$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer File: 28b0e2e4-5f2a-4ecd-ad6b-97416951f017.cer (raw, json) Hash identifier: JVg0aTgWGWA256JfRNUNC+7oT9UBR5nXwNP+tE/koQ8= Subject key identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F4328584426A46494050FDF1D2FAEFB10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Dec 2023 21:11:05 +0000 Certificate not after: Thu 12 Mar 2026 20:11:05 +0000 Subordinate resources: IP: 137.82.0.0/16 IP: 142.103.0.0/16 IP: 192.5.96.0/24 IP: 192.73.5.0/24 IP: 198.162.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:26:a4:64:94:05:0f:df:1d:2f:ae:fb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Dec 8 21:11:05 2023 GMT Not After : Mar 12 20:11:05 2026 GMT Subject: CN=28b0e2e4-5f2a-4ecd-ad6b-97416951f017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:04:7d:cf:5d:f0:b4:4a:7a:03:03:fd:5f:b9: ee:8e:67:18:6e:00:7a:cf:ad:75:46:6b:aa:4b:74: 0d:22:44:9a:67:67:fe:71:74:d3:4b:49:50:63:c9: f8:59:f1:3b:da:f4:68:db:07:04:c7:d8:1d:0b:ac: 40:19:e8:3a:0b:f6:95:65:d5:fc:6b:e0:1d:4d:84: 4c:f5:94:2d:e0:7b:fd:e5:e0:03:b3:dd:b8:11:03: c0:2e:58:15:1a:fc:27:3b:61:72:4e:3d:f3:0a:26: 8f:fe:55:10:ba:a1:70:cc:7a:fd:a7:cf:59:32:5a: 75:af:65:22:d1:77:c3:cd:ce:60:24:a5:8d:57:ce: 3a:a5:65:0b:f1:eb:a9:1e:8b:1d:4f:67:d3:37:91: 57:e7:3c:ff:29:22:15:56:54:21:b7:41:8f:c5:4c: a5:50:b8:55:42:54:3a:6a:14:f3:ec:31:6e:af:f1: 5c:f5:81:fe:02:94:93:76:c8:15:2f:7f:39:a6:4f: ca:20:93:aa:0d:78:2e:97:a3:b7:9c:84:20:d6:56: 64:d3:7e:05:b2:48:0a:ce:b4:0e:1d:8b:c7:a7:10: 0e:22:cc:b9:94:eb:32:e0:82:a6:75:5c:f4:52:a5: d4:03:b3:3e:5c:56:b1:8f:46:15:22:b8:b2:ff:e9: 3f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E0:85:36:78:70:3F:C9:6B:CE:79:FC:9F:32:58:F4:FF:32:02:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/28b0e2e4-5f2a-4ecd-ad6b-97416951f017/28b0e2e4-5f2a-4ecd-ad6b-97416951f017.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 137.82.0.0/16 142.103.0.0/16 192.5.96.0/24 192.73.5.0/24 198.162.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:55:d1:bd:84:e5:5d:ac:7d:9a:c0:02:9e:5a:d4:74:87:18: 57:80:a8:f1:eb:3c:10:e0:ef:fa:8d:52:98:57:ef:27:6c:63: 2f:71:8d:bc:1b:57:c9:c0:ea:8b:70:52:95:7a:83:e4:d3:cd: 9e:70:43:a2:62:cd:db:5e:b2:be:5a:2d:72:d1:80:1b:85:92: d1:3b:a8:4d:2b:a0:75:3c:94:a5:ff:1a:68:33:9f:20:9f:48: 92:d1:bc:40:10:30:99:91:3b:fd:e6:5b:3d:e6:4a:53:08:03: a6:a3:dd:e9:b3:b9:f7:22:92:5f:d1:c9:29:bf:d5:83:ac:18: 43:7b:f0:7f:c5:f5:06:d3:b4:2e:8d:38:e0:5f:c4:74:dc:79: 44:d8:6d:e6:05:0b:2b:f2:36:32:1f:d9:25:2f:ee:d8:84:16: fd:67:38:d8:37:90:e5:1f:e1:d6:54:4b:09:75:69:92:41:10: 15:cc:ad:35:21:48:2b:a1:23:ba:64:c8:5b:1b:e1:1c:63:ad: f2:78:6d:62:86:2d:12:63:1a:c5:09:68:fb:a8:fc:64:53:46: 11:68:40:89:b3:34:e1:4b:7f:eb:bc:b7:9f:12:fa:e1:42:31: 22:1a:0b:85:e3:35:85:56:6c:ec:ea:fc:61:47:82:c7:9b:0a: 06:86:e1:ce -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgIUAQ0Mn0MoWEQmpGSUBQ/fHS+u+xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTIwODIxMTEwNVoXDTI2MDMxMjIwMTEwNVowLzEtMCsGA1UEAxMk MjhiMGUyZTQtNWYyYS00ZWNkLWFkNmItOTc0MTY5NTFmMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQR9z13wtEp6AwP9X7nujmcYbgB6z611Rmuq S3QNIkSaZ2f+cXTTS0lQY8n4WfE72vRo2wcEx9gdC6xAGeg6C/aVZdX8a+AdTYRM 9ZQt4Hv95eADs924EQPALlgVGvwnO2FyTj3zCiaP/lUQuqFwzHr9p89ZMlp1r2Ui 0XfDzc5gJKWNV846pWUL8eupHosdT2fTN5FX5zz/KSIVVlQht0GPxUylULhVQlQ6 ahTz7DFur/Fc9YH+ApSTdsgVL385pk/KIJOqDXgul6O3nIQg1lZk034FskgKzrQO HYvHpxAOIsy5lOsy4IKmdVz0UqXUA7M+XFaxj0YVIriy/+k/DQIDAQABo4IEFTCC BBEwHQYDVR0OBBYEFHjghTZ4cD/Ja855/J8yWPT/MgJVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8y OGIwZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQxNjk1MWYwMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzI4YjBlMmU0LTVmMmEtNGVjZC1h ZDZiLTk3NDE2OTUxZjAxNy8yOGIwZTJlNC01ZjJhLTRlY2QtYWQ2Yi05NzQxNjk1 MWYwMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMCIEAgABMBwDAwCJUgMDAI5nAwQAwAVgAwQAwEkFAwQFxqIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtV0b2E5V2sfZrAAp5a1HSHGFeAqPHrPBDg7/qNUphX7ydsYy9xjbwb V8nA6otwUpV6g+TTzZ5wQ6Jizdtesr5aLXLRgBuFktE7qE0roHU8lKX/GmgznyCf SJLRvEAQMJmRO/3mWz3mSlMIA6aj3emzufcikl/RySm/1YOsGEN78H/F9QbTtC6N OOBfxHTceUTYbeYFCyvyNjIf2SUv7tiEFv1nONg3kOUf4dZUSwl1aZJBEBXMrTUh SCuhI7pkyFsb4RxjrfJ4bWKGLRJjGsUJaPuo/GRTRhFoQImzNOFLf+u8t58S+uFC MSIaC4XjNYVWbOzq/GFHgsebCgaG4c4= -----END CERTIFICATE-----Generated at Sat May 11 15:35:56 2024 by rpki-client on console-fra.rpki-client.org