$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer File: d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer (raw, json) Hash identifier: VbllTr4QWv/bCmoe+nhJk74UX6iJzr3ET9r/8RPpEvg= Subject key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B Authority key identifier: 47:48:42:15:CC:58:81:BA:B2:36:64:C5:7F:B1:B8:61:95:79:3B:82 Certificate issuer: /CN=4016a9a5-6e7c-4633-a4c3-24ad1b7f0785 Certificate serial: 010D0C9F43285844F76975B867F06D43FFBB0380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Wed 21 Feb 2024 15:56:17 +0000 Certificate not after: Tue 26 May 2026 14:56:17 +0000 Subordinate resources: IP: 64.52.14.0/24 IP: 147.189.152.0/23 IP: 173.249.188.0/22 IP: 176.103.218.0/24 IP: 216.211.208.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f7:69:75:b8:67:f0:6d:43:ff:bb:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4016a9a5-6e7c-4633-a4c3-24ad1b7f0785 Validity Not Before: Feb 21 15:56:17 2024 GMT Not After : May 26 14:56:17 2026 GMT Subject: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:ae:ee:75:a5:73:ed:71:81:c3:f5:a2:d4: b1:37:ac:92:a2:83:df:a9:5b:09:df:ce:df:46:dd: 26:c1:8a:64:d8:a1:0b:13:91:39:05:ca:d1:72:d2: 6a:57:7a:e7:e9:9f:59:03:77:97:39:d7:28:b7:32: 00:63:c1:1f:82:3c:ba:90:f9:81:ae:7a:0b:d1:a0: 89:80:e7:88:6d:0b:77:cf:b9:2b:99:90:52:5a:b3: 75:df:bb:37:e1:99:1b:cb:ae:dc:a9:d5:fe:47:3f: 26:e9:a8:db:06:d4:bf:26:38:c7:3c:97:b8:87:f6: 6b:5a:e5:7a:d2:31:ae:3b:89:f7:31:b2:71:53:71: 2e:06:fd:dc:10:3d:dd:3d:80:c7:90:1a:04:16:ac: 3c:6d:3c:99:ff:f2:59:8a:d9:d2:5d:c0:1c:f1:ed: 82:6e:f2:65:bc:1a:4e:a7:73:a6:ca:84:c4:6b:df: 81:3a:36:16:30:ad:22:ba:1a:8f:e4:a4:b5:e2:e5: 9a:12:d4:e2:47:d8:4d:65:30:62:70:af:24:6b:bc: 83:78:92:23:f0:c2:a0:c6:60:19:3d:99:94:de:b0: da:91:66:33:4a:d2:21:6d:83:6d:88:b4:f9:23:e2: 0c:5a:d0:82:df:cf:4a:23:d0:51:e2:62:4e:50:f4: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl X509v3 Authority Key Identifier: keyid:47:48:42:15:CC:58:81:BA:B2:36:64:C5:7F:B1:B8:61:95:79:3B:82 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer sbgp-ipAddrBlock: critical IPv4: 64.52.14.0/24 147.189.152.0/23 173.249.188.0/22 176.103.218.0/24 216.211.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:56:42:02:8e:2a:69:ab:70:6f:87:24:82:99:37:a8:83:f0: a5:69:3d:39:68:ac:72:94:99:88:46:6f:cd:dc:4f:dd:b9:87: 2b:07:71:75:2d:20:01:4b:75:9a:39:c3:04:a9:a0:4e:a0:1f: db:98:df:db:22:fe:65:5c:b0:5c:b9:6f:88:6d:d9:d5:15:40: 90:db:07:9f:97:b8:f0:8b:a6:cd:3e:ed:dd:31:ac:b1:85:49: 7d:1a:32:8e:ff:5b:65:73:98:6d:d7:b7:de:cf:7a:1e:11:87: 6f:9b:a7:50:55:4f:df:47:00:a0:9c:ec:50:0e:64:6c:e0:6f: 0f:bd:c7:41:cc:37:15:a9:f7:4f:53:2d:55:09:c1:e3:54:46: b5:4c:3f:02:6a:c6:fd:1c:6d:b8:59:b4:ca:e4:ab:a6:c4:d8: 8f:e1:5b:b0:e1:29:e0:7f:19:77:8d:de:e2:4c:63:5a:c2:fa: 5e:1b:a4:d6:80:61:20:f1:5f:56:ab:71:f8:23:3a:80:0d:80: 31:fd:2c:85:03:e8:b7:3d:bb:65:d3:d1:1f:82:66:82:75:2f: d2:8f:a3:08:c4:e8:03:94:11:da:67:01:03:64:86:a5:78:55: 6c:22:62:7c:e2:06:e5:d2:6d:66:b0:28:ca:6e:38:f1:bd:e9: f1:9f:b4:ec -----BEGIN CERTIFICATE----- MIIGuTCCBaGgAwIBAgIUAQ0Mn0MoWET3aXW4Z/BtQ/+7A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNmE5YTUtNmU3Yy00NjMzLWE0YzMtMjRhZDFiN2Yw Nzg1MB4XDTI0MDIyMTE1NTYxN1oXDTI2MDUyNjE0NTYxN1owPTE7MDkGA1UEAxMy ZDU4NWRkYzcyNDgwZjY5NzM2ZDBkYmZiNGZiN2JiYmJlYTMwMjU5NzdiYTk2YzMx NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5R67udaVz7XGBw/Wi 1LE3rJKig9+pWwnfzt9G3SbBimTYoQsTkTkFytFy0mpXeufpn1kDd5c51yi3MgBj wR+CPLqQ+YGuegvRoImA54htC3fPuSuZkFJas3XfuzfhmRvLrtyp1f5HPybpqNsG 1L8mOMc8l7iH9mta5XrSMa47ifcxsnFTcS4G/dwQPd09gMeQGgQWrDxtPJn/8lmK 2dJdwBzx7YJu8mW8Gk6nc6bKhMRr34E6NhYwrSK6Go/kpLXi5ZoS1OJH2E1lMGJw ryRrvIN4kiPwwqDGYBk9mZTesNqRZjNK0iFtg22ItPkj4gxa0ILfz0oj0FHiYk5Q 9NnPAgMBAAGjggO9MIIDuTAdBgNVHQ4EFgQUHpJwl/lhzWLGhCIRIGeRWFaI6msw ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4Y2VhMmFjNjAxOGRjYzYx YjQyNjUxZDYvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4Y2VhMmFjNjAxOGRjYzYxYjQyNjUxZDYv MC8xRTkyNzA5N0Y5NjFDRDYyQzY4NDIyMTEyMDY3OTE1ODU2ODhFQTZCLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1 Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQwMTZhOWE1LTZlN2MtNDYzMy1hNGMz LTI0YWQxYjdmMDc4NS80MDE2YTlhNS02ZTdjLTQ2MzMtYTRjMy0yNGFkMWI3ZjA3 ODUuY3JsMB8GA1UdIwQYMBaAFEdIQhXMWIG6sjZkxX+xuGGVeTuCMA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt OGY2Yy1kNmM5MWIwYjg0MTUvNDAxNmE5YTUtNmU3Yy00NjMzLWE0YzMtMjRhZDFi N2YwNzg1LmNlcjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAEA0DgMEAZO9 mAMEAq35vAMEALBn2gMEAtjT0DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKVkICjippq3BvhySCmTeog/Cl aT05aKxylJmIRm/N3E/duYcrB3F1LSABS3WaOcMEqaBOoB/bmN/bIv5lXLBcuW+I bdnVFUCQ2wefl7jwi6bNPu3dMayxhUl9GjKO/1tlc5ht17fez3oeEYdvm6dQVU/f RwCgnOxQDmRs4G8PvcdBzDcVqfdPUy1VCcHjVEa1TD8Casb9HG24WbTK5KumxNiP 4Vuw4Sngfxl3jd7iTGNawvpeG6TWgGEg8V9Wq3H4IzqADYAx/SyFA+i3Pbtl09Ef gmaCdS/Sj6MIxOgDlBHaZwEDZIaleFVsImJ84gbl0m1msCjKbjjxvenxn7Ts -----END CERTIFICATE-----Generated at Fri May 17 17:50:20 2024 by rpki-client on console-ams.rpki-client.org