$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1.cer File: 5eb94df3-be39-4e1b-b39a-730deb2999f1.cer (raw, json) Hash identifier: 50PL7r/0G7evUB/8fIdmd6wtgt1B6IV8dSISQ2A25mQ= Subject key identifier: AA:71:C0:14:37:F4:47:E4:FA:73:5F:AD:CB:90:70:E0:C1:56:66:A1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285848169F30DCCF551EF651D0A880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Dec 2024 22:35:25 +0000 Certificate not after: Mon 08 Mar 2027 22:35:25 +0000 Subordinate resources: IP: 23.29.80.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Dec 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:16:9f:30:dc:cf:55:1e:f6:51:d0:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Dec 3 22:35:25 2024 GMT Not After : Mar 8 22:35:25 2027 GMT Subject: CN=5eb94df3-be39-4e1b-b39a-730deb2999f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ff:99:cc:d1:23:7a:dd:35:ce:b0:d3:17:13: cd:1f:ff:45:ad:2f:de:1b:3d:e4:f8:b2:6a:18:85: 0a:05:1e:cb:c3:20:08:4d:d6:ab:d4:5b:c6:34:62: 72:a6:3c:04:15:95:0f:5b:85:77:2d:02:da:b1:ba: 27:be:ab:0b:4a:be:03:1c:81:b8:5e:c2:54:c0:d8: 87:92:d5:88:ca:73:96:a3:f1:3f:a6:07:e8:6c:0f: 24:f3:07:54:e1:66:32:e9:ca:70:a8:29:d9:2d:3a: 63:ef:fc:7c:1d:a8:9e:61:d2:4e:07:5c:11:44:95: fe:27:61:c4:9b:bc:82:5c:22:2d:7c:af:f5:6a:08: fb:49:0c:c4:87:dc:96:71:e3:94:91:e7:df:dd:5e: 16:98:6c:07:22:9f:8c:6f:26:90:a5:22:8c:ca:d6: 36:a0:52:69:cc:b7:85:35:46:47:2c:56:93:dc:30: bf:2f:2a:4b:6d:4c:6b:26:be:f3:86:83:ef:90:b5: a7:9f:a4:d6:42:ff:d4:b9:ee:73:00:62:7b:aa:60: 8e:73:7d:24:66:5c:b0:1f:52:6e:33:57:5c:68:ac: 1c:72:66:29:7e:b1:91:d8:10:a2:a2:ca:d5:1d:68: d7:b4:bf:2b:d8:0b:c0:bb:ec:33:51:30:1c:2a:fd: 44:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:71:C0:14:37:F4:47:E4:FA:73:5F:AD:CB:90:70:E0:C1:56:66:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.29.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c0:fb:4e:c9:28:9f:f4:ff:31:47:3b:47:4c:a6:ed:fa:84: 5b:25:27:54:80:0f:14:47:f2:6f:48:93:e7:83:0b:df:87:8e: 4f:81:7e:fe:cf:a4:98:45:dd:1b:75:91:e7:01:21:81:56:59: 18:60:54:0a:97:59:4c:c5:12:8c:6f:c1:66:3c:33:d0:e9:a0: c1:82:84:71:7b:7b:08:7e:a9:b2:39:2f:f4:60:02:b6:9c:12: 89:0a:2d:15:9c:2f:a7:98:d4:df:98:4a:ed:47:14:1c:d1:3b: e2:13:79:31:29:34:d8:f8:ad:c7:a7:0e:bf:c0:3e:5d:b8:2a: 45:1c:3a:ee:5d:fc:c2:0a:73:27:94:00:f4:a7:d7:e5:bb:2f: 17:ad:ac:9b:9d:7d:fc:bf:5d:c6:b7:18:8f:b4:a4:c2:50:84: 5f:1a:17:d3:2b:60:b6:6a:e7:9e:b3:85:eb:a7:b8:b8:df:7a: cc:36:5e:56:23:c0:a6:4d:03:7b:63:7c:1b:3f:40:f3:e8:82: 43:51:d7:ff:a0:e7:7b:f3:ae:54:a8:09:39:8c:9c:19:99:72: bc:53:4d:53:d5:da:e7:e5:85:01:db:a5:6e:a1:96:34:51:3b: 59:c0:29:93:70:5d:c9:b7:6b:7e:65:82:eb:0c:5b:5b:f1:4b: a2:e3:77:83 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEgWnzDcz1Ue9lHQqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTIwMzIyMzUyNVoXDTI3MDMwODIyMzUyNVowLzEtMCsGA1UEAxMk NWViOTRkZjMtYmUzOS00ZTFiLWIzOWEtNzMwZGViMjk5OWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP+ZzNEjet01zrDTFxPNH/9FrS/eGz3k+LJq GIUKBR7LwyAITdar1FvGNGJypjwEFZUPW4V3LQLasbonvqsLSr4DHIG4XsJUwNiH ktWIynOWo/E/pgfobA8k8wdU4WYy6cpwqCnZLTpj7/x8HaieYdJOB1wRRJX+J2HE m7yCXCItfK/1agj7SQzEh9yWceOUkeff3V4WmGwHIp+MbyaQpSKMytY2oFJpzLeF NUZHLFaT3DC/LypLbUxrJr7zhoPvkLWnn6TWQv/Uue5zAGJ7qmCOc30kZlywH1Ju M1dcaKwccmYpfrGR2BCiosrVHWjXtL8r2AvAu+wzUTAcKv1EAwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKpxwBQ39Efk+nNfrcuQcODBVmahMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81 ZWI5NGRmMy1iZTM5LTRlMWItYjM5YS03MzBkZWIyOTk5ZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzVlYjk0ZGYzLWJlMzktNGUxYi1i MzlhLTczMGRlYjI5OTlmMS81ZWI5NGRmMy1iZTM5LTRlMWItYjM5YS03MzBkZWIy OTk5ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAQXHVAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYMD7Tskon/T/MUc7R0ym 7fqEWyUnVIAPFEfyb0iT54ML34eOT4F+/s+kmEXdG3WR5wEhgVZZGGBUCpdZTMUS jG/BZjwz0OmgwYKEcXt7CH6psjkv9GACtpwSiQotFZwvp5jU35hK7UcUHNE74hN5 MSk02Pitx6cOv8A+XbgqRRw67l38wgpzJ5QA9KfX5bsvF62sm519/L9dxrcYj7Sk wlCEXxoX0ytgtmrnnrOF66e4uN96zDZeViPApk0De2N8Gz9A8+iCQ1HX/6Dne/Ou VKgJOYycGZlyvFNNU9Xa5+WFAdulbqGWNFE7WcApk3BdybdrfmWC6wxbW/FLouN3 gw== -----END CERTIFICATE-----Generated at Thu Dec 26 06:23:18 2024 by rpki-client on console-fra.rpki-client.org