$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer File: d7a960e2-9fa8-4b77-8609-5ee424f44087.cer (raw, json) Hash identifier: /SHtVQ0f9uCO8UYc19LcU9Ys2OCad0kmVn7f7evbNOI= Subject key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584306176FBAB35C86EB5A0F9100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 27 Aug 2023 12:34:16 +0000 Certificate not after: Sat 29 Nov 2025 13:34:16 +0000 Subordinate resources: IP: 67.217.48.0/20 IP: 69.164.240.0/20 IP: 74.50.64.0/19 IP: 205.209.96.0/19 IP: 216.219.80.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:06:17:6f:ba:b3:5c:86:eb:5a:0f:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Aug 27 12:34:16 2023 GMT Not After : Nov 29 13:34:16 2025 GMT Subject: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:70:be:84:23:86:24:95:82:93:ef:22:2c:7e: ce:7f:81:b7:03:0c:e9:56:e8:ae:18:19:c2:1e:77: e6:62:9e:bd:6c:e3:70:3f:14:62:b2:12:de:d7:a7: c7:7a:27:ad:6b:e8:f7:71:33:af:12:08:91:8e:5a: ba:64:5f:4f:d3:84:9d:63:ea:20:61:81:5a:8d:d5: 38:83:da:82:45:90:c0:d6:6e:2e:88:43:b8:e6:1c: 72:7b:f4:31:ae:b2:ce:5b:c0:97:3a:19:93:8c:bd: c4:30:6d:47:6e:2d:84:f7:c6:f4:03:38:94:45:46: 81:9f:c0:52:4b:e6:f8:da:1c:33:88:ae:52:c2:20: aa:e3:89:06:f9:77:b6:89:1a:df:58:27:14:e9:85: 22:ce:cb:13:5e:48:a1:ff:69:aa:c0:91:1a:fa:ae: 53:1c:bf:46:af:98:00:7a:20:b9:ba:2c:dc:9a:ef: c2:c2:e5:d9:c0:fc:91:64:06:35:32:84:ed:d0:4b: 14:42:bb:69:f2:1d:c8:51:3b:80:6e:a9:e1:2f:4f: ab:9a:e3:3c:d4:58:5c:bb:7c:d1:b3:cd:80:61:1d: dc:a8:f9:e6:47:7c:e4:39:c6:a6:e6:dd:04:2b:e2: 1e:82:7b:a3:bf:de:ca:bf:30:01:fe:52:81:26:64: ed:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 67.217.48.0/20 69.164.240.0/20 74.50.64.0/19 205.209.96.0/19 216.219.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d9:80:79:a6:26:95:0c:8a:44:58:2b:bc:fd:76:a4:4a:03: 0c:b7:c6:3f:24:51:a7:9a:db:12:2f:b0:6d:ff:c1:09:75:e5: d6:21:9f:7e:c8:09:85:15:99:1b:06:62:70:8e:18:ae:fe:70: df:22:9c:03:fa:78:e3:cc:f1:9d:93:b8:5b:ad:d2:e9:49:ed: c3:8c:65:ea:c7:3b:9f:b2:1a:91:27:45:5c:df:68:08:eb:cf: bf:c8:25:7c:e4:a5:c5:42:5c:d1:5c:4e:55:61:16:83:4f:7c: a8:5c:bd:f6:e4:33:88:6d:16:cb:46:47:36:49:d1:b7:a1:45: 06:07:c5:04:43:84:a8:34:cc:d8:b7:7f:c2:4f:f6:77:3e:f3: e5:6a:10:0b:e3:88:c0:b5:b9:e5:0c:e0:a4:03:7b:55:4c:ba: c8:eb:27:12:a0:65:63:6e:ce:82:91:42:69:1a:21:2b:72:88: ee:9d:bf:8d:4e:23:19:3d:bb:ad:57:84:24:d3:ea:81:f9:c4: ba:25:16:9e:2b:ed:94:44:ed:d9:a4:da:d3:f4:c8:97:54:5e: c7:b7:a8:bf:db:dc:d9:f8:13:cc:71:74:7b:83:f2:4e:aa:10: e9:3f:b4:0b:a1:e1:f0:b0:b2:f1:83:71:80:bd:cf:5c:8e:22: 01:cc:40:ec -----BEGIN CERTIFICATE----- MIIHBTCCBe2gAwIBAgIUAQ0Mn0MoWEMGF2+6s1yG61oPkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDgyNzEyMzQxNloXDTI1MTEyOTEzMzQxNlowLzEtMCsGA1UEAxMk ZDdhOTYwZTItOWZhOC00Yjc3LTg2MDktNWVlNDI0ZjQ0MDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HC+hCOGJJWCk+8iLH7Of4G3AwzpVuiuGBnC HnfmYp69bONwPxRishLe16fHeieta+j3cTOvEgiRjlq6ZF9P04SdY+ogYYFajdU4 g9qCRZDA1m4uiEO45hxye/QxrrLOW8CXOhmTjL3EMG1Hbi2E98b0AziURUaBn8BS S+b42hwziK5SwiCq44kG+Xe2iRrfWCcU6YUizssTXkih/2mqwJEa+q5THL9Gr5gA eiC5uizcmu/CwuXZwPyRZAY1MoTt0EsUQrtp8h3IUTuAbqnhL0+rmuM81Fhcu3zR s82AYR3cqPnmR3zkOcam5t0EK+Iegnujv97KvzAB/lKBJmTt+QIDAQABo4IEFzCC BBMwHQYDVR0OBBYEFKKm78tEOpSFMwUbJcyBqEp+NFseMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k N2E5NjBlMi05ZmE4LTRiNzctODYwOS01ZWU0MjRmNDQwODcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Q3YTk2MGUyLTlmYTgtNGI3Ny04 NjA5LTVlZTQyNGY0NDA4Ny9kN2E5NjBlMi05ZmE4LTRiNzctODYwOS01ZWU0MjRm NDQwODcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBARD2TADBARFpPADBAVKMkADBAXN0WADBATY21Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWtmAeaYmlQyKRFgrvP12pEoDDLfGPyRRp5rbEi+wbf/BCXXl1iGf fsgJhRWZGwZicI4Yrv5w3yKcA/p448zxnZO4W63S6Untw4xl6sc7n7IakSdFXN9o COvPv8glfOSlxUJc0VxOVWEWg098qFy99uQziG0Wy0ZHNknRt6FFBgfFBEOEqDTM 2Ld/wk/2dz7z5WoQC+OIwLW55QzgpAN7VUy6yOsnEqBlY27OgpFCaRohK3KI7p2/ jU4jGT27rVeEJNPqgfnEuiUWnivtlETt2aTa0/TIl1Rex7eov9vc2fgTzHF0e4Py TqoQ6T+0C6Hh8LCy8YNxgL3PXI4iAcxA7A== -----END CERTIFICATE-----Generated at Thu May 9 20:34:35 2024 by rpki-client on console-ams.rpki-client.org