$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer File: b1f976fd-7fa0-4323-97fa-35bb869a9231.cer (raw, json) Hash identifier: wDXhB4VdHmEZe1nPNgyxNYREPewKzHn3HjGoyHuBifI= Subject key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584697D3E05C7BF5729D1AE8EB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 19 Jul 2024 19:46:59 +0000 Certificate not after: Thu 22 Oct 2026 19:46:59 +0000 Subordinate resources: IP: 96.125.0.0/17 IP: 167.96.0.0/16 IP: 173.253.128.0/17 IP: 2620:105:b000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:97:d3:e0:5c:7b:f5:72:9d:1a:e8:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 19 19:46:59 2024 GMT Not After : Oct 22 19:46:59 2026 GMT Subject: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:5d:d1:1c:12:bf:b0:1c:71:ac:af:87:ed: 85:32:13:0d:55:65:36:24:bf:90:6c:5a:2a:77:b4: be:ea:35:f7:6c:09:20:ce:c7:11:a6:7d:04:bb:c8: a1:4d:e3:28:37:05:73:89:b9:ef:30:ab:d7:16:0e: 48:50:f2:49:07:06:b5:da:8c:f9:6f:5a:cf:6c:ec: e6:0e:c0:d3:de:85:b1:a3:6e:0f:90:8b:53:35:57: d9:71:ea:73:23:ae:65:aa:ee:ff:cc:b0:ae:25:63: 5a:22:3d:d0:e7:26:2e:9b:57:96:60:6f:2a:77:21: c7:5d:f1:2e:6e:2e:4c:15:31:8a:ad:9e:78:4e:fa: 96:4c:cf:18:bf:d5:24:b3:65:1a:c5:01:19:b5:fa: 6b:59:bf:be:fd:13:35:43:71:ff:4c:53:9b:04:29: 95:9a:8d:3d:18:29:1b:d3:04:40:c7:04:1a:37:7c: d3:1e:1e:eb:2f:4e:f7:fd:77:5d:63:5a:ac:a9:9b: 6e:08:2c:40:82:70:9e:c0:76:d2:ad:5a:0c:96:fb: 55:47:e6:93:1c:1a:1a:45:da:e0:68:48:6e:51:0a: 8d:57:92:8d:ae:77:52:c5:7e:d3:a1:ab:0f:e7:64: ca:f7:b2:e7:c9:58:56:44:d6:3b:90:ab:5d:04:c4: 95:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 96.125.0.0/17 167.96.0.0/16 173.253.128.0/17 IPv6: 2620:105:b000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1d:0e:38:2d:e0:e9:c7:be:9d:c4:24:a7:59:83:90:10:53: 32:6e:c9:03:9b:cb:d6:8b:f0:61:03:3f:7b:f0:13:2f:b7:33: 5a:f1:a3:33:50:c5:5b:aa:12:4a:9a:9d:90:ba:53:e6:3a:90: 35:9f:b8:c1:14:2e:97:e7:32:10:d1:33:14:44:f3:a3:cd:23: 5a:68:2d:81:d4:e6:d5:74:c2:0d:96:51:3a:1b:70:f0:56:2e: 14:a2:ec:e0:67:7b:18:38:b2:7e:e0:e8:18:60:c9:ea:f2:fd: f2:59:ff:33:86:c1:1c:cf:93:26:ff:a1:41:3f:0c:cf:cd:c8: a2:5f:3c:ba:0c:24:22:9b:7f:4f:77:2d:83:b0:55:f2:54:51: 39:8c:45:b6:f0:da:66:88:3b:3c:8d:af:d1:42:7d:b0:fb:c9: a9:11:a7:aa:96:11:a2:13:02:94:17:a0:00:81:84:93:c2:d0: e7:30:2a:9a:13:49:e5:c0:d0:b7:63:55:1d:5c:51:7e:03:21: b2:24:1c:89:bf:3d:18:3b:32:ff:2f:c8:d6:8f:98:e5:bb:ee: 18:a5:92:5d:eb:a9:aa:66:7d:61:26:96:d2:49:5d:fd:e5:4f: 08:39:63:87:98:71:af:22:eb:39:32:3b:60:87:5c:e8:dc:68: ba:b5:98:76 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEaX0+Bce/VynRro6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDcxOTE5NDY1OVoXDTI2MTAyMjE5NDY1OVowLzEtMCsGA1UEAxMk YjFmOTc2ZmQtN2ZhMC00MzIzLTk3ZmEtMzViYjg2OWE5MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptVd0RwSv7Accayvh+2FMhMNVWU2JL+QbFoq d7S+6jX3bAkgzscRpn0Eu8ihTeMoNwVzibnvMKvXFg5IUPJJBwa12oz5b1rPbOzm DsDT3oWxo24PkItTNVfZcepzI65lqu7/zLCuJWNaIj3Q5yYum1eWYG8qdyHHXfEu bi5MFTGKrZ54TvqWTM8Yv9Uks2UaxQEZtfprWb++/RM1Q3H/TFObBCmVmo09GCkb 0wRAxwQaN3zTHh7rL073/XddY1qsqZtuCCxAgnCewHbSrVoMlvtVR+aTHBoaRdrg aEhuUQqNV5KNrndSxX7ToasP52TK97LnyVhWRNY7kKtdBMSVZQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFK6aJHGYheYLXT/uL/3KoWqU4Cc7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9i MWY5NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJiODY5YTkyMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2IxZjk3NmZkLTdmYTAtNDMyMy05 N2ZhLTM1YmI4NjlhOTIzMS9iMWY5NzZmZC03ZmEwLTQzMjMtOTdmYS0zNWJiODY5 YTkyMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBcEAgABMBEDBAdgfQADAwCnYAMEB639gDAOBAIAAjAIAwYAJiAB BbAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALR0OOC3g6ce+ncQkp1mDkBBTMm7JA5vL1ovwYQM/e/ATL7cz WvGjM1DFW6oSSpqdkLpT5jqQNZ+4wRQul+cyENEzFETzo80jWmgtgdTm1XTCDZZR Ohtw8FYuFKLs4Gd7GDiyfuDoGGDJ6vL98ln/M4bBHM+TJv+hQT8Mz83Iol88ugwk Ipt/T3ctg7BV8lRROYxFtvDaZog7PI2v0UJ9sPvJqRGnqpYRohMClBegAIGEk8LQ 5zAqmhNJ5cDQt2NVHVxRfgMhsiQcib89GDsy/y/I1o+Y5bvuGKWSXeupqmZ9YSaW 0kld/eVPCDljh5hxryLrOTI7YIdc6NxourWYdg== -----END CERTIFICATE-----Generated at Thu Sep 19 19:55:02 2024 by rpki-client on console-ams.rpki-client.org