$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer File: 341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer (raw, json) Hash identifier: H4cP3/iOQpWCsHmp3YOE7sG1GEppyyyjn7HvLySKxMM= Subject key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285845C43BF821EDF9443CCB66B000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 May 2024 00:45:20 +0000 Certificate not after: Sat 08 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 19551 IP: 45.60.0.0/16 IP: 45.223.0.0/16 IP: 107.154.0.0/16 IP: 192.230.64.0/18 IP: 198.143.32.0/19 IP: 199.83.128.0/21 IP: 2620:28:4000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c4:3b:f8:21:ed:f9:44:3c:cb:66:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 5 00:45:20 2024 GMT Not After : Aug 8 00:45:20 2026 GMT Subject: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:04:ba:fe:56:48:92:72:a9:a6:3a:a0:5e: e8:47:9d:09:87:9a:df:cc:cd:a8:00:3a:68:6e:03: 3d:12:42:40:59:66:e1:cb:03:99:41:35:b6:ba:35: d4:d2:15:09:e4:6e:6f:4a:5e:34:d8:56:50:80:66: d7:41:82:36:22:63:b1:ed:a2:cd:1d:7f:1f:13:97: 97:4e:33:b8:8b:23:6b:24:cc:db:9e:ed:7e:62:f6: 47:4a:e4:c6:d8:23:bf:7e:66:88:90:72:1f:2b:58: 9c:ed:b6:ce:0b:f7:02:20:a4:5f:9a:e9:82:b8:af: 7c:07:12:1a:4b:76:2f:7c:5c:f9:db:cd:03:01:f2: c5:5c:a1:f7:ea:8b:55:d8:b7:ac:da:93:8e:4d:c8: 2f:b4:9d:d7:06:16:43:e1:80:9a:f5:21:2c:91:84: bb:0f:2d:c8:db:df:f9:f0:46:da:13:e5:b1:4d:27: 09:fa:45:6f:98:e7:20:5c:08:11:06:ed:5f:b0:2f: a6:4c:0b:81:8d:60:c4:04:ef:06:51:a0:0f:2f:e6: ad:6c:8d:7b:9c:3d:9c:ec:67:f5:de:69:54:ff:a9: 09:26:02:fb:8b:bf:df:9e:fb:fc:d6:e4:41:47:57: 32:29:19:e4:d7:4d:dc:a4:4d:54:41:8b:24:69:4e: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 45.60.0.0/16 45.223.0.0/16 107.154.0.0/16 192.230.64.0/18 198.143.32.0/19 199.83.128.0/21 IPv6: 2620:28:4000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19551 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fc:f7:24:f8:6e:d5:5f:fb:f4:80:2e:43:99:87:81:15:3f: 42:d2:10:7b:15:c5:0c:f0:83:07:89:e1:50:a9:43:56:b5:97: f0:ce:5e:14:8b:64:e6:88:8d:04:8c:6d:f0:ff:4e:12:6f:65: 4c:85:58:cb:94:2b:8a:7a:66:2c:7f:4c:dd:af:0b:0d:4f:19: c0:36:f3:66:0f:6c:73:dc:55:24:95:38:f7:22:15:a3:fb:4d: 4e:1c:8b:fe:7a:e9:9d:5a:cc:7e:ad:0d:d4:5a:ab:a0:5d:b3: 4e:4a:22:d3:79:45:95:12:a6:93:5b:eb:18:51:d1:9f:f2:db: a9:31:8d:2d:27:6d:56:04:33:6f:37:90:71:bf:e3:82:d4:d4: bc:3e:93:5b:b5:55:2e:fd:2c:7d:02:d6:cb:0a:6c:9b:89:59: db:87:b8:01:86:db:e5:b5:6a:1e:63:cc:20:2c:65:4a:d6:9c: f1:91:a6:3a:ba:29:24:e2:36:71:40:7e:06:4a:70:54:54:50: 42:99:0a:2d:05:7f:8a:f7:28:a4:79:76:ff:4b:b8:09:50:78: f3:39:60:34:09:28:39:2d:67:ba:15:dd:8e:07:9c:a5:4e:5b: f7:ce:9c:84:5c:c7:3a:b8:12:36:22:68:ac:e9:f1:7e:aa:33: 9d:0a:3f:c1 -----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWEXEO/gh7flEPMtmsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDUwNTAwNDUyMFoXDTI2MDgwODAwNDUyMFowLzEtMCsGA1UEAxMk MzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNjYzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvewEuv5WSJJyqaY6oF7oR50Jh5rfzM2oADpo bgM9EkJAWWbhywOZQTW2ujXU0hUJ5G5vSl402FZQgGbXQYI2ImOx7aLNHX8fE5eX TjO4iyNrJMzbnu1+YvZHSuTG2CO/fmaIkHIfK1ic7bbOC/cCIKRfmumCuK98BxIa S3YvfFz5280DAfLFXKH36otV2Les2pOOTcgvtJ3XBhZD4YCa9SEskYS7Dy3I29/5 8EbaE+WxTScJ+kVvmOcgXAgRBu1fsC+mTAuBjWDEBO8GUaAPL+atbI17nD2c7Gf1 3mlU/6kJJgL7i7/fnvv81uRBR1cyKRnk103cpE1UQYskaU6ItwIDAQABo4IERjCC BEIwHQYDVR0OBBYEFKDwQXhhjEiWz6mMxppTi0BQKLK1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z NDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzM0MWI3ZTk2LWE2ZjAtNDRkMy1h ZWNjLTkyOTRkNmJjY2M3OC8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZi Y2NjNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSwYIKwYBBQUH AQcBAf8EPDA6MCcEAgABMCEDAwAtPAMDAC3fAwMAa5oDBAbA5kADBAXGjyADBAPH U4AwDwQCAAIwCQMHBCYgAChAADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJMXzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAe/Pck+G7VX/v0gC5DmYeBFT9C0hB7FcUM8IMHieFQqUNWtZfwzl4U i2TmiI0EjG3w/04Sb2VMhVjLlCuKemYsf0zdrwsNTxnANvNmD2xz3FUklTj3IhWj +01OHIv+eumdWsx+rQ3UWqugXbNOSiLTeUWVEqaTW+sYUdGf8tupMY0tJ21WBDNv N5Bxv+OC1NS8PpNbtVUu/Sx9AtbLCmybiVnbh7gBhtvltWoeY8wgLGVK1pzxkaY6 uikk4jZxQH4GSnBUVFBCmQotBX+K9yikeXb/S7gJUHjzOWA0CSg5LWe6Fd2OB5yl Tlv3zpyEXMc6uBI2Imis6fF+qjOdCj/B -----END CERTIFICATE-----Generated at Thu Nov 21 15:06:13 2024 by rpki-client on console-fra.rpki-client.org