$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer File: 016f87b6-3d90-449f-9ca3-d057fc7b2a5f.cer (raw, json) Hash identifier: 2WIwgo1/H6GIaCtk52hAKtpcbcJ3knbt2hKELKdAl9Y= Subject key identifier: 54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F432858467C2CFB65D1E8B1C95E85BBF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Jul 2024 22:03:53 +0000 Certificate not after: Mon 12 Oct 2026 22:03:53 +0000 Subordinate resources: IP: 2001:504:2e::/48 IP: 2602:fca9::/36 IP: 2607:fb60::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Oct 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:7c:2c:fb:65:d1:e8:b1:c9:5e:85:bb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 9 22:03:53 2024 GMT Not After : Oct 12 22:03:53 2026 GMT Subject: CN=016f87b6-3d90-449f-9ca3-d057fc7b2a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:94:d6:89:3c:67:ba:e2:a3:85:e7:5d:81:2b: 5f:14:73:49:3d:9a:c5:df:d0:7b:0f:02:31:71:8d: 5b:de:b5:21:dc:5b:ff:23:84:4f:23:7a:68:7e:67: 28:89:10:7b:dd:b7:1f:99:b2:b5:7c:24:87:e4:82: 49:b7:8a:c9:9c:56:1e:d6:42:0c:ab:f4:6f:92:ad: 51:8e:4a:a0:27:bd:f7:be:ee:0c:36:cc:af:42:14: d7:ce:fd:83:63:fb:da:ed:62:c5:6b:9d:b4:dc:70: 0c:56:49:11:22:06:9a:97:ef:a5:63:f8:74:8e:bf: ca:4b:34:8f:46:59:54:24:15:90:80:5d:ef:8c:dc: 60:37:94:33:27:1c:ca:cf:5a:d7:a4:e7:88:47:eb: f3:f7:7b:5c:e4:65:3d:35:05:e0:02:8a:be:3d:70: fc:ff:bb:8c:8b:50:c3:5d:56:3a:79:e7:c1:6f:67: 0e:37:08:85:dd:fb:ed:25:b7:4c:d0:ee:0f:d4:49: 24:34:a5:d4:6f:d7:31:7e:dd:56:50:28:f4:65:92: 5d:d9:e1:73:fa:a6:a2:9d:35:0f:ce:b4:c6:8e:49: b8:33:1a:55:2c:6b:54:a0:6b:e2:ad:81:95:8a:16: 6d:34:cf:cd:44:95:e0:3b:16:03:9a:9c:ca:ff:ba: cc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E4:33:B8:3D:BD:A7:6D:51:01:AE:42:13:76:4F:3D:EC:1C:FC:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/016f87b6-3d90-449f-9ca3-d057fc7b2a5f/016f87b6-3d90-449f-9ca3-d057fc7b2a5f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:2e::/48 2602:fca9::/36 2607:fb60::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:cc:ab:47:0e:65:94:60:a5:d6:b1:a0:94:de:1c:86:4b:d6: 72:3c:7a:7e:05:88:0f:04:7a:b8:02:6d:89:16:16:c8:4b:4e: 24:84:68:91:e3:21:aa:60:a4:70:17:2f:d2:18:f6:0f:c1:24: 10:2b:5d:5a:0e:99:bb:b6:d9:90:ba:f3:9b:b8:f4:da:44:00: 10:07:11:ee:d8:4d:85:d8:bd:6d:04:c6:5f:4b:53:94:94:63: 11:c6:46:72:65:5b:57:c5:81:ce:c2:53:62:82:f7:f6:05:6b: bb:09:f5:87:d2:b7:df:3f:48:0d:9a:dd:bd:93:c4:60:d5:a9: ef:9e:b6:47:7f:60:df:aa:11:15:2f:e8:fd:4b:0b:ab:c4:08: 7e:da:bd:22:bf:b3:90:1f:5a:9d:d0:ac:a9:72:f0:f9:16:09: f4:c5:09:d0:68:b1:67:7b:3d:60:8d:fc:e7:1d:80:18:2d:20: 14:a0:01:48:7e:84:e9:0a:e6:0f:77:bd:41:0d:48:a0:4c:9a: 02:0c:1b:17:3d:46:06:40:af:d1:44:09:36:cf:6f:bb:53:0d: 57:4d:9e:4b:76:bb:09:48:1a:78:93:0c:22:b3:09:84:f4:4b: d5:37:4d:1b:f1:b2:02:07:8e:4a:ea:4b:3c:ad:b2:a4:c0:fe: 0d:02:96:ea -----BEGIN CERTIFICATE----- MIIG/zCCBeegAwIBAgIUAQ0Mn0MoWEZ8LPtl0eixyV6Fu/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDcwOTIyMDM1M1oXDTI2MTAxMjIyMDM1M1owLzEtMCsGA1UEAxMk MDE2Zjg3YjYtM2Q5MC00NDlmLTljYTMtZDA1N2ZjN2IyYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5TWiTxnuuKjheddgStfFHNJPZrF39B7DwIx cY1b3rUh3Fv/I4RPI3pofmcoiRB73bcfmbK1fCSH5IJJt4rJnFYe1kIMq/Rvkq1R jkqgJ733vu4MNsyvQhTXzv2DY/va7WLFa5203HAMVkkRIgaal++lY/h0jr/KSzSP RllUJBWQgF3vjNxgN5QzJxzKz1rXpOeIR+vz93tc5GU9NQXgAoq+PXD8/7uMi1DD XVY6eefBb2cONwiF3fvtJbdM0O4P1EkkNKXUb9cxft1WUCj0ZZJd2eFz+qainTUP zrTGjkm4MxpVLGtUoGvirYGVihZtNM/NRJXgOxYDmpzK/7rMDwIDAQABo4IEETCC BA0wHQYDVR0OBBYEFFTkM7g9vadtUQGuQhN2Tz3sHPx2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8w MTZmODdiNi0zZDkwLTQ0OWYtOWNhMy1kMDU3ZmM3YjJhNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzAxNmY4N2I2LTNkOTAtNDQ5Zi05 Y2EzLWQwNTdmYzdiMmE1Zi8wMTZmODdiNi0zZDkwLTQ0OWYtOWNhMy1kMDU3ZmM3 YjJhNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgACMBgDBwAgAQUEAC4DBgQmAvypAAMFACYH+2AwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAecyrRw5llGCl1rGglN4chkvWcjx6fgWIDwR6uAJtiRYWyEtOJIRokeMhqmCk cBcv0hj2D8EkECtdWg6Zu7bZkLrzm7j02kQAEAcR7thNhdi9bQTGX0tTlJRjEcZG cmVbV8WBzsJTYoL39gVruwn1h9K33z9IDZrdvZPEYNWp7562R39g36oRFS/o/UsL q8QIftq9Ir+zkB9andCsqXLw+RYJ9MUJ0GixZ3s9YI385x2AGC0gFKABSH6E6Qrm D3e9QQ1IoEyaAgwbFz1GBkCv0UQJNs9vu1MNV02eS3a7CUgaeJMMIrMJhPRL1TdN G/GyAgeOSupLPK2ypMD+DQKW6g== -----END CERTIFICATE-----Generated at Fri Oct 25 17:06:50 2024 by rpki-client on console-fra.rpki-client.org