$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer File: f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer (raw, json) Hash identifier: hMJJJKyY4fVTN+HW6k3uNWxDoG+nARs1wRgdUtXCvRw= Subject key identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847DC5D316E45A6C90B67807460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Nov 2024 01:45:33 +0000 Certificate not after: Tue 16 Feb 2027 01:45:33 +0000 Subordinate resources: IP: 204.209.58.0 -- 204.209.64.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:dc:5d:31:6e:45:a6:c9:0b:67:80:74:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 13 01:45:33 2024 GMT Not After : Feb 16 01:45:33 2027 GMT Subject: CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:8f:0b:e2:b6:b2:04:c9:c1:76:cd:d0:0f: 47:eb:20:b7:85:4f:f3:7f:64:cb:e0:72:0b:76:39: a3:17:75:74:cb:8d:4a:05:a4:55:8a:cf:f0:78:47: 73:ce:56:9f:a0:7c:5e:12:b5:50:6c:b6:92:da:f3: f4:6d:13:4d:9e:44:3d:b6:3a:8d:81:3e:7e:f5:62: 8f:87:6c:b3:21:2e:b4:e9:eb:2a:6c:89:1f:44:4f: 71:84:07:cf:d2:28:66:f0:d4:ad:9c:ce:af:25:e0: 39:42:df:40:71:8e:cd:d7:6b:99:3c:91:b5:9b:cb: f8:e8:16:b6:28:21:cf:b9:60:81:e9:ea:4a:cb:18: c3:18:5e:ab:a3:44:5a:cb:29:78:55:e8:3c:5c:ec: 50:4a:9a:89:df:fd:44:5e:b4:40:d0:4c:cc:98:8c: 83:f1:58:0c:92:3a:fe:59:3b:c3:86:9d:f2:6b:c3: f0:dc:ce:7d:55:38:2b:d3:2f:fe:68:18:71:9e:6d: 21:33:cf:08:ae:f1:2f:66:41:a2:83:17:59:9e:45: 8c:61:ab:a6:89:9e:aa:5f:cc:ce:bd:5e:c5:c4:5c: cd:ed:a3:64:87:70:e8:d4:e8:47:b2:9a:fc:c7:ad: a5:d0:19:04:a2:08:26:c6:13:4f:0e:02:36:ce:c6: f2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 204.209.58.0-204.209.64.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9f:53:ba:f0:a8:22:46:ed:73:c7:01:e1:03:e3:d0:d4:f4: 25:63:f5:8f:62:e5:0d:67:4b:fa:09:2d:b4:57:e4:21:48:93: 12:2d:58:f6:47:37:e2:10:97:a5:a4:f1:ae:31:05:51:99:16: 44:14:9b:93:6a:fb:0b:54:79:80:cb:4a:f0:dd:cc:21:05:21: e1:85:83:50:35:87:f6:ed:5c:4d:21:1c:e0:8d:2d:97:6b:42: 22:60:be:2a:cd:8a:51:33:7f:84:8c:61:68:5a:55:92:7b:3a: 0d:fd:73:b8:d1:c8:1e:2f:41:71:f2:e9:fb:f2:42:84:47:0b: cb:73:2f:d3:a0:ee:33:a0:08:9c:46:be:9c:53:87:8d:75:83: 6c:98:24:08:17:e9:9f:fb:96:42:6a:b4:04:16:ef:e5:91:46: 68:09:aa:5f:79:41:3e:52:c4:a4:9b:e1:4d:b9:f7:04:75:25: 82:0f:02:12:b0:df:0b:d9:1e:3f:ac:c4:b9:a9:a5:7f:aa:ff: b0:0c:23:38:c4:6d:eb:8a:db:39:c6:65:71:f2:22:cf:c1:5b: af:f0:2e:72:67:c4:ae:df:fe:6e:e3:ea:93:80:be:ee:e1:08: 78:0d:a9:8c:20:f7:5e:34:a6:cb:bd:a6:5c:d2:ae:76:23:45: 22:f1:65:ed -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEfcXTFuRabJC2eAdGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTExMzAxNDUzM1oXDTI3MDIxNjAxNDUzM1owLzEtMCsGA1UEAxMk ZjJiYzZiN2EtYjhmNS00MTA5LWI3YWYtODk3NWUyNDQ0ZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFyPC+K2sgTJwXbN0A9H6yC3hU/zf2TL4HIL djmjF3V0y41KBaRVis/weEdzzlafoHxeErVQbLaS2vP0bRNNnkQ9tjqNgT5+9WKP h2yzIS606esqbIkfRE9xhAfP0ihm8NStnM6vJeA5Qt9AcY7N12uZPJG1m8v46Ba2 KCHPuWCB6epKyxjDGF6ro0Rayyl4Veg8XOxQSpqJ3/1EXrRA0EzMmIyD8VgMkjr+ WTvDhp3ya8Pw3M59VTgr0y/+aBhxnm0hM88IrvEvZkGigxdZnkWMYaumiZ6qX8zO vV7FxFzN7aNkh3Do1OhHspr8x62l0BkEoggmxhNPDgI2zsbyIQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFFh0oNc/XPZ86uA2kEcWB7gBW/ilMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m MmJjNmI3YS1iOGY1LTQxMDktYjdhZi04OTc1ZTI0NDRkNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2YyYmM2YjdhLWI4ZjUtNDEwOS1i N2FmLTg5NzVlMjQ0NGQ3NS9mMmJjNmI3YS1iOGY1LTQxMDktYjdhZi04OTc1ZTI0 NDRkNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAczROgMEAMzRQDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVn1O68Kgi Ru1zxwHhA+PQ1PQlY/WPYuUNZ0v6CS20V+QhSJMSLVj2RzfiEJelpPGuMQVRmRZE FJuTavsLVHmAy0rw3cwhBSHhhYNQNYf27VxNIRzgjS2Xa0IiYL4qzYpRM3+EjGFo WlWSezoN/XO40cgeL0Fx8un78kKERwvLcy/ToO4zoAicRr6cU4eNdYNsmCQIF+mf +5ZCarQEFu/lkUZoCapfeUE+UsSkm+FNufcEdSWCDwISsN8L2R4/rMS5qaV/qv+w DCM4xG3rits5xmVx8iLPwVuv8C5yZ8Su3/5u4+qTgL7u4Qh4DamMIPdeNKbLvaZc 0q52I0Ui8WXt -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:33 2024 by rpki-client on console-fra.rpki-client.org