$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer File: fdc3365a-18ea-4696-ad8c-6b66a3e152b7.cer (raw, json) Hash identifier: tEcV3q+aVsIJON+S/AGVOwu38e+SMc1jcvEeNNkYiBU= Subject key identifier: 02:72:54:94:FA:7C:81:42:7E:C5:9F:07:13:F3:B9:B0:68:EB:C8:C2 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285842762DB3880BFF7CDD1D057D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Jul 2023 23:22:44 +0000 Certificate not after: Wed 08 Oct 2025 23:22:44 +0000 Subordinate resources: IP: 64.72.200.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:76:2d:b3:88:0b:ff:7c:dd:1d:05:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 6 23:22:44 2023 GMT Not After : Oct 8 23:22:44 2025 GMT Subject: CN=fdc3365a-18ea-4696-ad8c-6b66a3e152b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:f8:e5:1d:55:ee:86:b4:42:af:64:26:10: 6a:52:3d:60:b8:46:59:1e:c2:a8:01:78:77:11:e5: 5a:e9:c9:64:ff:0e:8c:52:70:b1:0f:42:78:dd:8c: e4:ba:5f:e4:05:06:16:1b:e8:6e:ad:38:da:d1:a9: c4:61:03:4a:14:a3:57:df:97:b6:11:12:4b:d5:79: db:8b:c7:ab:24:04:d3:c3:6c:97:22:92:86:44:bf: 17:b9:49:68:73:ae:13:8b:e8:c8:d6:a5:fe:d8:28: c5:e6:9f:3b:22:6f:06:98:11:d7:34:da:66:bf:8d: 37:e7:f9:a1:56:e8:e1:89:d3:1a:e4:32:d7:fc:65: 9d:1d:ad:aa:7d:98:20:3e:b2:df:e2:83:91:8a:b0: 85:63:66:f6:a1:3f:03:ba:5c:d6:bf:03:49:37:70: df:e8:d7:b3:83:56:65:28:35:2e:60:a6:50:11:23: 32:b8:e9:d6:0c:a0:91:65:4a:ff:bf:92:cc:3b:08: 0e:f0:c9:ec:05:69:ae:08:60:6f:9e:ad:d7:fe:8a: cf:3f:d9:49:18:0e:78:85:21:2d:27:98:cb:16:18: ea:92:95:1d:2d:91:25:9a:fd:2b:8e:8a:90:8c:e3: 9a:d1:4c:cf:70:96:52:b8:a1:5c:de:a8:0d:87:dc: 48:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:72:54:94:FA:7C:81:42:7E:C5:9F:07:13:F3:B9:B0:68:EB:C8:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fdc3365a-18ea-4696-ad8c-6b66a3e152b7/fdc3365a-18ea-4696-ad8c-6b66a3e152b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.72.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:82:24:c5:d5:ed:74:b7:8a:57:47:7e:26:61:8c:85:20:40: de:a6:7a:e3:0b:4d:f2:e7:7a:d9:21:18:eb:1e:0c:ec:74:ef: 70:12:28:a5:22:9c:a8:ab:28:85:64:91:45:59:89:12:eb:cc: f5:8f:3d:63:f8:5d:f9:bd:3a:ff:31:a0:c5:ca:4c:68:5e:4a: b7:de:a0:63:56:27:18:e7:91:aa:b7:fa:4a:da:02:9c:cc:b4: b4:7d:ac:2b:8c:cb:9c:e9:81:c6:85:5d:d9:32:bc:20:04:0c: 25:50:ae:2e:3e:62:c0:2b:8f:5a:1b:f0:ad:d7:75:42:3b:a7: 71:1d:64:18:23:49:e8:4e:e6:d9:b1:a9:1f:23:33:00:24:f4: 18:fe:ad:52:97:12:73:2d:22:91:07:c1:28:b0:86:e3:0d:d0: 1d:36:e9:fe:35:a8:cd:0c:15:2f:11:7f:1c:30:52:84:3f:3a: e1:40:8c:b2:8b:87:61:da:23:cb:62:e7:a7:6b:94:35:bf:2e: 5d:80:dc:d6:b1:ae:9e:73:6c:c9:25:09:79:55:e9:75:43:7c: 3e:87:58:8d:c8:c0:83:92:d1:38:03:bc:f3:27:23:42:78:0e: 17:dc:f4:e5:74:09:51:a3:b3:37:7c:d6:cc:8d:2b:50:3d:dc: 08:7c:7c:47 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEJ2LbOIC/983R0FfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDcwNjIzMjI0NFoXDTI1MTAwODIzMjI0NFowLzEtMCsGA1UEAxMk ZmRjMzM2NWEtMThlYS00Njk2LWFkOGMtNmI2NmEzZTE1MmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux/45R1V7oa0Qq9kJhBqUj1guEZZHsKoAXh3 EeVa6clk/w6MUnCxD0J43Yzkul/kBQYWG+hurTja0anEYQNKFKNX35e2ERJL1Xnb i8erJATTw2yXIpKGRL8XuUloc64Ti+jI1qX+2CjF5p87Im8GmBHXNNpmv4035/mh VujhidMa5DLX/GWdHa2qfZggPrLf4oORirCFY2b2oT8DulzWvwNJN3Df6Nezg1Zl KDUuYKZQESMyuOnWDKCRZUr/v5LMOwgO8MnsBWmuCGBvnq3X/orPP9lJGA54hSEt J5jLFhjqkpUdLZElmv0rjoqQjOOa0UzPcJZSuKFc3qgNh9xITwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAJyVJT6fIFCfsWfBxPzubBo68jCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m ZGMzMzY1YS0xOGVhLTQ2OTYtYWQ4Yy02YjY2YTNlMTUyYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2ZkYzMzNjVhLTE4ZWEtNDY5Ni1h ZDhjLTZiNjZhM2UxNTJiNy9mZGMzMzY1YS0xOGVhLTQ2OTYtYWQ4Yy02YjY2YTNl MTUyYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJASMgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANYIkxdXtdLeKV0d+JmGM hSBA3qZ64wtN8ud62SEY6x4M7HTvcBIopSKcqKsohWSRRVmJEuvM9Y89Y/hd+b06 /zGgxcpMaF5Kt96gY1YnGOeRqrf6StoCnMy0tH2sK4zLnOmBxoVd2TK8IAQMJVCu Lj5iwCuPWhvwrdd1QjuncR1kGCNJ6E7m2bGpHyMzACT0GP6tUpcScy0ikQfBKLCG 4w3QHTbp/jWozQwVLxF/HDBShD864UCMsouHYdojy2Lnp2uUNb8uXYDc1rGunnNs ySUJeVXpdUN8PodYjcjAg5LROAO88ycjQngOF9z05XQJUaOzN3zWzI0rUD3cCHx8 Rw== -----END CERTIFICATE-----Generated at Thu May 9 21:06:27 2024 by rpki-client on console-fra.rpki-client.org