$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.cer File: 4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.cer (raw, json) Hash identifier: h0PL0o4TklgsMB/2WH5/VLj/8by0HtyO31T/QvQb/fU= Subject key identifier: 53:3D:C8:D5:05:9E:04:3E:F8:66:08:B5:AC:3B:BA:95:6F:E6:DB:42 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584700B91B84591E0432D2EEFA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Aug 2024 09:32:55 +0000 Certificate not after: Sun 29 Nov 2026 10:32:55 +0000 Subordinate resources: IP: 192.160.5.0 -- 192.160.7.255 IP: 192.207.23.0/24 IP: 192.231.48.0/24 IP: 192.245.102.0/24 IP: 198.17.148.0/24 IP: 198.151.197.0 -- 198.151.198.255 IP: 198.175.147.0/24 IP: 198.205.32.0/19 IP: 199.89.141.0 -- 199.89.143.255 IP: 199.89.161.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:00:b9:1b:84:59:1e:04:32:d2:ee:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Aug 26 09:32:55 2024 GMT Not After : Nov 29 10:32:55 2026 GMT Subject: CN=4329caf6-7e2a-4a02-a21f-b6259ecf6b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:0e:38:0a:9c:d0:07:9d:32:5b:e4:ab:9b: d6:45:87:5b:55:c3:5e:15:03:de:11:6e:36:b0:3d: 32:de:8f:77:75:7b:a1:c6:32:9c:dd:ae:ad:d9:fc: 32:24:d4:70:f7:29:02:e5:24:b5:b4:ec:01:64:52: 34:fd:93:75:ea:df:f5:f6:c7:c6:ad:f9:42:b6:eb: 6c:cd:48:a3:bd:51:59:77:74:17:74:29:9e:71:c9: 85:11:e8:f9:c1:2a:99:ea:6c:57:5a:6b:d8:a1:c9: 92:a5:00:54:98:79:c7:d4:21:93:76:08:43:21:94: d0:c1:6d:9a:f4:17:33:77:04:2f:43:f9:da:da:d3: bf:c5:5a:24:b4:7f:5c:db:b9:f7:51:74:2a:5c:84: 54:19:2d:90:a0:3c:b6:a8:ed:a3:b3:76:ee:fc:4e: 60:10:42:93:a4:7c:73:bd:f7:c1:da:30:46:11:3d: 3f:6c:1e:58:6c:ec:2f:da:f0:b7:87:d1:c6:7e:a7: 83:7b:25:52:da:b1:58:4f:5e:a4:60:be:91:fd:85: c0:73:8e:ba:1d:2b:db:0f:a1:2f:4d:5e:ab:15:92: bb:e8:a5:e0:cc:13:c2:d8:7e:b0:8b:94:d4:5e:24: dd:a4:c7:4d:5d:70:9e:de:43:7c:5e:62:d8:c6:ad: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3D:C8:D5:05:9E:04:3E:F8:66:08:B5:AC:3B:BA:95:6F:E6:DB:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d/4329caf6-7e2a-4a02-a21f-b6259ecf6b9d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.160.5.0-192.160.7.255 192.207.23.0/24 192.231.48.0/24 192.245.102.0/24 198.17.148.0/24 198.151.197.0-198.151.198.255 198.175.147.0/24 198.205.32.0/19 199.89.141.0-199.89.143.255 199.89.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:47:d8:0c:9d:43:1f:c0:10:90:82:4f:b8:1b:a7:c7:52:e6: db:bd:86:c4:2d:29:3e:23:cd:63:8c:af:e7:85:6d:e4:62:d8: 4e:bf:80:21:29:54:fc:ac:2e:16:e2:5f:10:c9:7b:49:f9:77: 04:2d:e6:7a:70:03:0f:de:bb:70:08:e8:5a:14:e4:63:87:14: 0c:e3:7b:e1:23:08:80:40:26:21:24:c7:c1:fe:b9:78:4b:0a: e3:9f:5c:cb:22:24:81:d0:2f:36:2f:0a:50:e5:f9:46:14:3a: c7:32:75:e2:2a:79:a1:7e:8f:3f:f1:48:05:51:f2:f2:48:84: a1:d3:c6:17:08:03:04:18:0f:9c:de:82:c3:f5:23:16:2c:36: 18:25:76:59:b7:a9:e4:7a:a9:46:b7:f3:76:15:ba:99:fb:b5: ad:3d:9f:63:34:70:d9:65:dc:85:ba:03:24:56:d2:77:83:f1: 22:5e:3e:ff:a8:0e:ea:6c:36:19:51:d6:8f:97:d9:b2:6a:bb: ba:fe:f6:77:65:9c:3a:8a:46:03:ef:0b:2b:06:65:f5:ba:f3: e3:41:20:c5:12:22:31:62:5c:e8:1a:49:f9:69:d2:1a:9d:a9: 03:0c:9e:5e:12:c4:dd:b0:42:7e:21:8d:bc:ce:76:98:0a:70: 33:62:8e:a5 -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEcAuRuEWR4EMtLu+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDgyNjA5MzI1NVoXDTI2MTEyOTEwMzI1NVowLzEtMCsGA1UEAxMk NDMyOWNhZjYtN2UyYS00YTAyLWEyMWYtYjYyNTllY2Y2YjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mwOOAqc0AedMlvkq5vWRYdbVcNeFQPeEW42 sD0y3o93dXuhxjKc3a6t2fwyJNRw9ykC5SS1tOwBZFI0/ZN16t/19sfGrflCtuts zUijvVFZd3QXdCmeccmFEej5wSqZ6mxXWmvYocmSpQBUmHnH1CGTdghDIZTQwW2a 9BczdwQvQ/na2tO/xVoktH9c27n3UXQqXIRUGS2QoDy2qO2js3bu/E5gEEKTpHxz vffB2jBGET0/bB5YbOwv2vC3h9HGfqeDeyVS2rFYT16kYL6R/YXAc466HSvbD6Ev TV6rFZK76KXgzBPC2H6wi5TUXiTdpMdNXXCe3kN8XmLYxq3zbwIDAQABo4IETTCC BEkwHQYDVR0OBBYEFFM9yNUFngQ++GYItaw7upVv5ttCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80 MzI5Y2FmNi03ZTJhLTRhMDItYTIxZi1iNjI1OWVjZjZiOWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzQzMjljYWY2LTdlMmEtNGEwMi1h MjFmLWI2MjU5ZWNmNmI5ZC80MzI5Y2FmNi03ZTJhLTRhMDItYTIxZi1iNjI1OWVj ZjZiOWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwbQYIKwYBBQUH AQcBAf8EXjBcMFoEAgABMFQwDAMEAMCgBQMEA8CgAAMEAMDPFwMEAMDnMAMEAMD1 ZgMEAMYRlDAMAwQAxpfFAwQAxpfGAwQAxq+TAwQFxs0gMAwDBADHWY0DBATHWYAD BADHWaEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAQkfYDJ1DH8AQkIJPuBunx1Lm272GxC0pPiPNY4yv54Vt 5GLYTr+AISlU/KwuFuJfEMl7Sfl3BC3menADD967cAjoWhTkY4cUDON74SMIgEAm ISTHwf65eEsK459cyyIkgdAvNi8KUOX5RhQ6xzJ14ip5oX6PP/FIBVHy8kiEodPG FwgDBBgPnN6Cw/UjFiw2GCV2Wbep5HqpRrfzdhW6mfu1rT2fYzRw2WXchboDJFbS d4PxIl4+/6gO6mw2GVHWj5fZsmq7uv72d2WcOopGA+8LKwZl9brz40EgxRIiMWJc 6BpJ+WnSGp2pAwyeXhLE3bBCfiGNvM52mApwM2KOpQ== -----END CERTIFICATE-----Generated at Thu Sep 19 19:54:55 2024 by rpki-client on console-ams.rpki-client.org