$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer File: 2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer (raw, json) Hash identifier: E1TcwuKMOcGjCLpd4T6m6XTK7LAyR+oxomyJMYuZNhs= Subject key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF Authority key identifier: 9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF Certificate issuer: /CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a Certificate serial: 010D0C9F4328584657A5A6536AB8DD6E7A0CD8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer Manifest: rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.mft caRepository: rsync://rpki.co/repo/AS202400/0/ Notify URL: https://rrdp.rpki.co/rrdp/notification.xml Certificate not before: Wed 26 Jun 2024 20:02:06 +0000 Certificate not after: Tue 29 Sep 2026 20:02:06 +0000 Subordinate resources: AS: 54286 IP: 23.147.120.0/24 IP: 64.49.28.0/24 IP: 2602:faa8::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:57:a5:a6:53:6a:b8:dd:6e:7a:0c:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a Validity Not Before: Jun 26 20:02:06 2024 GMT Not After : Sep 29 20:02:06 2026 GMT Subject: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:c3:1e:76:5f:dd:9a:a6:8c:ec:e4:22:5b: 05:a4:23:65:30:50:d9:fb:8e:37:14:4b:c2:c0:e7: ee:91:47:f6:a1:bc:c9:52:53:b0:4c:ab:68:21:8a: 95:54:7a:4f:c8:5e:bb:d2:7f:b9:db:35:83:06:81: 34:2a:27:a2:a5:68:4e:60:0e:ed:94:60:36:51:30: d9:fd:35:73:7e:cb:31:09:be:b0:0c:4d:f5:4e:65: 9e:b1:76:d2:28:b3:81:1b:a1:b1:c3:ce:31:3d:98: 86:4f:88:11:66:15:22:e4:f2:73:a8:e5:d4:72:fd: 8c:85:64:e8:96:08:0c:44:5c:f8:4f:26:1c:56:2a: 89:15:bd:62:81:07:5d:17:c6:c0:14:58:5d:4c:34: 79:63:0f:50:32:49:87:16:08:0f:9a:fe:2e:e7:97: a7:e4:24:56:d2:55:46:65:08:23:e8:fa:4f:e9:aa: 15:a5:67:4a:ce:f0:8e:f3:97:49:5a:d2:e9:1f:0c: dc:7e:5f:53:12:15:9a:94:01:c4:44:d3:a2:e8:95: 48:34:53:a8:28:e0:6b:80:6a:c9:a1:2c:f8:b0:37: 8b:2f:2c:ee:1b:5f:a7:28:d8:fa:7d:fe:78:0b:48: 3d:44:01:b3:9e:c2:36:89:86:44:db:3c:6f:f6:8a: 7a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF Subject Information Access: CA Repository - URI:rsync://rpki.co/repo/AS202400/0/ RPKI Manifest - URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.mft RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl X509v3 Authority Key Identifier: keyid:9D:D6:62:60:62:28:6D:29:4F:A4:AD:16:E7:41:9F:43:57:AE:AE:AF X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer sbgp-ipAddrBlock: critical IPv4: 23.147.120.0/24 64.49.28.0/24 IPv6: 2602:faa8::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54286 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:65:39:dd:5f:c5:a5:b3:e9:2d:d9:75:1b:ef:59:0f:b6:36: a6:0b:84:78:48:7b:a2:1d:4f:a4:74:a5:ac:b9:21:9e:49:1a: 11:c1:87:4d:a6:8a:74:18:47:7c:7f:59:eb:d5:80:13:2d:37: 25:b7:fd:62:1f:02:89:18:6f:d2:dc:14:29:05:80:73:e9:f3: d0:e1:2e:42:3e:e7:8e:ba:8c:73:01:96:f3:80:23:64:c6:52: 9f:42:be:a3:3d:34:f4:76:60:65:17:14:5e:75:d4:e0:ea:bd: 1f:7b:49:54:5a:65:a6:c6:3d:ec:d9:13:33:40:e0:46:cd:cd: 2d:ce:86:49:64:96:85:86:4e:ba:77:9a:b8:66:6b:c0:32:ce: 12:7f:10:30:5f:72:c2:14:5a:44:9b:b3:70:19:e4:fc:67:9a: 85:d0:a6:28:8c:5c:a8:ce:74:98:8d:68:0b:93:22:b0:39:28: 9e:44:ce:6d:f1:ca:8c:6a:9d:0d:be:d4:48:4c:8f:28:c2:b8: 9d:f1:9c:8a:a3:f1:3e:3d:4e:be:80:45:35:a6:90:08:9b:34: 77:ba:6e:28:76:e0:a6:84:12:54:98:06:37:d0:3f:8b:8d:e8: 76:54:1a:3e:d3:fa:87:3a:10:41:37:cd:bd:ea:1d:0e:a8:4b: 62:a1:73:4b -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEZXpaZTarjdbnoM2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBmNWQ4MGMtOWRhYS00ZjZmLThmNTgtMTgxYzVmMGM0 YjBhMB4XDTI0MDYyNjIwMDIwNloXDTI2MDkyOTIwMDIwNlowPTE7MDkGA1UEAxMy MmE1YWY3NGRiYjlkNGQ0MzdjZjNhYzEzMjA2MDY3Y2FhMTFiMTc5ODMxOTYyM2Yy MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0xMMedl/dmqaM7OQi WwWkI2UwUNn7jjcUS8LA5+6RR/ahvMlSU7BMq2ghipVUek/IXrvSf7nbNYMGgTQq J6KlaE5gDu2UYDZRMNn9NXN+yzEJvrAMTfVOZZ6xdtIos4EbobHDzjE9mIZPiBFm FSLk8nOo5dRy/YyFZOiWCAxEXPhPJhxWKokVvWKBB10XxsAUWF1MNHljD1AySYcW CA+a/i7nl6fkJFbSVUZlCCPo+k/pqhWlZ0rO8I7zl0la0ukfDNx+X1MSFZqUAcRE 06LolUg0U6go4GuAasmhLPiwN4svLO4bX6co2Pp9/ngLSD1EAbOewjaJhkTbPG/2 inpjAgMBAAGjggODMIIDfzAdBgNVHQ4EFgQUsL56vb6z4BR9CBIraZxHjJmhsP8w gdAGCCsGAQUFBwELBIHDMIHAMCwGCCsGAQUFBzAFhiByc3luYzovL3Jwa2kuY28v cmVwby9BUzIwMjQwMC8wLzBYBggrBgEFBQcwCoZMcnN5bmM6Ly9ycGtpLmNvL3Jl cG8vQVMyMDI0MDAvMC9CMEJFN0FCREJFQjNFMDE0N0QwODEyMkI2OTlDNDc4Qzk5 QTFCMEZGLm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLnJwa2kuY28vcnJk cC9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB 0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv YTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzcwZjVkODBjLTlk YWEtNGY2Zi04ZjU4LTE4MWM1ZjBjNGIwYS83MGY1ZDgwYy05ZGFhLTRmNmYtOGY1 OC0xODFjNWYwYzRiMGEuY3JsMB8GA1UdIwQYMBaAFJ3WYmBiKG0pT6StFudBn0NX rq6vMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUF BzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBj Yi1iM2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBmNWQ4MGMtOWRhYS00ZjZm LThmNTgtMTgxYzVmMGM0YjBhLmNlcjA1BggrBgEFBQcBBwEB/wQmMCQwEgQCAAEw DAMEABeTeAMEAEAxHDAOBAIAAjAIAwYEJgL6qAAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANQOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAANlOd1fxaWz6S3ZdRvvWQ+2NqYLhHhIe6IdT6R0 pay5IZ5JGhHBh02minQYR3x/WevVgBMtNyW3/WIfAokYb9LcFCkFgHPp89DhLkI+ 5466jHMBlvOAI2TGUp9CvqM9NPR2YGUXFF511ODqvR97SVRaZabGPezZEzNA4EbN zS3OhklkloWGTrp3mrhma8AyzhJ/EDBfcsIUWkSbs3AZ5PxnmoXQpiiMXKjOdJiN aAuTIrA5KJ5Ezm3xyoxqnQ2+1EhMjyjCuJ3xnIqj8T49Tr6ARTWmkAibNHe6bih2 4KaEElSYBjfQP4uN6HZUGj7T+oc6EEE3zb3qHQ6oS2Khc0s= -----END CERTIFICATE-----Generated at Thu Oct 31 21:40:56 2024 by rpki-client on console-fra.rpki-client.org