$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer File: cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.cer (raw, json) Hash identifier: bKwkEYnJE8XgARAHNiTmK8V2u1quYwRONDYo+RjtFOk= Subject key identifier: A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8 Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A Certificate issuer: /CN=0357272c-a79a-45bf-9586-92dd49ef3223 Certificate serial: 010D0C9F43285847484918EEB4F908800FE39080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Sep 2024 00:45:26 +0000 Certificate not after: Fri 25 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 11614 AS: 11889 -- 11890 IP: 216.49.192.0/20 IP: 216.168.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:49:18:ee:b4:f9:08:80:0f:e3:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223 Validity Not Before: Sep 21 00:45:26 2024 GMT Not After : Dec 25 01:45:26 2026 GMT Subject: CN=cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:11:03:01:6e:e1:bd:f8:7b:a9:c3:18:de: 29:12:c6:b3:26:3e:a0:5c:fb:8c:95:e0:33:ac:20: 96:97:a7:95:bc:13:b8:84:56:cd:26:d1:0b:fd:30: 05:ce:a4:7c:a0:45:87:4f:94:53:93:6f:9f:9b:cb: e0:75:36:79:e6:98:66:88:d8:40:bb:1f:c2:8f:5b: 42:a8:8a:b6:05:67:9d:dc:1d:c4:92:d3:10:de:19: 3c:f6:2f:98:f8:88:ca:10:f5:de:13:89:34:f2:7a: 99:a8:9a:d1:6c:f0:2d:11:0d:a1:db:83:d8:16:25: fd:75:24:49:0c:d7:d7:f1:3f:40:30:96:db:22:e4: c9:8c:1a:30:84:69:9a:3b:4e:ec:e7:4a:f7:ce:d2: 38:6f:6e:77:9b:7b:54:82:69:76:bf:7f:3e:5f:85: 9c:c9:b5:bf:59:7c:45:f6:a2:aa:0c:36:8e:b2:55: 0a:f8:3c:22:71:7d:37:d4:c4:c0:59:e9:2b:1a:68: 79:72:e8:5b:43:5c:30:1f:11:16:95:ce:b8:e2:55: b2:dc:a5:61:76:07:f7:94:13:35:e1:97:a0:31:67: 69:8c:01:9c:93:31:ea:2a:1a:6f:2e:a4:7b:5a:50: 7e:8b:61:85:46:3b:31:1d:de:2a:06:fa:4a:cc:6b: 7b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:87:E7:BA:DC:3B:3A:CD:21:31:DD:4C:39:D4:8D:CD:FE:A6:3A:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef/cbd7d29b-2c85-4abf-a4d6-67978d7ae7ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl X509v3 Authority Key Identifier: keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer sbgp-ipAddrBlock: critical IPv4: 216.49.192.0/20 216.168.160.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11614 11889-11890 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:46:a5:9d:5a:a8:00:f7:54:83:bc:0a:96:69:67:b3:de:05: 5f:5a:58:b0:10:f2:6c:93:0d:a7:53:98:c1:3f:c7:f4:06:1d: 08:a7:d6:bf:30:12:d3:e6:2e:2d:21:71:4e:6c:bb:be:7e:77: e8:0c:5d:0e:32:57:63:12:48:a6:76:db:e9:4f:54:c2:bd:cc: fe:51:c3:24:7f:ac:f4:f5:4f:70:a2:eb:6c:d4:c0:fe:9d:1a: e3:50:ba:3c:ab:4e:60:9f:78:a4:1a:a5:0a:cf:3c:ac:ad:8b: 0a:49:2b:f5:d9:d9:e5:81:98:9b:fa:72:af:73:df:a2:0c:a5: f8:a7:ab:14:38:c9:3e:c5:a9:7f:e4:02:44:95:ea:03:97:b0: 16:96:70:7b:84:9b:2c:38:c8:91:55:93:51:90:79:45:5d:3f: 9e:6d:22:90:5b:32:ba:b1:de:77:3b:bf:d6:9b:ed:dc:dc:7f: 50:82:19:bc:42:27:63:70:73:f3:7f:36:5f:a8:80:e2:f2:a1: 36:0c:03:f1:43:e2:d5:32:a8:61:2e:14:4c:37:67:f3:b4:e1: ab:4b:79:a2:2f:ed:c1:7f:eb:7e:76:ac:bc:f0:70:b9:82:1a: 1e:46:54:b3:af:b5:52:99:21:f0:a0:1b:30:54:79:df:59:59: e4:25:0a:56 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEdISRjutPkIgA/jkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz MjIzMB4XDTI0MDkyMTAwNDUyNloXDTI2MTIyNTAxNDUyNlowLzEtMCsGA1UEAxMk Y2JkN2QyOWItMmM4NS00YWJmLWE0ZDYtNjc5NzhkN2FlN2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/MRAwFu4b34e6nDGN4pEsazJj6gXPuMleAz rCCWl6eVvBO4hFbNJtEL/TAFzqR8oEWHT5RTk2+fm8vgdTZ55phmiNhAux/Cj1tC qIq2BWed3B3EktMQ3hk89i+Y+IjKEPXeE4k08nqZqJrRbPAtEQ2h24PYFiX9dSRJ DNfX8T9AMJbbIuTJjBowhGmaO07s50r3ztI4b253m3tUgml2v38+X4WcybW/WXxF 9qKqDDaOslUK+DwicX031MTAWekrGmh5cuhbQ1wwHxEWlc644lWy3KVhdgf3lBM1 4ZegMWdpjAGckzHqKhpvLqR7WlB+i2GFRjsxHd4qBvpKzGt7lQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKKH57rcOzrNITHdTDnUjc3+pjqoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9j YmQ3ZDI5Yi0yYzg1LTRhYmYtYTRkNi02Nzk3OGQ3YWU3ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2NiZDdkMjliLTJjODUtNGFiZi1h NGQ2LTY3OTc4ZDdhZTdlZi9jYmQ3ZDI5Yi0yYzg1LTRhYmYtYTRkNi02Nzk3OGQ3 YWU3ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1 YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBATYMcADBAXYqKAwIwYIKwYBBQUHAQgBAf8EFDAS oBAwDgICLV4wCAICLnECAi5yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACJGpZ1aqAD3VIO8CpZpZ7PeBV9a WLAQ8myTDadTmME/x/QGHQin1r8wEtPmLi0hcU5su75+d+gMXQ4yV2MSSKZ22+lP VMK9zP5RwyR/rPT1T3Ci62zUwP6dGuNQujyrTmCfeKQapQrPPKytiwpJK/XZ2eWB mJv6cq9z36IMpfinqxQ4yT7FqX/kAkSV6gOXsBaWcHuEmyw4yJFVk1GQeUVdP55t IpBbMrqx3nc7v9ab7dzcf1CCGbxCJ2Nwc/N/Nl+ogOLyoTYMA/FD4tUyqGEuFEw3 Z/O04atLeaIv7cF/6352rLzwcLmCGh5GVLOvtVKZIfCgGzBUed9ZWeQlClY= -----END CERTIFICATE-----Generated at Thu Nov 21 15:04:08 2024 by rpki-client on console-fra.rpki-client.org