$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer File: 6dabfd0c-f982-470b-a430-b95c3c76868d.cer (raw, json) Hash identifier: +jxpSFyHVSDT+OvkNbI17EVdyeSuLgIqfVny+fuc4p8= Subject key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847B25F17D117717D780D326480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Oct 2024 00:45:26 +0000 Certificate not after: Mon 01 Feb 2027 01:45:26 +0000 Subordinate resources: AS: 20101 IP: 199.192.180.0/22 IP: 216.18.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b2:5f:17:d1:17:71:7d:78:0d:32:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 29 00:45:26 2024 GMT Not After : Feb 1 01:45:26 2027 GMT Subject: CN=6dabfd0c-f982-470b-a430-b95c3c76868d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a1:8e:7d:b3:d8:34:ca:e5:03:7d:43:df:b2: 8a:11:0b:2c:d1:3c:2c:47:83:7e:13:05:62:97:d0: 0b:4d:5c:1c:88:a9:8e:82:e5:18:eb:70:19:1f:f3: 09:a4:46:9a:11:5e:da:88:1e:e9:fc:f0:23:4b:8c: b9:80:ef:35:d5:69:83:d1:db:01:02:80:60:e7:1a: 4a:a6:48:54:d7:19:b7:bb:92:be:b7:6f:2a:dc:1c: ca:07:81:58:d3:5c:63:f2:09:5a:63:a2:3b:08:1e: e3:91:2e:51:56:03:a4:63:a3:18:d9:87:2d:57:80: 9f:5c:84:9d:b4:64:db:2f:2a:ef:ed:03:b3:35:4a: e1:ab:9c:b6:90:0f:93:6e:3d:97:86:af:2a:5f:61: ae:96:96:14:10:80:0c:b9:0d:23:a5:98:9e:be:04: 4c:79:3c:a0:37:a5:7e:f1:50:1f:dd:99:11:9e:3d: 64:06:b2:d0:22:85:5e:57:27:0a:14:7e:d1:ed:04: 5a:f4:fb:4c:4a:8b:28:1a:9d:43:a1:48:ce:ec:d6: e4:24:28:97:de:26:f4:4f:62:71:8e:7c:48:be:a9: cf:42:a7:bd:cd:2f:0b:2f:a8:5c:58:ea:af:91:c8: 2f:eb:f9:92:e4:fe:c3:f6:85:f1:39:c4:82:00:aa: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.192.180.0/22 216.18.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20101 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:33:6f:fd:5b:6d:c4:85:e3:16:f8:c6:68:65:1d:fd:eb:64: 17:cb:45:dc:9a:99:0a:4a:50:9f:70:83:90:42:17:ea:30:66: 84:93:ae:0d:24:29:d7:49:d2:f6:bb:43:94:00:40:44:f7:d3: 09:11:1e:03:4a:25:dc:ad:e0:d6:7a:09:f2:5b:3c:49:d1:45: 5a:5d:bc:2c:7f:0b:10:98:84:54:dc:57:a0:76:f9:6e:09:d3: dd:1b:d5:40:2e:65:ff:fd:49:4d:e6:3f:98:f5:65:85:a6:b6: 3a:8b:ad:d2:ff:7a:bb:53:df:59:b8:52:fa:1f:c3:5b:5a:3a: 3f:be:75:a5:2c:13:ba:ef:da:c0:b9:21:64:96:44:cb:79:44: 4e:37:9c:ae:d0:3d:d1:7f:23:86:d7:5c:3e:69:e7:d8:ed:06: f9:bc:7c:83:9a:3e:53:09:02:49:2f:8d:14:b3:e6:e4:46:32: e3:23:81:23:a5:fc:0c:b9:b0:40:8b:9d:ba:16:be:09:b4:48: 06:8d:4e:2b:82:3f:66:73:a2:d5:ad:66:94:a5:ef:27:33:b0: 96:60:96:e2:76:1a:90:68:d9:89:01:7e:d9:94:35:f7:93:cf: 70:e1:5f:c3:29:64:eb:20:c4:3e:4b:63:d4:ba:57:cf:40:4e: e7:a1:2e:26 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEeyXxfRF3F9eA0yZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAyOTAwNDUyNloXDTI3MDIwMTAxNDUyNlowLzEtMCsGA1UEAxMk NmRhYmZkMGMtZjk4Mi00NzBiLWE0MzAtYjk1YzNjNzY4NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKGOfbPYNMrlA31D37KKEQss0TwsR4N+EwVi l9ALTVwciKmOguUY63AZH/MJpEaaEV7aiB7p/PAjS4y5gO811WmD0dsBAoBg5xpK pkhU1xm3u5K+t28q3BzKB4FY01xj8glaY6I7CB7jkS5RVgOkY6MY2YctV4CfXISd tGTbLyrv7QOzNUrhq5y2kA+Tbj2Xhq8qX2GulpYUEIAMuQ0jpZievgRMeTygN6V+ 8VAf3ZkRnj1kBrLQIoVeVycKFH7R7QRa9PtMSosoGp1DoUjO7NbkJCiX3ib0T2Jx jnxIvqnPQqe9zS8LL6hcWOqvkcgv6/mS5P7D9oXxOcSCAKoITQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFHD8fW+1PaeA0pXTS5k5lsmKY9ZuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82 ZGFiZmQwYy1mOTgyLTQ3MGItYTQzMC1iOTVjM2M3Njg2OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzZkYWJmZDBjLWY5ODItNDcwYi1h NDMwLWI5NWMzYzc2ODY4ZC82ZGFiZmQwYy1mOTgyLTQ3MGItYTQzMC1iOTVjM2M3 Njg2OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHwLQDBATYEvAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICToUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAETNv/VttxIXjFvjGaGUd/etkF8tF3JqZCkpQn3CD kEIX6jBmhJOuDSQp10nS9rtDlABARPfTCREeA0ol3K3g1noJ8ls8SdFFWl28LH8L EJiEVNxXoHb5bgnT3RvVQC5l//1JTeY/mPVlhaa2Oout0v96u1PfWbhS+h/DW1o6 P751pSwTuu/awLkhZJZEy3lETjecrtA90X8jhtdcPmnn2O0G+bx8g5o+UwkCSS+N FLPm5EYy4yOBI6X8DLmwQIuduha+CbRIBo1OK4I/ZnOi1a1mlKXvJzOwlmCW4nYa kGjZiQF+2ZQ195PPcOFfwylk6yDEPktj1LpXz0BO56EuJg== -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:52 2024 by rpki-client on console-ams.rpki-client.org