$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer File: cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer (raw, json) Hash identifier: KrpbhJrf11ebvNbH/mSx/ZAA+UtStmMTEyD3TEmOsI4= Subject key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847C8D266D545C69FD12B5BE9A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Nov 2024 01:45:33 +0000 Certificate not after: Tue 09 Feb 2027 01:45:33 +0000 Subordinate resources: IP: 147.160.158.0/24 IP: 195.85.36.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c8:d2:66:d5:45:c6:9f:d1:2b:5b:e9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 6 01:45:33 2024 GMT Not After : Feb 9 01:45:33 2027 GMT Subject: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ad:b4:68:18:36:aa:e8:7d:b5:36:49:1c:00: 57:f7:93:91:cb:19:bb:8d:cc:72:60:05:7b:94:0e: f4:77:92:a3:4f:3a:ae:66:18:80:8e:63:a1:fa:74: 76:48:f2:8d:e4:13:dc:e1:0c:37:d2:96:79:15:9a: f1:07:5b:9b:82:60:17:24:c7:13:5c:7f:5e:4b:f6: fc:01:6e:0a:70:5f:01:d7:12:ed:e9:ad:0f:52:ee: 78:b4:30:12:d2:2b:5b:13:1f:dc:80:8c:eb:a6:6f: 9b:46:44:92:60:7f:38:dd:0a:1e:c8:c6:38:a3:96: 17:59:f4:a8:46:34:77:2c:bc:ad:fb:47:f1:55:1c: 93:2f:5f:f4:3f:4a:d4:05:4c:06:82:15:32:07:8d: 4e:87:d6:1e:c4:ee:be:20:8e:be:31:27:17:3a:5f: 57:a0:c6:b9:1b:bc:11:31:f0:83:36:98:b2:c3:f2: 7d:c9:d8:04:ca:4b:d8:31:d0:9d:46:2c:77:e4:cb: 7c:5e:c2:e7:f7:aa:d9:2a:cd:9b:51:3b:49:fc:e7: d2:92:f6:e3:0d:07:1c:54:13:ad:a8:0e:1c:30:5c: eb:57:4d:6b:a6:30:28:03:fe:9f:57:c6:fa:06:85: d2:7d:82:02:22:e7:f4:f5:c5:f4:63:e7:2b:8d:b7: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 147.160.158.0/24 195.85.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0f:7b:91:92:4f:ba:5e:6f:20:84:1b:fe:fa:78:fb:00:94: 9d:7c:2d:12:4d:4e:4c:49:39:7c:81:e8:c4:0e:47:66:b8:f7: f5:56:1a:57:58:ee:a8:14:9f:dd:f7:28:61:03:81:14:7b:5b: 23:06:43:65:34:03:22:16:a8:45:ce:bf:56:3c:e8:85:1e:1d: 59:ee:06:ef:55:04:53:dc:de:a6:8b:bd:fb:76:a3:71:c6:5e: 75:6a:6d:df:22:20:12:c8:bc:75:96:56:62:71:0b:4b:88:97: 84:2c:e2:9d:88:ec:5c:01:d4:fe:9a:23:cd:4b:17:7e:52:57: 5b:d7:3c:64:37:74:18:6d:6b:9b:ae:c8:05:4d:54:c6:1b:b3: f0:d2:2b:96:47:26:d9:05:f8:d0:7a:c5:17:98:46:6c:b3:e5: 66:5c:09:78:9d:3a:34:17:2a:6d:7c:dd:3b:c1:e3:32:7a:33: 5d:c1:7a:3a:2f:d8:94:0d:78:43:70:8d:ea:38:b0:92:9a:c4: 58:dd:b5:47:67:50:4c:4a:46:bd:f9:66:c7:1c:c3:5e:84:e6: ad:42:1b:55:ce:4c:27:7d:9c:9a:bc:5a:32:33:55:8e:15:1f: 48:df:b5:75:20:2c:fa:ca:50:d0:dd:7a:ad:16:23:2b:0d:85: 69:1f:fd:87 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEfI0mbVRcaf0Stb6aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEwNjAxNDUzM1oXDTI3MDIwOTAxNDUzM1owLzEtMCsGA1UEAxMk Y2YyOWVlN2UtZWExMi00MGU1LWE2OGUtM2QwMDJjNmFhMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8620aBg2quh9tTZJHABX95ORyxm7jcxyYAV7 lA70d5KjTzquZhiAjmOh+nR2SPKN5BPc4Qw30pZ5FZrxB1ubgmAXJMcTXH9eS/b8 AW4KcF8B1xLt6a0PUu54tDAS0itbEx/cgIzrpm+bRkSSYH843QoeyMY4o5YXWfSo RjR3LLyt+0fxVRyTL1/0P0rUBUwGghUyB41Oh9YexO6+II6+MScXOl9XoMa5G7wR MfCDNpiyw/J9ydgEykvYMdCdRix35Mt8XsLn96rZKs2bUTtJ/OfSkvbjDQccVBOt qA4cMFzrV01rpjAoA/6fV8b6BoXSfYICIuf09cX0Y+crjbeWqQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFJ41chlK46YzqHHwiRwoBWNu05ppMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j ZjI5ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAwMmM2YWEyNTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NmMjllZTdlLWVhMTItNDBlNS1h NjhlLTNkMDAyYzZhYTI1OC9jZjI5ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAwMmM2 YWEyNTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACToJ4DBADDVSQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeA97kZJPul5v IIQb/vp4+wCUnXwtEk1OTEk5fIHoxA5HZrj39VYaV1juqBSf3fcoYQOBFHtbIwZD ZTQDIhaoRc6/VjzohR4dWe4G71UEU9zepou9+3ajccZedWpt3yIgEsi8dZZWYnEL S4iXhCzinYjsXAHU/pojzUsXflJXW9c8ZDd0GG1rm67IBU1Uxhuz8NIrlkcm2QX4 0HrFF5hGbLPlZlwJeJ06NBcqbXzdO8HjMnozXcF6Oi/YlA14Q3CN6jiwkprEWN21 R2dQTEpGvflmxxzDXoTmrUIbVc5MJ32cmrxaMjNVjhUfSN+1dSAs+spQ0N16rRYj Kw2FaR/9hw== -----END CERTIFICATE-----Generated at Thu Nov 21 16:22:15 2024 by rpki-client on console-ams.rpki-client.org