$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer File: 2a85a41a-8114-4e04-abdb-a3a032b37a04.cer (raw, json) Hash identifier: yQD+wrVh7FZIuotK9JlCWPUTV8yj/eyBPITFUnmOuog= Subject key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584812E6BB5979648AF45A6C4280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Dec 2024 14:36:20 +0000 Certificate not after: Sun 07 Mar 2027 14:36:20 +0000 Subordinate resources: IP: 204.57.128.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Dec 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:12:e6:bb:59:79:64:8a:f4:5a:6c:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 2 14:36:20 2024 GMT Not After : Mar 7 14:36:20 2027 GMT Subject: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bd:50:53:7e:10:0e:86:7f:fc:19:4a:7a:6a: b0:1c:2b:fa:f8:28:18:63:d6:05:7e:fb:7d:e4:13: 49:cf:5f:c5:e0:0c:91:89:6d:87:47:5a:90:72:18: 56:0f:a7:7c:11:e0:4a:dd:6f:17:55:93:18:4d:d3: 6d:fd:3f:90:b9:90:e9:07:5a:a6:bd:45:50:e0:db: 4d:1d:e9:f8:59:01:5d:71:b5:72:04:bb:47:a5:bb: 0b:67:c5:b2:5f:b8:66:66:0d:fd:b5:94:ad:f2:ea: db:83:1e:15:9a:fa:e5:16:ef:64:43:dc:a4:5c:30: 53:36:7b:3b:fe:54:4d:cc:d8:f7:17:d5:e0:30:30: 5a:9a:bf:89:2c:58:cd:16:99:61:98:63:02:f6:d9: 75:75:67:30:ee:87:4a:31:49:f6:b8:28:61:75:c0: 90:a2:90:e3:04:ec:2a:7e:bf:3d:0a:2c:af:92:dd: c5:16:4e:66:68:b1:9e:4a:df:8e:40:6b:7c:41:0d: 49:05:49:c4:7a:34:aa:ff:4d:8d:e2:65:59:b1:58: 95:92:02:bf:f8:95:c6:e7:56:cd:34:b2:e2:9f:1c: 83:81:3a:7f:da:b1:af:57:8a:75:59:c1:57:a0:91: 90:f9:7c:a7:69:5a:33:ef:c3:43:41:bb:f2:a7:09: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 204.57.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:bd:c5:f7:29:2e:85:14:74:cd:dc:05:22:7d:37:7e:1f:09: 4b:d9:87:d8:3e:09:d3:99:38:0f:a1:b6:22:82:79:cc:40:19: a8:67:f6:17:f1:ad:a9:b7:84:a8:7c:cc:06:e1:9a:80:59:60: aa:84:c4:93:ab:1b:53:c3:59:fa:10:b9:87:fb:ca:ff:b8:6a: aa:e8:7b:b5:af:f6:14:76:35:db:8a:21:a0:47:f4:ae:85:1e: c5:b6:ee:27:3e:a8:c5:8a:8c:2c:e7:55:18:29:c0:82:20:37: c8:c0:84:e3:42:e5:8e:de:e4:26:0e:3e:47:b0:92:1d:3a:1a: 31:fd:49:29:55:15:15:48:27:d5:57:b8:ed:72:b8:c0:d8:ba: 4b:06:3d:1f:2f:4e:fd:b5:0c:4a:92:36:d5:19:25:6d:6c:7d: 65:64:93:7d:f7:b0:36:a5:92:86:c5:18:42:2f:68:02:f6:91: 79:42:15:26:46:85:6e:58:2a:04:7a:09:21:86:36:e4:f8:60: 4b:a7:6d:19:72:02:6c:9e:1c:e4:2c:f5:3c:46:9a:ff:8b:43: f1:e2:e4:a0:d1:5f:87:f9:30:92:07:ab:66:a4:d7:9e:30:8e: 33:99:1a:67:45:fc:93:78:20:be:00:a2:68:0f:f4:29:e3:3e: 6f:87:69:7e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEgS5rtZeWSK9FpsQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwMjE0MzYyMFoXDTI3MDMwNzE0MzYyMFowLzEtMCsGA1UEAxMk MmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3YTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr1QU34QDoZ//BlKemqwHCv6+CgYY9YFfvt9 5BNJz1/F4AyRiW2HR1qQchhWD6d8EeBK3W8XVZMYTdNt/T+QuZDpB1qmvUVQ4NtN Hen4WQFdcbVyBLtHpbsLZ8WyX7hmZg39tZSt8urbgx4VmvrlFu9kQ9ykXDBTNns7 /lRNzNj3F9XgMDBamr+JLFjNFplhmGMC9tl1dWcw7odKMUn2uChhdcCQopDjBOwq fr89Ciyvkt3FFk5maLGeSt+OQGt8QQ1JBUnEejSq/02N4mVZsViVkgK/+JXG51bN NLLinxyDgTp/2rGvV4p1WcFXoJGQ+XynaVoz78NDQbvypwnYIwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFO+qGd78/6BrvicwjG01auSDqTC+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8y YTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzJhODVhNDFhLTgxMTQtNGUwNC1h YmRiLWEzYTAzMmIzN2EwNC8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJi MzdhMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAbMOYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXL3F9ykuhRR0zdwFIn03 fh8JS9mH2D4J05k4D6G2IoJ5zEAZqGf2F/GtqbeEqHzMBuGagFlgqoTEk6sbU8NZ +hC5h/vK/7hqquh7ta/2FHY124ohoEf0roUexbbuJz6oxYqMLOdVGCnAgiA3yMCE 40Lljt7kJg4+R7CSHToaMf1JKVUVFUgn1Ve47XK4wNi6SwY9Hy9O/bUMSpI21Rkl bWx9ZWSTffewNqWShsUYQi9oAvaReUIVJkaFblgqBHoJIYY25PhgS6dtGXICbJ4c 5Cz1PEaa/4tD8eLkoNFfh/kwkgerZqTXnjCOM5kaZ0X8k3ggvgCiaA/0KeM+b4dp fg== -----END CERTIFICATE-----Generated at Fri Dec 27 07:47:07 2024 by rpki-client on console-ams.rpki-client.org