$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e53f4039-0354-46d9-9dd0-7c5c925b9d53.cer File: e53f4039-0354-46d9-9dd0-7c5c925b9d53.cer (raw, json) Hash identifier: vQkjoG81U2FGLF8rHikKgcQRrCNxeL7Q7b0ZOTeT+BU= Subject key identifier: B4:AA:63:20:3B:0A:93:AB:89:B4:82:12:B6:D9:68:FA:67:15:DF:08 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F43285846B343EAA3753BD5FC36905E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e53f4039-0354-46d9-9dd0-7c5c925b9d53/e53f4039-0354-46d9-9dd0-7c5c925b9d53.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e53f4039-0354-46d9-9dd0-7c5c925b9d53/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 29 Jul 2024 15:39:33 +0000 Certificate not after: Sun 01 Nov 2026 16:39:33 +0000 Subordinate resources: IP: 198.59.46.0 -- 198.59.49.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:b3:43:ea:a3:75:3b:d5:fc:36:90:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Jul 29 15:39:33 2024 GMT Not After : Nov 1 16:39:33 2026 GMT Subject: CN=e53f4039-0354-46d9-9dd0-7c5c925b9d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4b:dd:f0:1e:7a:26:18:44:0c:81:fb:39:d7: 4a:f3:a2:4b:8d:dc:55:31:cd:df:54:5c:3b:61:7e: 7b:8c:de:ce:64:80:0f:dd:c2:67:02:ab:92:a5:2c: 4c:24:8d:a5:5b:c8:42:a0:dc:ef:42:a1:45:0c:ef: 52:fb:5f:06:a8:c0:eb:cb:4e:82:87:69:36:83:c4: d0:37:b8:d0:68:a7:ca:b1:66:2f:e7:d6:be:d6:57: 2a:fd:55:f9:ec:d6:8b:da:d6:5b:62:4d:62:59:27: 48:c1:93:20:06:ab:bf:48:cf:4b:82:0c:81:e9:06: 36:18:da:ce:1c:57:76:19:1a:ce:b6:7c:d2:2d:8c: fa:e7:35:6c:c9:67:2d:3e:b0:d7:b2:68:c2:8d:7d: 6f:49:f4:6c:cf:1d:66:80:12:09:11:02:f8:f3:85: 84:37:07:3a:6c:f9:d9:28:99:b3:b9:ef:53:1d:fa: ad:44:d1:37:a7:1c:2f:f6:55:02:58:18:6b:7a:fe: 13:70:e5:a1:63:7f:d9:4e:83:ef:8b:45:ec:84:47: 25:f6:77:b3:1f:af:f2:b6:30:0a:d7:aa:61:a3:e5: 1d:9b:0a:11:c8:47:eb:8c:7c:ee:41:f8:48:86:21: 9f:e9:28:39:b2:fe:28:a3:03:3b:7a:7e:88:79:4c: b2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AA:63:20:3B:0A:93:AB:89:B4:82:12:B6:D9:68:FA:67:15:DF:08 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e53f4039-0354-46d9-9dd0-7c5c925b9d53/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e53f4039-0354-46d9-9dd0-7c5c925b9d53/e53f4039-0354-46d9-9dd0-7c5c925b9d53.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 198.59.46.0-198.59.49.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:fd:52:e8:3c:60:db:f9:f4:40:2a:22:7d:85:aa:37:0c:5d: e8:8a:3f:a1:29:fd:8d:99:0a:01:f8:97:8d:7c:d1:75:ff:14: bf:67:86:89:8d:cb:1d:37:98:d4:5e:ab:3d:32:af:eb:b1:b6: ed:ab:80:b8:4a:03:a2:e6:d5:7e:db:c6:d7:52:d2:4d:43:ba: 4f:9c:62:98:61:d3:1f:b8:38:1a:c7:9a:38:77:68:8c:87:bf: 98:93:45:9c:99:fd:38:45:7b:f7:25:0d:c5:6c:f2:71:07:f1: 62:4c:be:21:ba:89:d9:01:1f:e9:d1:b2:be:78:39:72:9b:1e: b1:04:8a:47:01:01:68:ba:67:18:78:1a:30:1b:27:24:78:6a: 80:23:a0:71:e7:95:aa:93:98:5d:1a:97:76:0a:d7:da:f4:38: 2a:1d:37:01:cd:ae:7b:58:7d:2b:db:28:38:23:ec:b4:f6:ad: 9f:f1:dd:43:01:06:a6:d8:75:ea:54:57:9f:f1:fd:08:83:f3: 65:fa:72:f6:3d:eb:5b:d2:c9:e5:96:cd:a8:45:36:9e:20:f5: a6:92:35:f2:1e:1a:06:d9:29:70:26:c7:9f:a9:c9:1b:e0:9d: e6:d9:58:2d:db:ba:38:f5:49:83:bf:55:26:ca:0f:41:9f:8a: 32:fc:a3:9b -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEazQ+qjdTvV/DaQXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI0MDcyOTE1MzkzM1oXDTI2MTEwMTE2MzkzM1owLzEtMCsGA1UEAxMk ZTUzZjQwMzktMDM1NC00NmQ5LTlkZDAtN2M1YzkyNWI5ZDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkvd8B56JhhEDIH7OddK86JLjdxVMc3fVFw7 YX57jN7OZIAP3cJnAquSpSxMJI2lW8hCoNzvQqFFDO9S+18GqMDry06Ch2k2g8TQ N7jQaKfKsWYv59a+1lcq/VX57NaL2tZbYk1iWSdIwZMgBqu/SM9LggyB6QY2GNrO HFd2GRrOtnzSLYz65zVsyWctPrDXsmjCjX1vSfRszx1mgBIJEQL484WENwc6bPnZ KJmzue9THfqtRNE3pxwv9lUCWBhrev4TcOWhY3/ZToPvi0XshEcl9nezH6/ytjAK 16pho+UdmwoRyEfrjHzuQfhIhiGf6Sg5sv4oowM7en6IeUyyswIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFLSqYyA7CpOribSCErbZaPpnFd8IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9l NTNmNDAzOS0wMzU0LTQ2ZDktOWRkMC03YzVjOTI1YjlkNTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2U1M2Y0MDM5LTAzNTQtNDZkOS05 ZGQwLTdjNWM5MjViOWQ1My9lNTNmNDAzOS0wMzU0LTQ2ZDktOWRkMC03YzVjOTI1 YjlkNTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAcY7LgMEAcY7MDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3/VLoPGDb +fRAKiJ9hao3DF3oij+hKf2NmQoB+JeNfNF1/xS/Z4aJjcsdN5jUXqs9Mq/rsbbt q4C4SgOi5tV+28bXUtJNQ7pPnGKYYdMfuDgax5o4d2iMh7+Yk0Wcmf04RXv3JQ3F bPJxB/FiTL4huonZAR/p0bK+eDlymx6xBIpHAQFoumcYeBowGyckeGqAI6Bx55Wq k5hdGpd2Ctfa9DgqHTcBza57WH0r2yg4I+y09q2f8d1DAQam2HXqVFef8f0Ig/Nl +nL2Petb0snlls2oRTaeIPWmkjXyHhoG2SlwJsefqckb4J3m2Vgt27o49UmDv1Um yg9Bn4oy/KOb -----END CERTIFICATE-----Generated at Thu Nov 21 22:36:43 2024 by rpki-client on console-fra.rpki-client.org