$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer File: 9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer (raw, json) Hash identifier: prNRJkrAb0mesQg58nGVwuPgw2XRGaT0PTTnSsFChdg= Subject key identifier: 29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858478E14342BD329D7E8C672EF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Oct 2024 00:45:26 +0000 Certificate not after: Tue 19 Jan 2027 01:45:26 +0000 Subordinate resources: IP: 69.196.242.0/24 IP: 162.246.234.0/23 IP: 192.230.230.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:8e:14:34:2b:d3:29:d7:e8:c6:72:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 16 00:45:26 2024 GMT Not After : Jan 19 01:45:26 2027 GMT Subject: CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:d0:83:13:f4:35:13:92:61:01:fa:ff:75: 40:3c:c3:85:bb:2e:08:f9:8c:fb:68:50:d1:33:ed: 18:03:ff:e7:66:0a:85:8e:a7:65:81:47:0a:84:b4: 0f:91:7c:54:b4:9a:ba:83:2f:82:a2:d4:64:92:5b: 8d:dc:ba:43:0a:2a:bf:6d:d0:fe:92:99:28:8d:08: 49:79:6a:51:2a:63:34:3b:8b:52:7a:61:f0:74:dc: 2d:61:a1:08:02:bd:d1:0d:1d:fd:6a:6c:a6:59:f2: 28:d8:df:b7:8e:6e:10:83:4d:c0:5f:08:a7:f3:e0: 23:9b:cd:2f:6e:90:d0:14:89:b2:bb:b3:4e:95:26: 6a:c0:0f:5a:d7:27:d6:8f:b8:2c:35:db:57:c2:2b: 8d:e7:22:68:a5:33:f9:6e:41:a8:03:dd:cd:c5:16: e9:26:ff:6c:76:88:69:f5:67:87:ec:09:2c:04:15: 0c:ed:cc:50:82:2f:4f:4b:66:03:50:81:0a:8b:95: 50:d5:05:77:72:ea:02:74:fa:8d:2c:13:72:c6:22: 69:5b:bc:ba:9a:bc:a2:a1:82:b1:a3:1f:0d:8f:59: de:84:ef:1a:bd:20:80:73:3b:3b:16:e1:6d:e9:37: 54:c4:75:17:16:9d:ce:84:47:f8:d2:81:3d:31:54: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 69.196.242.0/24 162.246.234.0/23 192.230.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d5:65:31:01:d0:a9:f8:3d:51:24:12:60:60:58:48:37:fb: e5:52:87:ce:14:81:81:c7:86:85:3e:09:84:71:73:41:e1:8d: bb:7d:eb:c5:29:fb:6c:9f:a2:a6:19:a9:d6:66:4f:1e:91:b7: bc:e8:6d:67:86:8f:3b:43:eb:2d:b9:13:4e:dd:87:ab:f2:8d: c0:75:b7:4c:c1:a0:a6:fe:b5:4d:7b:dd:df:11:bc:3a:4d:f8: ad:ec:88:aa:87:8a:84:7a:67:2b:95:50:c1:ee:1d:15:8b:96: 4d:92:8b:9a:58:f0:94:da:a3:6b:ab:7f:73:ce:d7:71:40:bd: eb:4d:45:c9:1d:c0:0e:5a:42:a4:4e:72:2b:c7:e2:a8:e4:83: 0a:7c:db:94:4b:a0:dc:a4:3e:57:86:c8:b9:14:93:ae:84:23: 13:ef:1b:85:3c:4f:19:28:5f:93:f5:7e:66:fb:95:c5:9f:93: 5b:fa:f6:00:6a:eb:0a:6b:fd:65:03:f6:26:bc:8f:7e:af:15: ec:a0:eb:60:53:d7:da:6c:2b:ee:42:97:c0:de:fe:4c:b7:97: 2e:73:4d:eb:fa:ab:36:4e:9a:1d:7f:d1:25:c3:f4:a4:ee:18: 2c:da:78:ac:dc:c1:29:90:ed:d0:80:02:64:ce:a4:f7:cd:ba: 5b:51:e2:2d -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEeOFDQr0ynX6MZy7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAxNjAwNDUyNloXDTI3MDExOTAxNDUyNlowLzEtMCsGA1UEAxMk OTk4M2UzZmMtNmI0OC00YjRmLWI5ZWQtYzliMzIzYzFjYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZjQgxP0NROSYQH6/3VAPMOFuy4I+Yz7aFDR M+0YA//nZgqFjqdlgUcKhLQPkXxUtJq6gy+CotRkkluN3LpDCiq/bdD+kpkojQhJ eWpRKmM0O4tSemHwdNwtYaEIAr3RDR39amymWfIo2N+3jm4Qg03AXwin8+Ajm80v bpDQFImyu7NOlSZqwA9a1yfWj7gsNdtXwiuN5yJopTP5bkGoA93NxRbpJv9sdohp 9WeH7AksBBUM7cxQgi9PS2YDUIEKi5VQ1QV3cuoCdPqNLBNyxiJpW7y6mryioYKx ox8Nj1nehO8avSCAczs7FuFt6TdUxHUXFp3OhEf40oE9MVQE/wIDAQABo4IECzCC BAcwHQYDVR0OBBYEFCnYObyPtgB8++tCfSX9y8SlkhzlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 OTgzZTNmYy02YjQ4LTRiNGYtYjllZC1jOWIzMjNjMWNjNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzk5ODNlM2ZjLTZiNDgtNGI0Zi1i OWVkLWM5YjMyM2MxY2M1MC85OTgzZTNmYy02YjQ4LTRiNGYtYjllZC1jOWIzMjNj MWNjNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBABFxPIDBAGi9uoDBADA5uYwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjNVl MQHQqfg9USQSYGBYSDf75VKHzhSBgceGhT4JhHFzQeGNu33rxSn7bJ+iphmp1mZP HpG3vOhtZ4aPO0PrLbkTTt2Hq/KNwHW3TMGgpv61TXvd3xG8Ok34reyIqoeKhHpn K5VQwe4dFYuWTZKLmljwlNqja6t/c87XcUC9601FyR3ADlpCpE5yK8fiqOSDCnzb lEug3KQ+V4bIuRSTroQjE+8bhTxPGShfk/V+ZvuVxZ+TW/r2AGrrCmv9ZQP2JryP fq8V7KDrYFPX2mwr7kKXwN7+TLeXLnNN6/qrNk6aHX/RJcP0pO4YLNp4rNzBKZDt 0IACZM6k9826W1HiLQ== -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:26 2024 by rpki-client on console-fra.rpki-client.org