$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer File: 1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer (raw, json) Hash identifier: SFnd7tFh05rDrsgjOegztWgoQHywcD068L5hc18q2FY= Subject key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Authority key identifier: 11:99:8E:EB:80:DC:32:74:66:E0:79:82:05:B9:62:48:92:75:CD:C5 Certificate issuer: /CN=4b92cbc5-48e6-4e59-b9e4-d0055609895d Certificate serial: 010D0C9F4328584494FBF61E4E559AAEEA9F8200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 17 Jan 2024 09:46:27 +0000 Certificate not after: Tue 21 Apr 2026 08:46:27 +0000 Subordinate resources: AS: 23125 IP: 2602:f99e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:94:fb:f6:1e:4e:55:9a:ae:ea:9f:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b92cbc5-48e6-4e59-b9e4-d0055609895d Validity Not Before: Jan 17 09:46:27 2024 GMT Not After : Apr 21 08:46:27 2026 GMT Subject: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:c8:ed:f2:ba:c0:bf:be:f0:90:f3:18:9a: c7:1c:9f:28:09:22:72:99:2c:47:62:8f:b8:1e:0b: 53:27:1f:f3:35:c2:1a:fd:3d:01:7d:9a:f6:be:57: c2:b2:09:be:d2:de:fd:c9:98:51:dc:b0:58:f0:f6: fd:c6:22:c0:98:10:a2:00:fc:70:e6:e4:a7:16:1a: 85:bb:47:c1:d1:35:9d:3a:2d:eb:02:5c:d0:95:91: 83:02:a5:26:e3:16:3a:d0:4c:0e:f6:24:cb:ae:01: 4e:23:76:51:c4:0b:f2:19:15:14:0c:44:2c:34:93: aa:19:15:c4:e0:d9:d2:0f:54:3a:81:4a:4f:a9:69: 4f:8b:56:db:c2:bf:b8:e8:03:ad:03:61:59:41:16: fb:73:a0:0a:f3:93:dd:4b:bb:5e:02:af:66:fd:28: 25:bb:f5:64:ef:a3:8a:19:33:12:8f:ee:4a:73:d6: db:9e:19:9a:f0:2b:ca:b3:c9:6f:1a:da:e6:bf:dd: c9:0a:cf:50:d7:31:7f:6e:0f:8e:6a:2a:48:9e:0b: ee:2b:ca:f0:27:87:c9:5f:1a:6c:76:eb:dc:aa:90: 37:d9:6d:55:db:6a:b7:88:82:59:ed:d5:3c:eb:13: 68:be:b3:fa:38:2c:55:a6:fe:36:af:d6:9a:3e:11: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl X509v3 Authority Key Identifier: keyid:11:99:8E:EB:80:DC:32:74:66:E0:79:82:05:B9:62:48:92:75:CD:C5 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f99e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23125 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3a:e3:54:c8:23:e1:c0:c3:7c:dc:64:ea:21:4c:c3:ea:c9: a3:69:22:af:1d:2b:d0:59:fd:a5:f6:21:8a:07:75:79:c2:81: ce:7b:b6:ff:35:17:16:aa:7b:64:aa:61:8b:c3:8d:01:9e:77: e3:5a:ca:7d:b0:cb:11:cb:52:18:a0:dd:44:89:24:3f:1d:e3: 05:c9:41:4d:bd:7a:ed:6f:72:05:25:aa:9d:60:b5:a1:ab:8b: c3:3c:f1:f7:dc:bf:ec:5d:76:4e:96:c2:eb:26:6d:c9:09:59: 74:52:6c:36:8e:9b:70:1c:e3:96:1c:c0:ac:6b:f1:5b:68:92: 6c:b4:14:54:a0:74:f6:bb:7d:3c:f0:83:da:47:4a:31:ab:a8: 74:a7:5b:61:52:7e:fd:aa:74:85:c3:d3:dd:7f:47:07:05:02: da:10:b8:8f:ec:3d:f4:f5:fa:46:d7:c6:98:51:09:e2:63:89: bc:0c:b9:be:57:97:ba:49:9b:f9:cd:13:27:3e:60:0f:f4:50: 0a:ae:83:7c:76:b0:2f:5b:e2:aa:43:7d:14:70:87:df:d4:d4: 6d:1c:03:8e:98:0c:dd:96:91:0a:17:83:23:47:b9:97:46:0b: 5e:d1:09:db:ea:fa:c6:a6:b7:27:a6:2b:0a:44:17:d9:66:c5: ae:af:6c:d6 -----BEGIN CERTIFICATE----- MIIG2jCCBcKgAwIBAgIUAQ0Mn0MoWESU+/YeTlWaruqfggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI5MmNiYzUtNDhlNi00ZTU5LWI5ZTQtZDAwNTU2MDk4 OTVkMB4XDTI0MDExNzA5NDYyN1oXDTI2MDQyMTA4NDYyN1owPTE7MDkGA1UEAxMy MWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgzNjMyYjliYmNhMzNl MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mcjt8rrAv77wkPMY msccnygJInKZLEdij7geC1MnH/M1whr9PQF9mva+V8KyCb7S3v3JmFHcsFjw9v3G IsCYEKIA/HDm5KcWGoW7R8HRNZ06LesCXNCVkYMCpSbjFjrQTA72JMuuAU4jdlHE C/IZFRQMRCw0k6oZFcTg2dIPVDqBSk+paU+LVtvCv7joA60DYVlBFvtzoArzk91L u14Cr2b9KCW79WTvo4oZMxKP7kpz1tueGZrwK8qzyW8a2ua/3ckKz1DXMX9uD45q KkieC+4ryvAnh8lfGmx269yqkDfZbVXbareIglnt1TzrE2i+s/o4LFWm/jav1po+ EatHAgMBAAGjggPeMIID2jAdBgNVHQ4EFgQUEPqte9gIeB4zDBf9bQqrHfHGntQw ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYz NC1hYjE4LTNlZjlkMDk4MjM1Mi8zLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00 NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JEODA4NzgxRTMzMEMxN0ZE NkQwQUFCMURGMUM2OUVENC5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4 MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1kMDA1NTYwOTg5NWQvNGI5MmNi YzUtNDhlNi00ZTU5LWI5ZTQtZDAwNTU2MDk4OTVkLmNybDAfBgNVHSMEGDAWgBQR mY7rgNwydGbgeYIFuWJIknXNxTAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzRi OTJjYmM1LTQ4ZTYtNGU1OS1iOWU0LWQwMDU1NjA5ODk1ZC5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvmeADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJaVTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCFOuNUyCPhwMN83GTqIUzD6smjaSKvHSvQWf2l9iGKB3V5 woHOe7b/NRcWqntkqmGLw40BnnfjWsp9sMsRy1IYoN1EiSQ/HeMFyUFNvXrtb3IF JaqdYLWhq4vDPPH33L/sXXZOlsLrJm3JCVl0Umw2jptwHOOWHMCsa/FbaJJstBRU oHT2u3088IPaR0oxq6h0p1thUn79qnSFw9Pdf0cHBQLaELiP7D309fpG18aYUQni Y4m8DLm+V5e6SZv5zRMnPmAP9FAKroN8drAvW+KqQ30UcIff1NRtHAOOmAzdlpEK F4MjR7mXRgte0Qnb6vrGprcnpisKRBfZZsWur2zW -----END CERTIFICATE-----Generated at Thu Nov 21 17:29:41 2024 by rpki-client on console-fra.rpki-client.org