$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer File: 3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer (raw, json) Hash identifier: oFx7N6FdUtKVnoFLOShqZsoEOx2EGJT/D+1NqxxcDpY= Subject key identifier: A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285847C0548CD084FB2473DD6A81C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 Nov 2024 00:45:30 +0000 Certificate not after: Sat 06 Feb 2027 01:45:30 +0000 Subordinate resources: IP: 24.89.128.0/18 IP: 75.99.0.0/16 IP: 75.127.128.0/17 IP: 96.56.0.0/15 IP: 108.58.0.0/16 IP: 108.162.0.0/18 IP: 108.170.64.0/18 IP: 142.54.64.0/18 IP: 173.220.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:c0:54:8c:d0:84:fb:24:73:dd:6a:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 3 00:45:30 2024 GMT Not After : Feb 6 01:45:30 2027 GMT Subject: CN=3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:3c:a4:f8:d1:7c:be:ad:10:72:e1:af:25: 4a:ef:29:28:01:5c:c1:d1:2e:79:18:db:9c:62:34: d9:0e:e3:92:bc:e9:ba:74:1d:21:55:e3:8b:84:28: dd:15:fc:cc:cc:6d:d1:99:72:5a:f0:a8:31:10:71: f5:f5:d0:ff:7d:1a:57:c7:fb:22:73:b5:d4:93:6b: 65:58:2d:dc:81:ea:3d:e7:c7:87:b2:96:9a:06:1f: fc:3f:4d:f9:df:46:e0:dd:52:88:75:7c:0d:4b:c1: fe:9b:63:d2:4f:8a:09:b2:cc:94:a0:41:6f:ce:90: 3a:8b:54:b4:91:86:83:c8:a2:8e:30:fc:23:63:ca: e7:a2:7e:a7:77:27:2b:7b:87:ff:f5:10:f3:2d:92: 23:bd:7a:46:50:cf:4d:40:d6:7e:a7:76:b4:23:ca: 73:ef:15:1e:0d:ea:90:fd:39:7a:e1:8b:fc:ff:38: 9f:43:12:a1:c0:39:ec:9b:5e:64:50:f6:08:30:fc: a2:4b:b7:ce:4a:70:63:fd:c5:62:36:58:da:87:c7: ea:66:ce:a6:58:2e:6e:5e:f2:46:69:25:86:5b:5a: a8:e5:d4:c8:ce:e8:2c:6f:75:32:d2:dd:3c:43:b6: f6:c2:93:a4:56:e6:2b:0c:0c:28:bc:ea:8f:de:ad: 5b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 24.89.128.0/18 75.99.0.0/16 75.127.128.0/17 96.56.0.0/15 108.58.0.0/16 108.162.0.0/18 108.170.64.0/18 142.54.64.0/18 173.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:17:c9:27:ad:fe:d8:e9:3d:17:fe:56:7a:1f:44:f4:51:32: 8f:39:c9:f4:f5:2e:23:91:1e:f4:ac:72:72:7f:39:d5:97:50: 19:5f:c1:0e:de:20:6f:0e:e9:2d:62:09:04:fd:0f:be:27:3c: d7:dc:ce:0b:78:3c:bb:dc:aa:b0:07:19:0d:f3:99:51:2d:90: 9c:d3:c9:11:49:27:7d:37:b2:f9:3b:a5:f4:b4:7d:e2:82:cf: 42:d7:cc:4c:21:0f:82:b2:c9:7a:19:9b:a2:b5:06:31:0a:42: c7:a6:50:3e:eb:8f:0a:60:62:ea:c0:47:8c:0c:d7:84:4e:77: da:49:10:49:d9:bd:4c:30:a2:75:19:dd:6a:dc:67:86:db:57: 6b:9f:ab:b3:53:3c:e1:03:b0:19:d8:63:a0:14:0d:11:47:16: de:4f:cf:08:e6:16:4a:1c:7e:94:6c:b2:99:0c:8c:7c:7c:3e: e8:e8:c3:72:8a:46:a0:7e:31:b3:fd:70:ca:bb:a9:cd:e6:04: aa:f9:d7:e1:f4:b9:90:86:e4:82:1d:97:c3:59:1b:86:a8:37: f4:96:db:c7:ea:aa:35:75:f2:5d:15:20:f0:e9:6f:62:e0:74: 0d:cf:a5:05:ba:58:aa:0b:34:56:b7:51:c0:dd:46:7e:51:bc: e9:10:36:cc -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEfAVIzQhPskc91qgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTEwMzAwNDUzMFoXDTI3MDIwNjAxNDUzMFowLzEtMCsGA1UEAxMk M2Y5NWE4YWItZjliMi00MzJjLWExZmQtZDkzNjgzYmMyZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+k8pPjRfL6tEHLhryVK7ykoAVzB0S55GNuc YjTZDuOSvOm6dB0hVeOLhCjdFfzMzG3RmXJa8KgxEHH19dD/fRpXx/sic7XUk2tl WC3cgeo958eHspaaBh/8P03530bg3VKIdXwNS8H+m2PST4oJssyUoEFvzpA6i1S0 kYaDyKKOMPwjY8rnon6ndycre4f/9RDzLZIjvXpGUM9NQNZ+p3a0I8pz7xUeDeqQ /Tl64Yv8/zifQxKhwDnsm15kUPYIMPyiS7fOSnBj/cViNljah8fqZs6mWC5uXvJG aSWGW1qo5dTIzugsb3Uy0t08Q7b2wpOkVuYrDAwovOqP3q1bWQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKXLCHQSKoVFP2iH/cTYxU2phwAGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z Zjk1YThhYi1mOWIyLTQzMmMtYTFmZC1kOTM2ODNiYzJmYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzNmOTVhOGFiLWY5YjItNDMyYy1h MWZkLWQ5MzY4M2JjMmZhOC8zZjk1YThhYi1mOWIyLTQzMmMtYTFmZC1kOTM2ODNi YzJmYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSwYIKwYBBQUH AQcBAf8EPDA6MDgEAgABMDIDBAYYWYADAwBLYwMEB0t/gAMDAWA4AwMAbDoDBAZs ogADBAZsqkADBAaONkADAwCt3DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUF8knrf7Y6T0X/lZ6H0T0UTKP Ocn09S4jkR70rHJyfznVl1AZX8EO3iBvDuktYgkE/Q++JzzX3M4LeDy73KqwBxkN 85lRLZCc08kRSSd9N7L5O6X0tH3igs9C18xMIQ+Cssl6GZuitQYxCkLHplA+648K YGLqwEeMDNeETnfaSRBJ2b1MMKJ1Gd1q3GeG21drn6uzUzzhA7AZ2GOgFA0RRxbe T88I5hZKHH6UbLKZDIx8fD7o6MNyikagfjGz/XDKu6nN5gSq+dfh9LmQhuSCHZfD WRuGqDf0ltvH6qo1dfJdFSDw6W9i4HQNz6UFuliqCzRWt1HA3UZ+UbzpEDbM -----END CERTIFICATE-----Generated at Thu Nov 21 15:51:05 2024 by rpki-client on console-ams.rpki-client.org