$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2.cer File: 268a5abb-c59d-4272-ae23-caa16eb3b4d2.cer (raw, json) Hash identifier: Eym+AASbKfP3g057Ag9TSe+2SDZUiQnxvshB0/LhgrU= Subject key identifier: 5B:8F:4E:BB:E0:A4:40:79:62:87:93:BD:35:44:F8:57:64:93:27:22 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858479ED44EA713D927BB70BD66C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/268a5abb-c59d-4272-ae23-caa16eb3b4d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Oct 2024 00:45:26 +0000 Certificate not after: Mon 25 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 398317 IP: 2607:5b40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9e:d4:4e:a7:13:d9:27:bb:70:bd:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 22 00:45:26 2024 GMT Not After : Jan 25 01:45:26 2027 GMT Subject: CN=268a5abb-c59d-4272-ae23-caa16eb3b4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:77:75:f5:82:ca:1c:51:19:3a:63:4c:fe:4e: 7e:eb:f3:86:95:10:bf:a1:e9:f2:83:ad:c3:54:8b: 1f:40:23:dc:17:7f:21:a7:07:32:19:b3:26:6b:ca: 18:4d:1d:e1:fd:91:06:90:a2:a1:1b:89:93:1c:6f: bc:ce:ab:50:d0:fa:24:cb:9f:2a:a4:68:3a:c5:5d: 70:53:a8:8f:77:25:b9:38:03:b5:c4:f4:6c:97:7a: 87:30:47:f7:f0:9c:bd:1a:eb:2e:6a:e6:41:77:93: 69:13:e4:8a:8d:16:5a:11:71:52:5d:96:3c:d2:b6: 91:b1:7c:37:fa:1f:6c:ef:67:e6:c9:cf:b1:86:0a: 3b:f6:5c:04:37:68:b9:58:d3:b4:fa:42:88:68:cd: c4:4a:b4:62:94:1d:29:29:d3:e5:28:fc:1b:5c:cb: e7:98:23:0f:4a:0d:f8:ce:83:03:bf:e6:1b:ae:7c: 53:30:fa:b8:34:ce:cb:33:6a:72:60:0f:13:91:4a: 68:8b:13:e0:0b:51:5f:48:ec:52:de:22:e8:70:69: 50:59:1f:d1:14:80:09:3c:3f:dc:a5:85:17:28:b8: 1c:b6:9c:ca:70:e4:69:e6:23:92:da:8e:f2:1c:59: 25:dd:bd:ce:c8:ad:aa:92:fc:02:28:41:69:bc:4f: 4e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8F:4E:BB:E0:A4:40:79:62:87:93:BD:35:44:F8:57:64:93:27:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/268a5abb-c59d-4272-ae23-caa16eb3b4d2/268a5abb-c59d-4272-ae23-caa16eb3b4d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2607:5b40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398317 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:27:f8:b4:15:f8:ee:14:f4:9b:d3:3c:36:4b:7d:5e:e4:61: 3f:30:98:3e:af:6d:b0:84:f3:88:6a:eb:ac:84:35:17:f0:1f: be:11:7e:46:bd:33:f5:a4:27:00:6a:dd:b4:a5:32:ef:ec:74: d0:46:04:e7:4a:fc:2e:7d:a9:9e:f3:06:0a:9d:06:5b:80:e4: 9f:0e:35:a1:dc:e1:1d:bc:1a:13:07:10:8c:01:f2:d3:0c:86: 47:16:d4:ac:97:ac:27:b9:cd:68:2e:76:69:df:f5:8d:74:99: d4:81:17:eb:29:70:ac:64:fc:97:25:4f:99:0b:9f:f0:a8:9d: 83:94:82:16:8f:0b:ac:de:d0:d2:82:d1:58:17:a4:a9:35:9d: 82:f5:61:bc:ac:bd:fe:fb:08:8f:bc:53:ba:ee:2e:76:20:5e: c3:48:fc:6d:50:58:c9:ca:27:1b:e9:9d:2f:66:f3:35:e9:f3: 69:f8:ed:03:00:52:4b:08:cd:c2:3f:aa:db:4e:18:40:26:14: 8c:e0:e0:58:17:cf:d1:02:da:15:0b:34:71:ce:ed:31:9a:13: 7d:ab:87:85:1b:06:79:bf:2f:54:86:37:4c:6c:38:0b:5c:d2: fe:91:3b:e3:91:71:f2:c3:c1:f8:88:73:66:7a:bb:c1:56:e5: 54:fa:80:ea -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEee1E6nE9knu3C9ZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAyMjAwNDUyNloXDTI3MDEyNTAxNDUyNlowLzEtMCsGA1UEAxMk MjY4YTVhYmItYzU5ZC00MjcyLWFlMjMtY2FhMTZlYjNiNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHd19YLKHFEZOmNM/k5+6/OGlRC/oenyg63D VIsfQCPcF38hpwcyGbMma8oYTR3h/ZEGkKKhG4mTHG+8zqtQ0Poky58qpGg6xV1w U6iPdyW5OAO1xPRsl3qHMEf38Jy9GusuauZBd5NpE+SKjRZaEXFSXZY80raRsXw3 +h9s72fmyc+xhgo79lwEN2i5WNO0+kKIaM3ESrRilB0pKdPlKPwbXMvnmCMPSg34 zoMDv+YbrnxTMPq4NM7LM2pyYA8TkUpoixPgC1FfSOxS3iLocGlQWR/RFIAJPD/c pYUXKLgctpzKcORp5iOS2o7yHFkl3b3OyK2qkvwCKEFpvE9OswIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFFuPTrvgpEB5YoeTvTVE+FdkkyciMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y NjhhNWFiYi1jNTlkLTQyNzItYWUyMy1jYWExNmViM2I0ZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzI2OGE1YWJiLWM1OWQtNDI3Mi1h ZTIzLWNhYTE2ZWIzYjRkMi8yNjhhNWFiYi1jNTlkLTQyNzItYWUyMy1jYWExNmVi M2I0ZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB1tAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYT7TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCgJ/i0FfjuFPSb0zw2S31e5GE/MJg+r22whPOIauushDUX 8B++EX5GvTP1pCcAat20pTLv7HTQRgTnSvwufame8wYKnQZbgOSfDjWh3OEdvBoT BxCMAfLTDIZHFtSsl6wnuc1oLnZp3/WNdJnUgRfrKXCsZPyXJU+ZC5/wqJ2DlIIW jwus3tDSgtFYF6SpNZ2C9WG8rL3++wiPvFO67i52IF7DSPxtUFjJyicb6Z0vZvM1 6fNp+O0DAFJLCM3CP6rbThhAJhSM4OBYF8/RAtoVCzRxzu0xmhN9q4eFGwZ5vy9U hjdMbDgLXNL+kTvjkXHyw8H4iHNmervBVuVU+oDq -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:41 2024 by rpki-client on console-ams.rpki-client.org