$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer File: 64b51de8-9235-4199-90c9-93aee2696fab.cer (raw, json) Hash identifier: 8axm6jkZEgBPtSq2TT5KHKtNQGXMIjfLGNsGO4pIfVo= Subject key identifier: 09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285843E93D0C312DEF0BE9643ABAF8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Nov 2023 21:18:33 +0000 Certificate not after: Wed 18 Feb 2026 21:18:33 +0000 Subordinate resources: IP: 192.189.104.0/24 IP: 198.23.32.0/20 IP: 198.186.64.0/18 IP: 199.4.216.0/23 IP: 199.47.16.0/20 IP: 199.250.64.0/18 IP: 204.80.212.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:e9:3d:0c:31:2d:ef:0b:e9:64:3a:ba:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Nov 16 21:18:33 2023 GMT Not After : Feb 18 21:18:33 2026 GMT Subject: CN=64b51de8-9235-4199-90c9-93aee2696fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:63:18:04:53:cd:ca:9c:0d:68:8e:d2:df: 42:4d:66:34:6b:d2:01:a3:1f:d6:27:cc:76:a4:97: f6:39:4b:fd:c5:8e:24:0a:ab:e7:9c:78:68:3b:dc: 16:cb:d2:26:ef:88:c8:2c:a6:a4:e8:38:34:f0:2f: d7:9a:c1:8c:43:bb:4f:66:95:4f:db:e4:e9:b2:6f: 77:bc:0d:11:b4:4d:dc:50:65:4e:ed:b2:38:76:1b: 1f:21:fc:d3:a1:af:35:fb:d9:7a:5a:97:d8:25:91: 85:f7:bd:e4:27:e7:56:51:6d:29:bb:7a:cc:ed:eb: e2:d4:d8:58:21:8c:05:0e:f3:a5:a4:b8:c2:cf:39: bc:aa:f9:64:f6:13:51:1f:dd:b7:5b:25:36:96:49: af:66:90:d6:67:87:b9:ac:5f:04:03:0a:7d:a9:c3: 06:45:5c:58:37:f4:de:4c:1a:1b:7c:54:19:9c:02: 1a:c8:55:4b:da:de:d0:29:b6:6e:94:1d:a5:c7:f7: e2:7b:a8:f7:d6:d7:f7:2e:28:75:87:27:1f:9a:62: f9:89:5b:49:0f:13:5b:18:bc:6b:3e:bb:70:8f:4c: ad:f3:7f:1a:19:40:0e:cf:20:a8:0e:0b:25:34:ad: 81:6f:a3:10:cb:59:8a:55:cd:ea:03:cf:bb:29:04: 5e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 192.189.104.0/24 198.23.32.0/20 198.186.64.0/18 199.4.216.0/23 199.47.16.0/20 199.250.64.0/18 204.80.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b4:6a:7f:a1:8e:f5:6d:8e:6c:1a:da:07:f3:96:eb:55:f2: 0f:a2:9b:5f:52:d0:62:9a:92:43:4b:3c:83:62:ce:1d:9c:99: 7e:66:c3:c0:5b:88:ad:97:07:ea:fc:c9:f1:75:48:79:9f:b4: 89:17:f8:55:70:e1:fd:10:be:08:cc:b2:32:55:af:c3:09:24: 97:18:22:d2:13:90:8a:61:d5:05:5c:87:7e:bf:a3:32:3f:b7: 88:05:3e:a7:25:09:74:30:fa:67:bc:28:d5:df:30:56:e1:bb: 9a:50:c3:e3:97:66:f7:c5:19:00:f0:30:d4:7d:53:1a:7c:11: 5c:72:40:a8:7d:ef:d4:fb:ce:91:59:e6:e9:19:04:37:be:8a: 62:cc:14:f4:af:63:98:d8:23:ed:28:63:bd:e9:8b:d6:84:88: 2a:35:8b:d5:17:74:eb:e0:26:a1:c8:97:b9:4f:46:5c:3d:9e: c9:01:28:d2:4a:35:a5:b9:07:7e:85:3e:cb:a3:bd:2b:44:1c: 37:57:1b:ee:ad:a2:af:c8:c9:5b:d9:0a:0e:ac:de:dc:5b:69: 36:19:d9:ef:a9:a2:f4:66:57:67:c9:7e:64:1f:28:49:f1:76: 78:6b:54:3b:56:7f:c3:c1:04:47:30:c9:d7:83:69:ad:5c:07: 13:91:df:8f -----BEGIN CERTIFICATE----- MIIHETCCBfmgAwIBAgIUAQ0Mn0MoWEPpPQwxLe8L6WQ6uvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTIzMTExNjIxMTgzM1oXDTI2MDIxODIxMTgzM1owLzEtMCsGA1UEAxMk NjRiNTFkZTgtOTIzNS00MTk5LTkwYzktOTNhZWUyNjk2ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf9jGARTzcqcDWiO0t9CTWY0a9IBox/WJ8x2 pJf2OUv9xY4kCqvnnHhoO9wWy9Im74jILKak6Dg08C/XmsGMQ7tPZpVP2+Tpsm93 vA0RtE3cUGVO7bI4dhsfIfzToa81+9l6WpfYJZGF973kJ+dWUW0pu3rM7evi1NhY IYwFDvOlpLjCzzm8qvlk9hNRH923WyU2lkmvZpDWZ4e5rF8EAwp9qcMGRVxYN/Te TBobfFQZnAIayFVL2t7QKbZulB2lx/fie6j31tf3Lih1hycfmmL5iVtJDxNbGLxr Prtwj0yt838aGUAOzyCoDgslNK2Bb6MQy1mKVc3qA8+7KQRevwIDAQABo4IEIzCC BB8wHQYDVR0OBBYEFAn3KrTEUjfoVKpidL70xOKbwrRPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82 NGI1MWRlOC05MjM1LTQxOTktOTBjOS05M2FlZTI2OTZmYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzY0YjUxZGU4LTkyMzUtNDE5OS05 MGM5LTkzYWVlMjY5NmZhYi82NGI1MWRlOC05MjM1LTQxOTktOTBjOS05M2FlZTI2 OTZmYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwQwYIKwYBBQUH AQcBAf8ENDAyMDAEAgABMCoDBADAvWgDBATGFyADBAbGukADBAHHBNgDBATHLxAD BAbH+kADBADMUNQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAS7Rqf6GO9W2ObBraB/OW61XyD6KbX1LQYpqS Q0s8g2LOHZyZfmbDwFuIrZcH6vzJ8XVIeZ+0iRf4VXDh/RC+CMyyMlWvwwkklxgi 0hOQimHVBVyHfr+jMj+3iAU+pyUJdDD6Z7wo1d8wVuG7mlDD45dm98UZAPAw1H1T GnwRXHJAqH3v1PvOkVnm6RkEN76KYswU9K9jmNgj7ShjvemL1oSIKjWL1Rd06+Am ociXuU9GXD2eyQEo0ko1pbkHfoU+y6O9K0QcN1cb7q2ir8jJW9kKDqze3FtpNhnZ 76mi9GZXZ8l+ZB8oSfF2eGtUO1Z/w8EERzDJ14NprVwHE5Hfjw== -----END CERTIFICATE-----Generated at Thu Nov 21 16:27:15 2024 by rpki-client on console-ams.rpki-client.org