$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer File: 445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer (raw, json) Hash identifier: iR4LC3bnWVfA7OIgjZaqr9F9Qy30Ut69mW+dsvpe9ZM= Subject key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285847CE67C5E8C6F0FC7332FE8F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Nov 2024 01:45:33 +0000 Certificate not after: Thu 11 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 393839 IP: 139.138.96.0/22 IP: 208.89.244.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ce:67:c5:e8:c6:f0:fc:73:32:fe:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Nov 8 01:45:33 2024 GMT Not After : Feb 11 01:45:33 2027 GMT Subject: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:fa:7a:8a:b5:42:e2:bb:a3:89:18:06:8f: 3c:ab:8c:20:7a:50:10:91:c1:bc:aa:7f:31:9a:a8: 52:49:68:ec:3d:1d:39:9d:75:c1:08:6b:cc:9c:98: 38:59:c7:d7:b1:74:4c:a0:a9:89:66:ad:d8:f7:39: a2:7e:f7:8e:d7:33:b6:dd:fe:3b:aa:7e:cb:b9:8e: f0:77:d4:47:fa:4d:45:4d:ce:ca:9b:ab:ec:e9:46: 8b:bb:77:d6:c3:d1:4a:a6:66:db:9f:3a:2d:70:22: 66:2d:20:c7:cb:7e:d2:74:57:b4:0e:2c:a1:e8:8a: 10:2a:d6:a2:b3:cf:59:f5:2d:21:ab:d7:a0:bb:e3: 46:2d:5b:08:59:69:77:5a:e5:37:c8:28:a3:e9:97: 7a:0d:82:df:06:67:65:00:f2:a9:eb:88:15:b0:1f: 9d:60:dc:de:33:08:3d:8d:00:7a:ec:ae:01:be:10: eb:f3:8c:c4:c0:d4:51:2f:f7:4b:13:ea:e5:e8:3b: df:54:23:21:32:2d:a2:53:68:f5:d5:36:88:54:9b: cf:d6:e6:6d:ad:a4:22:1e:e4:30:4b:74:10:ac:db: fa:14:be:cd:be:e8:e3:c4:48:f9:02:d8:e1:43:84: a2:6c:d2:3c:74:49:6c:e3:18:9f:23:61:a6:47:5d: ae:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 139.138.96.0/22 208.89.244.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393839 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:69:0a:f5:66:aa:40:92:b8:53:05:fb:3e:dd:a7:48:6f:bd: 83:65:1e:73:0f:96:cf:ff:8e:0e:10:3a:e5:88:4a:23:e2:76: 02:e9:a1:91:a9:65:09:b9:12:eb:d0:77:3f:4e:b5:2f:9f:ed: 84:47:94:58:23:07:0f:75:4a:7e:fc:9d:9c:12:55:e8:3c:09: 3d:51:fa:60:03:40:58:51:53:a7:6f:3c:99:b4:7d:b0:b8:02: fe:83:64:11:2b:66:f6:a9:2f:22:92:b2:5c:ba:0b:62:00:a4: 4f:ca:b4:69:fd:e0:2f:4a:32:4b:6c:28:13:7b:f2:ab:58:b3: 26:55:d1:f2:e1:a7:d4:07:b3:e6:44:78:1e:1b:5d:ba:24:8e: 4d:53:2f:c3:67:30:f8:80:1f:99:e0:c6:59:44:fe:40:98:d9: 76:bc:5d:57:43:59:40:d5:ac:97:c2:22:c1:08:d7:b2:9a:09: 5a:29:fd:e5:02:ef:b8:05:a5:85:d5:16:3a:3e:10:b4:3e:17: 93:03:a7:16:be:89:c7:9d:ee:d8:63:f1:e8:7a:8e:39:68:91: b7:37:59:17:48:c6:a4:f5:eb:d2:b9:ba:52:71:33:2b:31:6a: b9:a8:61:49:0b:9a:9c:df:ad:20:ba:76:fa:47:54:0c:da:32: 9a:b7:d7:3b -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEfOZ8XoxvD8czL+jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTEwODAxNDUzM1oXDTI3MDIxMTAxNDUzM1owLzEtMCsGA1UEAxMk NDQ1ZWRmZjEtMzYwZC00YWUyLWEwNDUtY2NmN2RiYzRiZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoH6eoq1QuK7o4kYBo88q4wgelAQkcG8qn8x mqhSSWjsPR05nXXBCGvMnJg4WcfXsXRMoKmJZq3Y9zmifveO1zO23f47qn7LuY7w d9RH+k1FTc7Km6vs6UaLu3fWw9FKpmbbnzotcCJmLSDHy37SdFe0Diyh6IoQKtai s89Z9S0hq9egu+NGLVsIWWl3WuU3yCij6Zd6DYLfBmdlAPKp64gVsB+dYNzeMwg9 jQB67K4BvhDr84zEwNRRL/dLE+rl6DvfVCMhMi2iU2j11TaIVJvP1uZtraQiHuQw S3QQrNv6FL7NvujjxEj5AtjhQ4SibNI8dEls4xifI2GmR12ubwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFAC3xqdIihJgLZQBTLBeiIhYsFGfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80 NDVlZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3ZGJjNGJlZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzQ0NWVkZmYxLTM2MGQtNGFlMi1h MDQ1LWNjZjdkYmM0YmVlYi80NDVlZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3ZGJj NGJlZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAKLimADBALQWfQwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgJvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABtpCvVmqkCSuFMF+z7dp0hvvYNlHnMPls//jg4Q OuWISiPidgLpoZGpZQm5EuvQdz9OtS+f7YRHlFgjBw91Sn78nZwSVeg8CT1R+mAD QFhRU6dvPJm0fbC4Av6DZBErZvapLyKSsly6C2IApE/KtGn94C9KMktsKBN78qtY syZV0fLhp9QHs+ZEeB4bXbokjk1TL8NnMPiAH5ngxllE/kCY2Xa8XVdDWUDVrJfC IsEI17KaCVop/eUC77gFpYXVFjo+ELQ+F5MDpxa+iced7thj8eh6jjlokbc3WRdI xqT169K5ulJxMysxarmoYUkLmpzfrSC6dvpHVAzaMpq31zs= -----END CERTIFICATE-----Generated at Thu Nov 21 15:06:15 2024 by rpki-client on console-fra.rpki-client.org