$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer File: 8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer (raw, json) Hash identifier: tpigUA/skQza6ocGqUcY5YeLJexod3PqNB+MYaTUMOE= Subject key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858473DCA4229D68B0FF14C74EE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Sep 2024 06:31:47 +0000 Certificate not after: Mon 21 Dec 2026 07:31:47 +0000 Subordinate resources: IP: 192.203.166.0/24 IP: 204.79.137.0 -- 204.79.140.255 IP: 204.79.172.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:ca:42:29:d6:8b:0f:f1:4c:74:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 17 06:31:47 2024 GMT Not After : Dec 21 07:31:47 2026 GMT Subject: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ab:9d:4f:ca:64:f4:a0:92:07:c6:03:f6:43: 53:cd:e2:32:39:ed:25:d2:c1:8f:21:80:20:5f:97: 66:b2:03:7f:75:50:da:ba:56:0f:2f:1c:90:c7:a4: 75:d3:7d:46:3f:b8:2a:42:1c:74:8a:f5:5e:e4:dd: 67:21:f0:35:ba:e8:1e:17:4a:61:1c:49:f5:61:0e: 1e:b2:03:1d:5f:79:6d:90:9d:64:b1:8e:7b:dc:75: c7:8d:9e:1d:9e:6c:9b:ea:a8:a1:b3:47:d4:24:bf: 95:11:f3:fb:69:61:7f:51:70:f8:08:f6:98:48:8c: 5a:dd:b0:86:f1:fb:f4:5c:52:09:58:54:b9:26:59: 67:bf:1c:da:6a:57:71:48:32:1b:e0:d3:c9:c3:5d: b2:cc:3b:23:04:14:df:57:35:82:e8:c4:15:b1:00: 40:ac:4d:cd:66:a1:00:29:7a:0d:d9:e1:45:46:7c: 90:73:21:c1:05:7a:d4:20:be:e8:20:b2:00:d8:2a: 52:ec:9a:c5:cc:88:00:06:05:1b:93:8a:f5:a5:b2: 30:85:40:88:9d:81:d3:ad:15:2f:a1:0a:a7:70:50: cb:e9:93:c4:19:cf:10:7f:d6:bf:7a:66:51:bf:13: 09:68:61:af:e0:52:00:82:7d:a5:ea:f6:11:74:69: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.203.166.0/24 204.79.137.0-204.79.140.255 204.79.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:11:3b:47:22:a5:26:4a:af:fb:6f:23:eb:45:e7:16:6c:2c: d4:3d:7c:6c:e0:e7:d1:85:e1:e4:ce:91:19:a2:bf:9f:b5:c6: a1:9f:d1:e4:86:11:45:46:a9:52:60:6a:4c:f4:45:a6:26:23: a7:7f:55:d7:b1:78:fe:20:0f:0e:08:4b:7d:50:34:2c:cb:89: 5f:ca:ce:fb:14:26:49:81:d8:53:dd:70:90:4a:7c:24:ad:14: f3:c9:11:6d:ef:b2:3a:49:12:d1:d3:26:f2:e6:cd:40:a4:52: 08:03:8f:3a:64:89:85:da:21:f2:ae:fc:59:b4:15:47:38:3a: 75:af:29:bb:b3:5e:16:ee:48:db:73:30:cc:87:28:59:c0:f5: 36:35:d8:f9:a4:5c:d0:31:a4:2f:f3:7d:b7:35:c8:6e:41:eb: 7e:b7:bb:2d:b7:8c:28:77:6e:f0:f8:00:51:1e:5a:f2:06:08: 14:9a:28:06:3b:ab:3f:84:9e:be:13:5e:dc:78:04:a7:22:1b: 96:ed:b5:5f:6d:94:ac:a7:87:a3:96:41:1c:12:e7:d8:28:dc: b7:a0:a8:01:0f:68:d0:2b:14:64:6e:ab:2c:5f:86:78:c0:4e: 99:8b:2d:70:06:5b:b7:6e:40:e7:12:12:4f:24:3b:01:46:2e: 59:78:d3:72 -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWEc9ykIp1osP8Ux07gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkxNzA2MzE0N1oXDTI2MTIyMTA3MzE0N1owLzEtMCsGA1UEAxMk OGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3ZjdjMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6udT8pk9KCSB8YD9kNTzeIyOe0l0sGPIYAg X5dmsgN/dVDaulYPLxyQx6R1031GP7gqQhx0ivVe5N1nIfA1uugeF0phHEn1YQ4e sgMdX3ltkJ1ksY573HXHjZ4dnmyb6qihs0fUJL+VEfP7aWF/UXD4CPaYSIxa3bCG 8fv0XFIJWFS5JllnvxzaaldxSDIb4NPJw12yzDsjBBTfVzWC6MQVsQBArE3NZqEA KXoN2eFFRnyQcyHBBXrUIL7oILIA2CpS7JrFzIgABgUbk4r1pbIwhUCInYHTrRUv oQqncFDL6ZPEGc8Qf9a/emZRvxMJaGGv4FIAgn2l6vYRdGnbWQIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFE9LOI1fXYTn0ZEEjtRH6wV0sz4TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzhmMTRmOGQ3LTU0MGItNGE0YS1i NWFlLTBhZjE0N2Y3YzFlNC84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdm N2MxZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBADAy6YwDAMEAMxPiQMEAMxPjAMEAMxPrDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAUETtHIqUmSq/7byPrRecWbCzUPXxs4OfRheHkzpEZor+ftcahn9HkhhFF RqlSYGpM9EWmJiOnf1XXsXj+IA8OCEt9UDQsy4lfys77FCZJgdhT3XCQSnwkrRTz yRFt77I6SRLR0yby5s1ApFIIA486ZImF2iHyrvxZtBVHODp1rym7s14W7kjbczDM hyhZwPU2Ndj5pFzQMaQv8323NchuQet+t7stt4wod27w+ABRHlryBggUmigGO6s/ hJ6+E17ceASnIhuW7bVfbZSsp4ejlkEcEufYKNy3oKgBD2jQKxRkbqssX4Z4wE6Z iy1wBlu3bkDnEhJPJDsBRi5ZeNNy -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:03 2024 by rpki-client on console-fra.rpki-client.org