$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer File: 37e69330-3024-406b-b60a-0d95e25f2334.cer (raw, json) Hash identifier: cbeknUXhrsjACccpkuh42npizzE6hwzh81Iai30OoDE= Subject key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858477F0CC81B3BF6EFA736901500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Oct 2024 15:33:22 +0000 Certificate not after: Tue 12 Jan 2027 01:32:14 +0000 Subordinate resources: AS: 401390 IP: 23.191.120.0/24 IP: 2602:f7da::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7f:0c:c8:1b:3b:f6:ef:a7:36:90:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Oct 10 15:33:22 2024 GMT Not After : Jan 12 01:32:14 2027 GMT Subject: CN=37e69330-3024-406b-b60a-0d95e25f2334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:8b:1e:de:aa:96:68:6c:34:1f:19:44:4e: 90:3d:79:9a:8f:3a:af:80:c4:17:3c:86:50:c3:2f: 20:0c:2a:e7:5c:9b:73:c4:7e:27:87:4b:d8:35:64: fb:9b:99:0d:cf:c9:f1:0c:81:50:da:f3:2d:46:44: a5:e5:d6:a1:17:dc:d0:24:aa:80:46:db:da:26:34: 1a:be:da:0d:df:c3:c5:79:56:4a:05:be:40:4e:7b: 61:d6:a5:f7:ca:fb:ea:c8:df:60:7a:2d:1a:52:aa: 79:31:27:f6:7b:20:e7:75:a9:05:99:79:fd:6b:73: e5:6c:54:fc:8e:c0:6a:75:08:3d:4f:a2:b3:aa:d0: 3b:65:06:ce:c1:dc:19:4c:35:d8:26:6d:ae:3a:66: ba:5a:33:f0:97:b4:d4:d8:51:b7:e1:6a:29:76:34: bc:fd:13:cd:fb:32:44:2d:74:76:c8:48:d0:d0:aa: 54:48:9a:2e:2a:b4:f8:89:13:61:54:90:b9:fc:ea: d8:87:53:26:7f:55:0d:a6:79:7a:2d:de:9e:ae:a3: 90:e7:d3:23:7f:f4:74:01:1b:11:6f:19:05:b0:8b: 29:ff:1d:48:73:bc:c6:38:b1:1a:f1:8a:55:83:bd: b2:85:46:fe:3e:c9:85:09:b7:93:c2:6f:17:79:ed: 6f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.191.120.0/24 IPv6: 2602:f7da::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401390 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e8:4f:2c:66:19:5d:0c:c9:61:aa:68:d3:26:a3:ac:e3:ad: 01:08:9c:cd:df:89:5b:93:f7:6c:3e:41:f9:53:48:30:7e:0a: 3d:6d:c3:0d:d0:8b:f5:88:b6:97:c4:0b:07:46:b5:9c:0f:19: 23:48:86:f4:5a:ca:3d:40:fe:b0:7c:9c:b8:e5:b5:02:5d:d2: 45:e1:69:4d:b7:6b:34:c5:2f:bc:cc:dc:0c:2b:31:27:c5:75: 95:a0:8b:af:cf:90:32:9f:21:79:6d:70:8c:b6:f0:38:11:eb: 1d:27:94:44:41:8f:4d:19:56:67:3f:b0:98:b4:17:1d:80:a1: fe:ef:97:80:e0:09:09:f0:b4:9c:0a:a8:b9:72:5d:5b:70:6e: 63:b7:e8:48:f6:fe:51:18:70:39:6d:e6:ee:2f:b5:ab:ff:3f: a3:8b:ea:d3:f0:fd:e1:d2:1b:92:ca:06:cb:37:25:47:08:aa: 8e:ae:b2:ab:41:b4:e9:5f:de:0d:66:13:00:73:46:57:05:78: 28:74:26:e7:db:fe:a1:a2:47:ff:b6:92:9f:e8:92:c3:da:a3: d2:88:15:19:4d:ee:f0:99:ba:1b:8f:ee:95:78:9b:f5:2f:a4: c8:41:86:a8:69:71:51:4d:6b:fc:01:cd:1d:02:f4:7a:b4:df: fe:3c:3a:63 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEd/DMgbO/bvpzaQFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MTAxMDE1MzMyMloXDTI3MDExMjAxMzIxNFowLzEtMCsGA1UEAxMk MzdlNjkzMzAtMzAyNC00MDZiLWI2MGEtMGQ5NWUyNWYyMzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3WLHt6qlmhsNB8ZRE6QPXmajzqvgMQXPIZQ wy8gDCrnXJtzxH4nh0vYNWT7m5kNz8nxDIFQ2vMtRkSl5dahF9zQJKqARtvaJjQa vtoN38PFeVZKBb5ATnth1qX3yvvqyN9gei0aUqp5MSf2eyDndakFmXn9a3PlbFT8 jsBqdQg9T6KzqtA7ZQbOwdwZTDXYJm2uOma6WjPwl7TU2FG34WopdjS8/RPN+zJE LXR2yEjQ0KpUSJouKrT4iRNhVJC5/OrYh1Mmf1UNpnl6Ld6erqOQ59Mjf/R0ARsR bxkFsIsp/x1Ic7zGOLEa8YpVg72yhUb+PsmFCbeTwm8Xee1v7QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFJcWqatmlT8/LED8HTNjhadF1GU5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z N2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1ZjIzMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzM3ZTY5MzMwLTMwMjQtNDA2Yi1i NjBhLTBkOTVlMjVmMjMzNC8zN2U2OTMzMC0zMDI0LTQwNmItYjYwYS0wZDk1ZTI1 ZjIzMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXv3gwDgQCAAIwCAMGACYC99oAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYf7jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCP6E8sZhldDMlhqmjTJqOs460B CJzN34lbk/dsPkH5U0gwfgo9bcMN0Iv1iLaXxAsHRrWcDxkjSIb0Wso9QP6wfJy4 5bUCXdJF4WlNt2s0xS+8zNwMKzEnxXWVoIuvz5AynyF5bXCMtvA4EesdJ5REQY9N GVZnP7CYtBcdgKH+75eA4AkJ8LScCqi5cl1bcG5jt+hI9v5RGHA5bebuL7Wr/z+j i+rT8P3h0huSygbLNyVHCKqOrrKrQbTpX94NZhMAc0ZXBXgodCbn2/6hokf/tpKf 6JLD2qPSiBUZTe7wmbobj+6VeJv1L6TIQYaoaXFRTWv8Ac0dAvR6tN/+PDpj -----END CERTIFICATE-----Generated at Thu Nov 21 16:16:50 2024 by rpki-client on console-ams.rpki-client.org