$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer File: 378928e8-c134-40aa-9858-3838053cbbe9.cer (raw, json) Hash identifier: 8vVosX+XH7qvddLoVR4asfs+F3vRdZREIypNRhKC/XQ= Subject key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858473D1E5F2512BC331A7C70BF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Sep 2024 00:45:27 +0000 Certificate not after: Mon 21 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 12261 AS: 400247 IP: 64.253.208.0/20 IP: 173.242.240.0/20 IP: 208.118.192.0/20 IP: 2606:900::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3d:1e:5f:25:12:bc:33:1a:7c:70:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 17 00:45:27 2024 GMT Not After : Dec 21 01:45:27 2026 GMT Subject: CN=378928e8-c134-40aa-9858-3838053cbbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:f7:ae:ff:3e:e4:fe:b9:6a:c3:38:2f:92: 24:09:a6:17:c3:94:96:5b:46:32:7c:3b:08:33:64: 27:4a:ce:cf:60:45:4f:9d:04:1f:ac:af:6f:22:9d: cc:11:d5:2a:88:fb:f6:b2:48:63:d6:75:7b:ff:35: 8f:37:45:88:6e:0f:64:a9:ac:8e:8f:b9:42:05:e2: 85:7e:ad:f5:d5:09:9b:13:b6:00:b7:02:12:00:9e: 3e:df:9b:e6:72:c3:36:93:db:e1:3f:bc:7a:16:4f: 1a:23:31:2b:ab:04:00:59:63:ae:e5:26:eb:7f:23: d1:b7:a0:c4:31:51:82:9c:22:5c:67:82:97:cc:e6: 51:36:b8:a2:f5:2b:b8:f5:f2:78:80:1e:11:40:a9: c9:2a:3d:68:ca:80:e4:f6:18:0c:e9:14:01:7d:38: 6c:54:04:0e:22:45:f9:9e:2f:13:79:87:ad:a1:38: de:79:84:c0:6c:8f:39:6b:ed:97:82:93:d2:26:19: ef:11:78:a4:29:a2:c7:8f:2c:42:fc:de:59:64:cb: d6:51:fb:a3:97:c5:aa:dd:39:48:e2:b3:84:21:69: a0:ac:a8:85:48:ba:1a:7c:db:57:e3:34:f8:a0:e3: ce:c1:33:52:48:69:c1:0e:0b:93:16:0c:16:37:19: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.253.208.0/20 173.242.240.0/20 208.118.192.0/20 IPv6: 2606:900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12261 400247 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:99:6e:f1:d2:a8:13:d6:a4:1c:ea:91:8c:d4:ac:ad:b8:ca: 6c:a1:4a:83:cb:be:6a:92:82:18:ec:5d:75:f3:0d:7d:69:9a: 8a:56:ef:8b:07:1d:b4:59:dc:cd:61:9d:bb:fa:ec:70:d0:3a: 4f:52:5d:33:1c:51:5a:72:72:5e:1c:a4:bc:8a:34:af:73:23: d5:a1:03:1a:9c:41:66:eb:a9:36:43:72:53:4c:0e:c5:41:d6: d3:7c:a0:d3:b4:12:d6:d4:f7:07:0b:8c:7c:d8:63:d7:83:0d: f5:ec:ab:97:5e:a3:aa:12:67:f6:a1:66:59:62:eb:fa:86:84: 90:22:87:75:a4:a1:2a:f9:db:e8:d4:2f:bb:66:16:8c:aa:ac: d3:8c:5c:ca:a9:15:81:63:32:e1:d8:60:cb:4b:06:87:ae:20: ec:77:5a:9c:1c:a4:ff:17:e8:40:6c:a3:01:28:ed:ff:e3:3d: 64:2e:35:0d:1d:46:ba:68:3e:57:31:d7:ba:70:a4:8c:cc:82: c4:f6:0e:5d:1d:d0:e8:5c:4d:37:99:b4:cc:4e:d8:5b:3b:f8: 8a:03:d6:f6:ff:bc:78:8a:51:92:22:48:b0:9e:b2:69:da:a5: 4b:1c:3e:91:05:7f:48:8f:82:44:2e:20:b9:74:c7:29:cd:ef: 67:78:3e:b6 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEc9Hl8lErwzGnxwv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkxNzAwNDUyN1oXDTI2MTIyMTAxNDUyN1owLzEtMCsGA1UEAxMk Mzc4OTI4ZTgtYzEzNC00MGFhLTk4NTgtMzgzODA1M2NiYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq933rv8+5P65asM4L5IkCaYXw5SWW0YyfDsI M2QnSs7PYEVPnQQfrK9vIp3MEdUqiPv2skhj1nV7/zWPN0WIbg9kqayOj7lCBeKF fq311QmbE7YAtwISAJ4+35vmcsM2k9vhP7x6Fk8aIzErqwQAWWOu5SbrfyPRt6DE MVGCnCJcZ4KXzOZRNrii9Su49fJ4gB4RQKnJKj1oyoDk9hgM6RQBfThsVAQOIkX5 ni8TeYetoTjeeYTAbI85a+2XgpPSJhnvEXikKaLHjyxC/N5ZZMvWUfujl8Wq3TlI 4rOEIWmgrKiFSLoafNtX4zT4oOPOwTNSSGnBDguTFgwWNxkLOwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFAWE5043m0pehQvkHJNhuGQmFRiRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z Nzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUzY2JiZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzM3ODkyOGU4LWMxMzQtNDBhYS05 ODU4LTM4MzgwNTNjYmJlOS8zNzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUz Y2JiZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARA/dADBASt8vADBATQdsAwDQQCAAIwBwMFACYG CQAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICL+UCAwYbdzBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASmW7x 0qgT1qQc6pGM1KytuMpsoUqDy75qkoIY7F118w19aZqKVu+LBx20WdzNYZ27+uxw 0DpPUl0zHFFacnJeHKS8ijSvcyPVoQManEFm66k2Q3JTTA7FQdbTfKDTtBLW1PcH C4x82GPXgw317KuXXqOqEmf2oWZZYuv6hoSQIod1pKEq+dvo1C+7ZhaMqqzTjFzK qRWBYzLh2GDLSwaHriDsd1qcHKT/F+hAbKMBKO3/4z1kLjUNHUa6aD5XMde6cKSM zILE9g5dHdDoXE03mbTMTthbO/iKA9b2/7x4ilGSIkiwnrJp2qVLHD6RBX9Ij4JE LiC5dMcpze9neD62 -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:16 2024 by rpki-client on console-fra.rpki-client.org