$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer File: 5f8eb08f-0895-4c2b-8851-fe9215edcff0.cer (raw, json) Hash identifier: IUY+ZM9LngDpnB7zrhO/SE7e3rCdVNUSu2Jm67o/am4= Subject key identifier: 49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12 Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 Certificate issuer: /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Certificate serial: 010D0C9F432858479C099F15CB2720D49E4AF800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Oct 2024 00:45:26 +0000 Certificate not after: Sun 24 Jan 2027 01:45:26 +0000 Subordinate resources: IP: 192.16.104.0/22 IP: 204.144.176.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9c:09:9f:15:cb:27:20:d4:9e:4a:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5 Validity Not Before: Oct 21 00:45:26 2024 GMT Not After : Jan 24 01:45:26 2027 GMT Subject: CN=5f8eb08f-0895-4c2b-8851-fe9215edcff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:b8:71:c9:3d:da:e8:0d:98:a7:07:d0:61: 2e:25:dc:a5:5d:4c:c6:11:fb:c5:e3:ac:36:ff:45: 6d:74:84:e1:08:85:f6:ca:8f:34:75:a7:1c:3f:21: 4b:cf:01:d1:0a:85:d2:86:5d:7a:bf:c2:c2:5e:c4: a1:67:e2:98:56:18:60:b6:6f:02:83:ee:91:29:e7: fc:78:9e:0e:9b:98:07:3a:8e:bc:84:0e:ab:23:3a: fe:86:c5:73:d4:88:49:d4:02:e2:c1:a1:54:39:e1: 0d:93:e6:f7:e7:61:b9:a8:a8:ed:e6:38:7f:dc:60: 49:4c:de:a8:74:ba:cf:bd:33:7a:bf:e3:93:b0:86: c5:5b:34:2f:9d:84:58:28:24:0e:ad:0e:e9:a6:27: fd:2b:68:78:e3:54:26:4e:ea:94:28:58:87:c1:89: e6:eb:2d:ff:92:26:14:d2:16:fe:3a:02:14:1a:0e: d2:7e:6b:25:d1:25:89:16:0c:0f:fb:dd:ae:7d:58: db:09:92:6a:94:c7:72:3d:28:d7:a9:74:b1:d3:e8: 57:6b:05:42:33:08:fa:bf:7d:d1:9f:ad:92:d9:cc: 6d:7e:22:12:e3:90:d7:d7:56:05:b2:f4:c0:41:7d: 9d:4f:61:5e:85:11:b2:95:77:80:f9:8f:57:4f:5e: ce:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DA:1E:65:9B:07:55:49:32:34:4C:11:E0:2C:96:0C:CB:47:DA:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f8eb08f-0895-4c2b-8851-fe9215edcff0/5f8eb08f-0895-4c2b-8851-fe9215edcff0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl X509v3 Authority Key Identifier: keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer sbgp-ipAddrBlock: critical IPv4: 192.16.104.0/22 204.144.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6a:4c:93:56:2c:b5:7e:8f:68:85:62:b6:be:41:05:d3:bc: 34:67:3d:c0:6e:a7:d9:c7:9a:92:81:09:a6:dd:c1:3c:d6:57: fb:82:27:c5:fa:f0:f1:fd:69:a7:4c:44:7c:17:4a:80:38:e7: 48:43:b2:41:ba:b6:19:c7:25:ac:ee:3b:b1:3c:e6:15:e5:60: fd:0e:64:6f:22:15:b4:bc:15:cd:f1:d9:8f:16:f6:d3:0f:5e: 13:e2:b8:b1:06:6c:4b:fa:6c:26:08:66:9d:de:51:41:57:8b: 86:ea:ea:1b:23:43:43:4d:56:a5:8a:01:42:e1:93:a4:27:81: a5:2f:e8:f2:fc:98:9d:73:ee:fe:7a:ef:f3:22:1b:9b:f8:20: 78:96:a7:9d:dc:6f:10:d9:0b:f0:05:30:60:5f:31:94:5a:12: db:20:35:93:0a:d1:e8:b0:17:04:f6:71:4a:62:a7:79:e3:ec: 88:d7:a5:5e:3d:77:c7:5c:a1:a2:97:0f:e3:7f:f8:35:07:a2: 6f:54:6c:18:4f:a8:81:6c:4b:a7:25:e3:c7:2d:d8:43:dd:32: c5:dd:68:54:0a:26:9e:34:d3:7f:ea:ac:51:e3:01:01:5f:87: 1c:94:df:17:37:26:46:5b:04:42:ac:79:1b:b4:34:b4:86:13: eb:67:6d:7a -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEecCZ8Vyycg1J5K+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz YWU1MB4XDTI0MTAyMTAwNDUyNloXDTI3MDEyNDAxNDUyNlowLzEtMCsGA1UEAxMk NWY4ZWIwOGYtMDg5NS00YzJiLTg4NTEtZmU5MjE1ZWRjZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOS4cck92ugNmKcH0GEuJdylXUzGEfvF46w2 /0VtdIThCIX2yo80daccPyFLzwHRCoXShl16v8LCXsShZ+KYVhhgtm8Cg+6RKef8 eJ4Om5gHOo68hA6rIzr+hsVz1IhJ1ALiwaFUOeENk+b352G5qKjt5jh/3GBJTN6o dLrPvTN6v+OTsIbFWzQvnYRYKCQOrQ7ppif9K2h441QmTuqUKFiHwYnm6y3/kiYU 0hb+OgIUGg7Sfmsl0SWJFgwP+92ufVjbCZJqlMdyPSjXqXSx0+hXawVCMwj6v33R n62S2cxtfiIS45DX11YFsvTAQX2dT2FehRGylXeA+Y9XT17OUQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFEnaHmWbB1VJMjRMEeAslgzLR9oSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81 ZjhlYjA4Zi0wODk1LTRjMmItODg1MS1mZTkyMTVlZGNmZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzVmOGViMDhmLTA4OTUtNGMyYi04 ODUxLWZlOTIxNWVkY2ZmMC81ZjhlYjA4Zi0wODk1LTRjMmItODg1MS1mZTkyMTVl ZGNmZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn 6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3 MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALAEGgDBAHMkLAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI2pMk1YstX6P aIVitr5BBdO8NGc9wG6n2ceakoEJpt3BPNZX+4Inxfrw8f1pp0xEfBdKgDjnSEOy Qbq2GcclrO47sTzmFeVg/Q5kbyIVtLwVzfHZjxb20w9eE+K4sQZsS/psJghmnd5R QVeLhurqGyNDQ01WpYoBQuGTpCeBpS/o8vyYnXPu/nrv8yIbm/ggeJanndxvENkL 8AUwYF8xlFoS2yA1kwrR6LAXBPZxSmKneePsiNelXj13x1yhopcP43/4NQeib1Rs GE+ogWxLpyXjxy3YQ90yxd1oVAomnjTTf+qsUeMBAV+HHJTfFzcmRlsEQqx5G7Q0 tIYT62dteg== -----END CERTIFICATE-----Generated at Fri Nov 22 21:09:47 2024 by rpki-client on console-fra.rpki-client.org