$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer File: e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer (raw, json) Hash identifier: YQxkFwXUJJrvZ1fRExz++pOuXj9No/ct9DjwphHB4j0= Subject key identifier: 59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA Authority key identifier: 5C:63:42:D4:AD:8B:F0:98:04:F4:2E:A5:4E:95:92:69:38:17:53:39 Certificate issuer: /CN=f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea Certificate serial: 010D0C9F43285847E5ACD72483E7230B971C1600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer Manifest: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.mft caRepository: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/ Notify URL: https://rrdp-rps.arin.net/notification.xml Certificate not before: Sat 16 Nov 2024 09:48:19 +0000 Certificate not after: Fri 19 Feb 2027 09:48:19 +0000 Subordinate resources: AS: 27498 IP: 23.128.44.0/24 IP: 2602:f865::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e5:ac:d7:24:83:e7:23:0b:97:1c:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea Validity Not Before: Nov 16 09:48:19 2024 GMT Not After : Feb 19 09:48:19 2027 GMT Subject: CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:68:f7:59:be:ae:cf:27:9b:59:ef:eb:78: 5d:65:63:9f:e9:1f:03:db:2a:e0:83:af:d6:99:32: 79:98:e1:a6:41:4a:0a:6f:40:63:3b:42:7d:b5:52: 51:4a:cb:4e:a5:29:d6:56:b6:84:99:2a:2e:3c:04: 79:7a:63:56:d2:b8:0e:b9:1e:8c:27:02:52:8a:3d: 0d:7c:b7:11:8d:08:46:42:8a:be:78:84:df:fc:78: 79:66:36:e3:fe:dc:f1:f7:d5:f3:72:a9:9a:d4:93: 90:6e:00:dd:78:a6:6d:32:2d:13:ad:48:13:f4:47: f4:32:c3:a4:c1:6d:05:25:69:70:97:ec:28:4b:16: 6f:49:a0:5b:51:75:be:43:a3:f1:b9:5a:cb:3a:8e: 84:bd:ac:48:a1:e8:d2:bd:9d:b8:0d:5e:17:46:cc: 08:17:df:f5:1e:2a:7c:e3:d7:0d:1b:04:b7:3a:c2: 49:00:a8:ca:a2:a4:f0:bd:c2:d0:0c:d8:d0:19:43: 07:28:42:2f:f9:c6:5b:41:06:eb:ba:2c:eb:1a:c9: 33:5e:9f:36:fc:a4:1d:75:d3:fe:65:a1:39:68:b9: 00:43:df:1d:6f:52:4b:86:f0:de:f5:68:5d:fb:1d: 34:ed:1c:5a:af:f8:41:c4:26:9e:54:f6:04:cf:b6: 07:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA Subject Information Access: CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/ RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.mft RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.crl X509v3 Authority Key Identifier: keyid:5C:63:42:D4:AD:8B:F0:98:04:F4:2E:A5:4E:95:92:69:38:17:53:39 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer sbgp-ipAddrBlock: critical IPv4: 23.128.44.0/24 IPv6: 2602:f865::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27498 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b9:04:7e:c5:6c:81:39:3e:ae:8e:32:ec:b1:95:b7:b4:0a: 30:af:c2:1a:ce:9f:46:9c:48:1b:18:6c:c3:29:f0:2b:79:58: d0:8c:bc:85:fd:f4:aa:76:53:b7:cb:90:f8:a4:9d:95:4f:73: b9:3c:bf:70:c3:db:17:34:54:71:98:2a:50:b3:8a:74:25:45: 08:ba:65:5c:58:55:dd:d3:0a:b6:5e:73:d3:2b:65:19:c0:7d: 7d:db:bf:0f:55:72:8a:6d:21:a1:42:66:ad:e4:08:75:59:77: 74:a7:cd:35:3a:cb:d5:c9:e0:6b:05:3c:35:eb:78:68:ac:66: 86:c0:10:08:ee:bd:e9:16:37:e3:22:4d:ff:f5:66:46:84:22: b0:5e:1e:47:a3:8a:7f:af:c3:24:b4:f1:04:c9:e4:3d:43:1a: 3d:e7:08:f6:ab:78:e5:31:69:b0:7c:28:e6:e6:4d:05:7f:6a: 38:31:b6:89:67:9b:1b:53:bd:7d:e5:6b:72:24:62:92:bb:c2: d9:eb:99:1e:1c:d9:98:bd:f2:bb:33:4f:cd:e6:46:6d:2d:6c: a8:14:5c:b2:83:85:64:70:85:ea:28:8b:10:0a:93:e2:3e:23: be:72:e0:fc:86:84:01:d1:a5:d5:51:32:2e:1a:f6:7e:57:26: 9d:0b:bd:55 -----BEGIN CERTIFICATE----- MIIGzDCCBbSgAwIBAgIUAQ0Mn0MoWEflrNckg+cjC5ccFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBjZjk4NmEtMmVjOS00YWEyLTllNjEtNDNhMGVmYzRm MmVhMB4XDTI0MTExNjA5NDgxOVoXDTI3MDIxOTA5NDgxOVowPTE7MDkGA1UEAxMy ZTgyMzhlYTBkNWVkNTliODQ1MDcwNDBiODBmYjNiYTdmOWViYmRhNWZlMDVhZjE2 NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTWj3Wb6uzyebWe/r eF1lY5/pHwPbKuCDr9aZMnmY4aZBSgpvQGM7Qn21UlFKy06lKdZWtoSZKi48BHl6 Y1bSuA65HownAlKKPQ18txGNCEZCir54hN/8eHlmNuP+3PH31fNyqZrUk5BuAN14 pm0yLROtSBP0R/Qyw6TBbQUlaXCX7ChLFm9JoFtRdb5Do/G5Wss6joS9rEih6NK9 nbgNXhdGzAgX3/UeKnzj1w0bBLc6wkkAqMqipPC9wtAM2NAZQwcoQi/5xltBBuu6 LOsayTNenzb8pB110/5loTlouQBD3x1vUkuG8N71aF37HTTtHFqv+EHEJp5U9gTP tgfHAgMBAAGjggPQMIIDzDAdBgNVHQ4EFgQUWWQ0fK/JhMYhEjwvXk9CNzxggPow ggEjBggrBgEFBQcBCwSCARUwggERMFQGCCsGAQUFBzAFhkhyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MWZiNDNiNDAxOTI4ODQ2 MmMzODA0ZTYvMC8wgYAGCCsGAQUFBzAKhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU5MWZiNDNiNDAxOTI4ODQ2MmMzODA0ZTYv MC81OTY0MzQ3Q0FGQzk4NEM2MjExMjNDMkY1RTRGNDIzNzNDNjA4MEZBLm1mdDA2 BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLXJwcy5hcmluLm5ldC9ub3RpZmljYXRp b24ueG1sMA8GA1UdEwEB/wQFMAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81 ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3 Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2YwY2Y5ODZhLTJlYzktNGFhMi05ZTYx LTQzYTBlZmM0ZjJlYS9mMGNmOTg2YS0yZWM5LTRhYTItOWU2MS00M2EwZWZjNGYy ZWEuY3JsMB8GA1UdIwQYMBaAFFxjQtSti/CYBPQupU6Vkmk4F1M5MA4GA1UdDwEB /wQEAwIBBjCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6 Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1iZDdiLTRiMzMt OWE4OC01YjIyZDJhODMzN2QvZjBjZjk4NmEtMmVjOS00YWEyLTllNjEtNDNhMGVm YzRmMmVhLmNlcjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEABeALDAOBAIA AjAIAwYEJgL4ZQAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICa2owVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA Z7kEfsVsgTk+ro4y7LGVt7QKMK/CGs6fRpxIGxhswynwK3lY0Iy8hf30qnZTt8uQ +KSdlU9zuTy/cMPbFzRUcZgqULOKdCVFCLplXFhV3dMKtl5z0ytlGcB9fdu/D1Vy im0hoUJmreQIdVl3dKfNNTrL1cngawU8Net4aKxmhsAQCO696RY34yJN//VmRoQi sF4eR6OKf6/DJLTxBMnkPUMaPecI9qt45TFpsHwo5uZNBX9qODG2iWebG1O9feVr ciRikrvC2euZHhzZmL3yuzNPzeZGbS1sqBRcsoOFZHCF6iiLEAqT4j4jvnLg/IaE AdGl1VEyLhr2flcmnQu9VQ== -----END CERTIFICATE-----Generated at Thu Nov 21 17:29:59 2024 by rpki-client on console-fra.rpki-client.org