$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer File: 65492eef-01be-4b81-8e9f-8d89f7c6f85f.cer (raw, json) Hash identifier: cUTAbS6INIF17EWsb1ZPttH3eQJlSEBI0KL088ACTOs= Subject key identifier: 5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285847993EF0C18F6CE58D4BE0C520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Oct 2024 00:45:26 +0000 Certificate not after: Sat 23 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 54797 IP: 143.195.224.0/19 IP: 198.28.13.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:99:3e:f0:c1:8f:6c:e5:8d:4b:e0:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 20 00:45:26 2024 GMT Not After : Jan 23 01:45:26 2027 GMT Subject: CN=65492eef-01be-4b81-8e9f-8d89f7c6f85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a8:3e:c2:19:cb:e9:c9:df:ab:53:97:4a:40: b2:60:39:22:7d:69:44:51:8e:ff:91:3d:c0:87:3c: 80:10:c6:d7:4f:b1:d4:6e:9d:72:c3:ef:a2:4c:10: 99:f4:6f:5c:10:a9:66:1a:dc:d5:b6:41:93:66:7c: 2f:dd:57:63:3c:ff:ed:09:ba:d0:cb:50:0b:d1:bd: 98:ae:74:be:1d:0c:51:fc:56:8e:1c:f8:de:da:53: d0:ff:c0:8c:67:91:5e:3e:cf:ff:36:16:60:b4:17: 45:85:7d:1d:a6:bd:2e:ee:9a:41:ac:8e:a7:9b:0b: d7:d6:2e:00:d7:30:1d:4b:49:5a:d5:d6:3f:a8:c1: 8d:74:c1:0d:81:77:39:87:8b:e2:95:6b:b2:ba:43: d0:51:75:c7:57:6d:e7:17:75:5a:8b:da:2d:ae:13: 7c:91:09:57:c8:c0:c2:e7:48:00:e2:0d:1a:d0:dc: 0e:f7:25:3d:c2:ba:f9:65:6d:39:98:3f:b2:3f:04: de:8a:f2:97:28:cb:ec:6a:32:66:3a:3d:e7:a5:b1: 1f:00:11:2d:24:46:d0:d6:65:79:c4:e6:12:dd:e3: ea:06:03:91:5d:c5:1e:2a:d1:0a:ab:df:4c:05:da: 71:87:7d:44:bf:0c:da:71:87:b9:3f:fe:d8:3e:dc: 66:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:86:BA:37:9D:A0:CC:D5:B9:6A:5D:5C:7F:A1:F9:DA:68:C0:2C:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/65492eef-01be-4b81-8e9f-8d89f7c6f85f/65492eef-01be-4b81-8e9f-8d89f7c6f85f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 143.195.224.0/19 198.28.13.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54797 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:28:9f:1c:44:e2:36:3d:ce:3b:08:77:b4:d5:0a:72:f4:48: c2:05:c4:61:cb:64:7f:16:32:bc:eb:0f:48:35:79:83:8b:33: d7:9b:d1:29:02:44:4b:62:65:d8:58:65:99:f4:fe:f7:2f:d8: db:1a:eb:c0:4b:21:62:b4:95:ad:3a:fa:3d:33:d5:f5:61:8d: 2f:b6:71:38:6e:f8:23:70:2e:d0:07:8f:1b:d5:9b:ef:57:1f: 04:de:4f:c2:31:76:66:38:66:e7:19:eb:fd:71:f9:d6:93:eb: 4d:39:5d:bd:c4:9e:85:26:3b:2a:e4:d9:66:2f:f2:dc:fc:26: b0:81:2c:1b:d7:15:aa:92:90:22:e7:14:83:a0:95:ea:c5:6d: bf:9d:21:fb:eb:36:47:1d:43:9f:ad:9d:df:f4:0b:7a:e9:16: f0:27:a0:8b:51:d5:06:88:90:c1:71:d2:6b:52:f0:03:cb:0d: 22:3a:5c:a6:69:0a:25:9b:51:24:04:42:cd:d3:90:51:58:07: d9:70:d9:dd:8a:08:db:55:97:6c:39:e0:b5:f4:6a:e0:08:44: de:22:44:35:f9:a1:c4:f5:0f:84:f4:f0:1d:b5:ba:ce:2b:43: ea:cb:07:40:92:a6:90:8c:62:db:c9:9c:fe:44:40:4e:f4:ff: 68:39:f3:4b -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEeZPvDBj2zljUvgxSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTAyMDAwNDUyNloXDTI3MDEyMzAxNDUyNlowLzEtMCsGA1UEAxMk NjU0OTJlZWYtMDFiZS00YjgxLThlOWYtOGQ4OWY3YzZmODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qg+whnL6cnfq1OXSkCyYDkifWlEUY7/kT3A hzyAEMbXT7HUbp1yw++iTBCZ9G9cEKlmGtzVtkGTZnwv3VdjPP/tCbrQy1AL0b2Y rnS+HQxR/FaOHPje2lPQ/8CMZ5FePs//NhZgtBdFhX0dpr0u7ppBrI6nmwvX1i4A 1zAdS0la1dY/qMGNdMENgXc5h4vilWuyukPQUXXHV23nF3Vai9otrhN8kQlXyMDC 50gA4g0a0NwO9yU9wrr5ZW05mD+yPwTeivKXKMvsajJmOj3npbEfABEtJEbQ1mV5 xOYS3ePqBgORXcUeKtEKq99MBdpxh31EvwzacYe5P/7YPtxmvQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFFuGujedoMzVuWpdXH+h+dpowCz5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82 NTQ5MmVlZi0wMWJlLTRiODEtOGU5Zi04ZDg5ZjdjNmY4NWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY1NDkyZWVmLTAxYmUtNGI4MS04 ZTlmLThkODlmN2M2Zjg1Zi82NTQ5MmVlZi0wMWJlLTRiODEtOGU5Zi04ZDg5Zjdj NmY4NWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAWPw+ADBADGHA0wGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANYNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAK8onxxE4jY9zjsId7TVCnL0SMIFxGHLZH8WMrzr D0g1eYOLM9eb0SkCREtiZdhYZZn0/vcv2Nsa68BLIWK0la06+j0z1fVhjS+2cThu +CNwLtAHjxvVm+9XHwTeT8IxdmY4ZucZ6/1x+daT6005Xb3EnoUmOyrk2WYv8tz8 JrCBLBvXFaqSkCLnFIOglerFbb+dIfvrNkcdQ5+tnd/0C3rpFvAnoItR1QaIkMFx 0mtS8APLDSI6XKZpCiWbUSQEQs3TkFFYB9lw2d2KCNtVl2w54LX0auAIRN4iRDX5 ocT1D4T08B21us4rQ+rLB0CSppCMYtvJnP5EQE70/2g580s= -----END CERTIFICATE-----Generated at Thu Nov 21 16:14:08 2024 by rpki-client on console-ams.rpki-client.org