$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer File: a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer (raw, json) Hash identifier: 9ORsZoMXb1ItifDPQPOLxmXbDD53CQC+w7LJdHoZFtY= Subject key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842C2E867FA1F1B995400CD21AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Aug 2023 11:00:21 +0000 Certificate not after: Wed 05 Nov 2025 12:00:21 +0000 Subordinate resources: IP: 23.144.56.0/24 IP: 170.205.40.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:c2:e8:67:fa:1f:1b:99:54:00:cd:21:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 3 11:00:21 2023 GMT Not After : Nov 5 12:00:21 2025 GMT Subject: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:65:3b:47:a4:3d:2d:cd:41:86:7e:e8:f5: 20:44:a2:bb:66:df:6d:1f:3b:00:1a:91:be:bf:dd: ac:ff:ea:85:f1:dd:ca:eb:18:19:14:47:2f:c5:95: 5f:9d:9c:d6:4f:55:60:fb:31:42:5b:35:9a:2a:4c: ac:4e:c1:7e:56:e1:fd:17:5d:a8:f0:0b:cf:8c:52: 69:12:02:3c:6a:d3:f3:49:50:75:77:10:d2:d9:cd: 89:01:82:30:af:0c:d8:03:36:94:f6:09:70:72:f2: 41:6c:92:4a:5b:6c:eb:85:9d:63:7d:e0:df:74:0e: c5:47:f5:cb:55:1d:67:fd:76:75:ec:d7:43:f0:5a: d8:c1:c4:ff:e9:5b:80:fa:ce:a5:6a:1f:a7:75:99: 25:00:05:fa:88:0f:14:ed:b3:cb:37:f8:77:e4:c2: fd:16:72:8a:fa:f2:65:7a:ad:5f:7a:f1:df:f1:73: 60:d8:c1:b4:8a:45:a6:97:c6:dd:82:9c:de:c9:a8: b5:88:ca:0f:59:44:a9:a6:89:4d:29:ef:35:42:40: 53:88:13:a5:bf:64:af:3c:1b:07:d2:73:5c:71:a6: 25:ed:61:17:c5:bd:65:14:bf:4e:9c:24:e0:20:9c: 2c:8d:32:67:56:2d:ad:6b:97:b1:df:fe:f9:84:d2: c3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.144.56.0/24 170.205.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:15:0e:e0:fe:a8:c2:65:22:4a:4a:c3:e9:c7:76:82:84:f0: 0b:57:3c:af:e9:36:3e:56:5b:6e:19:e0:4e:ab:f1:41:ac:3b: a2:99:36:0c:7d:16:60:0d:a7:6d:e5:24:85:6f:9b:91:44:4e: e1:55:54:c3:70:c6:89:34:c2:9a:62:a4:4e:5e:54:59:c2:bc: 80:02:97:9c:a1:b6:68:36:d2:c6:b3:70:48:e1:96:bf:c8:c1: 67:87:0f:2c:30:ef:28:26:6d:09:a3:83:26:ac:b4:50:b8:76: a8:26:a5:73:e3:62:d2:e4:3f:40:8c:96:05:48:f0:78:64:88: f7:c7:0b:52:0f:74:99:1a:07:d2:77:92:98:83:83:c5:85:aa: e4:46:5b:f7:52:ba:b4:ab:d8:4f:55:fd:da:3a:19:48:ef:8f: b4:e9:3e:e4:42:90:6a:69:de:61:db:31:dc:9d:ef:5a:ba:e1: f0:85:fe:9e:33:87:f5:9e:c8:6d:5f:90:a1:75:07:c3:60:6b: 1f:97:90:4d:33:a5:37:0c:f4:8c:66:45:b4:8f:de:fc:22:a2: 56:f0:d7:08:8e:85:88:b9:d7:fa:a6:02:f1:fa:37:45:c2:74: 2c:7c:79:82:1c:43:a1:cf:ec:2f:3c:a1:11:09:84:3c:33:7d: fe:90:cf:3e -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWELC6Gf6HxuZVADNIaowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgwMzExMDAyMVoXDTI1MTEwNTEyMDAyMVowLzEtMCsGA1UEAxMk YTIyZmRiMjctZTRmZS00ZDgxLTliZjQtZTEzYjFkYWY3ZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3tlO0ekPS3NQYZ+6PUgRKK7Zt9tHzsAGpG+ v92s/+qF8d3K6xgZFEcvxZVfnZzWT1Vg+zFCWzWaKkysTsF+VuH9F12o8AvPjFJp EgI8atPzSVB1dxDS2c2JAYIwrwzYAzaU9glwcvJBbJJKW2zrhZ1jfeDfdA7FR/XL VR1n/XZ17NdD8FrYwcT/6VuA+s6lah+ndZklAAX6iA8U7bPLN/h35ML9FnKK+vJl eq1fevHf8XNg2MG0ikWml8bdgpzeyai1iMoPWUSppolNKe81QkBTiBOlv2SvPBsH 0nNccaYl7WEXxb1lFL9OnCTgIJwsjTJnVi2ta5ex3/75hNLDlwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFLdXFb+J2lzgMXTs7/bLWbL4uDpAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h MjJmZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNiMWRhZjdmNTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2EyMmZkYjI3LWU0ZmUtNGQ4MS05 YmY0LWUxM2IxZGFmN2Y1MS9hMjJmZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNiMWRh ZjdmNTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAAXkDgDBAKqzSgwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABRUO4P6owmUi SkrD6cd2goTwC1c8r+k2PlZbbhngTqvxQaw7opk2DH0WYA2nbeUkhW+bkURO4VVU w3DGiTTCmmKkTl5UWcK8gAKXnKG2aDbSxrNwSOGWv8jBZ4cPLDDvKCZtCaODJqy0 ULh2qCalc+Ni0uQ/QIyWBUjweGSI98cLUg90mRoH0neSmIODxYWq5EZb91K6tKvY T1X92joZSO+PtOk+5EKQamneYdsx3J3vWrrh8IX+njOH9Z7IbV+QoXUHw2BrH5eQ TTOlNwz0jGZFtI/e/CKiVvDXCI6FiLnX+qYC8fo3RcJ0LHx5ghxDoc/sLzyhEQmE PDN9/pDPPg== -----END CERTIFICATE-----Generated at Thu May 9 21:06:21 2024 by rpki-client on console-fra.rpki-client.org