$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer File: 960472d8-4288-45f7-a19c-aaf7b143c8b6.cer (raw, json) Hash identifier: AM7+04vjhsEGEhIgOjoVy+JeIqJb4U2XZ9XlvOQBCv8= Subject key identifier: 46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285845D4FC14B0714D04C2825B7500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 May 2024 00:45:21 +0000 Certificate not after: Fri 14 Aug 2026 00:45:21 +0000 Subordinate resources: AS: 397095 IP: 23.153.224.0/24 IP: 172.81.38.0/23 IP: 2602:fe34::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d4:fc:14:b0:71:4d:04:c2:82:5b:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 11 00:45:21 2024 GMT Not After : Aug 14 00:45:21 2026 GMT Subject: CN=960472d8-4288-45f7-a19c-aaf7b143c8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:b8:6d:99:05:b2:61:cb:49:fc:c3:91:27: b1:e5:fb:44:eb:ee:fd:60:31:61:18:0d:fc:fc:96: 0b:4b:58:f8:0a:ea:84:a5:4c:af:66:0c:94:8d:10: 1f:55:88:1b:e4:b3:c1:ec:85:82:56:85:f9:b3:4a: 58:77:1d:d0:cc:d4:ca:2c:8e:77:0d:79:0d:4a:ee: f1:d7:ab:95:d4:60:d0:a9:37:ac:f8:22:d5:1c:cf: 64:a8:6e:a7:7d:79:9e:6e:ef:db:4d:8e:31:a6:66: ef:32:e7:a1:2c:ed:fa:94:aa:5b:40:0e:f8:b6:ab: c0:36:bd:8a:4a:d6:f7:bf:83:11:35:30:15:23:7b: 2f:0b:02:32:13:2d:82:9f:ab:a1:de:95:6b:01:5e: 66:80:c9:51:61:90:bb:19:b8:27:6d:17:2b:96:ac: c9:18:34:0d:28:80:bf:05:2e:04:aa:9f:ae:f5:09: f9:00:5a:62:f5:26:ad:4d:da:c8:25:af:a8:fd:dc: d9:32:36:34:78:b7:28:11:c2:f5:e7:ec:00:91:ea: 53:f8:be:19:d7:5b:9e:b2:f9:7d:e9:42:9f:ba:9f: b5:d3:ac:cc:f7:7d:30:50:55:66:9a:69:d3:30:53: da:de:14:10:2d:6f:d0:fd:de:24:4b:75:36:ec:cd: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.153.224.0/24 172.81.38.0/23 IPv6: 2602:fe34::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397095 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:40:35:0a:c2:09:77:3a:d7:15:1e:57:e0:c9:4d:fa:d1:15: c6:f0:cc:50:66:6c:9b:70:0a:f3:8b:7a:86:fe:7c:ee:40:fe: 6c:f4:a3:0e:10:ce:1f:f6:6e:c0:e6:12:36:4c:7e:6d:3a:be: e9:44:ea:67:1f:00:3e:d3:3e:c5:3f:13:0b:5a:2d:91:b5:0a: e0:15:2a:9f:73:38:e5:ad:a6:12:75:c0:e7:cd:a6:52:52:d4: 7c:25:a0:b2:24:6f:88:35:96:ba:92:f1:5b:56:94:69:bc:8a: 93:af:ef:86:ae:70:38:16:f2:72:91:6d:33:38:2d:48:d0:93: 24:c4:f6:37:f9:f0:30:53:45:df:e0:8e:b9:c6:36:c7:a7:7b: 45:66:2d:be:06:00:7d:8b:c9:4d:14:b4:c2:76:52:c5:1f:c8: 85:3a:57:97:ab:3e:7c:1f:b8:48:9c:9b:8c:7a:29:ec:1f:77: 95:fb:54:9e:5e:eb:b6:05:38:93:7e:98:0a:3e:73:32:71:73: 69:6a:2d:e7:b5:d4:10:ee:2a:c1:11:e1:d3:43:c2:35:e0:48: 00:d4:85:cf:8b:15:33:a1:94:d9:17:b7:59:27:53:a1:ff:c3: e2:23:b9:58:75:50:01:61:ef:7a:4c:15:1b:25:63:0e:39:44: 99:be:7c:03 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEXU/BSwcU0EwoJbdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDUxMTAwNDUyMVoXDTI2MDgxNDAwNDUyMVowLzEtMCsGA1UEAxMk OTYwNDcyZDgtNDI4OC00NWY3LWExOWMtYWFmN2IxNDNjOGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVe4bZkFsmHLSfzDkSex5ftE6+79YDFhGA38 /JYLS1j4CuqEpUyvZgyUjRAfVYgb5LPB7IWCVoX5s0pYdx3QzNTKLI53DXkNSu7x 16uV1GDQqTes+CLVHM9kqG6nfXmebu/bTY4xpmbvMuehLO36lKpbQA74tqvANr2K Stb3v4MRNTAVI3svCwIyEy2Cn6uh3pVrAV5mgMlRYZC7GbgnbRcrlqzJGDQNKIC/ BS4Eqp+u9Qn5AFpi9SatTdrIJa+o/dzZMjY0eLcoEcL15+wAkepT+L4Z11uesvl9 6UKfup+106zM930wUFVmmmnTMFPa3hQQLW/Q/d4kS3U27M22uQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFEaUCdpd9r8crn0bkaKkKfNK+59cMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85 NjA0NzJkOC00Mjg4LTQ1ZjctYTE5Yy1hYWY3YjE0M2M4YjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzk2MDQ3MmQ4LTQyODgtNDVmNy1h MTljLWFhZjdiMTQzYzhiNi85NjA0NzJkOC00Mjg4LTQ1ZjctYTE5Yy1hYWY3YjE0 M2M4YjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXmeADBAGsUSYwDgQCAAIwCAMGBCYC/jQAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYPJzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAQDUKwgl3OtcVHlfg yU360RXG8MxQZmybcArzi3qG/nzuQP5s9KMOEM4f9m7A5hI2TH5tOr7pROpnHwA+ 0z7FPxMLWi2RtQrgFSqfczjlraYSdcDnzaZSUtR8JaCyJG+INZa6kvFbVpRpvIqT r++GrnA4FvJykW0zOC1I0JMkxPY3+fAwU0Xf4I65xjbHp3tFZi2+BgB9i8lNFLTC dlLFH8iFOleXqz58H7hInJuMeinsH3eV+1SeXuu2BTiTfpgKPnMycXNpai3ntdQQ 7irBEeHTQ8I14EgA1IXPixUzoZTZF7dZJ1Oh/8PiI7lYdVABYe96TBUbJWMOOUSZ vnwD -----END CERTIFICATE-----Generated at Thu Nov 21 16:15:01 2024 by rpki-client on console-ams.rpki-client.org