5d4aOufKDBygaKJxahsxJTnQbogsprZlhivFZs 2M8e9WPO6RumhaQNGVE5SXNfCtBHLPs1f6SLqrJVQjz7tMhdWBVR3wkDO73I55xM nrcPw0sSgusdcfnY8osodlDGMgJ08nhnsJvctlqk1U89rCDVBgq02nSCIzH0EGpv FXMEpNFczldZ5rhii1Ye/J+VLJ0snXx2tGhXb+ko3KezMp6wF1inyiPU4xl7yueH 2bDj3fnCj4B612XnSiN1+JS4kHc5tl9hpAWt9TRgXwPsHw== -----END CERTIFICATE-----Generated at Fri May 10 16:51:50 2024 by rpki-client on console-ams.rpki-client.org