$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer File: 9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer (raw, json) Hash identifier: uZg2QSxQX1y1wAWjiwb/E7U67j6PuB0Q6dmJ6BO8WIA= Subject key identifier: AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55 Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 Certificate issuer: /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Certificate serial: 010D0C9F43285845960725725BBDFC45476ECB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 18 Apr 2024 11:31:44 +0000 Certificate not after: Wed 22 Jul 2026 11:31:44 +0000 Subordinate resources: AS: 25948 IP: 23.172.208.0/24 IP: 172.110.129.0/24 IP: 198.135.236.0/24 IP: 199.212.255.0/24 IP: 216.10.69.0/24 IP: 2602:808::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:96:07:25:72:5b:bd:fc:45:47:6e:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d Validity Not Before: Apr 18 11:31:44 2024 GMT Not After : Jul 22 11:31:44 2026 GMT Subject: CN=9212b0db-bb73-4a6f-a5e7-4423f4889ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:fa:a4:d9:8f:80:81:15:f0:45:72:bd:1c: 39:26:08:4d:16:01:bd:68:17:2d:e0:7a:29:9b:44: aa:56:a8:3a:be:d9:38:6f:ab:98:61:e1:9f:d5:ef: c2:72:a6:3d:58:01:4e:34:ee:a3:52:3c:67:93:53: 65:a1:02:fc:af:03:8c:49:ff:a9:c1:c4:aa:22:f1: 6b:96:9c:fb:9b:b2:89:7d:9b:f9:4d:a7:6a:9b:92: 6b:ea:b8:36:e6:ce:d6:cb:36:d5:39:31:cf:8a:7b: 0d:7c:70:5c:cc:f5:aa:2c:82:fc:5f:a2:e1:4c:bc: 97:00:c9:b2:6a:42:b4:06:09:e1:aa:bd:a7:bc:5e: f4:e0:6b:c8:8a:7a:c8:18:a1:5e:81:a9:49:01:cd: 80:c0:af:19:55:a8:3d:d1:aa:63:1b:df:e7:9d:f5: ff:10:e0:b8:48:37:50:88:5e:54:bd:16:d2:2e:53: d4:5e:87:75:57:89:39:7f:fe:f6:e4:28:eb:ae:8c: 54:5b:7e:61:68:ba:b2:5b:d3:81:e4:2e:50:f7:d6: cc:70:22:4b:79:fe:d3:1f:c7:90:c2:c2:20:e5:45: 9d:af:83:c1:f2:e2:0b:76:59:d1:13:aa:d5:a2:2d: 90:42:de:5d:f1:a5:5f:bd:49:15:64:be:7f:bd:1d: c0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl X509v3 Authority Key Identifier: keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer sbgp-ipAddrBlock: critical IPv4: 23.172.208.0/24 172.110.129.0/24 198.135.236.0/24 199.212.255.0/24 216.10.69.0/24 IPv6: 2602:808::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25948 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:9b:95:c6:a1:a4:a7:57:2f:7d:83:15:f2:42:0c:f2:64:40: c4:bd:84:73:8e:99:ea:50:d1:68:bc:af:17:38:0c:48:0a:03: de:51:9c:cf:5d:79:37:af:19:43:d1:b3:43:49:00:cb:17:41: a9:32:f5:f6:85:6c:3f:07:78:2c:53:1e:14:98:1d:bb:81:69: ce:af:19:f7:05:3c:6e:89:82:cd:cc:f3:68:dc:fb:b7:2d:34: 5f:e0:cd:7b:30:0b:f2:fa:6a:95:ce:cc:c3:85:d1:e8:0d:1b: d7:68:40:fc:fe:13:b7:85:a1:27:f4:8d:ec:a3:ea:8f:b4:0b: 6b:38:37:78:02:66:71:3c:ad:d1:a5:43:81:6a:7a:71:33:c3: 0f:4b:b1:af:44:f6:2f:f2:97:b3:a4:06:56:0e:37:cb:99:3a: ed:e1:c8:37:3c:44:0d:52:cd:02:07:40:6b:c9:99:12:8c:1a: d3:66:c7:46:f1:6a:36:57:7f:ff:04:c7:42:6b:67:e5:5b:1e: ef:6e:76:21:70:a0:18:c3:c4:d6:c5:99:9b:12:49:ed:00:f4: af:67:5c:b7:b7:9d:14:4a:d8:b0:b4:44:af:33:ec:64:08:8b: f6:a4:34:a0:16:5e:09:d1:02:4d:19:86:4e:5e:14:64:a3:c7: af:cd:32:56 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEWWByVyW738RUduy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz MzdkMB4XDTI0MDQxODExMzE0NFoXDTI2MDcyMjExMzE0NFowLzEtMCsGA1UEAxMk OTIxMmIwZGItYmI3My00YTZmLWE1ZTctNDQyM2Y0ODg5ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEr6pNmPgIEV8EVyvRw5JghNFgG9aBct4Hop m0SqVqg6vtk4b6uYYeGf1e/CcqY9WAFONO6jUjxnk1NloQL8rwOMSf+pwcSqIvFr lpz7m7KJfZv5Tadqm5Jr6rg25s7WyzbVOTHPinsNfHBczPWqLIL8X6LhTLyXAMmy akK0Bgnhqr2nvF704GvIinrIGKFegalJAc2AwK8ZVag90apjG9/nnfX/EOC4SDdQ iF5UvRbSLlPUXod1V4k5f/725CjrroxUW35haLqyW9OB5C5Q99bMcCJLef7TH8eQ wsIg5UWdr4PB8uILdlnRE6rVoi2QQt5d8aVfvUkVZL5/vR3AWQIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFKwq8wCgl9r5DwjA89ugRamdtVBVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85 MjEyYjBkYi1iYjczLTRhNmYtYTVlNy00NDIzZjQ4ODllZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzkyMTJiMGRiLWJiNzMtNGE2Zi1h NWU3LTQ0MjNmNDg4OWVlOC85MjEyYjBkYi1iYjczLTRhNmYtYTVlNy00NDIzZjQ4 ODllZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw /5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCQEAgABMB4DBAAXrNADBACsboEDBADGh+wDBADH1P8DBADYCkUw DwQCAAIwCQMHBCYCCAgAADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJlXDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCdm5XGoaSnVy99gxXyQgzyZEDEvYRzjpnqUNFovK8XOAxICgPeUZzPXXk3 rxlD0bNDSQDLF0GpMvX2hWw/B3gsUx4UmB27gWnOrxn3BTxuiYLNzPNo3Pu3LTRf 4M17MAvy+mqVzszDhdHoDRvXaED8/hO3haEn9I3so+qPtAtrODd4AmZxPK3RpUOB anpxM8MPS7GvRPYv8pezpAZWDjfLmTrt4cg3PEQNUs0CB0BryZkSjBrTZsdG8Wo2 V3//BMdCa2flWx7vbnYhcKAYw8TWxZmbEkntAPSvZ1y3t50UStiwtESvM+xkCIv2 pDSgFl4J0QJNGYZOXhRko8evzTJW -----END CERTIFICATE-----Generated at Wed Nov 20 19:10:31 2024 by rpki-client on console-ams.rpki-client.org