$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer File: 3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer (raw, json) Hash identifier: NlJtHdwtFCL2flscnuwUXOiPtvnU48HA97rXzMMW2Kw= Subject key identifier: 80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F432858469237851AF7D99F93AB08B430 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Jul 2024 19:32:54 +0000 Certificate not after: Tue 20 Oct 2026 19:32:54 +0000 Subordinate resources: IP: 205.236.245.0 -- 205.236.254.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Oct 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:92:37:85:1a:f7:d9:9f:93:ab:08:b4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 17 19:32:54 2024 GMT Not After : Oct 20 19:32:54 2026 GMT Subject: CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:81:80:63:18:dd:b5:6d:ca:13:cb:4c:13: 94:ee:8c:3c:d6:1c:ae:d7:b0:1d:f7:d6:3f:92:3d: da:f4:4d:e2:a5:aa:d6:45:fa:bf:2f:dc:59:13:a8: 69:59:f8:d5:a6:f1:9a:9d:23:2a:c2:bc:c0:01:f0: 52:3e:eb:d8:bc:a5:51:51:6c:48:f0:3c:49:b4:12: ea:31:53:17:f5:42:80:23:ef:64:f8:6b:c1:c5:c0: b9:86:e0:a2:40:9e:89:fe:62:a8:c4:a9:31:74:be: 00:ae:42:e8:79:f9:d5:4f:7c:a7:87:a3:07:13:e8: a5:bd:7e:63:27:43:44:68:99:4b:73:a2:68:89:78: ef:af:ca:0f:a9:9c:62:16:c8:f9:b4:34:f3:71:68: f9:7c:7d:60:85:60:e3:7a:b9:f4:1a:33:a1:a5:15: 19:a7:76:f6:1e:46:84:c3:2c:6e:d1:23:7f:21:8f: 3a:23:3f:9a:98:b4:90:c9:c5:3a:75:73:9a:f5:c3: b1:fd:de:75:0e:c6:9c:53:e5:c1:3d:71:1f:0b:19: 19:83:a5:61:09:f0:59:90:d2:f2:7e:98:94:29:b7: e8:33:93:cf:fe:a0:b2:49:e1:76:a1:6f:78:d0:71: c8:ea:71:f9:bb:b7:e8:55:00:43:90:2c:87:7d:33: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 205.236.245.0-205.236.254.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a5:2f:11:36:c3:bc:3b:b0:80:2a:1f:1e:1f:07:a5:c2:8e: 3d:c8:f6:e4:7f:b6:5d:e6:14:aa:a9:cb:1e:3a:0f:a1:8a:04: d8:1d:db:66:eb:a0:e3:f0:06:16:11:67:bc:a1:56:9e:f2:99: 97:df:f7:de:82:40:23:34:b7:f9:4f:e0:42:39:49:84:2d:93: f8:46:3d:4b:98:23:87:2f:c9:70:4c:86:ef:a1:d8:64:3a:69: ff:e8:5d:d4:d0:14:dd:09:4e:c3:f1:d8:56:d4:41:c2:28:04: 6b:ec:22:7c:12:cc:06:77:5a:d6:29:a6:50:b4:21:ba:0c:af: fc:83:10:45:b9:10:47:26:fa:45:2d:e4:27:33:86:14:ba:da: 5a:0d:85:5c:07:52:31:d3:9c:4a:ee:f4:56:19:b2:37:94:34: 45:e8:f6:e1:07:52:75:2c:ee:fc:dd:ac:a5:27:63:bd:8f:46: 68:6a:3e:47:1c:a4:c0:b8:f3:c4:d3:70:d6:22:58:75:54:71: ee:03:80:27:83:f1:5b:98:34:e9:a2:ed:6a:e2:3e:00:4c:fe: 93:d1:ec:59:f7:f9:68:21:f4:62:59:f7:c4:ea:0f:f1:34:fe: b1:5f:88:ef:5a:43:1f:24:6e:9d:11:4c:d0:4e:ab:67:e5:ef: a4:10:d5:4b -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEaSN4Ua99mfk6sItDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDcxNzE5MzI1NFoXDTI2MTAyMDE5MzI1NFowLzEtMCsGA1UEAxMk M2QwMjJlNGQtYTJlYy00ZDE0LTkzNDItYTUwM2VjNjNjYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCKBgGMY3bVtyhPLTBOU7ow81hyu17Ad99Y/ kj3a9E3iparWRfq/L9xZE6hpWfjVpvGanSMqwrzAAfBSPuvYvKVRUWxI8DxJtBLq MVMX9UKAI+9k+GvBxcC5huCiQJ6J/mKoxKkxdL4ArkLoefnVT3ynh6MHE+ilvX5j J0NEaJlLc6JoiXjvr8oPqZxiFsj5tDTzcWj5fH1ghWDjern0GjOhpRUZp3b2HkaE wyxu0SN/IY86Iz+amLSQycU6dXOa9cOx/d51DsacU+XBPXEfCxkZg6VhCfBZkNLy fpiUKbfoM5PP/qCySeF2oW940HHI6nH5u7foVQBDkCyHfTN4vwIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFIB5vbHxVi5tJDztfowXEC+mMCvJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z ZDAyMmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAzZWM2M2NhYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzNkMDIyZTRkLWEyZWMtNGQxNC05 MzQyLWE1MDNlYzYzY2FjMS8zZDAyMmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAzZWM2 M2NhYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAM3s9QMEAM3s/jBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7pS8RNsO8 O7CAKh8eHwelwo49yPbkf7Zd5hSqqcseOg+higTYHdtm66Dj8AYWEWe8oVae8pmX 3/fegkAjNLf5T+BCOUmELZP4Rj1LmCOHL8lwTIbvodhkOmn/6F3U0BTdCU7D8dhW 1EHCKARr7CJ8EswGd1rWKaZQtCG6DK/8gxBFuRBHJvpFLeQnM4YUutpaDYVcB1Ix 05xK7vRWGbI3lDRF6PbhB1J1LO783aylJ2O9j0Zoaj5HHKTAuPPE03DWIlh1VHHu A4Ang/FbmDTpou1q4j4ATP6T0exZ9/loIfRiWffE6g/xNP6xX4jvWkMfJG6dEUzQ Tqtn5e+kENVL -----END CERTIFICATE-----Generated at Tue Oct 22 18:48:49 2024 by rpki-client on console-ams.rpki-client.org