$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer File: e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer (raw, json) Hash identifier: etgghQYVQcGAsrsVQEufNr/AmzCNEy1DFNRCW5HqcKU= Subject key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858467F47CBAB9FC941084649EC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Jul 2024 00:45:20 +0000 Certificate not after: Wed 14 Oct 2026 00:45:20 +0000 Subordinate resources: IP: 168.207.0.0/16 IP: 192.112.245.0/24 IP: 205.157.192.0/18 IP: 206.180.0.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:7f:47:cb:ab:9f:c9:41:08:46:49:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 11 00:45:20 2024 GMT Not After : Oct 14 00:45:20 2026 GMT Subject: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:37:fb:a7:43:fc:ca:c9:e2:49:b9:9b:a1: 49:83:9e:74:ed:f0:21:9b:ca:df:cd:d6:d2:c7:96: 14:f7:cb:6c:40:01:b4:4b:6e:2f:07:35:17:aa:e2: c3:9c:e6:25:de:ed:7a:0c:a0:c0:b2:8b:21:89:ea: 92:6d:50:53:2c:77:5c:3a:bd:d3:b5:8a:b2:07:77: 6d:e5:46:62:47:15:15:8d:47:42:b1:1c:1f:2c:6a: 32:93:20:be:e1:66:b2:17:75:02:97:53:87:89:c2: a9:94:18:fd:a8:fe:4d:e6:75:08:f9:ef:2a:1b:51: aa:90:d7:69:40:b4:9c:b4:05:58:6c:4d:43:5e:22: 30:35:fe:98:9a:6e:bd:f1:30:87:47:40:a1:b3:39: e7:4c:43:07:06:0c:be:0b:24:c3:7a:64:54:f7:9e: 27:17:57:83:97:f3:cb:70:ac:c6:ba:2c:dc:9a:20: 6b:2a:aa:42:d6:f6:a1:a2:af:df:8a:b8:c3:33:0b: 50:86:2d:aa:6a:bb:b0:07:ee:e2:1c:38:ac:39:38: 38:e9:44:83:24:86:43:cc:46:41:7e:75:37:1d:79: 34:94:4a:f4:65:06:7d:d3:3a:00:39:4a:e8:43:a5: 8e:29:1d:db:37:4a:00:63:e1:28:12:d0:8a:c3:29: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 168.207.0.0/16 192.112.245.0/24 205.157.192.0/18 206.180.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:71:5f:b9:a0:12:51:12:2a:22:44:b5:08:27:8c:4f:6e:f4: 7c:dd:ad:38:f9:19:cc:da:89:bb:a9:a1:c5:77:28:61:44:80: a6:c7:bd:95:21:b2:29:11:ee:4e:1d:cb:59:b4:0b:03:9f:02: 3e:0d:2d:56:ff:62:5f:86:e2:77:6c:13:8d:f0:25:bc:41:18: 27:8d:92:b5:fb:e9:fd:2f:a0:6a:74:eb:37:4c:93:6f:2c:45: 18:1a:3b:48:d3:1d:fe:e5:df:06:58:72:11:2f:b2:ee:d2:b6: e0:05:68:52:bf:5c:a4:cf:4c:ff:57:96:49:1e:ba:f6:c6:94: e2:46:17:a5:c1:cc:0f:ad:d7:cc:1b:87:29:32:43:16:d8:f4: 4d:2a:90:be:fe:09:c2:82:bf:56:48:5c:fc:c2:a6:90:cb:18: 32:dc:34:ac:bc:1a:4e:72:9d:51:24:3a:9c:5d:21:04:12:5c: a1:fa:93:23:7a:aa:4c:01:2d:c3:44:f7:b2:ce:be:d7:f2:47: 37:0f:18:d5:45:7f:c7:16:0b:9e:a9:a4:d1:f5:b7:c5:ec:b6: a4:6d:e7:1a:9f:4b:9b:06:f3:74:ea:1d:9b:16:8f:c3:57:4d: d1:34:db:da:78:fd:b1:55:9e:94:44:2e:52:17:35:98:8b:5c: 13:33:95:cb -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEZ/R8urn8lBCEZJ7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDcxMTAwNDUyMFoXDTI2MTAxNDAwNDUyMFowLzEtMCsGA1UEAxMk ZTk4Y2M4ZTUtMWZjZi00YzI4LTlhZGItNDVlMmNjMWMwMjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGs3+6dD/MrJ4km5m6FJg5507fAhm8rfzdbS x5YU98tsQAG0S24vBzUXquLDnOYl3u16DKDAsoshieqSbVBTLHdcOr3TtYqyB3dt 5UZiRxUVjUdCsRwfLGoykyC+4WayF3UCl1OHicKplBj9qP5N5nUI+e8qG1GqkNdp QLSctAVYbE1DXiIwNf6Ymm698TCHR0ChsznnTEMHBgy+CyTDemRU954nF1eDl/PL cKzGuizcmiBrKqpC1vahoq/firjDMwtQhi2qaruwB+7iHDisOTg46USDJIZDzEZB fnU3HXk0lEr0ZQZ90zoAOUroQ6WOKR3bN0oAY+EoEtCKwyko4wIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFICyv3HTpI1UOeG2n4uwMjGODmyaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l OThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2MxYzAyM2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2U5OGNjOGU1LTFmY2YtNGMyOC05 YWRiLTQ1ZTJjYzFjMDIzYy9lOThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2Mx YzAyM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwCozwMEAMBw9QMEBs2dwAMEBs60ADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAxcV+5oBJREioiRLUIJ4xPbvR83a04+RnM2om7qaHFdyhhRICmx72VIbIpEe5O HctZtAsDnwI+DS1W/2JfhuJ3bBON8CW8QRgnjZK1++n9L6BqdOs3TJNvLEUYGjtI 0x3+5d8GWHIRL7Lu0rbgBWhSv1ykz0z/V5ZJHrr2xpTiRhelwcwPrdfMG4cpMkMW 2PRNKpC+/gnCgr9WSFz8wqaQyxgy3DSsvBpOcp1RJDqcXSEEElyh+pMjeqpMAS3D RPeyzr7X8kc3DxjVRX/HFgueqaTR9bfF7Lakbecan0ubBvN06h2bFo/DV03RNNva eP2xVZ6URC5SFzWYi1wTM5XL -----END CERTIFICATE-----Generated at Thu Nov 21 16:34:06 2024 by rpki-client on console-ams.rpki-client.org