$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc.cer File: 02da98c6-6e21-4ea8-be1d-9d78acef1cfc.cer (raw, json) Hash identifier: qf1Br7qXET/oNbh22Fo0ZaMbdEGth8Em+qx1r9StwYI= Subject key identifier: 12:6E:12:B4:D9:C8:FC:39:D4:A6:91:F9:8F:36:F6:58:0E:24:D1:76 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848387DC260960A786395BC3880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/02da98c6-6e21-4ea8-be1d-9d78acef1cfc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Dec 2024 01:45:32 +0000 Certificate not after: Sun 21 Mar 2027 00:45:32 +0000 Subordinate resources: IP: 205.203.192.0 -- 205.203.215.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:7d:c2:60:96:0a:78:63:95:bc:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 16 01:45:32 2024 GMT Not After : Mar 21 00:45:32 2027 GMT Subject: CN=02da98c6-6e21-4ea8-be1d-9d78acef1cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:df:0b:4e:b1:69:d3:69:2b:9a:af:c8:e0: 3c:c5:7a:9f:b7:29:84:60:b8:db:e9:2b:33:d9:54: 2b:3a:0b:16:a7:2b:81:a4:64:55:32:e3:f4:49:4c: 3b:ed:9d:3e:e3:35:dd:16:8b:0f:63:63:4c:dd:bb: 09:70:dc:59:06:3e:04:45:89:f3:54:64:ac:b4:63: 75:74:53:21:14:f2:2d:41:4e:9b:23:7d:0f:c3:e1: b8:72:26:21:4a:cc:c1:25:ad:92:dd:62:7d:df:d1: 9d:b0:0b:12:2d:58:83:cf:81:77:35:35:f7:57:64: d8:ba:c6:b7:04:8e:11:3c:90:80:14:0f:f4:2f:fe: 6a:6a:90:59:f7:18:64:e0:a7:47:43:09:5c:dc:74: c8:b2:62:36:b6:b8:62:94:6b:de:de:3b:ab:9f:87: b9:62:87:9b:23:e3:99:4f:42:50:5d:f0:d6:82:b1: 26:f6:21:d0:a1:c0:a4:5a:1d:1b:17:92:65:e0:76: ca:ca:ae:cc:86:9f:bc:33:6a:e8:69:c4:8f:42:32: f2:01:45:09:6c:66:d9:78:ec:ad:90:6c:b7:70:ce: 0d:83:09:71:27:de:30:7c:d4:20:6d:81:bc:21:3d: db:5f:96:4f:4d:7c:d1:f4:9d:97:8f:c2:f1:52:76: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6E:12:B4:D9:C8:FC:39:D4:A6:91:F9:8F:36:F6:58:0E:24:D1:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/02da98c6-6e21-4ea8-be1d-9d78acef1cfc/02da98c6-6e21-4ea8-be1d-9d78acef1cfc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 205.203.192.0-205.203.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:fc:90:6e:f6:fc:25:55:be:f3:06:93:cd:a7:c7:cd:35:8e: a3:de:ec:62:1a:14:a0:dd:c1:42:21:44:43:e7:7a:7f:d8:03: 74:80:e4:94:06:13:c2:27:22:a0:db:c2:46:fd:67:37:27:a0: 5f:51:ef:25:a1:41:2a:4f:20:6b:97:ce:be:07:85:4e:0a:20: 03:7e:7d:02:88:3e:e1:e5:08:3f:4c:6d:6e:e8:af:92:2b:c4: f7:e1:7e:88:eb:72:08:bc:ea:31:50:04:e6:46:b0:c3:ce:c0: 34:af:76:f5:f3:20:80:1a:00:f8:08:7b:42:8e:9c:ef:9b:63: 04:13:82:cf:39:4b:52:09:f0:54:5b:de:7d:b0:9f:f9:7d:21: 46:c3:d4:6d:8c:a0:75:91:2f:0c:a3:b5:24:7e:6f:9e:1f:71: 80:9a:be:c4:e5:fa:be:dc:7a:29:ba:67:db:f7:b0:28:32:4b: 39:0c:59:d3:d5:ef:42:13:b6:15:54:4e:25:a3:a1:69:1c:9e: 98:8a:99:87:c1:5e:66:f5:11:1c:0a:93:53:c9:87:6c:fb:a2: 3e:b5:a2:48:4a:15:ed:15:a4:77:ad:ba:a4:8d:4e:1c:53:39: 2b:2d:8f:3c:5e:59:4d:5f:5d:9d:60:4d:28:76:8f:18:a7:48: cf:2d:d2:ba -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEg4fcJglgp4Y5W8OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTIxNjAxNDUzMloXDTI3MDMyMTAwNDUzMlowLzEtMCsGA1UEAxMk MDJkYTk4YzYtNmUyMS00ZWE4LWJlMWQtOWQ3OGFjZWYxY2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx53fC06xadNpK5qvyOA8xXqftymEYLjb6Ssz 2VQrOgsWpyuBpGRVMuP0SUw77Z0+4zXdFosPY2NM3bsJcNxZBj4ERYnzVGSstGN1 dFMhFPItQU6bI30Pw+G4ciYhSszBJa2S3WJ939GdsAsSLViDz4F3NTX3V2TYusa3 BI4RPJCAFA/0L/5qapBZ9xhk4KdHQwlc3HTIsmI2trhilGve3jurn4e5YoebI+OZ T0JQXfDWgrEm9iHQocCkWh0bF5Jl4HbKyq7Mhp+8M2roacSPQjLyAUUJbGbZeOyt kGy3cM4NgwlxJ94wfNQgbYG8IT3bX5ZPTXzR9J2Xj8LxUnY1pQIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFBJuErTZyPw51KaR+Y829lgOJNF2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w MmRhOThjNi02ZTIxLTRlYTgtYmUxZC05ZDc4YWNlZjFjZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzAyZGE5OGM2LTZlMjEtNGVhOC1i ZTFkLTlkNzhhY2VmMWNmYy8wMmRhOThjNi02ZTIxLTRlYTgtYmUxZC05ZDc4YWNl ZjFjZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBs3LwAMEA83L0DBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBL/JBu9vwl Vb7zBpPNp8fNNY6j3uxiGhSg3cFCIURD53p/2AN0gOSUBhPCJyKg28JG/Wc3J6Bf Ue8loUEqTyBrl86+B4VOCiADfn0CiD7h5Qg/TG1u6K+SK8T34X6I63IIvOoxUATm RrDDzsA0r3b18yCAGgD4CHtCjpzvm2MEE4LPOUtSCfBUW959sJ/5fSFGw9RtjKB1 kS8Mo7Ukfm+eH3GAmr7E5fq+3Hopumfb97AoMks5DFnT1e9CE7YVVE4lo6FpHJ6Y ipmHwV5m9REcCpNTyYds+6I+taJIShXtFaR3rbqkjU4cUzkrLY88XllNX12dYE0o do8Yp0jPLdK6 -----END CERTIFICATE-----Generated at Tue Jan 14 17:30:56 2025 by rpki-client on console-fra.rpki-client.org