$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer File: 7d5cac87-cf05-44e8-9103-c269cf67c04b.cer (raw, json) Hash identifier: tVSsDX2nWuCaZdw1YHvPATsR/c5isOSJ/QMdDPKJNjg= Subject key identifier: 4E:95:DA:3C:A9:E8:B1:80:D7:E5:FD:92:9E:40:7E:64:CE:10:FE:AD Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F432858481306D1EA4455EFC123B0E896 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Dec 2024 15:40:59 +0000 Certificate not after: Sun 07 Mar 2027 15:40:59 +0000 Subordinate resources: IP: 134.161.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:13:06:d1:ea:44:55:ef:c1:23:b0:e8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Dec 2 15:40:59 2024 GMT Not After : Mar 7 15:40:59 2027 GMT Subject: CN=7d5cac87-cf05-44e8-9103-c269cf67c04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:16:54:98:6c:4d:be:16:b0:64:9e:4b:0a:32: 3a:e1:cd:3e:44:78:77:7e:5e:b8:dd:bd:5f:6c:65: e0:d9:99:0d:3f:f3:79:09:9e:8c:59:ab:ba:03:41: 11:0c:d1:8d:f5:55:15:73:f4:fc:26:3f:68:14:a8: 10:4f:e1:f0:6d:58:77:44:00:eb:95:b1:46:3f:ea: 07:f5:dc:6e:5c:ad:1b:f3:08:a4:cd:05:a5:1a:28: bb:4e:05:cd:31:86:43:96:7c:00:35:e4:e9:b7:b3: 42:95:f5:fa:15:fa:c3:c4:cf:80:ca:59:fa:38:64: da:9f:cd:19:9c:40:d9:1b:0f:a4:10:c6:f4:e0:a4: d4:66:8c:8b:d3:d1:40:a9:ec:12:bb:c8:34:14:b6: ed:e3:f8:29:74:71:9c:b8:31:ad:96:28:c4:b3:df: d9:e2:63:97:70:3d:6d:66:3b:22:fa:0c:3c:bd:64: d9:c1:cb:65:14:ba:0b:64:c8:7a:dd:83:7f:b8:71: 3c:63:ad:f4:dd:92:8f:7f:61:7a:a7:69:b4:68:30: 70:0e:92:a3:c0:b1:ac:ef:ab:a2:53:87:75:70:c0: b0:d9:1a:09:d0:f3:fd:e8:10:0d:99:f6:f5:e3:61: f9:ca:86:51:e4:0a:c0:99:50:4f:36:66:dd:11:14: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:95:DA:3C:A9:E8:B1:80:D7:E5:FD:92:9E:40:7E:64:CE:10:FE:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 134.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2c:24:e7:d5:47:43:1c:96:f4:f0:ce:b4:ae:67:37:e8:eb: 60:c1:b7:74:0b:57:86:5e:74:9f:a4:86:74:b1:b1:bd:fa:67: da:54:59:a3:d6:ff:3a:ce:47:41:d2:66:99:a7:39:fb:d0:e5: 94:a6:5d:c8:12:07:35:c4:56:aa:ef:96:d0:dc:c1:97:9a:ab: 57:73:cd:da:ad:48:f6:88:fb:8c:90:5a:5e:13:da:dd:96:ae: 13:64:35:2d:4a:36:53:6b:d7:0f:27:40:17:11:8d:7a:48:49: 35:26:40:c5:23:67:8b:a5:92:48:d8:6e:c6:91:13:40:fa:71: e8:9d:d3:74:2b:d1:6b:63:d4:66:77:25:70:4c:08:08:a7:7c: 9b:34:29:68:73:0d:7b:4f:b8:82:53:f5:e3:11:e5:9d:90:26: 36:03:2b:84:7e:da:55:76:16:d6:b2:a1:11:ce:74:a5:3c:1d: 84:75:79:20:ad:a9:36:ad:4d:32:f5:fd:82:13:85:dd:69:6b: 34:01:d0:96:ce:d6:3d:07:95:c0:11:25:59:c5:93:d1:a2:ff: 0f:00:50:52:b9:88:30:04:90:db:06:06:10:4d:31:f4:a8:bb: e0:ab:7e:9c:cc:26:ac:5f:bd:7d:b8:bf:b9:f5:3b:cc:17:66: 73:31:cb:ab -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEgTBtHqRFXvwSOw6JYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI0MTIwMjE1NDA1OVoXDTI3MDMwNzE1NDA1OVowLzEtMCsGA1UEAxMk N2Q1Y2FjODctY2YwNS00NGU4LTkxMDMtYzI2OWNmNjdjMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hZUmGxNvhawZJ5LCjI64c0+RHh3fl643b1f bGXg2ZkNP/N5CZ6MWau6A0ERDNGN9VUVc/T8Jj9oFKgQT+HwbVh3RADrlbFGP+oH 9dxuXK0b8wikzQWlGii7TgXNMYZDlnwANeTpt7NClfX6FfrDxM+Ayln6OGTan80Z nEDZGw+kEMb04KTUZoyL09FAqewSu8g0FLbt4/gpdHGcuDGtlijEs9/Z4mOXcD1t Zjsi+gw8vWTZwctlFLoLZMh63YN/uHE8Y6303ZKPf2F6p2m0aDBwDpKjwLGs76ui U4d1cMCw2RoJ0PP96BANmfb142H5yoZR5ArAmVBPNmbdERQWLwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFE6V2jyp6LGA1+X9kp5AfmTOEP6tMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83 ZDVjYWM4Ny1jZjA1LTQ0ZTgtOTEwMy1jMjY5Y2Y2N2MwNGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmLzdkNWNhYzg3LWNmMDUtNDRlOC05 MTAzLWMyNjljZjY3YzA0Yi83ZDVjYWM4Ny1jZjA1LTQ0ZTgtOTEwMy1jMjY5Y2Y2 N2MwNGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCGoTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCELCTn1UdDHJb08M60rmc3 6Otgwbd0C1eGXnSfpIZ0sbG9+mfaVFmj1v86zkdB0maZpzn70OWUpl3IEgc1xFaq 75bQ3MGXmqtXc83arUj2iPuMkFpeE9rdlq4TZDUtSjZTa9cPJ0AXEY16SEk1JkDF I2eLpZJI2G7GkRNA+nHondN0K9FrY9RmdyVwTAgIp3ybNClocw17T7iCU/XjEeWd kCY2AyuEftpVdhbWsqERznSlPB2EdXkgrak2rU0y9f2CE4XdaWs0AdCWztY9B5XA ESVZxZPRov8PAFBSuYgwBJDbBgYQTTH0qLvgq36czCasX719uL+59TvMF2ZzMcur -----END CERTIFICATE-----Generated at Fri Dec 27 14:25:26 2024 by rpki-client on console-fra.rpki-client.org