$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer File: 2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer (raw, json) Hash identifier: rQRgKP7oI/BlEKR0hH8CzBkLi0vzAa98FPazTUTAa3E= Subject key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858473FE90D0A1CAE709B949A75C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Sep 2024 00:45:26 +0000 Certificate not after: Tue 22 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 30422 AS: 40542 AS: 63203 IP: 149.112.4.0/24 IP: 149.112.17.0/24 IP: 149.112.70.0/23 IP: 206.51.7.0/24 IP: 2001:504:1b::/48 IP: 2001:504:100::/48 IP: 2001:504:110::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:e9:0d:0a:1c:ae:70:9b:94:9a:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 18 00:45:26 2024 GMT Not After : Dec 22 01:45:26 2026 GMT Subject: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:04:94:04:97:41:02:7c:7b:ed:f6:6a:46: 48:f2:27:a0:e6:72:bb:92:5f:27:ec:c1:0a:97:28: b2:36:0f:6e:ba:b4:8b:c4:1e:1a:61:5c:62:cc:67: c4:a3:38:7b:fd:e8:a4:d2:ba:2e:7e:60:7f:fd:e2: ac:f6:0f:80:27:12:04:1b:e1:be:1d:4f:bd:5c:50: 88:cc:47:2f:a6:c3:a9:4f:73:90:cc:f2:35:3d:b2: 60:41:53:7f:c2:f3:a4:0c:62:0a:9a:4d:07:09:62: 27:8b:8e:99:d3:25:b5:2a:2d:2e:c4:c1:4a:67:f5: 51:25:6e:85:07:6a:db:2a:b9:01:f1:eb:ef:db:52: 7b:43:3c:d1:f2:a0:af:f6:7a:fe:b0:a0:f9:66:27: db:72:99:54:a8:aa:97:6b:dc:14:07:66:aa:82:40: 0c:47:a7:55:c2:5d:c6:05:60:d5:f6:51:c8:86:aa: dd:d2:55:31:6b:5b:59:40:f2:7e:1d:c0:6e:cb:34: bd:7c:dd:82:82:09:80:28:d8:ec:8f:38:90:3b:a2: ab:08:93:9d:f5:3f:67:c5:83:8b:83:61:65:7d:73: 94:5f:b3:a6:f3:cf:33:87:57:e3:2c:b2:53:d6:d3: 2f:df:6f:ef:4a:18:96:3b:39:90:76:73:60:93:49: cc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 149.112.4.0/24 149.112.17.0/24 149.112.70.0/23 206.51.7.0/24 IPv6: 2001:504:1b::/48 2001:504:100::/48 2001:504:110::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30422 40542 63203 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:c8:20:63:26:fa:37:6c:a4:59:38:65:23:21:4a:f0:09:60: 59:a0:86:75:c9:9a:42:7f:41:92:40:da:a3:ad:48:34:1e:74: 31:03:26:5d:30:7e:50:eb:9c:1c:47:c2:6c:e6:dc:21:20:b9: 6b:a2:c3:77:ca:e6:10:b9:fb:b5:77:84:4e:e7:ba:08:20:15: 49:4f:99:b5:4e:32:83:4f:f5:36:8f:45:d1:2d:40:33:e6:29: ff:8a:9a:1e:0a:7b:59:c7:d2:36:94:9b:36:32:d4:8e:ed:dd: a0:44:3a:ca:3a:c5:7f:51:8c:1a:51:0e:cb:e3:49:e3:e8:96: 30:50:07:c1:5c:de:da:4d:3d:a2:52:36:0e:b5:35:65:f1:d5: c4:8b:a4:9d:49:3a:f6:2c:f6:94:4b:80:e3:e4:19:e4:78:41: 9d:74:dd:04:77:e9:5c:0e:48:dc:ad:8a:a7:9f:d4:a8:46:a0: 8d:78:21:40:72:cb:53:09:3f:0b:36:79:10:dc:23:e6:7c:8a: 08:9f:3f:95:a9:3f:6b:2b:83:cd:f6:53:d5:1e:ed:d3:46:0a: dc:7e:e9:62:9c:de:b0:12:e5:37:48:b1:09:a3:fc:b6:ee:fa: b2:dd:53:7b:39:0e:0d:47:86:92:4b:ed:3e:34:0e:e0:b1:34: da:6f:73:43 -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWEc/6Q0KHK5wm5SadcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkxODAwNDUyNloXDTI2MTIyMjAxNDUyNlowLzEtMCsGA1UEAxMk MmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4YzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv4ElASXQQJ8e+32akZI8ieg5nK7kl8n7MEK lyiyNg9uurSLxB4aYVxizGfEozh7/eik0roufmB//eKs9g+AJxIEG+G+HU+9XFCI zEcvpsOpT3OQzPI1PbJgQVN/wvOkDGIKmk0HCWIni46Z0yW1Ki0uxMFKZ/VRJW6F B2rbKrkB8evv21J7QzzR8qCv9nr+sKD5ZifbcplUqKqXa9wUB2aqgkAMR6dVwl3G BWDV9lHIhqrd0lUxa1tZQPJ+HcBuyzS9fN2CggmAKNjsjziQO6KrCJOd9T9nxYOL g2FlfXOUX7Om888zh1fjLLJT1tMv32/vShiWOzmQdnNgk0nMLwIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFOfDTZITvZDevphTtnVhl4ZbJ0ZNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y YTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzJhNjExZWYxLTE5NWUtNDk1OC1h NmFjLWY0YTFkMmNkOGM4Zi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJj ZDhjOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMB4EAgABMBgDBACVcAQDBACVcBEDBAGVcEYDBADOMwcwIQQCAAIw GwMHACABBQQAGwMHACABBQQBAAMHACABBQQBEDAjBggrBgEFBQcBCAEB/wQUMBKg EDAOAgJ21gIDAJ5eAgMA9uMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApMggYyb6N2ykWThlIyFK8AlgWaCG dcmaQn9BkkDao61INB50MQMmXTB+UOucHEfCbObcISC5a6LDd8rmELn7tXeETue6 CCAVSU+ZtU4yg0/1No9F0S1AM+Yp/4qaHgp7WcfSNpSbNjLUju3doEQ6yjrFf1GM GlEOy+NJ4+iWMFAHwVze2k09olI2DrU1ZfHVxIuknUk69iz2lEuA4+QZ5HhBnXTd BHfpXA5I3K2Kp5/UqEagjXghQHLLUwk/CzZ5ENwj5nyKCJ8/lak/ayuDzfZT1R7t 00YK3H7pYpzesBLlN0ixCaP8tu76st1TezkODUeGkkvtPjQO4LE02m9zQw== -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:41 2024 by rpki-client on console-ams.rpki-client.org