$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer File: 0457dcf9-b13b-4e0f-b761-d109e41cd945.cer (raw, json) Hash identifier: g17Z8d+Cwn7LOF8L08OcwP8V9K8Xg5P119vzq2BOofY= Subject key identifier: 5D:A7:A4:B5:AF:64:F3:A5:3D:AD:D3:9C:59:CE:66:B5:54:C6:45:36 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584718D377A1E99EA3A05E102320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Sep 2024 00:45:25 +0000 Certificate not after: Tue 08 Dec 2026 01:45:25 +0000 Subordinate resources: AS: 393301 IP: 162.248.144.0/21 IP: 2605:2680::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:18:d3:77:a1:e9:9e:a3:a0:5e:10:23:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 4 00:45:25 2024 GMT Not After : Dec 8 01:45:25 2026 GMT Subject: CN=0457dcf9-b13b-4e0f-b761-d109e41cd945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:d3:3b:5f:21:f7:a6:aa:92:bf:c2:07:8a: cd:66:4c:74:5d:7e:1d:bb:e1:ef:7c:2e:66:54:f2: da:97:bd:cf:ea:67:1e:d3:07:62:94:5c:01:ab:9f: 55:e4:73:22:9a:4e:ca:54:77:1d:14:70:95:d8:cc: 70:ea:7a:b9:37:3a:16:52:7f:6e:04:20:37:7f:72: 1a:a1:4b:66:b8:66:5c:9a:5f:da:6a:f4:56:a5:5b: 5f:93:71:8a:e5:2d:f7:09:41:6c:37:04:b6:e7:cf: 9f:51:b2:ac:a3:e1:76:8f:59:e0:61:99:8d:4d:f3: ca:f8:ab:a2:10:96:12:d6:f9:49:18:15:1e:7e:4f: c7:cf:80:34:05:59:90:40:59:b4:6f:f0:e7:40:4a: 30:ab:07:4c:65:37:e3:8e:a2:dc:a5:86:cb:1f:2a: 49:1e:b1:10:6a:7e:4d:2d:b5:97:9e:dd:ce:73:a4: 24:c0:af:f8:4c:14:e1:33:57:4b:1c:fc:62:f7:28: 0a:7f:b5:fc:21:21:54:56:48:e1:c3:18:e2:50:82: e2:7d:af:af:86:a4:34:b7:f1:32:90:ac:b5:2e:e3: c6:a5:24:c7:61:54:cf:c2:a8:cc:b1:01:04:26:0c: d7:6d:f9:96:09:80:fe:09:28:69:2c:d3:ad:41:a1: 90:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A7:A4:B5:AF:64:F3:A5:3D:AD:D3:9C:59:CE:66:B5:54:C6:45:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 162.248.144.0/21 IPv6: 2605:2680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393301 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:05:49:cd:42:c9:92:d5:10:2f:77:03:0c:c8:98:68:4b:cc: 26:1a:ea:07:a4:94:b1:81:0d:a3:62:46:b0:05:4e:bd:6f:49: 5e:64:64:01:3c:1a:65:a1:bd:b1:15:51:4a:9b:dd:5f:89:5a: 20:c1:6d:8f:8e:5c:21:87:c5:b2:1f:29:71:dd:74:32:e9:11: 56:88:2b:4b:5b:7f:1f:7a:0a:58:a0:83:43:24:46:be:28:fa: 67:aa:73:40:fc:66:47:dc:28:d2:dc:b0:23:75:45:c4:db:a7: 82:04:0e:09:ec:2b:3f:58:02:a1:1e:cf:06:85:00:af:e3:4f: 47:6a:a9:5b:ea:e4:f3:28:2d:7b:2e:01:1e:a9:a6:bf:41:5a: 11:80:02:3e:af:76:c1:45:21:63:cd:dd:59:ac:4c:f4:fe:a2: e0:e6:73:06:96:f9:b2:d7:e9:73:05:bd:d2:16:c3:33:be:37: 2f:f8:2b:57:39:fe:11:8b:b4:64:13:a5:ea:eb:2c:a6:04:23: 11:de:54:41:8e:a8:0d:09:66:57:29:10:15:ce:cf:f1:84:05: f5:40:9e:fa:f0:73:ee:43:ee:06:82:13:0d:51:fe:5e:a3:5f: 56:75:1d:49:9d:82:87:18:72:c9:d9:3e:32:86:8b:49:94:2d: df:a3:14:b0 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEcY03eh6Z6joF4QIyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDkwNDAwNDUyNVoXDTI2MTIwODAxNDUyNVowLzEtMCsGA1UEAxMk MDQ1N2RjZjktYjEzYi00ZTBmLWI3NjEtZDEwOWU0MWNkOTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+XTO18h96aqkr/CB4rNZkx0XX4du+HvfC5m VPLal73P6mce0wdilFwBq59V5HMimk7KVHcdFHCV2Mxw6nq5NzoWUn9uBCA3f3Ia oUtmuGZcml/aavRWpVtfk3GK5S33CUFsNwS258+fUbKso+F2j1ngYZmNTfPK+Kui EJYS1vlJGBUefk/Hz4A0BVmQQFm0b/DnQEowqwdMZTfjjqLcpYbLHypJHrEQan5N LbWXnt3Oc6QkwK/4TBThM1dLHPxi9ygKf7X8ISFUVkjhwxjiUILifa+vhqQ0t/Ey kKy1LuPGpSTHYVTPwqjMsQEEJgzXbfmWCYD+CShpLNOtQaGQNQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFF2npLWvZPOlPa3TnFnOZrVUxkU2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w NDU3ZGNmOS1iMTNiLTRlMGYtYjc2MS1kMTA5ZTQxY2Q5NDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzA0NTdkY2Y5LWIxM2ItNGUwZi1i NzYxLWQxMDllNDFjZDk0NS8wNDU3ZGNmOS1iMTNiLTRlMGYtYjc2MS1kMTA5ZTQx Y2Q5NDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAOi+JAwDQQCAAIwBwMFACYFJoAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgBVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIUFSc1CyZLVEC93AwzImGhLzCYa 6geklLGBDaNiRrAFTr1vSV5kZAE8GmWhvbEVUUqb3V+JWiDBbY+OXCGHxbIfKXHd dDLpEVaIK0tbfx96Cligg0MkRr4o+meqc0D8ZkfcKNLcsCN1RcTbp4IEDgnsKz9Y AqEezwaFAK/jT0dqqVvq5PMoLXsuAR6ppr9BWhGAAj6vdsFFIWPN3VmsTPT+ouDm cwaW+bLX6XMFvdIWwzO+Ny/4K1c5/hGLtGQTperrLKYEIxHeVEGOqA0JZlcpEBXO z/GEBfVAnvrwc+5D7gaCEw1R/l6jX1Z1HUmdgocYcsnZPjKGi0mULd+jFLA= -----END CERTIFICATE-----Generated at Thu Nov 21 15:48:45 2024 by rpki-client on console-ams.rpki-client.org