$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer File: 19e347cf-c0cb-49a3-b025-5d36006aab3e.cer (raw, json) Hash identifier: bZvX8DDS6yaz4hQcXSwa2tJp6VB5COOUmv2pKEBe8k8= Subject key identifier: A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858473A53AFC85B06133FE75BFB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Sep 2024 00:45:27 +0000 Certificate not after: Sun 20 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 398537 IP: 198.206.191.0/24 IP: 204.108.164.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:53:af:c8:5b:06:13:3f:e7:5b:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 16 00:45:27 2024 GMT Not After : Dec 20 01:45:27 2026 GMT Subject: CN=19e347cf-c0cb-49a3-b025-5d36006aab3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:ac:a6:fd:17:70:3b:f8:1e:14:b2:b1:21: 50:12:7b:cf:3e:83:7d:d2:28:b9:99:23:c4:99:38: 7c:71:ce:ef:4c:9f:aa:5e:bf:e6:87:a3:5e:9b:bb: 1f:78:e7:11:73:af:29:63:96:9d:2b:ce:c3:c9:08: d6:ad:8e:1a:80:e3:aa:2a:8d:35:ae:3e:d8:23:6f: a4:8d:03:6e:48:09:32:b4:4b:6f:8b:96:9e:b6:0e: 3c:17:a4:ec:f8:ad:fa:ba:86:78:05:cb:73:d0:f6: 2a:6d:9c:bb:4a:99:65:22:af:9a:31:a7:91:c6:f1: ec:ab:29:d4:8c:aa:3c:05:a7:f5:86:b8:1b:b5:3c: 0e:2c:13:49:c1:77:ae:c1:fc:2b:63:8a:4a:9d:64: d0:0e:03:ed:62:5d:65:c0:c4:34:32:7d:ec:b5:44: 80:3f:a2:2d:e2:bb:9e:6d:67:b0:7d:e5:41:74:5b: f6:6a:00:dc:20:93:f2:38:af:7c:f9:f3:7e:f8:37: 8b:d5:04:a8:ed:3e:42:34:1c:5b:f6:18:20:fc:60: b1:7b:51:23:57:5c:5a:33:35:a5:3a:51:7f:2f:4f: 37:cd:f0:1d:6c:6b:48:a3:72:90:61:a0:a4:28:03: df:c1:03:52:ff:9e:f9:8f:46:74:cb:22:27:1e:a2: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 198.206.191.0/24 204.108.164.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398537 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b2:e8:e5:1e:66:06:bd:22:46:56:fb:a4:6b:0e:da:80:70: f6:a6:f0:7a:84:da:d8:68:f7:af:08:b5:d0:8d:c7:6c:58:6a: 85:9d:7d:91:40:02:af:c1:8a:82:10:24:53:8e:ea:8d:f1:f5: e6:f8:85:ee:68:25:17:5b:6b:d6:42:2f:3d:22:df:cc:21:49: 8c:6f:51:99:9a:8a:34:7a:7c:63:c7:0d:37:a8:8e:f4:46:f0: 93:df:63:ee:91:80:92:da:61:5f:0f:6e:c0:21:1a:2b:7e:f8: 4d:9c:0e:16:dc:0b:f5:b1:d6:8e:0c:aa:aa:54:c0:54:a4:18: 88:c3:0d:d0:fa:96:64:97:18:3b:d4:7f:20:f4:88:36:3d:95: e3:05:43:7e:c6:a8:88:15:6c:05:75:75:f6:2f:95:aa:2d:a1: a8:33:e8:5b:3c:b4:b1:f8:6d:13:42:62:af:64:7e:6d:58:94: f7:34:13:96:de:cf:8b:ff:58:8c:82:f6:14:3d:b1:cc:47:cb: 86:b9:27:e7:26:3b:cf:2d:74:9d:17:7e:17:8b:6e:2d:78:63: c5:0f:0b:74:55:e8:22:2c:2e:83:c8:80:2a:0a:c8:e9:1e:be: 55:17:0e:19:f2:ae:c5:b2:17:c1:d6:d6:6e:10:41:d8:1c:e9: d5:8f:f5:85 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEc6U6/IWwYTP+db+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkxNjAwNDUyN1oXDTI2MTIyMDAxNDUyN1owLzEtMCsGA1UEAxMk MTllMzQ3Y2YtYzBjYi00OWEzLWIwMjUtNWQzNjAwNmFhYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+qspv0XcDv4HhSysSFQEnvPPoN90ii5mSPE mTh8cc7vTJ+qXr/mh6Nem7sfeOcRc68pY5adK87DyQjWrY4agOOqKo01rj7YI2+k jQNuSAkytEtvi5aetg48F6Ts+K36uoZ4Bctz0PYqbZy7SpllIq+aMaeRxvHsqynU jKo8Baf1hrgbtTwOLBNJwXeuwfwrY4pKnWTQDgPtYl1lwMQ0Mn3stUSAP6It4rue bWewfeVBdFv2agDcIJPyOK98+fN++DeL1QSo7T5CNBxb9hgg/GCxe1EjV1xaMzWl OlF/L083zfAdbGtIo3KQYaCkKAPfwQNS/575j0Z0yyInHqI4OwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFKNhe00c2meBmxfwoU7R1bOnNtm1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x OWUzNDdjZi1jMGNiLTQ5YTMtYjAyNS01ZDM2MDA2YWFiM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzE5ZTM0N2NmLWMwY2ItNDlhMy1i MDI1LTVkMzYwMDZhYWIzZS8xOWUzNDdjZi1jMGNiLTQ5YTMtYjAyNS01ZDM2MDA2 YWFiM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGzr8DBAHMbKQwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhTJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADCy6OUeZga9IkZW+6RrDtqAcPam8HqE2tho968I tdCNx2xYaoWdfZFAAq/BioIQJFOO6o3x9eb4he5oJRdba9ZCLz0i38whSYxvUZma ijR6fGPHDTeojvRG8JPfY+6RgJLaYV8PbsAhGit++E2cDhbcC/Wx1o4MqqpUwFSk GIjDDdD6lmSXGDvUfyD0iDY9leMFQ37GqIgVbAV1dfYvlaotoagz6Fs8tLH4bRNC Yq9kfm1YlPc0E5bez4v/WIyC9hQ9scxHy4a5J+cmO88tdJ0XfheLbi14Y8UPC3RV 6CIsLoPIgCoKyOkevlUXDhnyrsWyF8HW1m4QQdgc6dWP9YU= -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:38 2024 by rpki-client on console-ams.rpki-client.org