$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer File: 09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer (raw, json) Hash identifier: 7uxd+gnuXTc778AafhsPb8F0ZsfeDVgIcCVg30tKyy0= Subject key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285847ACC9BAF1657EE9CA673CC580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 27 Oct 2024 00:45:26 +0000 Certificate not after: Sat 30 Jan 2027 01:45:26 +0000 Subordinate resources: IP: 209.127.216.0/24 IP: 209.188.109.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ac:c9:ba:f1:65:7e:e9:ca:67:3c:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Oct 27 00:45:26 2024 GMT Not After : Jan 30 01:45:26 2027 GMT Subject: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:5f:a3:be:40:09:d3:ca:4f:93:8d:19:ba: 9a:38:a6:08:78:47:38:17:a8:10:c2:05:16:c3:15: fb:6c:57:bd:fc:48:21:5b:8f:9b:d3:99:22:8a:a6: 88:f6:af:1c:90:47:f8:de:f0:40:d6:c4:00:05:bb: 54:63:74:d8:61:55:d6:c4:1b:d8:59:94:c8:67:db: 1f:21:36:08:ff:b8:52:a6:f6:ce:87:ae:70:86:c3: 8e:0c:61:bc:b2:d0:16:af:66:6c:ee:27:f7:9f:37: 56:83:b8:23:17:5e:8b:d9:96:1d:20:89:cf:a9:5e: 30:b0:3a:86:4c:a3:89:69:94:88:87:3e:b8:46:e6: 81:6b:25:6d:a3:a7:3f:f2:0a:1a:f7:5d:8f:2d:4d: be:f9:8e:99:c1:a5:7f:dc:9e:4b:60:77:4b:89:29: ff:eb:48:68:f8:1a:30:18:a1:9f:1f:16:c8:37:6f: ba:be:38:c3:df:51:39:e2:ed:39:56:fe:f5:46:53: 71:de:f5:31:7c:f4:cd:23:d7:f7:25:10:47:01:4e: 87:4e:fa:5d:9c:60:07:5b:35:06:37:2d:97:0c:44: 5d:4a:43:6c:b7:90:3b:0d:c5:34:e7:8f:6b:85:be: 01:49:74:b2:58:b4:4f:50:3e:55:1b:dc:be:5e:b4: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 209.127.216.0/24 209.188.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:24:9d:15:fe:ad:2a:0f:58:e8:fe:ef:d3:47:ed:b4:77:79: ec:71:dd:b4:e5:59:8a:fb:5f:09:2c:bc:da:79:88:75:aa:dd: 1e:ca:fb:c2:c5:32:a3:f6:26:23:36:08:a7:49:2f:de:20:3f: 18:5c:dc:06:b9:07:cb:01:7d:db:d7:50:74:df:5d:a1:62:f2: 30:14:ce:ca:ce:3d:a0:e3:29:c3:61:94:ae:29:46:51:1c:02: 34:78:15:8e:80:06:bc:21:62:46:e5:71:9a:51:6b:3b:be:4e: 9b:b3:a4:8c:72:0c:97:71:94:f5:95:24:3f:d8:ed:bc:14:af: ee:75:93:aa:35:69:a8:4d:f3:e2:62:62:f2:a9:4a:be:3d:19: 85:3d:57:50:85:49:8b:97:56:d8:4d:6c:85:70:b2:40:d6:47: dd:ba:fb:0b:04:45:cd:0b:28:99:5d:dc:eb:8e:37:1f:9a:1c: 50:29:2f:94:7d:ef:36:94:da:18:68:f3:e8:04:86:66:70:5a: 3e:40:a9:50:4d:c5:7e:1a:5b:d0:ff:6e:6b:53:82:45:a7:67: b5:e7:b7:07:c6:4d:4c:dc:7d:68:ba:ad:06:1c:3d:34:15:0a: 7e:bc:cc:97:49:f5:1a:95:86:10:4e:81:27:a9:20:03:03:b7: 0d:f2:f2:d1 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEesybrxZX7pymc8xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MTAyNzAwNDUyNloXDTI3MDEzMDAxNDUyNlowLzEtMCsGA1UEAxMk MDlmZTQ2YjAtNzAzNC00ZDdiLWE3NDYtN2E3MGY3ODhjM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPFfo75ACdPKT5ONGbqaOKYIeEc4F6gQwgUW wxX7bFe9/EghW4+b05kiiqaI9q8ckEf43vBA1sQABbtUY3TYYVXWxBvYWZTIZ9sf ITYI/7hSpvbOh65whsOODGG8stAWr2Zs7if3nzdWg7gjF16L2ZYdIInPqV4wsDqG TKOJaZSIhz64RuaBayVto6c/8goa912PLU2++Y6ZwaV/3J5LYHdLiSn/60ho+Bow GKGfHxbIN2+6vjjD31E54u05Vv71RlNx3vUxfPTNI9f3JRBHAU6HTvpdnGAHWzUG Ny2XDERdSkNst5A7DcU0549rhb4BSXSyWLRPUD5VG9y+XrSY7QIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFCpSG3Xdqe4+kezLb6fC6z3qvDhLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8w OWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4OGMzZjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzA5ZmU0NmIwLTcwMzQtNGQ3Yi1h NzQ2LTdhNzBmNzg4YzNmNS8wOWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4 OGMzZjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADRf9gDBADRvG0wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPiSdFf6tKg9Y 6P7v00fttHd57HHdtOVZivtfCSy82nmIdardHsr7wsUyo/YmIzYIp0kv3iA/GFzc BrkHywF929dQdN9doWLyMBTOys49oOMpw2GUrilGURwCNHgVjoAGvCFiRuVxmlFr O75Om7OkjHIMl3GU9ZUkP9jtvBSv7nWTqjVpqE3z4mJi8qlKvj0ZhT1XUIVJi5dW 2E1shXCyQNZH3br7CwRFzQsomV3c6443H5ocUCkvlH3vNpTaGGjz6ASGZnBaPkCp UE3Ffhpb0P9ua1OCRadntee3B8ZNTNx9aLqtBhw9NBUKfrzMl0n1GpWGEE6BJ6kg AwO3DfLy0Q== -----END CERTIFICATE-----Generated at Thu Nov 21 15:48:22 2024 by rpki-client on console-ams.rpki-client.org