$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer File: 0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.cer (raw, json) Hash identifier: /hgXascsvVIKxUyMbMcmBvS5s78Qgb28JLjFumHrlqk= Subject key identifier: 72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858463C475FA66156648A1F12EE40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Jun 2024 00:45:19 +0000 Certificate not after: Sun 20 Sep 2026 00:45:19 +0000 Subordinate resources: AS: 396507 IP: 23.129.64.0/24 IP: 23.190.144.0/24 IP: 2620:18c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:3c:47:5f:a6:61:56:64:8a:1f:12:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 17 00:45:19 2024 GMT Not After : Sep 20 00:45:19 2026 GMT Subject: CN=0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:58:5d:83:9e:66:ec:7a:6b:11:47:8c:38: d3:b7:ac:66:76:68:82:30:43:65:fa:30:06:55:7d: db:4a:6f:99:1d:9b:0e:e6:40:4f:9a:db:56:3d:54: 04:16:c5:03:cb:d9:d6:03:1c:80:3d:98:cf:d0:c4: 18:5b:4b:c0:e6:3d:f8:1c:76:a4:d9:65:8e:b7:e6: 16:cc:48:12:75:ac:7c:d0:dd:b4:76:63:a2:b9:bf: 31:70:07:81:d8:b3:83:ae:87:35:c5:37:aa:d7:a4: a6:c5:1d:cd:75:87:25:fe:19:22:5d:64:e7:9a:2e: 75:a8:e1:a1:1b:2b:f8:58:bc:75:0c:cb:eb:f6:93: 91:b0:bd:07:45:87:29:6e:12:88:af:02:e2:a6:f2: af:fd:c4:68:68:d1:7d:35:ad:07:13:7c:79:8e:38: c6:e3:fa:cc:56:f8:15:e7:5e:f0:b2:13:34:bf:06: 89:64:81:63:a7:29:b9:66:5c:54:3d:3b:c4:bf:bf: 2a:04:aa:7a:c1:f6:e0:e9:4a:a0:7f:19:2b:ff:ed: 8d:e1:12:c4:b5:77:70:65:bc:be:84:66:2d:13:b8: 30:60:ae:5f:e6:65:c2:2e:34:48:a9:9f:5c:38:01: e7:c8:ca:a9:82:02:59:e2:43:54:0f:b8:1d:48:7e: 11:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:06:AE:91:17:1E:4E:D6:A0:3A:5E:D6:92:63:F3:CF:71:8D:44:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d/0e6b7a3f-b205-4c6b-a00f-7dfc2083b78d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.129.64.0/24 23.190.144.0/24 IPv6: 2620:18c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396507 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a4:dc:9a:4c:29:57:4e:5e:8f:b6:43:2a:85:ea:20:2e:99: 9a:61:99:ad:0d:75:c0:72:43:b6:45:4e:dc:ec:5a:30:5a:95: 3d:cd:4d:22:e2:bf:e9:92:7c:3c:4e:bb:47:db:c9:b0:b6:fd: 0e:78:4b:f2:2e:d9:29:a4:c5:9d:92:3d:1b:2c:9f:78:01:b8: d8:d8:03:68:ca:fd:ba:e6:3c:0e:03:18:41:88:cc:86:0a:67: 75:f4:95:fd:35:de:aa:1e:40:e1:77:fb:06:a8:27:62:0e:c0: 1a:5a:5f:ef:7d:a7:42:4d:de:e8:7c:2b:e0:ad:a7:d2:19:92: f7:f9:00:ba:78:c9:7f:c9:71:67:7a:39:b5:05:06:ad:9a:11: 6e:5e:69:61:16:82:79:cd:fe:11:d7:32:b9:06:c2:b9:be:c2: 3b:66:8b:1a:e5:f4:4e:3c:25:a8:7c:21:84:ee:17:81:3d:ad: 71:d8:0c:17:8e:20:93:65:64:b0:e8:35:9c:e5:5e:25:4f:c3: 79:ac:d1:4e:58:14:c9:f5:27:22:da:45:42:9d:58:44:ae:d2: e7:0c:bc:77:25:bd:23:77:33:a2:46:b7:9c:06:2b:5e:85:3d: 14:4e:d9:df:38:15:0e:50:79:a2:0e:87:59:9a:e8:e6:5b:12: ec:de:06:70 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEY8R1+mYVZkih8S7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDYxNzAwNDUxOVoXDTI2MDkyMDAwNDUxOVowLzEtMCsGA1UEAxMk MGU2YjdhM2YtYjIwNS00YzZiLWEwMGYtN2RmYzIwODNiNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqpYXYOeZux6axFHjDjTt6xmdmiCMENl+jAG VX3bSm+ZHZsO5kBPmttWPVQEFsUDy9nWAxyAPZjP0MQYW0vA5j34HHak2WWOt+YW zEgSdax80N20dmOiub8xcAeB2LODroc1xTeq16SmxR3NdYcl/hkiXWTnmi51qOGh Gyv4WLx1DMvr9pORsL0HRYcpbhKIrwLipvKv/cRoaNF9Na0HE3x5jjjG4/rMVvgV 517wshM0vwaJZIFjpym5ZlxUPTvEv78qBKp6wfbg6Uqgfxkr/+2N4RLEtXdwZby+ hGYtE7gwYK5f5mXCLjRIqZ9cOAHnyMqpggJZ4kNUD7gdSH4RcQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFHIGrpEXHk7WoDpe1pJj889xjUS9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w ZTZiN2EzZi1iMjA1LTRjNmItYTAwZi03ZGZjMjA4M2I3OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzBlNmI3YTNmLWIyMDUtNGM2Yi1h MDBmLTdkZmMyMDgzYjc4ZC8wZTZiN2EzZi1iMjA1LTRjNmItYTAwZi03ZGZjMjA4 M2I3OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgUADBAAXvpAwDgQCAAIwCAMGBCYgAYwAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYM2zBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCVpNyaTClXTl6PtkMq heogLpmaYZmtDXXAckO2RU7c7FowWpU9zU0i4r/pknw8TrtH28mwtv0OeEvyLtkp pMWdkj0bLJ94AbjY2ANoyv265jwOAxhBiMyGCmd19JX9Nd6qHkDhd/sGqCdiDsAa Wl/vfadCTd7ofCvgrafSGZL3+QC6eMl/yXFnejm1BQatmhFuXmlhFoJ5zf4R1zK5 BsK5vsI7Zosa5fROPCWofCGE7heBPa1x2AwXjiCTZWSw6DWc5V4lT8N5rNFOWBTJ 9Sci2kVCnVhErtLnDLx3Jb0jdzOiRrecBitehT0UTtnfOBUOUHmiDodZmujmWxLs 3gZw -----END CERTIFICATE-----Generated at Thu Nov 21 15:48:45 2024 by rpki-client on console-ams.rpki-client.org