$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer File: cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer (raw, json) Hash identifier: XK/0664/9C2rX78mUCrnYBGSUbfgWWzTmLIe7Dzna10= Subject key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285845A2A0B1EA30E549663EB75A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Apr 2024 23:50:48 +0000 Certificate not after: Sun 26 Jul 2026 23:50:48 +0000 Subordinate resources: IP: 165.135.0.0/16 IP: 192.104.54.0/24 IP: 192.133.125.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Jun 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a2:a0:b1:ea:30:e5:49:66:3e:b7:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Apr 22 23:50:48 2024 GMT Not After : Jul 26 23:50:48 2026 GMT Subject: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6a:9c:41:19:72:ba:f0:9d:20:c1:58:e4:24: b3:a7:d9:53:86:cb:de:a2:24:8c:04:de:98:48:c3: e8:92:fe:91:29:45:04:c0:ae:cd:4a:81:d3:9c:44: 17:dc:de:2b:7c:c2:55:e9:88:99:27:d3:a0:45:96: 7c:7e:b7:35:20:65:0e:ea:ee:cb:94:23:b0:96:d3: 6d:80:94:1d:49:af:18:2c:b1:15:91:6e:09:d0:03: 0c:d9:34:b6:a7:70:8d:ea:97:e9:56:9f:ec:4f:d1: 7f:1a:bb:62:e8:77:da:78:1c:0d:e5:ef:ca:c7:cc: 49:9f:2e:e1:b8:57:69:c2:3f:ff:81:1a:de:ca:68: 2c:92:fd:25:1b:8d:70:25:cb:fb:87:f7:21:e3:da: c1:25:ab:f8:17:5c:22:38:10:d3:92:ca:f3:47:d3: 2f:0c:10:5c:b1:bd:a8:6d:d8:c1:81:ba:94:89:c9: 6a:4b:a6:a7:d5:b7:76:ac:8e:77:01:1b:f2:f5:b9: 54:92:99:fc:b5:80:de:bb:91:81:f4:9b:86:7b:ea: 14:f6:7c:61:95:cb:05:11:a9:4b:fe:7c:dd:01:93: 3e:f0:d7:31:b8:78:3f:21:6b:9c:b8:b0:53:4f:2d: 22:7d:f2:5c:fc:8d:60:b7:96:64:d5:b4:b0:35:27: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 165.135.0.0/16 192.104.54.0/24 192.133.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:94:7b:e0:e1:b4:36:0e:95:e7:e4:34:84:8d:36:ca:89:db: 57:87:69:5b:6a:3a:eb:ab:58:6a:b1:7f:5d:bc:a2:59:10:fe: 85:20:01:76:ca:69:d9:86:a2:34:3c:ab:82:77:62:dd:72:5f: 07:07:ff:7e:f8:a7:68:b7:6d:a8:3a:57:cd:c7:e5:5e:72:3c: 50:65:0d:fd:c0:a4:47:aa:41:b8:a8:a2:c0:53:53:23:b5:79: b0:51:71:b2:13:be:f4:1f:5f:98:10:68:55:82:6d:8c:59:22: a6:95:07:d8:cf:2b:27:48:5e:9e:ba:08:e2:39:28:10:07:bf: 6b:a6:4c:3d:de:27:d7:ea:61:8b:d0:f9:30:57:14:b4:25:81: 06:6c:db:60:e7:eb:22:1a:19:dd:c3:3f:19:c6:15:c6:94:b5: 17:a7:a5:d3:c0:2f:88:64:f3:78:6b:b3:ee:cd:7a:56:88:71: 78:1f:d7:8a:79:65:65:bb:81:41:88:22:bd:52:b7:3b:ea:22: 00:58:20:61:35:f9:05:18:28:f0:aa:36:80:9c:fc:a8:65:8d: e4:01:dc:f3:c5:12:de:77:d9:11:61:2f:3a:ee:6a:dd:3f:52: 51:aa:52:12:8b:e3:41:e1:a6:64:b0:c2:28:5e:5c:bf:24:1a: 3c:39:2a:f5 -----BEGIN CERTIFICATE----- MIIG+DCCBeCgAwIBAgIUAQ0Mn0MoWEWioLHqMOVJZj63WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDQyMjIzNTA0OFoXDTI2MDcyNjIzNTA0OFowLzEtMCsGA1UEAxMk Y2YwMTY2NzgtZGFiMy00M2QxLWI3ZWEtNWQzYWQ4MTQ4ZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2qcQRlyuvCdIMFY5CSzp9lThsveoiSMBN6Y SMPokv6RKUUEwK7NSoHTnEQX3N4rfMJV6YiZJ9OgRZZ8frc1IGUO6u7LlCOwltNt gJQdSa8YLLEVkW4J0AMM2TS2p3CN6pfpVp/sT9F/Grti6HfaeBwN5e/Kx8xJny7h uFdpwj//gRreymgskv0lG41wJcv7h/ch49rBJav4F1wiOBDTksrzR9MvDBBcsb2o bdjBgbqUiclqS6an1bd2rI53ARvy9blUkpn8tYDeu5GB9JuGe+oU9nxhlcsFEalL /nzdAZM+8NcxuHg/IWucuLBTTy0iffJc/I1gt5Zk1bSwNSebiQIDAQABo4IECjCC BAYwHQYDVR0OBBYEFEaF0lBrkFDTF5NuEXHqw4uZ5QE2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9j ZjAxNjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNhZDgxNDhlOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2NmMDE2Njc4LWRhYjMtNDNkMS1i N2VhLTVkM2FkODE0OGU5Ny9jZjAxNjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNhZDgx NDhlOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwClhwMEAMBoNgMEAMCFfTBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0lHvg 4bQ2DpXn5DSEjTbKidtXh2lbajrrq1hqsX9dvKJZEP6FIAF2ymnZhqI0PKuCd2Ld cl8HB/9++Kdot22oOlfNx+VecjxQZQ39wKRHqkG4qKLAU1MjtXmwUXGyE770H1+Y EGhVgm2MWSKmlQfYzysnSF6eugjiOSgQB79rpkw93ifX6mGL0PkwVxS0JYEGbNtg 5+siGhndwz8ZxhXGlLUXp6XTwC+IZPN4a7PuzXpWiHF4H9eKeWVlu4FBiCK9Urc7 6iIAWCBhNfkFGCjwqjaAnPyoZY3kAdzzxRLed9kRYS867mrdP1JRqlISi+NB4aZk sMIoXly/JBo8OSr1 -----END CERTIFICATE-----Generated at Sat Jun 1 18:10:14 2024 by rpki-client on console-ams.rpki-client.org