$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer File: a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.cer (raw, json) Hash identifier: 5P+VqR3nk+maRGjgAq8EPiTA9Y8otsKXQ2pRRmjj3Uk= Subject key identifier: B1:A7:B0:B8:45:1E:15:59:C1:1E:B0:2A:5D:77:5D:C5:3B:24:EE:C9 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F432858476B5A52C0A192300A831D6DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Oct 2024 14:13:26 +0000 Certificate not after: Wed 06 Jan 2027 15:13:26 +0000 Subordinate resources: AS: 400914 IP: 209.178.246.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:6b:5a:52:c0:a1:92:30:0a:83:1d:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Oct 3 14:13:26 2024 GMT Not After : Jan 6 15:13:26 2027 GMT Subject: CN=a8b4c7d3-7599-471e-a1ea-6de7b1582c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:c3:f6:ce:71:fe:1f:77:eb:52:0b:69:19: f2:f7:ec:5d:c7:99:2a:5c:20:75:c5:bb:db:6f:88: 0d:9a:7f:6c:0d:f6:2d:ed:30:8f:75:92:38:0f:ef: d5:bf:76:35:b4:71:aa:89:a7:9c:bd:df:5a:3c:5d: 5a:9a:0e:6b:59:d7:0e:91:67:04:47:28:23:ae:c7: fb:9c:45:8d:2b:7b:0e:87:26:3b:f5:76:d3:ad:f8: 54:8b:e3:6b:2b:89:62:39:5e:16:93:14:dd:eb:e0: ca:63:79:f7:96:b9:1c:94:15:6a:5b:25:d7:8e:14: c6:df:6b:2a:1d:ed:38:3d:6e:f7:51:6c:6f:ff:dc: ff:22:2c:5e:dd:55:98:68:e8:da:38:62:86:56:aa: 8b:95:96:55:87:92:ca:9c:f2:c2:c3:78:94:3b:2d: 56:f8:4a:9e:3c:fa:8d:0e:bf:22:37:55:fe:55:ff: 8b:c9:a1:93:81:76:8b:a0:95:b1:40:b8:6b:12:aa: 17:8a:72:20:1c:6f:c6:6d:45:e1:fe:93:05:49:90: f1:61:a3:d2:b0:a8:38:69:b6:8e:46:65:71:2a:d2: b0:7b:b9:cd:df:ae:de:e4:85:cd:63:1a:f8:5c:46: 25:a4:32:2a:1c:57:51:9e:f3:1d:4c:50:71:dd:25: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A7:B0:B8:45:1E:15:59:C1:1E:B0:2A:5D:77:5D:C5:3B:24:EE:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f/a8b4c7d3-7599-471e-a1ea-6de7b1582c5f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 209.178.246.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400914 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:dc:4a:25:6a:d1:73:b8:50:98:fb:45:6d:a8:c6:94:f7:bf: 9e:35:be:60:b0:9b:e3:2a:1c:5d:bb:62:47:ea:5f:3c:5b:fa: 23:d3:1a:ec:6b:0a:2e:60:aa:52:0d:df:10:d0:a2:50:b8:06: 8c:c8:86:92:f6:bd:44:99:90:03:f7:a9:b6:b1:cd:66:f6:ad: 8c:39:62:37:02:70:1b:2d:ba:fb:c5:e8:61:69:f2:5b:51:30: 9a:cd:b2:df:57:26:ad:18:5a:7b:44:47:c9:8f:41:89:f9:2d: 5e:f7:27:70:7f:24:38:f6:4f:7b:44:21:ec:0a:ae:e7:cb:9b: c6:f9:a9:0c:62:77:40:1b:44:63:de:48:e5:e6:d9:9a:45:fd: c1:23:39:cc:8f:0c:38:ee:cc:4d:eb:cb:81:21:67:a9:e1:01: 82:eb:ad:88:83:89:b6:7c:94:99:6c:43:23:eb:f6:c5:25:84: 91:27:51:bb:df:7a:65:7d:5f:3a:a6:1d:56:48:43:c1:15:00: 45:b6:a6:b6:8a:b8:a9:32:97:50:f9:d9:02:a1:4d:a4:77:74: 70:1b:54:bf:6e:97:6b:e7:c5:c1:80:f0:a7:64:aa:49:00:d0: cd:f2:23:26:15:67:ff:ed:ac:c7:81:60:a7:22:6d:c9:b8:52: 20:78:4f:5f -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEdrWlLAoZIwCoMdbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MTAwMzE0MTMyNloXDTI3MDEwNjE1MTMyNlowLzEtMCsGA1UEAxMk YThiNGM3ZDMtNzU5OS00NzFlLWExZWEtNmRlN2IxNTgyYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG3D9s5x/h9361ILaRny9+xdx5kqXCB1xbvb b4gNmn9sDfYt7TCPdZI4D+/Vv3Y1tHGqiaecvd9aPF1amg5rWdcOkWcERygjrsf7 nEWNK3sOhyY79XbTrfhUi+NrK4liOV4WkxTd6+DKY3n3lrkclBVqWyXXjhTG32sq He04PW73UWxv/9z/Iixe3VWYaOjaOGKGVqqLlZZVh5LKnPLCw3iUOy1W+EqePPqN Dr8iN1X+Vf+LyaGTgXaLoJWxQLhrEqoXinIgHG/GbUXh/pMFSZDxYaPSsKg4abaO RmVxKtKwe7nN367e5IXNYxr4XEYlpDIqHFdRnvMdTFBx3SVEFQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFLGnsLhFHhVZwR6wKl13XcU7JO7JMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9h OGI0YzdkMy03NTk5LTQ3MWUtYTFlYS02ZGU3YjE1ODJjNWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2E4YjRjN2QzLTc1OTktNDcxZS1h MWVhLTZkZTdiMTU4MmM1Zi9hOGI0YzdkMy03NTk5LTQ3MWUtYTFlYS02ZGU3YjE1 ODJjNWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADRsvYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh4SMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEncSiVq0XO4UJj7RW2oxpT3v541vmCwm+MqHF27YkfqXzxb +iPTGuxrCi5gqlIN3xDQolC4BozIhpL2vUSZkAP3qbaxzWb2rYw5YjcCcBstuvvF 6GFp8ltRMJrNst9XJq0YWntER8mPQYn5LV73J3B/JDj2T3tEIewKrufLm8b5qQxi d0AbRGPeSOXm2ZpF/cEjOcyPDDjuzE3ry4EhZ6nhAYLrrYiDibZ8lJlsQyPr9sUl hJEnUbvfemV9XzqmHVZIQ8EVAEW2praKuKkyl1D52QKhTaR3dHAbVL9ul2vnxcGA 8KdkqkkA0M3yIyYVZ//trMeBYKcibcm4UiB4T18= -----END CERTIFICATE-----Generated at Thu Nov 21 16:15:05 2024 by rpki-client on console-ams.rpki-client.org