$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer File: 74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer (raw, json) Hash identifier: QB2WE1QwfWmXLBnveisQq/LPxy101qfVTe7L4zyh4kE= Subject key identifier: BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285846126720FF931BB3FCFE1E1A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Jun 2024 00:45:21 +0000 Certificate not after: Sat 05 Sep 2026 00:45:21 +0000 Subordinate resources: AS: 19704 IP: 74.85.159.0/24 IP: 216.57.113.0/24 IP: 2620:135:2000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:12:67:20:ff:93:1b:b3:fc:fe:1e:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Jun 2 00:45:21 2024 GMT Not After : Sep 5 00:45:21 2026 GMT Subject: CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:e7:26:95:e6:d5:75:ef:86:d6:02:b5:d1: 10:ee:9a:73:43:7b:c5:e6:69:64:a8:ed:b8:71:83: c9:26:65:eb:6b:bf:41:ff:6e:92:00:f2:df:24:1a: 11:08:1b:c7:81:5c:2a:cd:d1:b9:7d:7f:fa:6d:dc: 98:57:5d:ef:d3:da:56:87:8f:ff:41:81:3e:2f:cd: b9:cf:92:94:d0:2f:3a:7f:1b:fb:9a:7a:e8:cf:ec: 68:0a:c9:94:c8:1c:d5:23:40:33:a2:0f:b0:8b:b8: 5e:b6:aa:93:0c:0f:6d:f3:70:a5:08:34:9b:d5:51: 0a:03:f1:28:4a:9c:47:0b:2a:77:d4:5c:19:d0:26: 03:fc:b2:30:e4:4a:4f:ce:6e:18:4d:7f:16:55:38: aa:d1:67:24:91:1f:d9:1b:a4:fe:91:4b:05:a5:1a: 8d:fe:31:88:ca:d1:77:d0:1c:23:67:b8:14:b7:8f: bf:f6:11:e2:96:b6:9c:80:7b:34:5b:d5:f5:1c:7a: a2:bf:3d:7d:64:12:40:77:62:1f:c5:90:2c:a0:61: 71:d7:97:db:7a:b1:15:c9:c3:54:ee:1d:c9:c6:c2: 43:92:14:d9:37:e7:a4:97:6c:7d:27:65:2c:6b:f1: 7b:d5:04:98:84:02:33:27:f3:4f:29:dc:10:03:e9: 47:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 74.85.159.0/24 216.57.113.0/24 IPv6: 2620:135:2000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19704 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7b:91:d0:50:c9:88:fd:5c:be:5a:35:1d:22:8e:9e:58:2d: 30:d1:98:b6:14:d6:82:e8:53:e3:1b:a5:6a:5f:db:c1:f5:96: a9:68:74:e6:e7:4e:d3:f0:77:de:77:a9:19:5a:51:e4:d8:d6: 6d:95:42:47:dd:b3:28:8b:ae:c9:cd:c7:ac:b4:28:ad:fa:5d: a7:8e:db:6c:dc:ca:09:9f:35:dc:ce:6d:a4:3e:26:cd:8d:f1: 2e:39:84:01:ea:59:3a:b1:ee:5e:47:ea:d9:48:77:61:4b:ab: d4:17:7c:2c:fa:0b:23:1c:dc:30:3b:78:b9:f6:8e:ab:af:ba: 80:d5:41:7f:55:8e:1d:45:b6:f9:8a:cd:47:ab:e4:4a:a6:a5: 1f:9e:fd:c5:e2:f8:33:e3:c2:ea:b8:b0:13:a6:c0:10:d2:98: fd:2a:92:c7:4d:19:b0:78:4f:a4:a0:a9:38:a3:0e:cd:59:1d: b7:0d:2f:58:68:19:80:6e:1e:f7:3d:eb:a8:5e:cb:01:b6:6a: 59:dd:ff:2f:ef:55:b4:f8:41:ce:e4:d7:07:82:b8:4c:3c:48: 52:75:8a:a2:17:35:68:ff:4c:ed:96:0d:d4:8f:29:aa:9f:e2: 4f:3d:e6:34:83:d5:d8:06:ef:40:41:1e:b0:f6:c7:bb:84:eb: 2f:58:3f:c2 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEYSZyD/kxuz/P4eGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDYwMjAwNDUyMVoXDTI2MDkwNTAwNDUyMVowLzEtMCsGA1UEAxMk NzRmZTcyZDMtYzdmNy00YzkzLWE5ZjAtYTU3MzQxYjI1OTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKDnJpXm1XXvhtYCtdEQ7ppzQ3vF5mlkqO24 cYPJJmXra79B/26SAPLfJBoRCBvHgVwqzdG5fX/6bdyYV13v09pWh4//QYE+L825 z5KU0C86fxv7mnroz+xoCsmUyBzVI0Azog+wi7hetqqTDA9t83ClCDSb1VEKA/Eo SpxHCyp31FwZ0CYD/LIw5EpPzm4YTX8WVTiq0WckkR/ZG6T+kUsFpRqN/jGIytF3 0BwjZ7gUt4+/9hHilracgHs0W9X1HHqivz19ZBJAd2IfxZAsoGFx15fberEVycNU 7h3JxsJDkhTZN+ekl2x9J2Usa/F71QSYhAIzJ/NPKdwQA+lHTwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFL6b8EPh56qhAZwF9NNCpNyffshYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 NGZlNzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTczNDFiMjU5MGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzc0ZmU3MmQzLWM3ZjctNGM5My1h OWYwLWE1NzM0MWIyNTkwYi83NGZlNzJkMy1jN2Y3LTRjOTMtYTlmMC1hNTczNDFi MjU5MGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBABKVZ8DBADYOXEwDgQCAAIwCAMGACYgATUgMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAkz4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACR7kdBQyYj9XL5aNR0i jp5YLTDRmLYU1oLoU+MbpWpf28H1lqlodObnTtPwd953qRlaUeTY1m2VQkfdsyiL rsnNx6y0KK36XaeO22zcygmfNdzObaQ+Js2N8S45hAHqWTqx7l5H6tlId2FLq9QX fCz6CyMc3DA7eLn2jquvuoDVQX9Vjh1FtvmKzUer5EqmpR+e/cXi+DPjwuq4sBOm wBDSmP0qksdNGbB4T6SgqTijDs1ZHbcNL1hoGYBuHvc966heywG2alnd/y/vVbT4 Qc7k1weCuEw8SFJ1iqIXNWj/TO2WDdSPKaqf4k895jSD1dgG70BBHrD2x7uE6y9Y P8I= -----END CERTIFICATE-----Generated at Thu Nov 21 15:28:42 2024 by rpki-client on console-fra.rpki-client.org