$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer File: 32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.cer (raw, json) Hash identifier: oD0sgywTjngEGG0VGb8eDlpgFuTztz0jPzljsloVMOg= Subject key identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F43285847133E1C337102CB7015D7EA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Sep 2024 00:45:27 +0000 Certificate not after: Sun 06 Dec 2026 01:45:27 +0000 Subordinate resources: IP: 199.33.230.0 -- 199.33.233.255 IP: 2001:503:ff40::/46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:13:3e:1c:33:71:02:cb:70:15:d7:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Sep 2 00:45:27 2024 GMT Not After : Dec 6 01:45:27 2026 GMT Subject: CN=32d9b6a7-2ed5-448b-9bcb-8d262acc3f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:1e:29:20:52:d8:06:fd:5f:17:54:de:3a: a1:db:6e:6b:8a:42:98:be:a8:11:c3:54:84:46:47: 41:e1:ff:11:4e:37:e8:0b:f6:d7:93:50:f8:45:2c: c7:6b:c6:f2:a0:bf:4d:ac:47:90:17:f8:a1:29:2f: 3a:56:c6:30:91:cd:6d:0f:d2:41:7b:43:f4:9b:ee: 77:29:df:15:99:0b:ef:26:6f:48:aa:b3:d1:0a:d2: 60:df:51:82:81:cd:60:6d:8c:86:87:b9:a9:e7:46: ce:8e:16:be:00:59:7b:b6:07:95:e7:eb:48:55:be: 93:14:10:a5:3f:5d:50:fb:35:dc:68:5d:f8:0d:82: 52:d7:5a:7f:4d:99:22:af:0d:36:7b:a3:cb:cf:95: b5:01:33:27:98:b8:90:5a:65:44:20:17:41:56:65: 24:4d:22:fc:38:ba:69:fa:0d:0b:9c:1b:e0:bd:16: 07:0a:5d:98:b4:9f:7e:71:a4:e0:40:b2:ae:c8:ba: e9:b8:e7:16:44:08:66:74:ed:91:70:f7:0e:72:85: f1:85:0b:97:cb:35:8c:bb:1a:a5:36:8a:a4:d5:82: 24:29:ba:bc:a4:d0:83:96:14:7a:1f:0b:7a:97:8c: 39:c4:87:0c:da:11:b0:ff:9b:88:0f:52:2c:60:55: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7F:AA:77:BF:AF:E7:2B:2A:B3:CA:D2:1E:AC:4C:10:01:1D:A4:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76/32d9b6a7-2ed5-448b-9bcb-8d262acc3f76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 199.33.230.0-199.33.233.255 IPv6: 2001:503:ff40::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1c:b9:3a:c7:50:4c:35:b2:4f:a4:f9:06:b2:af:9c:76:71: 98:1e:b6:a4:17:4e:92:0e:71:c3:de:75:8c:ca:ca:a9:76:01: 98:17:8a:47:09:bd:4b:7a:b1:3c:a8:54:49:14:23:d6:2e:93: ec:18:d2:e2:2e:14:93:1e:ff:e3:1a:09:0c:bf:97:55:f6:9c: 12:bc:bd:b0:3b:6a:6f:59:6b:19:93:c3:52:4f:92:24:28:45: 21:50:3f:ab:57:b6:6a:f4:5b:3d:bf:bc:44:6c:05:fb:ca:3a: 32:d9:92:15:e2:f2:c2:a6:59:e2:32:31:76:be:ef:12:a2:7e: ba:81:34:94:b2:bf:c0:51:78:00:ff:00:d7:84:60:8d:d0:67: 62:87:96:03:10:5d:d3:a2:68:b5:30:91:ea:3e:03:6f:1b:5c: dd:20:04:fd:a3:1d:12:a9:4d:d1:ce:7c:ea:7c:86:dc:d0:a2: dc:f3:56:f9:70:7c:67:8b:1a:67:61:87:03:50:5b:f9:30:ba: d2:7e:b3:5f:fb:22:de:d7:67:5e:0f:9f:b2:4a:5b:12:0a:bf: 1d:c0:16:37:7b:98:1b:9b:ae:a6:df:7a:77:77:b7:20:75:81: 03:60:32:84:2b:93:57:75:c5:e5:65:1d:86:87:d1:28:2b:a4: c6:51:4c:cc -----BEGIN CERTIFICATE----- MIIHBjCCBe6gAwIBAgIUAQ0Mn0MoWEcTPhwzcQLLcBXX6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MDkwMjAwNDUyN1oXDTI2MTIwNjAxNDUyN1owLzEtMCsGA1UEAxMk MzJkOWI2YTctMmVkNS00NDhiLTliY2ItOGQyNjJhY2MzZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU4eKSBS2Ab9XxdU3jqh225rikKYvqgRw1SE RkdB4f8RTjfoC/bXk1D4RSzHa8byoL9NrEeQF/ihKS86VsYwkc1tD9JBe0P0m+53 Kd8VmQvvJm9IqrPRCtJg31GCgc1gbYyGh7mp50bOjha+AFl7tgeV5+tIVb6TFBCl P11Q+zXcaF34DYJS11p/TZkirw02e6PLz5W1ATMnmLiQWmVEIBdBVmUkTSL8OLpp +g0LnBvgvRYHCl2YtJ9+caTgQLKuyLrpuOcWRAhmdO2RcPcOcoXxhQuXyzWMuxql Noqk1YIkKbq8pNCDlhR6Hwt6l4w5xIcM2hGw/5uID1IsYFVVjwIDAQABo4IEGDCC BBQwHQYDVR0OBBYEFD9/qne/r+crKrPK0h6sTBABHaQqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8z MmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFjYzNmNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzMyZDliNmE3LTJlZDUtNDQ4Yi05 YmNiLThkMjYyYWNjM2Y3Ni8zMmQ5YjZhNy0yZWQ1LTQ0OGItOWJjYi04ZDI2MmFj YzNmNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMBQEAgABMA4wDAMEAcch5gMEAcch6DAPBAIAAjAJAwcCIAEFA/9A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABAcuTrHUEw1sk+k+Qayr5x2cZgetqQXTpIOccPedYzKyql2AZgX ikcJvUt6sTyoVEkUI9Yuk+wY0uIuFJMe/+MaCQy/l1X2nBK8vbA7am9ZaxmTw1JP kiQoRSFQP6tXtmr0Wz2/vERsBfvKOjLZkhXi8sKmWeIyMXa+7xKifrqBNJSyv8BR eAD/ANeEYI3QZ2KHlgMQXdOiaLUwkeo+A28bXN0gBP2jHRKpTdHOfOp8htzQotzz VvlwfGeLGmdhhwNQW/kwutJ+s1/7It7XZ14Pn7JKWxIKvx3AFjd7mBubrqbfend3 tyB1gQNgMoQrk1d1xeVlHYaH0SgrpMZRTMw= -----END CERTIFICATE-----Generated at Fri Nov 22 08:06:23 2024 by rpki-client on console-ams.rpki-client.org