$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer File: 344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer (raw, json) Hash identifier: dBShSoyaatoER+3x2C+YP0a2cCi5ioF6hH6TlkvhTrg= Subject key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847B7F476B3C6C82B9B88FDAC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 31 Oct 2024 00:45:26 +0000 Certificate not after: Wed 03 Feb 2027 01:45:26 +0000 Subordinate resources: AS: 55076 IP: 140.235.92.0/22 IP: 198.37.136.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b7:f4:76:b3:c6:c8:2b:9b:88:fd:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 31 00:45:26 2024 GMT Not After : Feb 3 01:45:26 2027 GMT Subject: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:81:6e:78:17:6d:53:81:4b:fa:e9:8f:34: 0d:79:6e:7d:c4:ab:fc:4b:8e:3c:33:b4:37:55:82: 3e:02:f4:ff:59:82:56:ba:33:1c:8c:5e:b0:a5:10: 6a:a2:a5:27:6a:cb:c9:08:d7:17:37:45:f5:db:74: bc:9a:90:cf:ff:4f:31:6d:6b:ca:c9:2a:37:a1:90: f7:d0:40:bc:51:a0:28:66:5d:fb:b0:00:6e:b4:ec: 55:52:31:68:5a:42:3e:96:de:7d:46:bd:08:61:75: fd:a5:77:8e:e4:0d:f1:8f:98:7a:14:17:05:ea:c1: 51:02:49:74:1b:ca:1a:8d:de:b6:c3:45:2c:4b:25: a3:6a:8a:87:e3:91:5c:8b:c3:4d:c4:cc:ec:4c:fb: 35:f9:94:e8:55:99:24:4b:da:45:15:22:23:4e:25: 3c:f7:ab:62:1e:63:03:6d:31:40:ac:ed:6d:5d:ac: 89:c4:95:66:80:5b:f3:42:ac:63:a1:c2:bc:0a:ba: 41:54:cc:67:02:db:b5:af:38:37:3b:17:40:b4:a3: 61:8d:73:0a:d8:49:9c:65:f1:e9:60:7c:99:09:c3: c1:0d:4e:13:c4:77:60:0e:2c:bc:4b:87:c5:99:49: a4:2f:a5:82:9b:4a:b3:26:90:b8:90:cb:74:e2:98: 24:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 140.235.92.0/22 198.37.136.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55076 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b4:76:62:28:c3:2b:b1:f0:06:75:ec:5b:37:42:65:d3:c1: 7e:bf:ca:3e:56:68:17:11:dd:82:89:9d:6f:dc:f4:d3:d7:ea: a6:45:a6:bf:e6:da:20:b5:f9:d8:9c:bf:a4:a6:f0:4d:34:8d: ee:11:82:28:26:22:2b:6d:45:f9:b9:bf:cc:be:43:03:39:f7: df:1d:f8:3b:f3:07:54:bd:2a:17:15:0b:67:7b:9e:59:1e:aa: 43:08:12:7c:88:13:03:94:90:fe:7b:89:b4:9e:8d:0e:af:e2: e5:7c:9e:ff:b4:35:b5:28:91:dc:09:19:b5:16:18:eb:38:15: 83:93:d7:88:7f:be:1b:1a:70:bd:75:b4:bb:25:d6:4f:b3:1c: 88:99:a8:21:0a:7c:a9:b2:cf:a0:9c:7d:ab:c9:42:d0:d9:e5: 8a:c0:59:80:07:f1:fb:07:b2:71:53:a3:f1:53:65:37:44:53: 78:ef:be:13:f8:ea:4f:9e:b9:a5:56:13:7d:d5:24:d1:f2:44: c1:ce:b1:fc:a6:23:19:56:18:44:7b:5c:39:b8:1a:39:dc:ad: 82:56:d4:ad:18:08:01:83:a9:95:03:75:19:d7:61:f1:dc:47: 10:b1:71:12:25:68:ad:ef:15:8d:d9:41:8e:53:99:6d:c9:56: 69:fb:c0:30 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEe39Hazxsgrm4j9rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAzMTAwNDUyNloXDTI3MDIwMzAxNDUyNlowLzEtMCsGA1UEAxMk MzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPWBbngXbVOBS/rpjzQNeW59xKv8S448M7Q3 VYI+AvT/WYJWujMcjF6wpRBqoqUnasvJCNcXN0X123S8mpDP/08xbWvKySo3oZD3 0EC8UaAoZl37sAButOxVUjFoWkI+lt59Rr0IYXX9pXeO5A3xj5h6FBcF6sFRAkl0 G8oajd62w0UsSyWjaoqH45Fci8NNxMzsTPs1+ZToVZkkS9pFFSIjTiU896tiHmMD bTFArO1tXayJxJVmgFvzQqxjocK8CrpBVMxnAtu1rzg3OxdAtKNhjXMK2EmcZfHp YHyZCcPBDU4TxHdgDiy8S4fFmUmkL6WCm0qzJpC4kMt04pgkXQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFNJFxVXRIgjqLJ4WlNdpJ9/WJz5QMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z NDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzM0NGM2NzA0LWIzYmItNGVkOC1i NmY3LWI2NTZlMmZiOWU3ZS8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJm YjllN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAKM61wDBAPGJYgwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANckMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACe0dmIowyux8AZ17Fs3QmXTwX6/yj5WaBcR3YKJ nW/c9NPX6qZFpr/m2iC1+dicv6Sm8E00je4RgigmIittRfm5v8y+QwM5998d+Dvz B1S9KhcVC2d7nlkeqkMIEnyIEwOUkP57ibSejQ6v4uV8nv+0NbUokdwJGbUWGOs4 FYOT14h/vhsacL11tLsl1k+zHIiZqCEKfKmyz6CcfavJQtDZ5YrAWYAH8fsHsnFT o/FTZTdEU3jvvhP46k+euaVWE33VJNHyRMHOsfymIxlWGER7XDm4GjncrYJW1K0Y CAGDqZUDdRnXYfHcRxCxcRIlaK3vFY3ZQY5TmW3JVmn7wDA= -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:42 2024 by rpki-client on console-ams.rpki-client.org