$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer File: 48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer (raw, json) Hash identifier: /KbB8lboDtWOmd+f8LDXnlzJYBwDKBwL+H8UbBMp1iw= Subject key identifier: FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F432858467E8C474B287AEE7F68582740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Jul 2024 18:27:30 +0000 Certificate not after: Tue 13 Oct 2026 18:27:30 +0000 Subordinate resources: IP: 159.212.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Oct 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:7e:8c:47:4b:28:7a:ee:7f:68:58:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 10 18:27:30 2024 GMT Not After : Oct 13 18:27:30 2026 GMT Subject: CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7d:bd:c3:56:da:c8:20:10:91:f6:71:b3:b4: 3e:49:73:50:a7:a4:00:f5:a0:68:14:ea:80:f1:24: 00:6d:d3:b8:13:a9:f0:41:b1:4e:e5:e1:5b:db:cb: 54:5c:55:80:ad:31:c7:1f:05:63:ab:36:f2:9c:4f: 45:c8:9b:79:74:87:a0:8b:13:e7:40:21:a7:d2:a1: 1c:6f:ef:0e:b7:95:67:76:09:b7:e6:21:a8:a2:af: ad:d2:d9:ce:70:3c:2a:f6:ce:dd:d7:e1:d1:07:36: 89:ed:4d:89:4f:de:c0:21:2d:29:7a:99:d6:63:1c: b1:1f:78:e8:97:66:ff:2c:c0:4a:83:95:34:ff:77: 28:57:a2:bc:99:6c:d4:b7:cb:47:70:0c:d3:9e:9d: a9:4f:1e:b4:e1:20:a2:f0:6a:f5:22:c1:be:98:12: 7f:0f:31:31:e7:8c:ae:2c:84:4c:d3:eb:68:6e:0a: 19:7e:0c:9c:4f:6f:84:36:66:52:27:d7:7c:14:a3: 23:09:ca:d9:9a:23:88:df:ed:b0:75:30:72:bd:6f: a8:0c:2f:c9:51:31:07:e6:0b:ff:80:ce:14:e1:ea: f7:39:8d:e3:bb:11:72:d5:a7:de:70:2b:be:70:4b: 82:31:43:1c:4a:49:96:e7:f0:08:b6:26:84:a4:7b: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 159.212.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7a:84:d1:25:62:dd:60:83:92:63:14:14:cc:2c:56:9c:7d: 23:ca:dc:6d:3c:56:9d:bb:78:62:f2:f6:3c:f0:8f:1d:7e:17: aa:40:d3:3d:60:9d:65:c2:5a:5d:bb:5e:20:b8:31:ce:53:3e: 26:fd:f1:eb:04:57:14:0c:ec:5d:24:f3:95:7e:75:41:b3:29: 98:34:6f:61:34:86:bd:22:17:c0:50:27:f5:c0:93:eb:65:9c: 1a:2f:7b:e5:d6:dc:54:45:22:0a:0a:03:0f:fb:cb:ab:b1:e8: bf:21:85:59:5a:aa:1e:ed:11:28:69:46:1e:81:2c:e0:41:fd: 13:52:09:e1:c7:d2:c2:e1:b1:4d:c6:f1:92:87:c9:cf:f3:37: 57:ed:f7:04:68:1d:26:7a:0c:b7:64:86:63:2f:89:c8:fc:41: 68:92:66:9a:f5:52:02:65:1e:62:33:f2:da:c3:6c:b5:75:f3: 75:1c:96:b8:ff:2b:0c:c1:04:39:c5:92:f2:7a:67:02:99:85: 5b:df:e2:33:d7:db:2d:cc:d2:82:04:97:d0:41:ca:29:e6:60: c7:4e:4d:ac:d3:ca:3c:ba:c3:d2:61:00:0e:34:14:dc:bb:63: bb:e2:5d:95:1d:69:3a:e6:0d:35:65:b8:e9:89:a0:33:86:51: dd:79:ad:39 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEZ+jEdLKHruf2hYJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDcxMDE4MjczMFoXDTI2MTAxMzE4MjczMFowLzEtMCsGA1UEAxMk NDhhYmM3ZWQtMGNmNC00NzM1LWI1OGYtZDZlODZmZGEwZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH29w1bayCAQkfZxs7Q+SXNQp6QA9aBoFOqA 8SQAbdO4E6nwQbFO5eFb28tUXFWArTHHHwVjqzbynE9FyJt5dIegixPnQCGn0qEc b+8Ot5Vndgm35iGooq+t0tnOcDwq9s7d1+HRBzaJ7U2JT97AIS0pepnWYxyxH3jo l2b/LMBKg5U0/3coV6K8mWzUt8tHcAzTnp2pTx604SCi8Gr1IsG+mBJ/DzEx54yu LIRM0+tobgoZfgycT2+ENmZSJ9d8FKMjCcrZmiOI3+2wdTByvW+oDC/JUTEH5gv/ gM4U4er3OY3juxFy1afecCu+cEuCMUMcSkmW5/AItiaEpHvn1QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFPw+hPYf/4wb03K1zbJx9mN5LbZKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80 OGFiYzdlZC0wY2Y0LTQ3MzUtYjU4Zi1kNmU4NmZkYTBkOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzQ4YWJjN2VkLTBjZjQtNDczNS1i NThmLWQ2ZTg2ZmRhMGQ5Ny80OGFiYzdlZC0wY2Y0LTQ3MzUtYjU4Zi1kNmU4NmZk YTBkOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCf1DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBheoTRJWLdYIOSYxQUzCxW nH0jytxtPFadu3hi8vY88I8dfheqQNM9YJ1lwlpdu14guDHOUz4m/fHrBFcUDOxd JPOVfnVBsymYNG9hNIa9IhfAUCf1wJPrZZwaL3vl1txURSIKCgMP+8ursei/IYVZ Wqoe7REoaUYegSzgQf0TUgnhx9LC4bFNxvGSh8nP8zdX7fcEaB0megy3ZIZjL4nI /EFokmaa9VICZR5iM/Law2y1dfN1HJa4/ysMwQQ5xZLyemcCmYVb3+Iz19stzNKC BJfQQcop5mDHTk2s08o8usPSYQAONBTcu2O74l2VHWk65g01ZbjpiaAzhlHdea05 -----END CERTIFICATE-----Generated at Fri Oct 4 20:56:16 2024 by rpki-client on console-ams.rpki-client.org