$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer File: 4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer (raw, json) Hash identifier: IJXpC8sCXbVLIaTJz6t8zfmNBO3bSZx8Nbfh//wGSxA= Subject key identifier: F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858474B13C999F34BF79D88539000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Sep 2024 00:45:26 +0000 Certificate not after: Sat 26 Dec 2026 01:45:26 +0000 Subordinate resources: IP: 168.151.29.0/24 IP: 192.206.23.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4b:13:c9:99:f3:4b:f7:9d:88:53:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Sep 22 00:45:26 2024 GMT Not After : Dec 26 01:45:26 2026 GMT Subject: CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7e:47:dd:e9:83:ce:76:3b:59:dc:d3:8e:d1: c7:95:ca:dd:cd:2d:48:3c:5e:67:81:c3:7b:45:50: 9d:13:c2:48:e6:77:53:91:fb:ee:dd:1b:e0:03:3c: 67:e4:49:44:c9:bb:34:eb:da:5b:4e:4e:43:6d:14: 2c:6a:fe:25:4a:2e:75:74:74:bf:5e:c9:97:7f:07: b4:70:21:89:f6:e6:be:2c:dd:4c:72:3f:59:44:53: e0:60:4f:5e:83:bd:6f:15:80:be:ea:f6:b8:37:34: 4d:66:2b:2c:3f:2f:be:6a:b5:3e:a9:29:55:ab:ca: 28:cd:0d:11:b5:dc:2d:8d:ba:a6:37:60:93:57:59: ac:86:a6:7b:db:a9:b3:23:99:67:2f:b2:2f:ce:0a: c0:e5:6b:b2:40:55:3a:09:60:ff:3e:db:0c:79:02: 3a:b3:66:79:bc:9e:54:81:1b:e5:dc:1d:55:ab:34: 92:99:d5:ee:3e:f1:95:2e:21:f4:64:9e:2f:20:ce: 95:42:8c:4f:7c:1c:89:7d:d8:2c:42:3f:ff:91:a3: fe:e3:e7:74:01:fd:f8:3d:f5:af:51:11:4c:a3:d4: 62:56:16:45:fd:fa:50:c8:ad:85:9e:4e:9d:16:84: 21:30:28:84:44:fb:3b:b3:38:4d:39:77:e7:bf:42: 88:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 168.151.29.0/24 192.206.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:44:28:d4:69:80:5b:5e:16:68:87:92:20:9d:9d:cf:12:85: a0:fb:56:fe:cd:7f:4a:23:a2:ef:ef:9e:2b:3c:6f:b5:88:10: 54:35:48:06:d1:24:65:0d:29:4a:ec:66:6d:35:62:1b:45:d6: 95:e3:e3:7d:c0:a7:a4:c9:73:66:64:ac:6c:a1:f0:ec:e5:50: 83:4a:bb:52:22:84:f4:24:47:f0:7a:fb:5b:0b:91:93:90:ed: bc:7f:4d:1b:80:ee:39:da:40:86:e1:eb:30:84:02:8c:b1:da: d6:6b:20:72:e9:dd:40:13:06:52:3e:fb:88:f2:14:e9:dc:84: ef:53:81:20:0b:9f:2d:20:62:f9:f9:4c:b9:cc:33:07:01:f6: 71:39:6e:2c:5b:5b:e6:c3:15:bd:4a:19:0a:f4:ce:be:7c:20: 96:18:29:19:19:ed:f7:6f:f8:b3:fa:32:b4:5e:83:7c:b3:29: 59:3b:9f:96:63:bd:2e:ca:14:15:b2:64:3a:f7:8d:13:c6:8f: da:70:4b:29:f4:6f:d3:89:49:3d:50:5e:1f:b5:dc:0f:84:d1: 84:bf:24:b5:ac:89:af:f6:1d:df:c6:e9:05:79:d4:e5:2a:58: c6:99:1b:ee:3c:1a:a4:91:85:b5:65:97:12:cc:e4:3a:70:a7: ec:cc:c9:43 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEdLE8mZ80v3nYhTkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDkyMjAwNDUyNloXDTI2MTIyNjAxNDUyNlowLzEtMCsGA1UEAxMk NDEzMmJmOGMtNGFmNy00YjAxLTljZDYtZGZhMjE5M2QxMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA735H3emDznY7WdzTjtHHlcrdzS1IPF5ngcN7 RVCdE8JI5ndTkfvu3RvgAzxn5ElEybs069pbTk5DbRQsav4lSi51dHS/XsmXfwe0 cCGJ9ua+LN1Mcj9ZRFPgYE9eg71vFYC+6va4NzRNZissPy++arU+qSlVq8oozQ0R tdwtjbqmN2CTV1mshqZ726mzI5lnL7IvzgrA5WuyQFU6CWD/PtsMeQI6s2Z5vJ5U gRvl3B1VqzSSmdXuPvGVLiH0ZJ4vIM6VQoxPfByJfdgsQj//kaP+4+d0Af34PfWv URFMo9RiVhZF/fpQyK2Fnk6dFoQhMCiERPs7szhNOXfnv0KIUQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFPK8P2AVIw2La3zmUll4bnirIRdmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 MTMyYmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEyMTkzZDEyN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQxMzJiZjhjLTRhZjctNGIwMS05 Y2Q2LWRmYTIxOTNkMTI3ZC80MTMyYmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEyMTkz ZDEyN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAColx0DBADAzhcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOEQo1GmAW14W aIeSIJ2dzxKFoPtW/s1/SiOi7++eKzxvtYgQVDVIBtEkZQ0pSuxmbTViG0XWlePj fcCnpMlzZmSsbKHw7OVQg0q7UiKE9CRH8Hr7WwuRk5DtvH9NG4DuOdpAhuHrMIQC jLHa1msgcundQBMGUj77iPIU6dyE71OBIAufLSBi+flMucwzBwH2cTluLFtb5sMV vUoZCvTOvnwglhgpGRnt92/4s/oytF6DfLMpWTuflmO9LsoUFbJkOveNE8aP2nBL KfRv04lJPVBeH7XcD4TRhL8ktayJr/Yd38bpBXnU5SpYxpkb7jwapJGFtWWXEszk OnCn7MzJQw== -----END CERTIFICATE-----Generated at Thu Nov 21 15:51:05 2024 by rpki-client on console-ams.rpki-client.org