$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer File: af2f6961-091f-4bb2-90d1-dcdd969f1c75.cer (raw, json) Hash identifier: kvNX5oonFfJOQK8qYLjZsXRsxTb5JLxtd6jMo6BdB6Y= Subject key identifier: 41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F432858468D3D3781EF53073BC5BAF000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 16 Jul 2024 00:45:20 +0000 Certificate not after: Mon 19 Oct 2026 00:45:20 +0000 Subordinate resources: AS: 30323 IP: 23.174.96.0/24 IP: 173.195.97.0/24 IP: 2620:66:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:8d:3d:37:81:ef:53:07:3b:c5:ba:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Jul 16 00:45:20 2024 GMT Not After : Oct 19 00:45:20 2026 GMT Subject: CN=af2f6961-091f-4bb2-90d1-dcdd969f1c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:dd:53:d5:62:17:e7:b4:45:db:43:40:e5:f3: 23:3c:57:11:e6:f8:31:5a:33:39:e9:ee:11:69:37: 3f:f0:24:6c:c1:99:31:85:52:d8:22:ae:c7:c9:e3: 87:d8:6a:60:ad:49:c7:bb:48:bb:ca:6e:3a:2d:f2: 23:cd:1a:68:7a:0d:04:85:c5:18:fd:f3:83:e7:f1: 47:ec:69:73:01:1d:68:7e:25:cd:1c:a8:17:40:a2: 1e:ba:a2:fe:56:dd:7f:bb:0a:cb:39:8c:97:fc:1b: 6a:8a:75:3e:8b:fe:36:00:d7:93:cb:ac:be:96:02: f2:74:cb:8e:df:0c:d6:da:db:5e:aa:1e:c9:e4:87: 1c:fa:90:b3:fb:d0:94:7d:c6:38:9c:ec:0f:84:f2: 42:fa:65:9d:28:55:71:d2:49:3b:b2:7e:85:f9:7f: 0c:b3:b1:58:b2:6c:17:bc:04:48:0b:42:ab:8d:a7: 9f:3d:00:d0:0e:91:e5:33:66:5f:90:0f:63:49:86: 0c:50:77:73:54:25:3a:c4:48:dc:40:cf:6d:f5:7c: 0f:99:1c:82:a2:c1:64:d5:bc:c0:6c:c2:9c:9f:98: cb:9e:58:ea:1e:7e:12:c3:6e:10:8a:47:22:bd:f4: 76:86:da:7d:05:b7:12:65:36:ad:94:d2:d0:75:9d: 98:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D5:22:44:65:72:BB:3C:67:67:65:E7:28:3E:BF:7D:34:17:18:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/af2f6961-091f-4bb2-90d1-dcdd969f1c75/af2f6961-091f-4bb2-90d1-dcdd969f1c75.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 23.174.96.0/24 173.195.97.0/24 IPv6: 2620:66:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30323 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:3d:c8:59:dc:53:39:62:cb:00:d2:ae:6b:ee:b5:0b:46:46: f1:f4:42:8b:21:f9:8a:3a:cc:be:c8:5d:76:c2:f5:d6:b5:a7: e9:4a:d7:bd:88:4b:30:4c:f4:2a:37:c8:f2:87:62:cf:b4:ec: 36:26:6d:92:6c:c2:ea:64:8a:87:1c:e6:15:dc:f6:3b:78:5e: 14:c9:72:eb:79:9b:a6:1b:82:58:66:4b:16:64:5e:09:1d:27: f6:66:d7:11:c3:ac:d2:55:aa:ca:35:2e:a3:ce:7a:54:cc:c5: a4:be:37:d6:3c:b5:fd:98:00:e5:fd:50:85:64:77:b7:84:f8: 61:e3:4b:1d:45:f6:40:aa:ce:45:b5:e7:e1:79:cc:f4:05:dc: 67:e3:f1:06:23:6e:c3:c0:fc:50:74:3c:a1:9a:fd:a2:16:aa: 14:35:07:58:7a:c1:e6:b6:36:99:46:16:7d:51:29:81:be:e8: 6f:32:8c:2e:f4:2d:55:e0:72:55:86:62:16:05:4f:31:de:70: f2:d0:45:cd:e1:2e:fe:36:67:5c:c8:d7:6d:52:e2:94:98:d2: b2:53:7c:8c:46:fc:07:de:5f:d0:a4:25:df:bc:bd:0a:10:0d: 77:38:e1:02:6a:57:25:a0:34:c0:0d:f8:f8:c8:62:1d:b3:65: 40:e4:f0:2e -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEaNPTeB71MHO8W68AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDcxNjAwNDUyMFoXDTI2MTAxOTAwNDUyMFowLzEtMCsGA1UEAxMk YWYyZjY5NjEtMDkxZi00YmIyLTkwZDEtZGNkZDk2OWYxYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy91T1WIX57RF20NA5fMjPFcR5vgxWjM56e4R aTc/8CRswZkxhVLYIq7HyeOH2GpgrUnHu0i7ym46LfIjzRpoeg0EhcUY/fOD5/FH 7GlzAR1ofiXNHKgXQKIeuqL+Vt1/uwrLOYyX/BtqinU+i/42ANeTy6y+lgLydMuO 3wzW2tteqh7J5Icc+pCz+9CUfcY4nOwPhPJC+mWdKFVx0kk7sn6F+X8Ms7FYsmwX vARIC0KrjaefPQDQDpHlM2ZfkA9jSYYMUHdzVCU6xEjcQM9t9XwPmRyCosFk1bzA bMKcn5jLnljqHn4Sw24QikcivfR2htp9BbcSZTatlNLQdZ2YqwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFEHVIkRlcrs8Z2dl5yg+v300FxggMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h ZjJmNjk2MS0wOTFmLTRiYjItOTBkMS1kY2RkOTY5ZjFjNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2FmMmY2OTYxLTA5MWYtNGJiMi05 MGQxLWRjZGQ5NjlmMWM3NS9hZjJmNjk2MS0wOTFmLTRiYjItOTBkMS1kY2RkOTY5 ZjFjNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXrmADBACtw2EwDwQCAAIwCQMHACYgAGagADAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJ2czBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBpPchZ3FM5YssA0q5r 7rULRkbx9EKLIfmKOsy+yF12wvXWtafpSte9iEswTPQqN8jyh2LPtOw2Jm2SbMLq ZIqHHOYV3PY7eF4UyXLreZumG4JYZksWZF4JHSf2ZtcRw6zSVarKNS6jznpUzMWk vjfWPLX9mADl/VCFZHe3hPhh40sdRfZAqs5Ftefhecz0Bdxn4/EGI27DwPxQdDyh mv2iFqoUNQdYesHmtjaZRhZ9USmBvuhvMowu9C1V4HJVhmIWBU8x3nDy0EXN4S7+ NmdcyNdtUuKUmNKyU3yMRvwH3l/QpCXfvL0KEA13OOECalcloDTADfj4yGIds2VA 5PAu -----END CERTIFICATE-----Generated at Thu Nov 21 15:04:06 2024 by rpki-client on console-fra.rpki-client.org