$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3.cer File: e0cc0722-047e-4c36-bc40-dde084ab94f3.cer (raw, json) Hash identifier: S89HMrIBBEQwTQAxKsWBO8I+T+Is5+m0k6m+D7vyAkk= Subject key identifier: D5:3F:1E:FA:31:5A:91:89:0D:F0:58:3B:11:9E:20:31:4A:8E:6B:7C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842BBB4539061AC6F259471CF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/e0cc0722-047e-4c36-bc40-dde084ab94f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 31 Jul 2023 21:04:46 +0000 Certificate not after: Sun 02 Nov 2025 22:04:46 +0000 Subordinate resources: IP: 199.103.32.0 -- 199.103.51.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:bb:b4:53:90:61:ac:6f:25:94:71:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 31 21:04:46 2023 GMT Not After : Nov 2 22:04:46 2025 GMT Subject: CN=e0cc0722-047e-4c36-bc40-dde084ab94f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:18:16:3e:11:e1:30:01:f5:1a:e3:08:40: 77:5a:fd:4e:d8:2b:cd:ad:6a:2d:ca:8b:69:67:ea: c2:3e:72:e3:25:62:19:56:32:a3:29:13:53:b4:a4: d1:91:9f:79:77:a9:79:eb:43:1f:24:cb:7b:6b:d1: 4d:24:4b:80:bf:ed:44:2d:c4:d2:91:4e:b1:93:ec: eb:d7:79:ea:4e:c3:a7:d7:b0:69:24:00:26:cb:92: ce:c1:f3:8c:31:20:74:a6:51:f8:cb:f8:ae:b3:eb: 79:72:e9:61:7e:4f:c3:9e:1b:b6:03:c4:b9:94:a5: b4:bd:eb:c5:48:ec:0b:e9:03:1d:85:50:52:c5:f1: 05:02:97:8d:0c:7a:3d:11:09:c6:30:fb:4b:b5:53: dc:8b:a3:5f:80:7c:21:51:62:c3:3e:79:56:ca:15: 52:eb:57:be:d5:9f:4c:d9:d3:b1:9a:ee:5e:c8:7a: cb:08:a8:3d:2c:c9:7f:35:29:7e:93:ac:26:a8:e9: 24:ee:94:4e:0f:23:fe:01:2b:08:06:96:d6:b1:27: 4e:65:c8:be:8c:c4:d7:f1:0d:18:a8:93:d6:fe:e6: 45:8d:67:4a:0c:43:ed:85:f9:52:4a:ae:64:29:86: 91:0c:68:a0:be:95:1f:59:81:2a:d0:f4:d0:cc:81: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3F:1E:FA:31:5A:91:89:0D:F0:58:3B:11:9E:20:31:4A:8E:6B:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/e0cc0722-047e-4c36-bc40-dde084ab94f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.103.32.0-199.103.51.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:55:e4:90:1e:d3:b1:54:49:1b:3e:0d:40:6e:6e:1a:49:73: 14:1c:ae:4c:16:33:66:e9:cf:64:b8:9e:e3:e2:7b:92:32:c9: 54:85:71:13:2d:56:c6:6b:ad:09:d6:ee:e2:3b:6f:dd:f5:8e: 1e:d0:09:18:43:93:ab:9c:9b:ae:20:4a:bb:16:74:47:ae:68: a1:ba:8a:4e:88:e9:d4:7d:d8:21:0a:40:3f:a4:10:a7:bb:84: e9:5a:12:a9:83:92:43:95:27:a9:7d:cd:7d:42:8c:1e:8e:7e: 01:bd:9a:18:27:e8:68:5a:24:1f:e5:a7:36:24:24:19:1f:0e: 97:d4:9f:61:0a:de:d5:97:3d:8e:af:61:7d:59:7f:d7:99:f4: 02:88:96:ac:67:20:d0:13:36:22:88:4e:92:67:5d:1a:12:bd: 8b:d0:7d:2c:0f:5b:84:19:f3:ab:e3:ed:e3:b5:f2:49:81:30: d0:71:5a:7b:52:fc:ed:7c:12:97:5b:16:d0:bf:b0:eb:7d:d7: 76:f8:20:92:fa:03:44:1f:61:14:71:fa:e9:78:02:5e:18:21: 93:9a:31:c1:4e:b4:2d:46:f0:6e:c8:8d:c2:6a:ba:3f:fc:d3: 28:77:f9:df:2f:ee:39:31:67:7e:0c:98:f9:52:46:ba:06:3c: 7f:9b:70:20 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEK7tFOQYaxvJZRxz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDczMTIxMDQ0NloXDTI1MTEwMjIyMDQ0NlowLzEtMCsGA1UEAxMk ZTBjYzA3MjItMDQ3ZS00YzM2LWJjNDAtZGRlMDg0YWI5NGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6IYFj4R4TAB9RrjCEB3Wv1O2CvNrWotyotp Z+rCPnLjJWIZVjKjKRNTtKTRkZ95d6l560MfJMt7a9FNJEuAv+1ELcTSkU6xk+zr 13nqTsOn17BpJAAmy5LOwfOMMSB0plH4y/ius+t5culhfk/Dnhu2A8S5lKW0vevF SOwL6QMdhVBSxfEFApeNDHo9EQnGMPtLtVPci6NfgHwhUWLDPnlWyhVS61e+1Z9M 2dOxmu5eyHrLCKg9LMl/NSl+k6wmqOkk7pRODyP+ASsIBpbWsSdOZci+jMTX8Q0Y qJPW/uZFjWdKDEPthflSSq5kKYaRDGigvpUfWYEq0PTQzIGS7wIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFNU/HvoxWpGJDfBYOxGeIDFKjmt8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l MGNjMDcyMi0wNDdlLTRjMzYtYmM0MC1kZGUwODRhYjk0ZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2UwY2MwNzIyLTA0N2UtNGMzNi1i YzQwLWRkZTA4NGFiOTRmMy9lMGNjMDcyMi0wNDdlLTRjMzYtYmM0MC1kZGUwODRh Yjk0ZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBcdnIAMEAsdnMDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGVeSQHtOx VEkbPg1Abm4aSXMUHK5MFjNm6c9kuJ7j4nuSMslUhXETLVbGa60J1u7iO2/d9Y4e 0AkYQ5OrnJuuIEq7FnRHrmihuopOiOnUfdghCkA/pBCnu4TpWhKpg5JDlSepfc19 Qowejn4BvZoYJ+hoWiQf5ac2JCQZHw6X1J9hCt7Vlz2Or2F9WX/XmfQCiJasZyDQ EzYiiE6SZ10aEr2L0H0sD1uEGfOr4+3jtfJJgTDQcVp7UvztfBKXWxbQv7Drfdd2 +CCS+gNEH2EUcfrpeAJeGCGTmjHBTrQtRvBuyI3Caro//NMod/nfL+45MWd+DJj5 Uka6Bjx/m3Ag -----END CERTIFICATE-----Generated at Thu May 9 21:06:26 2024 by rpki-client on console-fra.rpki-client.org