$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer File: e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer (raw, json) Hash identifier: f42UeVq+8rJ0JZHqx9iGfaWnGsVmjiCzJawbdm5g6bk= Subject key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285842BDBB30FA35C21790172C98C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Aug 2023 14:30:12 +0000 Certificate not after: Thu 10 Jul 2025 19:06:39 +0000 Subordinate resources: IP: 168.207.0.0/16 IP: 192.112.245.0/24 IP: 205.157.192.0/18 IP: 206.180.0.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:bd:bb:30:fa:35:c2:17:90:17:2c:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 1 14:30:12 2023 GMT Not After : Jul 10 19:06:39 2025 GMT Subject: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:37:fb:a7:43:fc:ca:c9:e2:49:b9:9b:a1: 49:83:9e:74:ed:f0:21:9b:ca:df:cd:d6:d2:c7:96: 14:f7:cb:6c:40:01:b4:4b:6e:2f:07:35:17:aa:e2: c3:9c:e6:25:de:ed:7a:0c:a0:c0:b2:8b:21:89:ea: 92:6d:50:53:2c:77:5c:3a:bd:d3:b5:8a:b2:07:77: 6d:e5:46:62:47:15:15:8d:47:42:b1:1c:1f:2c:6a: 32:93:20:be:e1:66:b2:17:75:02:97:53:87:89:c2: a9:94:18:fd:a8:fe:4d:e6:75:08:f9:ef:2a:1b:51: aa:90:d7:69:40:b4:9c:b4:05:58:6c:4d:43:5e:22: 30:35:fe:98:9a:6e:bd:f1:30:87:47:40:a1:b3:39: e7:4c:43:07:06:0c:be:0b:24:c3:7a:64:54:f7:9e: 27:17:57:83:97:f3:cb:70:ac:c6:ba:2c:dc:9a:20: 6b:2a:aa:42:d6:f6:a1:a2:af:df:8a:b8:c3:33:0b: 50:86:2d:aa:6a:bb:b0:07:ee:e2:1c:38:ac:39:38: 38:e9:44:83:24:86:43:cc:46:41:7e:75:37:1d:79: 34:94:4a:f4:65:06:7d:d3:3a:00:39:4a:e8:43:a5: 8e:29:1d:db:37:4a:00:63:e1:28:12:d0:8a:c3:29: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 168.207.0.0/16 192.112.245.0/24 205.157.192.0/18 206.180.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8d:a0:46:60:f4:64:a0:1d:e7:2c:ea:6c:a5:8b:45:43:9d: 9d:2f:1d:61:10:12:28:70:96:ee:98:99:de:e9:77:73:07:42: 09:77:e0:fe:54:73:ea:48:21:87:d0:f8:62:7e:d4:3a:1b:31: 66:92:41:0f:64:1b:24:95:be:f8:a7:18:5b:53:c8:41:ef:ea: 08:17:c8:f8:14:b8:76:81:09:79:d8:b9:1d:bd:5a:66:c4:20: 1c:0c:68:17:4f:a1:09:bb:e9:7c:ba:6c:11:ba:35:82:93:e1: 05:8f:95:b6:6d:30:00:be:8c:70:02:db:cb:c0:a8:ce:d8:a5: f9:b5:d6:54:6c:a1:84:e1:0d:21:4e:9a:1e:a7:44:f0:eb:2e: f3:40:82:b3:74:63:64:a8:c9:08:50:82:9e:7f:4c:ae:bf:94: 3b:69:d7:97:77:81:d1:b8:40:3d:a1:fc:96:fb:6a:70:a1:29: 1c:fb:13:de:28:f0:b4:4e:2d:73:a8:01:87:8a:dd:a9:45:4a: ec:29:d3:e4:14:68:c0:52:1c:15:0f:1d:e0:7a:30:91:55:6e: ba:c5:b2:e5:82:a9:d2:b3:58:c3:7f:b0:92:62:be:84:ec:59: 05:60:cd:f1:f3:b3:f5:6c:d0:03:bc:5c:98:ca:3f:e2:89:d6: ee:7a:e3:2b -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEK9uzD6NcIXkBcsmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDgwMTE0MzAxMloXDTI1MDcxMDE5MDYzOVowLzEtMCsGA1UEAxMk ZTk4Y2M4ZTUtMWZjZi00YzI4LTlhZGItNDVlMmNjMWMwMjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGs3+6dD/MrJ4km5m6FJg5507fAhm8rfzdbS x5YU98tsQAG0S24vBzUXquLDnOYl3u16DKDAsoshieqSbVBTLHdcOr3TtYqyB3dt 5UZiRxUVjUdCsRwfLGoykyC+4WayF3UCl1OHicKplBj9qP5N5nUI+e8qG1GqkNdp QLSctAVYbE1DXiIwNf6Ymm698TCHR0ChsznnTEMHBgy+CyTDemRU954nF1eDl/PL cKzGuizcmiBrKqpC1vahoq/firjDMwtQhi2qaruwB+7iHDisOTg46USDJIZDzEZB fnU3HXk0lEr0ZQZ90zoAOUroQ6WOKR3bN0oAY+EoEtCKwyko4wIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFICyv3HTpI1UOeG2n4uwMjGODmyaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l OThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2MxYzAyM2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2U5OGNjOGU1LTFmY2YtNGMyOC05 YWRiLTQ1ZTJjYzFjMDIzYy9lOThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2Mx YzAyM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwCozwMEAMBw9QMEBs2dwAMEBs60ADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAXjaBGYPRkoB3nLOpspYtFQ52dLx1hEBIocJbumJne6XdzB0IJd+D+VHPqSCGH 0PhiftQ6GzFmkkEPZBsklb74pxhbU8hB7+oIF8j4FLh2gQl52LkdvVpmxCAcDGgX T6EJu+l8umwRujWCk+EFj5W2bTAAvoxwAtvLwKjO2KX5tdZUbKGE4Q0hTpoep0Tw 6y7zQIKzdGNkqMkIUIKef0yuv5Q7adeXd4HRuEA9ofyW+2pwoSkc+xPeKPC0Ti1z qAGHit2pRUrsKdPkFGjAUhwVDx3gejCRVW66xbLlgqnSs1jDf7CSYr6E7FkFYM3x 87P1bNADvFyYyj/iidbueuMr -----END CERTIFICATE-----Generated at Fri Mar 29 02:55:53 2024 by rpki-client on console-fra.rpki-client.org