$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer File: 52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer (raw, json) Hash identifier: 8gPTi3zDaPbI9iUaCM7DVqPWaojjgT7occEcFvL906c= Subject key identifier: 58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285845A72A6404E21105AC61672980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Apr 2024 14:51:29 +0000 Certificate not after: Tue 28 Jul 2026 14:51:29 +0000 Subordinate resources: IP: 198.49.198.0/23 IP: 198.51.11.0/24 IP: 2620:12e:b000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a7:2a:64:04:e2:11:05:ac:61:67:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Apr 24 14:51:29 2024 GMT Not After : Jul 28 14:51:29 2026 GMT Subject: CN=52e61a17-7b88-4574-9ed5-dc56420f7ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:f0:56:04:61:7c:6f:60:90:18:86:fa:b1: 69:38:a4:be:9e:e8:a7:70:21:85:f5:7f:7c:ea:1e: fa:61:76:b2:01:ee:dc:01:69:86:1e:c4:f3:d8:9b: 1e:42:4a:8c:e1:d3:a4:d0:4a:58:9d:40:ab:37:47: 0e:96:16:31:ae:38:f1:fb:9b:b5:87:ae:fd:0d:a6: 33:36:6a:8f:ef:ea:23:f2:63:81:c2:2e:8f:e4:4c: 85:ec:07:78:87:a0:f0:d0:6b:39:d3:9e:d2:2e:5b: d3:cf:88:a9:b7:5d:35:63:41:92:ea:7b:f7:14:8f: 89:9b:1c:17:4c:22:ba:e9:d9:cb:82:f8:80:f6:fa: 68:4d:d8:b1:5a:05:90:5d:1d:dd:f2:e8:cb:db:d7: 76:2e:d3:a0:ba:6c:64:8f:f5:f1:02:7e:cb:41:5c: 5b:ec:2c:f3:35:fe:a5:a5:57:40:ac:21:72:df:85: 5f:5a:f3:2c:cf:d9:6f:1b:11:fc:7d:cf:bf:44:8c: c0:4a:4c:5a:2a:14:ec:79:16:64:a9:df:cb:49:88: c0:a9:95:33:7d:9e:ba:c5:a3:64:41:da:31:a7:d2: 34:10:29:ca:bf:cc:e9:91:21:6a:3a:cd:c1:43:54: a4:19:f3:4c:5e:29:60:4a:b5:96:f0:59:c1:26:b7: 0e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 198.49.198.0/23 198.51.11.0/24 IPv6: 2620:12e:b000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:1a:11:82:3d:4e:26:e1:24:33:21:ad:3c:0a:74:93:18:88: 35:8c:1c:17:6b:d6:4a:f2:5d:6e:60:7d:1e:38:12:0c:d1:58: 3c:dd:a6:bd:63:7b:5a:26:53:f4:2b:bc:bf:43:4b:bc:a5:ed: f6:60:8c:16:df:89:13:50:b8:3b:94:15:e1:44:d5:ef:9a:f9: 39:70:9b:9c:db:fc:03:1d:0e:63:c8:a2:58:e8:cb:57:3b:43: 33:32:bd:70:2a:46:fb:73:44:16:b6:b3:37:40:25:79:cb:89: 86:de:a6:d2:6e:08:34:4e:94:ec:f2:df:60:6b:fa:a2:c4:f0: a1:e7:18:3f:28:61:b7:85:d5:46:41:cf:9c:e8:bb:03:d6:f1: 5f:e3:89:a5:4c:01:3d:cf:a9:f6:82:31:55:19:80:f7:36:b7: 76:94:f1:f5:ea:b7:04:80:f8:de:0d:59:9f:bd:7d:25:a4:80: f2:70:6e:b8:2a:86:d7:ba:e5:7f:8d:ba:ac:82:fb:35:29:9c: 0b:f8:d3:df:64:52:f2:46:00:9d:02:bb:d1:84:2a:e8:92:45: b0:29:29:73:ce:73:14:c9:19:8b:b7:18:da:b1:66:18:93:48: d7:aa:82:33:c5:e9:c8:3e:80:67:25:ff:9e:df:33:c0:fe:ab: 6e:ea:8d:a6 -----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUAQ0Mn0MoWEWnKmQE4hEFrGFnKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDQyNDE0NTEyOVoXDTI2MDcyODE0NTEyOVowLzEtMCsGA1UEAxMk NTJlNjFhMTctN2I4OC00NTc0LTllZDUtZGM1NjQyMGY3ZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdTwVgRhfG9gkBiG+rFpOKS+nuincCGF9X98 6h76YXayAe7cAWmGHsTz2JseQkqM4dOk0EpYnUCrN0cOlhYxrjjx+5u1h679DaYz NmqP7+oj8mOBwi6P5EyF7Ad4h6Dw0Gs5057SLlvTz4ipt101Y0GS6nv3FI+JmxwX TCK66dnLgviA9vpoTdixWgWQXR3d8ujL29d2LtOgumxkj/XxAn7LQVxb7CzzNf6l pVdArCFy34VfWvMsz9lvGxH8fc+/RIzASkxaKhTseRZkqd/LSYjAqZUzfZ66xaNk Qdoxp9I0ECnKv8zpkSFqOs3BQ1SkGfNMXilgSrWW8FnBJrcObQIDAQABo4IEFjCC BBIwHQYDVR0OBBYEFFix9zXWYRXuVTdovb9hja+fNoFRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 MmU2MWExNy03Yjg4LTQ1NzQtOWVkNS1kYzU2NDIwZjdlZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzUyZTYxYTE3LTdiODgtNDU3NC05 ZWQ1LWRjNTY0MjBmN2VkMi81MmU2MWExNy03Yjg4LTQ1NzQtOWVkNS1kYzU2NDIw ZjdlZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAHGMcYDBADGMwswDwQCAAIwCQMHBCYgAS6wADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZGhGCPU4m4SQzIa08CnSTGIg1jBwXa9ZK8l1uYH0eOBIM0Vg83aa9 Y3taJlP0K7y/Q0u8pe32YIwW34kTULg7lBXhRNXvmvk5cJuc2/wDHQ5jyKJY6MtX O0MzMr1wKkb7c0QWtrM3QCV5y4mG3qbSbgg0TpTs8t9ga/qixPCh5xg/KGG3hdVG Qc+c6LsD1vFf44mlTAE9z6n2gjFVGYD3Nrd2lPH16rcEgPjeDVmfvX0lpIDycG64 KobXuuV/jbqsgvs1KZwL+NPfZFLyRgCdArvRhCrokkWwKSlzznMUyRmLtxjasWYY k0jXqoIzxenIPoBnJf+e3zPA/qtu6o2m -----END CERTIFICATE-----Generated at Sat Jun 1 16:25:17 2024 by rpki-client on console-fra.rpki-client.org