$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer File: ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer (raw, json) Hash identifier: ZWRZ9h6wkXJFE6mLVb5qwR+wGqQ/E7mmQJOv4tammhs= Subject key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Authority key identifier: 30:0D:90:85:95:81:08:76:9E:FD:3B:56:99:4A:06:51:83:3E:37:54 Certificate issuer: /CN=32619ff9-4a46-4e93-a9b5-dda2a33a9ffd Certificate serial: 010D0C9F432858472AE512F65F615D24F9560480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Tue 10 Sep 2024 12:05:27 +0000 Certificate not after: Mon 14 Dec 2026 13:05:27 +0000 Subordinate resources: AS: 401218 IP: 23.183.136.0/24 IP: 2602:f882::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Sep 2024 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2a:e5:12:f6:5f:61:5d:24:f9:56:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32619ff9-4a46-4e93-a9b5-dda2a33a9ffd Validity Not Before: Sep 10 12:05:27 2024 GMT Not After : Dec 14 13:05:27 2026 GMT Subject: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:43:a0:c3:f3:7c:68:9b:47:7c:3f:7b:c8: 37:81:f2:eb:a1:ca:3d:90:41:b7:22:4c:0e:52:d3: a5:51:d6:df:ae:3c:65:60:23:b9:cd:e3:1b:21:c3: a2:29:1e:ce:b4:45:d1:d3:a1:91:de:80:d5:1b:d4: 02:42:b5:6d:fd:7c:7b:b0:1f:e2:08:9f:8c:f1:67: 78:6d:10:87:0c:b3:5b:da:ed:28:23:94:87:5d:df: 85:a5:8e:59:17:a9:10:f6:96:d7:4f:a2:6e:0b:82: 86:35:ca:f2:1e:4a:64:02:4a:bf:ed:1a:3d:b6:50: dc:c9:e4:61:0f:fe:6e:75:80:2a:0b:62:d7:0d:ef: af:4c:99:82:9c:d0:2b:5d:16:73:0c:bd:b3:9f:9a: 1f:24:17:b9:52:4d:d5:83:44:5f:5f:f9:3f:ed:f9: 2b:bf:07:67:ed:4f:ae:2b:4f:35:6b:d9:52:11:1b: 72:02:05:0b:1f:76:93:e5:bd:74:3c:aa:de:24:84: 53:ef:67:36:ef:26:1d:c3:cf:6b:e8:4b:12:0e:d7: 1d:e0:90:d8:18:53:07:2f:d7:f1:2a:99:9b:18:79: 9d:e2:44:26:e1:94:e4:52:69:5e:b9:2c:bc:1c:f5: 05:fa:4b:f5:8e:2e:23:c8:ca:38:2f:71:e3:a0:e2: 68:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl X509v3 Authority Key Identifier: keyid:30:0D:90:85:95:81:08:76:9E:FD:3B:56:99:4A:06:51:83:3E:37:54 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer sbgp-ipAddrBlock: critical IPv4: 23.183.136.0/24 IPv6: 2602:f882::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401218 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e5:de:14:99:f6:3f:a8:0d:7f:c7:20:24:9f:73:b3:fe:a6: 85:c5:b1:d9:ff:c7:37:ee:97:c4:a4:3b:5a:7c:4b:78:32:e1: 0a:3b:87:67:15:96:5c:10:a7:f3:27:4b:c9:ea:9d:39:0b:50: ed:dc:29:c7:b8:3c:ec:6a:38:1b:bc:83:30:a9:71:c2:b9:42: f0:8e:35:88:38:93:00:25:26:02:e8:63:4d:19:3b:dc:90:05: fd:bd:3c:59:8d:1e:8a:67:b6:b6:bc:a1:43:ac:f6:6d:d3:7b: 26:3e:75:28:dc:1f:4b:58:9d:8b:e5:da:19:71:94:16:aa:ac: 46:dd:15:2c:d7:94:60:d0:e9:20:54:89:32:6e:81:b9:e9:35: e3:ee:4e:49:be:a1:dc:dd:f6:77:26:87:57:09:9b:c5:cc:01: 43:94:f1:d5:95:3d:dd:36:23:d1:6d:10:57:f9:71:2e:9e:0b: 18:e8:a8:3c:d5:f2:c6:10:d1:cc:46:37:49:7e:2d:92:d6:15: b5:6f:13:c5:74:8f:21:bd:96:88:2f:89:50:af:40:fd:a1:63: 03:59:13:35:b4:9a:d0:b3:8a:58:e3:c3:ef:5a:6f:1c:af:82: 88:e1:8c:69:76:5f:22:93:c7:4c:80:de:23:5a:19:b1:65:ce: 0c:c4:9d:f6 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEcq5RL2X2FdJPlWBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI2MTlmZjktNGE0Ni00ZTkzLWE5YjUtZGRhMmEzM2E5 ZmZkMB4XDTI0MDkxMDEyMDUyN1oXDTI2MTIxNDEzMDUyN1owPTE7MDkGA1UEAxMy YmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4ZTA5YTdiZDJkMTU0YmZh OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAuUOgw/N8aJtHfD97 yDeB8uuhyj2QQbciTA5S06VR1t+uPGVgI7nN4xshw6IpHs60RdHToZHegNUb1AJC tW39fHuwH+IIn4zxZ3htEIcMs1va7SgjlIdd34WljlkXqRD2ltdPom4LgoY1yvIe SmQCSr/tGj22UNzJ5GEP/m51gCoLYtcN769MmYKc0CtdFnMMvbOfmh8kF7lSTdWD RF9f+T/t+Su/B2ftT64rTzVr2VIRG3ICBQsfdpPlvXQ8qt4khFPvZzbvJh3Dz2vo SxIO1x3gkNgYUwcv1/EqmZsYeZ3iRCbhlORSaV65LLwc9QX6S/WOLiPIyjgvceOg 4mgvAgMBAAGjggPwMIID7DAdBgNVHQ4EFgQU1wqR2J40x6IACbHhYPtsYnBjYwww ggFCBggrBgEFBQcBCwSCATQwggEwMGAGCCsGAQUFBzAFhlRyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNk ZS04OTc5LTRmYWVhNGIxYmMxMi8yMC8wgY0GCCsGAQUFBzAKhoGAcnN5bmM6Ly9y c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJh LTRjZGUtODk3OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlC MUUxNjBGQjZDNjI3MDYzNjMwQy5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJk cC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8E BTADAQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJp bi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNl LWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdk YWI5N2MyNS8zMjYxOWZmOS00YTQ2LTRlOTMtYTliNS1kZGEyYTMzYTlmZmQvMzI2 MTlmZjktNGE0Ni00ZTkzLWE5YjUtZGRhMmEzM2E5ZmZkLmNybDAfBgNVHSMEGDAW gBQwDZCFlYEIdp79O1aZSgZRgz43VDAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUF BwEBBIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9y ZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0y MTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1 LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1LWRkYTJhMzNhOWZmZC5jZXIwLwYIKwYB BQUHAQcBAf8EIDAeMAwEAgABMAYDBAAXt4gwDgQCAAIwCAMGBCYC+IIAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwYfQjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBp5d4UmfY/qA1/xyAkn3Oz /qaFxbHZ/8c37pfEpDtafEt4MuEKO4dnFZZcEKfzJ0vJ6p05C1Dt3CnHuDzsajgb vIMwqXHCuULwjjWIOJMAJSYC6GNNGTvckAX9vTxZjR6KZ7a2vKFDrPZt03smPnUo 3B9LWJ2L5doZcZQWqqxG3RUs15Rg0OkgVIkyboG56TXj7k5JvqHc3fZ3JodXCZvF zAFDlPHVlT3dNiPRbRBX+XEungsY6Kg81fLGENHMRjdJfi2S1hW1bxPFdI8hvZaI L4lQr0D9oWMDWRM1tJrQs4pY48PvWm8cr4KI4Yxpdl8ik8dMgN4jWhmxZc4MxJ32 -----END CERTIFICATE-----Generated at Fri Sep 27 19:01:57 2024 by rpki-client on console-ams.rpki-client.org