$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.cer File: 5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.cer (raw, json) Hash identifier: G5s9HVDv0nXvZyTNfJXxjqa3tRpiL8DCYok7yPHFyZQ= Subject key identifier: DF:4B:B0:B5:6D:27:A0:AF:86:F0:AA:86:5A:D8:4C:AB:5F:60:C7:5A Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F432858471FA2F5E7BE5537BD03D44640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Sep 2024 11:18:21 +0000 Certificate not after: Sun 07 Jun 2026 17:20:12 +0000 Subordinate resources: AS: 46269 IP: 158.228.0.0/16 IP: 2620:88:8000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1f:a2:f5:e7:be:55:37:bd:03:d4:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Sep 6 11:18:21 2024 GMT Not After : Jun 7 17:20:12 2026 GMT Subject: CN=5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fb:e3:af:87:3a:49:dc:13:c3:fd:da:ed:ad: 4a:d1:8f:e4:bb:a2:c4:d5:45:d6:a5:4a:bc:f5:0e: 7f:6d:c8:f7:a0:0b:3b:08:41:6a:06:ee:83:ee:dd: 5e:e4:2d:34:98:07:d0:fc:ec:9f:cb:c6:88:b6:0e: 33:30:78:39:77:03:67:9f:c6:3b:6a:f0:2d:86:10: fb:d6:f0:f3:9d:aa:34:cf:02:26:40:7b:15:cf:a4: 5c:ed:74:bb:8b:42:d0:df:38:8a:b8:99:2f:1d:bf: 1c:f5:91:97:ed:79:f5:19:40:f6:df:55:4b:50:77: ea:e0:d0:eb:5c:6e:7c:51:2b:97:d0:2e:a5:22:2b: 0e:6a:46:bb:09:69:aa:a5:e0:98:13:5e:62:59:db: c0:10:18:45:5d:56:b2:0c:86:9a:d5:5f:57:dc:6f: 21:4f:5b:dc:b7:d9:b3:ca:7a:8a:4d:be:04:b6:a3: c5:6d:93:6f:7a:2e:81:7f:7b:31:27:19:05:42:72: 9a:39:d3:18:e8:04:06:61:cc:e5:03:28:07:39:86: 12:17:26:68:53:09:a5:2f:cf:6c:e2:d2:03:27:ba: f8:bb:4c:dc:ee:91:ef:26:45:ad:5b:d7:b6:ff:e9: 84:1f:d3:29:35:56:cd:3f:f4:9f:89:b3:3a:9a:ff: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4B:B0:B5:6D:27:A0:AF:86:F0:AA:86:5A:D8:4C:AB:5F:60:C7:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe/5905d2ce-bd02-48ef-bbee-9cd3b26fcfbe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 158.228.0.0/16 IPv6: 2620:88:8000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46269 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b3:22:08:66:cf:0a:01:74:7c:6d:4a:70:56:cb:9a:53:7d: 90:fa:8b:b5:44:11:b6:53:e5:7e:ce:24:13:6e:c4:23:38:e8: bc:36:0d:92:35:9d:3b:0a:62:4e:35:f7:8f:b3:5b:20:2a:b5: 8e:4c:f7:1a:a1:6d:44:74:79:54:bc:45:03:77:08:fb:ae:bb: e2:d0:2e:bf:e8:87:2f:0e:72:c1:9f:17:4b:cf:7a:cc:a5:d9: a8:a3:42:b4:3e:8b:e7:b0:16:fe:20:63:a4:b8:35:01:70:e0: 08:06:a4:64:75:50:3a:61:24:bb:6b:42:41:f7:8e:70:10:d9: c5:d7:62:b1:4b:db:66:19:af:1c:1d:c1:12:3a:b8:88:31:20: 0c:ab:f1:4d:cf:ee:72:fa:f3:1f:8b:d3:72:e7:a0:ce:d7:b4: fc:a4:b3:48:99:7a:ab:e9:7d:cd:ee:72:93:71:d3:64:eb:54: 60:e3:da:b9:67:5a:33:0e:c5:0f:dc:06:20:80:39:80:ca:fb: b1:4d:7a:f3:38:2a:66:9f:97:b4:47:e2:d8:cb:92:bc:3c:21: 0a:ca:52:e9:5d:52:b3:a2:45:79:34:eb:06:c8:a5:96:b8:f6: 7b:b2:9a:b8:84:7e:75:6e:3b:a6:9b:8f:a4:03:2b:12:8e:fe: eb:27:9c:18 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEcfovXnvlU3vQPURkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDkwNjExMTgyMVoXDTI2MDYwNzE3MjAxMlowLzEtMCsGA1UEAxMk NTkwNWQyY2UtYmQwMi00OGVmLWJiZWUtOWNkM2IyNmZjZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pvjr4c6SdwTw/3a7a1K0Y/ku6LE1UXWpUq8 9Q5/bcj3oAs7CEFqBu6D7t1e5C00mAfQ/Oyfy8aItg4zMHg5dwNnn8Y7avAthhD7 1vDznao0zwImQHsVz6Rc7XS7i0LQ3ziKuJkvHb8c9ZGX7Xn1GUD231VLUHfq4NDr XG58USuX0C6lIisOaka7CWmqpeCYE15iWdvAEBhFXVayDIaa1V9X3G8hT1vct9mz ynqKTb4EtqPFbZNvei6Bf3sxJxkFQnKaOdMY6AQGYczlAygHOYYSFyZoUwmlL89s 4tIDJ7r4u0zc7pHvJkWtW9e2/+mEH9MpNVbNP/SfibM6mv/cyQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFN9LsLVtJ6CvhvCqhlrYTKtfYMdaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81 OTA1ZDJjZS1iZDAyLTQ4ZWYtYmJlZS05Y2QzYjI2ZmNmYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzU5MDVkMmNlLWJkMDItNDhlZi1i YmVlLTljZDNiMjZmY2ZiZS81OTA1ZDJjZS1iZDAyLTQ4ZWYtYmJlZS05Y2QzYjI2 ZmNmYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwCe5DAPBAIAAjAJAwcEJiAAiIAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC0vTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcsyIIZs8KAXR8bUpwVsuaU32Q +ou1RBG2U+V+ziQTbsQjOOi8Ng2SNZ07CmJONfePs1sgKrWOTPcaoW1EdHlUvEUD dwj7rrvi0C6/6IcvDnLBnxdLz3rMpdmoo0K0PovnsBb+IGOkuDUBcOAIBqRkdVA6 YSS7a0JB945wENnF12KxS9tmGa8cHcESOriIMSAMq/FNz+5y+vMfi9Ny56DO17T8 pLNImXqr6X3N7nKTcdNk61Rg49q5Z1ozDsUP3AYggDmAyvuxTXrzOCpmn5e0R+LY y5K8PCEKylLpXVKzokV5NOsGyKWWuPZ7spq4hH51bjumm4+kAysSjv7rJ5wY -----END CERTIFICATE-----Generated at Thu Nov 21 15:30:35 2024 by rpki-client on console-fra.rpki-client.org