$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer File: 43ff624d-a377-4e6b-aaf2-c18a45007d56.cer (raw, json) Hash identifier: 4akLbfTv/i7TjnXbaz5oXrctqcVxDPJ5VcmbNsEOFFo= Subject key identifier: CB:DF:E7:4E:CA:E6:E3:DF:CE:E3:33:AC:51:E0:05:A2:A7:41:85:EA Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584886A8EB3255D1314BC9533B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jan 2025 01:45:33 +0000 Certificate not after: Sun 18 Apr 2027 00:45:33 +0000 Subordinate resources: IP: 198.51.136.0/22 IP: 199.115.124.0/22 IP: 2604:8880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:a8:eb:32:55:d1:31:4b:c9:53:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 13 01:45:33 2025 GMT Not After : Apr 18 00:45:33 2027 GMT Subject: CN=43ff624d-a377-4e6b-aaf2-c18a45007d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:4a:20:9b:c7:8c:e9:7d:7a:91:22:8c:55: 7f:b3:a9:93:2f:b8:db:f8:d1:0c:3b:c8:e6:ff:ba: 72:54:15:97:37:9c:ae:7f:12:e0:20:93:02:db:97: 93:5f:a8:4d:27:7c:a9:34:04:3b:e2:36:e7:b3:0d: 64:29:7c:e6:f1:c4:ea:f4:e6:6b:75:47:72:93:e3: 7d:5b:ca:e5:39:fe:a6:2a:6c:c6:f5:4e:3a:ea:d9: 7f:52:76:80:75:02:11:38:36:a7:54:99:ee:46:e9: fa:a5:a9:ce:36:b6:4a:82:e1:7c:f0:15:b2:c6:6b: 43:f4:26:a5:36:aa:4f:88:ac:b9:1b:0e:39:31:3f: 01:17:a6:0b:db:54:90:67:90:a9:68:21:f6:d0:01: f9:4e:3a:16:d1:c5:12:58:90:0d:0d:27:67:88:af: c6:64:77:a6:06:22:21:3b:ed:a7:ab:90:47:e8:ed: aa:47:a0:87:72:bd:91:30:20:52:7a:7f:e4:2d:fe: 26:9a:6b:5b:d6:d1:92:5e:d1:0e:bd:40:6e:c9:cd: 0c:4a:db:9a:d0:18:cb:f8:90:2c:b7:36:57:4f:0b: 4a:74:6d:3a:6d:b8:92:41:68:87:7c:54:83:00:3b: c0:dd:cd:d3:59:8a:b9:ec:54:64:89:84:2a:ff:62: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DF:E7:4E:CA:E6:E3:DF:CE:E3:33:AC:51:E0:05:A2:A7:41:85:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.51.136.0/22 199.115.124.0/22 IPv6: 2604:8880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:44:70:f5:19:db:c2:e8:b9:0a:03:6b:1b:02:ff:15:ca:63: ed:bc:2d:62:21:26:2e:dd:fa:6b:a7:a8:28:86:ef:d7:13:8b: 80:e2:02:87:f9:0f:bf:ab:b1:38:e7:f8:68:82:76:7a:f9:3e: dc:1d:6d:8b:df:35:2a:7d:86:ec:b1:1d:8d:19:36:4f:b0:ef: 21:c8:4b:e9:8e:f4:be:36:17:10:c1:0a:77:24:32:a1:7b:c4: 00:2c:34:e1:d0:aa:94:bc:c2:34:96:79:a7:87:19:f5:ba:48: 68:36:3d:f2:8b:55:a5:0a:20:c9:5e:67:29:31:0f:60:0d:8c: 58:f6:0f:d2:f9:48:75:98:08:44:71:02:15:d5:6c:53:15:4a: dd:a7:f6:16:e5:93:73:2b:eb:cb:17:9d:77:4c:63:65:24:33: e3:97:ca:a9:eb:b0:c8:10:a4:ac:4b:dc:b3:1a:88:65:cf:67: 49:19:9c:29:b7:c0:ca:b7:63:77:87:93:c2:20:60:26:04:b9: 43:24:26:79:ef:c6:d9:46:e0:3e:af:9a:c0:17:3c:dd:f3:a5: a7:16:af:b3:94:18:d3:bf:c7:7b:12:2b:0f:9a:94:7b:46:d7: 2c:dc:e1:f7:ff:47:a4:78:e0:cd:23:bf:15:8a:27:51:b0:e0: 93:44:a3:52 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEiGqOsyVdExS8lTOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDExMzAxNDUzM1oXDTI3MDQxODAwNDUzM1owLzEtMCsGA1UEAxMk NDNmZjYyNGQtYTM3Ny00ZTZiLWFhZjItYzE4YTQ1MDA3ZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pNKIJvHjOl9epEijFV/s6mTL7jb+NEMO8jm /7pyVBWXN5yufxLgIJMC25eTX6hNJ3ypNAQ74jbnsw1kKXzm8cTq9OZrdUdyk+N9 W8rlOf6mKmzG9U466tl/UnaAdQIRODanVJnuRun6panONrZKguF88BWyxmtD9Cal NqpPiKy5Gw45MT8BF6YL21SQZ5CpaCH20AH5TjoW0cUSWJANDSdniK/GZHemBiIh O+2nq5BH6O2qR6CHcr2RMCBSen/kLf4mmmtb1tGSXtEOvUBuyc0MStua0BjL+JAs tzZXTwtKdG06bbiSQWiHfFSDADvA3c3TWYq57FRkiYQq/2LAowIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFMvf507K5uPfzuMzrFHgBaKnQYXqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 M2ZmNjI0ZC1hMzc3LTRlNmItYWFmMi1jMThhNDUwMDdkNTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQzZmY2MjRkLWEzNzctNGU2Yi1h YWYyLWMxOGE0NTAwN2Q1Ni80M2ZmNjI0ZC1hMzc3LTRlNmItYWFmMi1jMThhNDUw MDdkNTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALGM4gDBALHc3wwDQQCAAIwBwMFACYEiIAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOURw9Rnbwui5CgNrGwL/Fcpj7bwtYiEmLt36a6eoKIbv1xOLgOICh/kP v6uxOOf4aIJ2evk+3B1ti981Kn2G7LEdjRk2T7DvIchL6Y70vjYXEMEKdyQyoXvE ACw04dCqlLzCNJZ5p4cZ9bpIaDY98otVpQogyV5nKTEPYA2MWPYP0vlIdZgIRHEC FdVsUxVK3af2FuWTcyvryxedd0xjZSQz45fKqeuwyBCkrEvcsxqIZc9nSRmcKbfA yrdjd4eTwiBgJgS5QyQmee/G2UbgPq+awBc83fOlpxavs5QY07/HexIrD5qUe0bX LNzh9/9HpHjgzSO/FYonUbDgk0SjUg== -----END CERTIFICATE-----Generated at Tue Jan 14 00:42:20 2025 by rpki-client on console-fra.rpki-client.org