$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer File: 9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer (raw, json) Hash identifier: 5dc+WEsTs3RZtt5cuKUebz4s8x6m6xGB43dLtD2xu1Y= Subject key identifier: 29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285843394B71EED68FF9DBFC221B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Sep 2023 20:45:17 +0000 Certificate not after: Wed 15 Oct 2025 13:41:56 +0000 Subordinate resources: IP: 69.196.242.0/24 IP: 162.246.234.0/23 IP: 192.230.230.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:39:4b:71:ee:d6:8f:f9:db:fc:22:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 14 20:45:17 2023 GMT Not After : Oct 15 13:41:56 2025 GMT Subject: CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:d0:83:13:f4:35:13:92:61:01:fa:ff:75: 40:3c:c3:85:bb:2e:08:f9:8c:fb:68:50:d1:33:ed: 18:03:ff:e7:66:0a:85:8e:a7:65:81:47:0a:84:b4: 0f:91:7c:54:b4:9a:ba:83:2f:82:a2:d4:64:92:5b: 8d:dc:ba:43:0a:2a:bf:6d:d0:fe:92:99:28:8d:08: 49:79:6a:51:2a:63:34:3b:8b:52:7a:61:f0:74:dc: 2d:61:a1:08:02:bd:d1:0d:1d:fd:6a:6c:a6:59:f2: 28:d8:df:b7:8e:6e:10:83:4d:c0:5f:08:a7:f3:e0: 23:9b:cd:2f:6e:90:d0:14:89:b2:bb:b3:4e:95:26: 6a:c0:0f:5a:d7:27:d6:8f:b8:2c:35:db:57:c2:2b: 8d:e7:22:68:a5:33:f9:6e:41:a8:03:dd:cd:c5:16: e9:26:ff:6c:76:88:69:f5:67:87:ec:09:2c:04:15: 0c:ed:cc:50:82:2f:4f:4b:66:03:50:81:0a:8b:95: 50:d5:05:77:72:ea:02:74:fa:8d:2c:13:72:c6:22: 69:5b:bc:ba:9a:bc:a2:a1:82:b1:a3:1f:0d:8f:59: de:84:ef:1a:bd:20:80:73:3b:3b:16:e1:6d:e9:37: 54:c4:75:17:16:9d:ce:84:47:f8:d2:81:3d:31:54: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 69.196.242.0/24 162.246.234.0/23 192.230.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:37:c9:e5:ab:7a:fa:97:69:82:2d:54:bb:d7:c4:46:62:52: 9c:e7:9c:93:d6:d1:6c:3b:fa:bd:82:4f:b3:6f:9e:d0:bf:1d: 63:72:d2:cd:3d:dd:db:79:6e:cd:54:23:8a:c2:d2:c8:dc:20: 36:65:be:6c:88:b8:6e:be:0b:99:d0:39:f8:de:95:69:77:77: 2e:6b:28:37:8b:73:8b:64:13:e2:ac:a2:4e:11:12:90:2b:ef: e3:b3:83:c4:53:3b:92:c0:6b:3b:7c:fa:22:1f:34:63:ae:b5: 79:2a:43:35:25:70:b6:87:a3:79:62:b6:1d:8e:44:a3:fa:db: c4:5a:22:d8:73:e4:e4:7a:4a:f2:a8:08:ff:51:84:fc:b5:63: ed:62:2f:f9:d0:66:41:bc:bc:f2:a9:c4:59:be:67:11:90:4c: e0:54:80:70:00:42:f8:7b:0b:0e:d4:1d:d1:e8:fa:70:f6:37: 9b:e1:5d:04:31:d7:be:72:b1:9e:a0:3e:90:e9:a4:41:32:16: 10:e2:5d:b2:ce:8e:0c:6a:b6:e3:f9:ea:89:7a:44:8d:ab:fe: 0b:8f:65:c2:d2:ce:65:85:8d:47:42:7a:b7:f7:71:a1:16:91: 3e:34:55:00:34:9e:a7:e1:4e:c0:7a:38:05:ec:ca:7c:9f:5b: a6:55:3b:b1 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEM5S3Hu1o/52/wiG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDkxNDIwNDUxN1oXDTI1MTAxNTEzNDE1NlowLzEtMCsGA1UEAxMk OTk4M2UzZmMtNmI0OC00YjRmLWI5ZWQtYzliMzIzYzFjYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZjQgxP0NROSYQH6/3VAPMOFuy4I+Yz7aFDR M+0YA//nZgqFjqdlgUcKhLQPkXxUtJq6gy+CotRkkluN3LpDCiq/bdD+kpkojQhJ eWpRKmM0O4tSemHwdNwtYaEIAr3RDR39amymWfIo2N+3jm4Qg03AXwin8+Ajm80v bpDQFImyu7NOlSZqwA9a1yfWj7gsNdtXwiuN5yJopTP5bkGoA93NxRbpJv9sdohp 9WeH7AksBBUM7cxQgi9PS2YDUIEKi5VQ1QV3cuoCdPqNLBNyxiJpW7y6mryioYKx ox8Nj1nehO8avSCAczs7FuFt6TdUxHUXFp3OhEf40oE9MVQE/wIDAQABo4IECzCC BAcwHQYDVR0OBBYEFCnYObyPtgB8++tCfSX9y8SlkhzlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 OTgzZTNmYy02YjQ4LTRiNGYtYjllZC1jOWIzMjNjMWNjNTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzk5ODNlM2ZjLTZiNDgtNGI0Zi1i OWVkLWM5YjMyM2MxY2M1MC85OTgzZTNmYy02YjQ4LTRiNGYtYjllZC1jOWIzMjNj MWNjNTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBABFxPIDBAGi9uoDBADA5uYwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADTfJ 5at6+pdpgi1Uu9fERmJSnOeck9bRbDv6vYJPs2+e0L8dY3LSzT3d23luzVQjisLS yNwgNmW+bIi4br4LmdA5+N6VaXd3LmsoN4tzi2QT4qyiThESkCvv47ODxFM7ksBr O3z6Ih80Y661eSpDNSVwtoejeWK2HY5Eo/rbxFoi2HPk5HpK8qgI/1GE/LVj7WIv +dBmQby88qnEWb5nEZBM4FSAcABC+HsLDtQd0ej6cPY3m+FdBDHXvnKxnqA+kOmk QTIWEOJdss6ODGq24/nqiXpEjav+C49lwtLOZYWNR0J6t/dxoRaRPjRVADSep+FO wHo4BezKfJ9bplU7sQ== -----END CERTIFICATE-----Generated at Thu May 9 20:34:25 2024 by rpki-client on console-ams.rpki-client.org