$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer File: cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer (raw, json) Hash identifier: 6C4QRq7zo51scsuYgAYlp40aUYU7YNQn/QpUPiSI51I= Subject key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842C3A9501828585C2098563740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Aug 2023 17:29:02 +0000 Certificate not after: Wed 05 Nov 2025 18:29:02 +0000 Subordinate resources: IP: 147.160.158.0/24 IP: 195.85.36.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:c3:a9:50:18:28:58:5c:20:98:56:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 3 17:29:02 2023 GMT Not After : Nov 5 18:29:02 2025 GMT Subject: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ad:b4:68:18:36:aa:e8:7d:b5:36:49:1c:00: 57:f7:93:91:cb:19:bb:8d:cc:72:60:05:7b:94:0e: f4:77:92:a3:4f:3a:ae:66:18:80:8e:63:a1:fa:74: 76:48:f2:8d:e4:13:dc:e1:0c:37:d2:96:79:15:9a: f1:07:5b:9b:82:60:17:24:c7:13:5c:7f:5e:4b:f6: fc:01:6e:0a:70:5f:01:d7:12:ed:e9:ad:0f:52:ee: 78:b4:30:12:d2:2b:5b:13:1f:dc:80:8c:eb:a6:6f: 9b:46:44:92:60:7f:38:dd:0a:1e:c8:c6:38:a3:96: 17:59:f4:a8:46:34:77:2c:bc:ad:fb:47:f1:55:1c: 93:2f:5f:f4:3f:4a:d4:05:4c:06:82:15:32:07:8d: 4e:87:d6:1e:c4:ee:be:20:8e:be:31:27:17:3a:5f: 57:a0:c6:b9:1b:bc:11:31:f0:83:36:98:b2:c3:f2: 7d:c9:d8:04:ca:4b:d8:31:d0:9d:46:2c:77:e4:cb: 7c:5e:c2:e7:f7:aa:d9:2a:cd:9b:51:3b:49:fc:e7: d2:92:f6:e3:0d:07:1c:54:13:ad:a8:0e:1c:30:5c: eb:57:4d:6b:a6:30:28:03:fe:9f:57:c6:fa:06:85: d2:7d:82:02:22:e7:f4:f5:c5:f4:63:e7:2b:8d:b7: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 147.160.158.0/24 195.85.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:72:7b:33:0a:68:8c:e1:e9:35:c6:3b:2d:b1:a0:f3:7d:98: 0a:d6:f8:62:8d:03:11:5a:a9:db:49:99:54:ce:02:24:18:0a: 9c:bd:80:3a:98:36:07:79:72:8b:03:ff:a5:03:3d:c3:ee:77: 30:82:fb:e9:b3:80:10:26:35:a3:d7:0b:00:ce:b6:ed:7a:52: 25:ce:a8:b5:f3:6c:a5:74:f1:65:ce:32:2e:ae:f3:56:11:12: 7f:85:4f:b8:ff:62:a0:5f:a5:f9:5a:58:fa:91:52:9c:fc:b8: 10:73:35:97:97:e6:5a:7c:83:41:74:e1:7c:f0:2b:37:f1:29: 94:f7:fe:c6:c0:72:9c:e8:e5:78:ff:2a:9f:b7:d4:cc:37:a0: 1c:27:57:ff:d2:b0:4b:4f:69:e7:89:d5:cb:8d:e6:b1:8d:66: 9d:90:ad:86:ba:b8:8b:27:cf:63:f7:e9:df:8b:8d:a2:57:7c: 40:d9:38:c7:67:ad:50:ad:4c:fd:0e:a8:57:bb:8f:41:3c:1d: 04:84:e2:be:ae:dd:48:04:ed:9b:cd:d0:21:a0:1c:72:d1:4e: c7:9b:06:95:2b:11:c5:8f:38:9d:b5:72:a5:f9:50:06:77:9d: 53:a1:e7:fc:d1:18:bf:99:1a:eb:0e:b5:7d:7c:b9:2c:e2:b5: ea:03:f9:51 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWELDqVAYKFhcIJhWN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgwMzE3MjkwMloXDTI1MTEwNTE4MjkwMlowLzEtMCsGA1UEAxMk Y2YyOWVlN2UtZWExMi00MGU1LWE2OGUtM2QwMDJjNmFhMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8620aBg2quh9tTZJHABX95ORyxm7jcxyYAV7 lA70d5KjTzquZhiAjmOh+nR2SPKN5BPc4Qw30pZ5FZrxB1ubgmAXJMcTXH9eS/b8 AW4KcF8B1xLt6a0PUu54tDAS0itbEx/cgIzrpm+bRkSSYH843QoeyMY4o5YXWfSo RjR3LLyt+0fxVRyTL1/0P0rUBUwGghUyB41Oh9YexO6+II6+MScXOl9XoMa5G7wR MfCDNpiyw/J9ydgEykvYMdCdRix35Mt8XsLn96rZKs2bUTtJ/OfSkvbjDQccVBOt qA4cMFzrV01rpjAoA/6fV8b6BoXSfYICIuf09cX0Y+crjbeWqQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFJ41chlK46YzqHHwiRwoBWNu05ppMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j ZjI5ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAwMmM2YWEyNTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NmMjllZTdlLWVhMTItNDBlNS1h NjhlLTNkMDAyYzZhYTI1OC9jZjI5ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAwMmM2 YWEyNTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACToJ4DBADDVSQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASHJ7MwpojOHp NcY7LbGg832YCtb4Yo0DEVqp20mZVM4CJBgKnL2AOpg2B3lyiwP/pQM9w+53MIL7 6bOAECY1o9cLAM627XpSJc6otfNspXTxZc4yLq7zVhESf4VPuP9ioF+l+VpY+pFS nPy4EHM1l5fmWnyDQXThfPArN/EplPf+xsBynOjleP8qn7fUzDegHCdX/9KwS09p 54nVy43msY1mnZCthrq4iyfPY/fp34uNold8QNk4x2etUK1M/Q6oV7uPQTwdBITi vq7dSATtm83QIaAcctFOx5sGlSsRxY84nbVypflQBnedU6Hn/NEYv5ka6w61fXy5 LOK16gP5UQ== -----END CERTIFICATE-----Generated at Thu May 9 15:21:30 2024 by rpki-client on console-ams.rpki-client.org