$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer File: 70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer (raw, json) Hash identifier: pVYgkL6gJw0XSBh2ahnXECJww5XiD54fpivGsW5tjVk= Subject key identifier: A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285847291A0F67B5824A0FCB6A0300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Sep 2024 20:40:36 +0000 Certificate not after: Sun 13 Dec 2026 21:40:36 +0000 Subordinate resources: AS: 397472 IP: 23.132.16.0/24 IP: 134.195.102.0/24 IP: 2602:fded::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Oct 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:29:1a:0f:67:b5:82:4a:0f:cb:6a:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 9 20:40:36 2024 GMT Not After : Dec 13 21:40:36 2026 GMT Subject: CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:54:49:f8:0e:d9:65:c8:6c:24:f6:e7:4e: 14:41:6a:fc:dd:c3:42:8e:68:36:15:bc:8b:e0:66: 26:73:97:b8:bb:10:42:14:3b:97:7b:e0:96:04:4e: 61:a4:a2:6f:be:e0:9e:e6:ca:33:a8:39:56:0a:22: cc:c1:5d:a4:5e:6f:b3:18:af:9b:fe:6b:18:d5:77: 6c:5e:14:09:f7:10:f8:ff:0d:35:1f:eb:d4:5b:06: da:73:f5:2e:96:da:db:c0:bf:27:3c:07:d7:09:48: 60:02:a2:a7:6c:57:3d:c9:7c:84:cc:0a:9e:98:04: d9:1b:16:5d:90:c4:12:3b:8f:03:03:41:08:cd:02: cd:dc:be:f1:69:53:a0:8a:e4:0d:c0:fb:e5:93:9a: 9c:09:3f:72:b2:18:a7:56:97:81:f9:fc:10:9c:45: 42:02:b0:86:a1:0c:ac:12:5a:ec:41:91:84:50:cb: b1:2d:da:26:42:aa:cb:10:9c:a8:61:57:e1:a6:a5: fc:b4:2a:34:d7:1c:8c:9d:c4:58:92:8c:5e:bc:6d: 48:81:64:a4:f0:1a:a8:4c:5d:32:20:1a:fa:b5:91: 16:9f:b1:ef:94:e9:66:8d:3d:e3:91:9f:93:46:78: 0a:ac:2a:6d:ee:57:1f:75:d0:f0:fe:27:42:db:ae: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.132.16.0/24 134.195.102.0/24 IPv6: 2602:fded::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397472 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c5:20:fc:b1:5a:34:17:a0:59:07:ac:d1:e1:9b:10:3a:4e: 96:01:ac:fd:fe:66:f4:8e:1a:fc:54:3a:33:d1:37:6e:1a:98: f8:c5:02:b0:f1:2c:27:96:cb:87:69:06:7f:7b:ca:e8:4d:ae: f7:c3:fd:72:0d:58:49:af:85:b9:1d:32:ec:97:6c:99:39:fc: 03:9e:44:60:9c:79:97:da:b9:48:5a:45:2d:b6:df:e7:00:cb: 8b:11:0d:78:74:3a:67:8e:1f:87:4d:9a:f0:20:4a:ab:83:c4: d2:80:e4:c8:4c:17:de:8a:a7:04:9b:66:ec:f9:29:21:28:b7: a1:b2:e1:74:54:ec:5d:8d:14:70:c1:c6:be:7f:64:d1:37:f7: c2:81:89:c9:77:f3:69:b6:2e:e3:0d:b5:82:69:7d:2a:8c:f6: 5c:df:fc:d9:a1:2a:0f:b4:47:95:ce:e1:9e:30:7c:b0:ed:c1: 89:b9:d8:af:89:1e:29:02:0c:4f:cf:00:ed:2a:53:59:09:51: 28:7b:98:25:a6:0f:96:31:4b:e5:11:90:b9:e9:c5:a8:57:8b: 67:21:13:63:0d:e6:ec:a6:60:8e:24:54:1a:88:0a:88:21:02: 25:39:08:17:8f:d0:0b:45:79:cd:1c:04:33:d5:09:e7:62:6b: 52:cb:5f:07 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEcpGg9ntYJKD8tqAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDkwOTIwNDAzNloXDTI2MTIxMzIxNDAzNlowLzEtMCsGA1UEAxMk NzBiY2JkNjgtNDFkNi00YTVhLThkMjgtMWI5YTlhNGM1ZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmRUSfgO2WXIbCT2504UQWr83cNCjmg2FbyL 4GYmc5e4uxBCFDuXe+CWBE5hpKJvvuCe5sozqDlWCiLMwV2kXm+zGK+b/msY1Xds XhQJ9xD4/w01H+vUWwbac/UultrbwL8nPAfXCUhgAqKnbFc9yXyEzAqemATZGxZd kMQSO48DA0EIzQLN3L7xaVOgiuQNwPvlk5qcCT9yshinVpeB+fwQnEVCArCGoQys ElrsQZGEUMuxLdomQqrLEJyoYVfhpqX8tCo01xyMncRYkoxevG1IgWSk8BqoTF0y IBr6tZEWn7HvlOlmjT3jkZ+TRngKrCpt7lcfddDw/idC2655zQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFKnfb1ZPEnvs7O1WnN+c1EOIVfTgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83 MGJjYmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlhOWE0YzVlYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzcwYmNiZDY4LTQxZDYtNGE1YS04 ZDI4LTFiOWE5YTRjNWVhOS83MGJjYmQ2OC00MWQ2LTRhNWEtOGQyOC0xYjlhOWE0 YzVlYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXhBADBACGw2YwDgQCAAIwCAMGBCYC/e0AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYQoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPxSD8sVo0F6BZB6zR 4ZsQOk6WAaz9/mb0jhr8VDoz0TduGpj4xQKw8SwnlsuHaQZ/e8roTa73w/1yDVhJ r4W5HTLsl2yZOfwDnkRgnHmX2rlIWkUttt/nAMuLEQ14dDpnjh+HTZrwIEqrg8TS gOTITBfeiqcEm2bs+SkhKLehsuF0VOxdjRRwwca+f2TRN/fCgYnJd/Npti7jDbWC aX0qjPZc3/zZoSoPtEeVzuGeMHyw7cGJudiviR4pAgxPzwDtKlNZCVEoe5glpg+W MUvlEZC56cWoV4tnIRNjDebspmCOJFQaiAqIIQIlOQgXj9ALRXnNHAQz1QnnYmtS y18H -----END CERTIFICATE-----Generated at Fri Oct 25 16:48:51 2024 by rpki-client on console-ams.rpki-client.org