$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer File: 036d6da4-f590-4da8-a22f-55511da98ee5.cer (raw, json) Hash identifier: kHZfGhK/BdtihzVmHiMJNYZpPyFTi9IUR9+cO8DrZl4= Subject key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285845FC11A9EDD7968BD8ED321E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 May 2024 00:45:22 +0000 Certificate not after: Fri 28 Aug 2026 00:45:22 +0000 Subordinate resources: AS: 395042 IP: 52.128.40.0/21 IP: 192.92.97.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:fc:11:a9:ed:d7:96:8b:d8:ed:32:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 25 00:45:22 2024 GMT Not After : Aug 28 00:45:22 2026 GMT Subject: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:36:be:5d:90:6d:25:76:73:12:73:cc:b7: 08:52:83:b4:eb:47:e1:9e:03:b6:61:fb:cb:14:72: 1e:5a:07:e3:ce:9f:e8:91:94:3c:97:49:03:31:06: 32:3f:61:8b:8b:18:e0:e4:3e:75:5a:1a:7b:c1:b0: fd:b4:d7:af:e3:47:6a:b0:be:9e:a8:30:d7:a6:bc: 1d:71:b2:64:39:3d:04:77:2a:53:a9:48:4a:1f:c4: a7:18:f4:cb:70:b9:7f:22:bd:c3:5c:45:4a:ed:d3: a1:65:d1:c1:9b:68:30:44:f2:ba:16:f7:df:3e:b6: 3e:2a:b9:a2:a3:1a:5b:e1:f9:ad:a0:62:42:67:3f: 07:63:83:83:01:75:9d:b1:71:c4:91:f4:a4:79:63: cc:25:d1:f2:9c:02:8a:86:35:6c:06:9d:c8:8b:48: ca:a8:cd:ec:49:29:d0:9a:97:7c:e0:b7:56:e4:0d: 7c:8d:69:54:1f:7b:98:1e:70:c7:bb:c9:7c:77:77: 93:89:b6:9e:7e:e8:b1:b1:25:c7:b0:3d:68:83:86: 09:47:ec:fa:3e:65:27:f5:0d:bb:8f:37:b6:60:03: 40:f6:10:cb:7b:47:8b:ed:4e:3f:95:c7:4f:e1:8c: 6b:ad:d8:46:72:a3:94:27:2f:62:6e:29:e3:03:cc: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 52.128.40.0/21 192.92.97.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395042 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:12:a7:13:9a:fc:9d:eb:79:29:1e:cd:6a:45:60:53:17:4b: 43:07:54:b4:45:0f:e1:1d:07:6e:97:5a:83:87:18:1a:a1:f4: 54:52:4e:a2:8f:5c:1e:da:b1:84:4e:5c:07:88:4c:2d:56:66: 36:2f:03:0d:da:68:12:d2:20:1b:2d:bd:83:d9:61:27:de:62: 1e:3c:7f:b1:39:bb:3e:c7:3d:58:72:61:c1:c3:95:d3:77:30: 50:8a:ad:d4:62:a2:ad:b4:e9:8e:03:64:a1:5e:a1:5c:dc:9c: ad:28:fb:41:71:5e:85:c9:01:e8:e1:e4:eb:e2:35:01:b2:18: 25:a5:4c:03:29:35:79:9d:b5:32:e1:08:01:0c:a2:27:be:8c: 9a:e1:d8:03:89:5e:42:90:a4:80:49:8c:25:b8:cb:75:75:c5: 94:07:91:3c:f9:01:ad:08:0d:0b:7d:15:96:15:95:6b:e1:31: 2f:a2:98:28:77:1b:bb:97:76:f6:7c:de:aa:49:9d:57:7a:0e: df:9e:85:06:ed:68:11:78:b7:59:30:38:66:f6:17:61:cd:cd: 19:67:61:4c:37:b2:59:0f:30:7a:f5:b7:ca:3f:78:3d:8c:0d: a0:d3:83:2c:04:06:8a:b6:87:1c:53:dc:a6:43:e5:7f:da:1e: 0f:b6:94:f1 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEX8Eant15aL2O0yHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDUyNTAwNDUyMloXDTI2MDgyODAwNDUyMlowLzEtMCsGA1UEAxMk MDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN02vl2QbSV2cxJzzLcIUoO060fhngO2YfvL FHIeWgfjzp/okZQ8l0kDMQYyP2GLixjg5D51Whp7wbD9tNev40dqsL6eqDDXprwd cbJkOT0EdypTqUhKH8SnGPTLcLl/Ir3DXEVK7dOhZdHBm2gwRPK6FvffPrY+Krmi oxpb4fmtoGJCZz8HY4ODAXWdsXHEkfSkeWPMJdHynAKKhjVsBp3Ii0jKqM3sSSnQ mpd84LdW5A18jWlUH3uYHnDHu8l8d3eTibaefuixsSXHsD1og4YJR+z6PmUn9Q27 jze2YANA9hDLe0eL7U4/lcdP4YxrrdhGcqOUJy9ibinjA8yNZwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGnBn2A9s18VLsGCWtKjF7cSJDtrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w MzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzAzNmQ2ZGE0LWY1OTAtNGRhOC1h MjJmLTU1NTExZGE5OGVlNS8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRh OThlZTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAM0gCgDBADAXGEwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgciMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJ0SpxOa/J3reSkezWpFYFMXS0MHVLRFD+EdB26X WoOHGBqh9FRSTqKPXB7asYROXAeITC1WZjYvAw3aaBLSIBstvYPZYSfeYh48f7E5 uz7HPVhyYcHDldN3MFCKrdRioq206Y4DZKFeoVzcnK0o+0FxXoXJAejh5OviNQGy GCWlTAMpNXmdtTLhCAEMoie+jJrh2AOJXkKQpIBJjCW4y3V1xZQHkTz5Aa0IDQt9 FZYVlWvhMS+imCh3G7uXdvZ83qpJnVd6Dt+ehQbtaBF4t1kwOGb2F2HNzRlnYUw3 slkPMHr1t8o/eD2MDaDTgywEBoq2hxxT3KZD5X/aHg+2lPE= -----END CERTIFICATE-----Generated at Thu Nov 21 15:04:11 2024 by rpki-client on console-fra.rpki-client.org