$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3.cer File: e0cc0722-047e-4c36-bc40-dde084ab94f3.cer (raw, json) Hash identifier: 0nC1Cnv/hKO3SswF67PW1moqZsbmICHU5uiPWcCfIHg= Subject key identifier: D5:3F:1E:FA:31:5A:91:89:0D:F0:58:3B:11:9E:20:31:4A:8E:6B:7C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847C0548C8A9588109ABFFD58C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/e0cc0722-047e-4c36-bc40-dde084ab94f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 Nov 2024 00:45:30 +0000 Certificate not after: Sat 06 Feb 2027 01:45:30 +0000 Subordinate resources: IP: 199.103.32.0 -- 199.103.51.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c0:54:8c:8a:95:88:10:9a:bf:fd:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 3 00:45:30 2024 GMT Not After : Feb 6 01:45:30 2027 GMT Subject: CN=e0cc0722-047e-4c36-bc40-dde084ab94f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:18:16:3e:11:e1:30:01:f5:1a:e3:08:40: 77:5a:fd:4e:d8:2b:cd:ad:6a:2d:ca:8b:69:67:ea: c2:3e:72:e3:25:62:19:56:32:a3:29:13:53:b4:a4: d1:91:9f:79:77:a9:79:eb:43:1f:24:cb:7b:6b:d1: 4d:24:4b:80:bf:ed:44:2d:c4:d2:91:4e:b1:93:ec: eb:d7:79:ea:4e:c3:a7:d7:b0:69:24:00:26:cb:92: ce:c1:f3:8c:31:20:74:a6:51:f8:cb:f8:ae:b3:eb: 79:72:e9:61:7e:4f:c3:9e:1b:b6:03:c4:b9:94:a5: b4:bd:eb:c5:48:ec:0b:e9:03:1d:85:50:52:c5:f1: 05:02:97:8d:0c:7a:3d:11:09:c6:30:fb:4b:b5:53: dc:8b:a3:5f:80:7c:21:51:62:c3:3e:79:56:ca:15: 52:eb:57:be:d5:9f:4c:d9:d3:b1:9a:ee:5e:c8:7a: cb:08:a8:3d:2c:c9:7f:35:29:7e:93:ac:26:a8:e9: 24:ee:94:4e:0f:23:fe:01:2b:08:06:96:d6:b1:27: 4e:65:c8:be:8c:c4:d7:f1:0d:18:a8:93:d6:fe:e6: 45:8d:67:4a:0c:43:ed:85:f9:52:4a:ae:64:29:86: 91:0c:68:a0:be:95:1f:59:81:2a:d0:f4:d0:cc:81: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3F:1E:FA:31:5A:91:89:0D:F0:58:3B:11:9E:20:31:4A:8E:6B:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/e0cc0722-047e-4c36-bc40-dde084ab94f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.103.32.0-199.103.51.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:34:44:66:b8:1f:e0:ff:ef:cb:19:32:83:9b:15:b3:5a:b1: 60:43:21:15:ab:81:3d:6e:7c:c7:c1:8d:23:c9:c1:90:e2:b3: 99:c0:c9:4a:c7:6e:c3:5f:16:dd:a6:bd:31:3d:d4:d9:67:33: 1c:23:fa:85:43:24:d7:18:9d:f0:f0:d1:56:b2:fc:13:72:fa: 74:d3:ed:3b:4c:ec:62:7d:49:da:b1:ee:79:dc:e7:28:5e:f9: 67:20:2f:c6:95:06:57:6a:7c:62:c9:1f:6b:9a:73:98:61:2c: 47:c2:fe:45:33:4d:54:b6:45:ea:7a:af:dd:e1:21:ac:c8:e4: c2:7e:0c:2e:7c:0b:cb:e8:05:98:e6:dc:b2:42:54:3e:b5:d3: 25:2d:c7:68:c3:5d:43:7d:a8:41:5d:e9:d0:71:1a:47:d6:37: 40:c7:93:93:2a:2c:8a:0e:29:72:9e:3e:a4:99:31:ea:36:f1: 88:ce:73:f5:04:60:44:08:9d:82:02:85:03:5c:ef:00:e2:5a: a0:58:e5:5d:a0:8f:16:8b:fd:4c:c2:61:18:eb:7b:41:2e:9d: f9:aa:81:bc:79:1a:cf:d8:12:54:56:7b:2d:0e:6f:90:2b:4d: 66:8f:76:a8:cb:e2:c5:5d:fc:bf:86:b1:eb:0f:0d:a7:26:45: 52:71:68:bd -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEfAVIyKlYgQmr/9WMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTEwMzAwNDUzMFoXDTI3MDIwNjAxNDUzMFowLzEtMCsGA1UEAxMk ZTBjYzA3MjItMDQ3ZS00YzM2LWJjNDAtZGRlMDg0YWI5NGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6IYFj4R4TAB9RrjCEB3Wv1O2CvNrWotyotp Z+rCPnLjJWIZVjKjKRNTtKTRkZ95d6l560MfJMt7a9FNJEuAv+1ELcTSkU6xk+zr 13nqTsOn17BpJAAmy5LOwfOMMSB0plH4y/ius+t5culhfk/Dnhu2A8S5lKW0vevF SOwL6QMdhVBSxfEFApeNDHo9EQnGMPtLtVPci6NfgHwhUWLDPnlWyhVS61e+1Z9M 2dOxmu5eyHrLCKg9LMl/NSl+k6wmqOkk7pRODyP+ASsIBpbWsSdOZci+jMTX8Q0Y qJPW/uZFjWdKDEPthflSSq5kKYaRDGigvpUfWYEq0PTQzIGS7wIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFNU/HvoxWpGJDfBYOxGeIDFKjmt8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l MGNjMDcyMi0wNDdlLTRjMzYtYmM0MC1kZGUwODRhYjk0ZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2UwY2MwNzIyLTA0N2UtNGMzNi1i YzQwLWRkZTA4NGFiOTRmMy9lMGNjMDcyMi0wNDdlLTRjMzYtYmM0MC1kZGUwODRh Yjk0ZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBcdnIAMEAsdnMDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfNERmuB/g /+/LGTKDmxWzWrFgQyEVq4E9bnzHwY0jycGQ4rOZwMlKx27DXxbdpr0xPdTZZzMc I/qFQyTXGJ3w8NFWsvwTcvp00+07TOxifUnase553OcoXvlnIC/GlQZXanxiyR9r mnOYYSxHwv5FM01UtkXqeq/d4SGsyOTCfgwufAvL6AWY5tyyQlQ+tdMlLcdow11D fahBXenQcRpH1jdAx5OTKiyKDilynj6kmTHqNvGIznP1BGBECJ2CAoUDXO8A4lqg WOVdoI8Wi/1MwmEY63tBLp35qoG8eRrP2BJUVnstDm+QK01mj3aoy+LFXfy/hrHr Dw2nJkVScWi9 -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:32 2024 by rpki-client on console-fra.rpki-client.org