$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer File: cfdd40eb-4c1a-4ba5-8446-676f83258a67.cer (raw, json) Hash identifier: yYs5DxzKGhBAWFHXpy9tpYDrkrbaHF5qMBCvtFsM4Kg= Subject key identifier: 6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584601A704E4837A7178112A0140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 May 2024 00:45:20 +0000 Certificate not after: Sun 30 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 35960 IP: 192.5.3.0/24 IP: 198.245.187.0 -- 198.245.189.255 IP: 2620:a1:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:01:a7:04:e4:83:7a:71:78:11:2a:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: May 27 00:45:20 2024 GMT Not After : Aug 30 00:45:20 2026 GMT Subject: CN=cfdd40eb-4c1a-4ba5-8446-676f83258a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:50:69:03:a2:f1:ea:c8:1e:cd:ab:26:16: 91:65:c1:0b:50:f8:63:02:9e:98:f6:d5:6b:f2:2c: 45:bf:ec:45:b8:cb:94:e0:59:c2:5f:b4:68:8e:0f: 36:45:6c:b4:05:29:01:93:64:91:e1:20:ec:b5:06: fd:3e:61:28:a2:61:65:4c:f0:f9:98:7d:0f:46:dd: 5e:f2:5b:43:3e:65:21:b7:05:05:2e:3e:07:b5:3e: 24:a2:af:8c:f7:bd:29:b9:ca:f0:91:83:2f:94:83: a5:21:ff:4e:95:8f:89:8b:0c:f8:cf:47:78:49:11: b6:4f:e2:07:8b:4c:77:be:e7:20:6f:51:d2:bd:24: ab:f1:78:29:7f:7f:00:3e:87:65:f6:59:5d:45:8c: 7a:6a:62:bc:bf:ff:51:c4:ec:de:b2:4b:78:81:6c: df:25:aa:22:3c:fc:fe:dd:49:00:27:b0:5d:ac:25: 27:e0:18:5b:17:36:54:fc:fe:b6:d6:ee:c0:08:64: 15:0d:28:3b:28:56:18:97:a7:17:03:8d:2a:33:e5: e9:74:fa:7c:8b:f1:8a:11:bb:3d:e0:b1:4e:e5:f2: 96:a1:c7:c9:64:a4:73:ce:a3:61:8f:b4:bd:8d:df: f8:4a:08:8b:35:05:19:46:f2:3b:b0:5c:74:21:79: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:55:02:5F:28:0E:73:C8:BD:52:3A:BB:E9:F6:0E:E6:68:22:5E:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfdd40eb-4c1a-4ba5-8446-676f83258a67/cfdd40eb-4c1a-4ba5-8446-676f83258a67.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 192.5.3.0/24 198.245.187.0-198.245.189.255 IPv6: 2620:a1:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35960 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:7f:bb:95:2a:34:44:6a:e6:e9:48:e5:26:54:f9:89:86:55: 5f:04:9c:fd:2b:91:f3:79:f0:fc:59:5d:0d:7a:91:6d:45:e1: 7d:92:4d:92:90:bc:98:8d:36:0c:33:4c:19:31:a3:0e:c4:91: 42:d8:1e:75:01:91:06:b0:92:67:89:16:ef:03:70:81:19:24: bb:bf:61:94:0d:42:89:0a:9d:4e:5e:0f:61:42:67:fd:27:22: d7:d3:82:3d:3b:28:4c:86:35:15:a5:ae:40:9e:a9:75:03:22: e8:6e:42:94:20:ac:74:fe:f4:9c:38:4c:9c:55:3f:e2:06:bb: 9b:d5:57:72:5c:58:dd:64:e4:f9:be:aa:13:33:a6:73:71:cf: 6b:6d:58:b7:c7:28:d4:68:cd:e2:96:4e:58:81:e8:4d:d8:bc: 21:87:de:bc:9f:df:8f:ea:bf:a0:f8:6a:46:da:c9:16:3a:c8: 70:6c:4f:89:d3:25:e7:60:6f:bd:6a:26:b9:c1:1f:9b:7d:43: 30:d0:7b:4a:28:ed:ba:a2:e5:5a:30:ec:ed:1c:77:0e:95:0a: 52:8a:ca:ce:f5:b7:0c:ee:2f:8d:77:35:37:03:05:93:00:8f: ad:73:3c:85:85:a9:dc:c3:24:24:1e:b4:75:8b:3e:8e:45:9a: 56:33:d9:9d -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEYBpwTkg3pxeBEqAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI0MDUyNzAwNDUyMFoXDTI2MDgzMDAwNDUyMFowLzEtMCsGA1UEAxMk Y2ZkZDQwZWItNGMxYS00YmE1LTg0NDYtNjc2ZjgzMjU4YTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvZQaQOi8erIHs2rJhaRZcELUPhjAp6Y9tVr 8ixFv+xFuMuU4FnCX7Rojg82RWy0BSkBk2SR4SDstQb9PmEoomFlTPD5mH0PRt1e 8ltDPmUhtwUFLj4HtT4koq+M970pucrwkYMvlIOlIf9OlY+Jiwz4z0d4SRG2T+IH i0x3vucgb1HSvSSr8Xgpf38APodl9lldRYx6amK8v/9RxOzeskt4gWzfJaoiPPz+ 3UkAJ7BdrCUn4BhbFzZU/P621u7ACGQVDSg7KFYYl6cXA40qM+XpdPp8i/GKEbs9 4LFO5fKWocfJZKRzzqNhj7S9jd/4SgiLNQUZRvI7sFx0IXn0hQIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFG1VAl8oDnPIvVI6u+n2DuZoIl5/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j ZmRkNDBlYi00YzFhLTRiYTUtODQ0Ni02NzZmODMyNThhNjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2NmZGQ0MGViLTRjMWEtNGJhNS04 NDQ2LTY3NmY4MzI1OGE2Ny9jZmRkNDBlYi00YzFhLTRiYTUtODQ0Ni02NzZmODMy NThhNjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwPgYIKwYBBQUH AQcBAf8ELzAtMBoEAgABMBQDBADABQMwDAMEAMb1uwMEAcb1vDAPBAIAAjAJAwcA JiAAocAAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCMeDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4f7uV KjREaubpSOUmVPmJhlVfBJz9K5HzefD8WV0NepFtReF9kk2SkLyYjTYMM0wZMaMO xJFC2B51AZEGsJJniRbvA3CBGSS7v2GUDUKJCp1OXg9hQmf9JyLX04I9OyhMhjUV pa5Anql1AyLobkKUIKx0/vScOEycVT/iBrub1VdyXFjdZOT5vqoTM6Zzcc9rbVi3 xyjUaM3ilk5YgehN2Lwhh968n9+P6r+g+GpG2skWOshwbE+J0yXnYG+9aia5wR+b fUMw0HtKKO26ouVaMOztHHcOlQpSisrO9bcM7i+NdzU3AwWTAI+tczyFhancwyQk HrR1iz6ORZpWM9md -----END CERTIFICATE-----Generated at Thu Nov 21 16:16:15 2024 by rpki-client on console-ams.rpki-client.org