$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer File: 823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer (raw, json) Hash identifier: 4237MPVtdx5WLKEKRLJq6npe6jOro1MvlrkBidrFZhY= Subject key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847176E1FFDD953E60B3B51FF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Sep 2024 12:45:26 +0000 Certificate not after: Mon 07 Dec 2026 13:45:26 +0000 Subordinate resources: AS: 984 AS: 62816 IP: 2606:fb40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:17:6e:1f:fd:d9:53:e6:0b:3b:51:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 3 12:45:26 2024 GMT Not After : Dec 7 13:45:26 2026 GMT Subject: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:8b:cc:eb:04:cd:d8:4d:b9:f7:96:e7:a6: b2:5f:21:9b:11:c7:19:bb:a2:1e:4d:dc:7d:34:18: 82:1c:f4:c5:84:7e:0b:46:c3:23:25:b2:e6:15:06: a9:c1:f9:51:75:59:a7:db:f0:dd:81:59:56:80:57: 7a:f6:16:7e:73:dd:40:74:b9:63:07:48:25:4a:40: 1d:f4:f2:dd:93:7b:ca:2a:82:c9:d8:4e:43:ca:08: 13:26:a0:80:00:7c:0b:72:d7:9c:2f:60:65:90:33: 52:21:dc:1e:23:dc:0e:ca:a4:9c:64:59:db:a7:8c: b2:d8:72:04:f5:57:55:8c:b2:bd:82:a6:6e:3b:48: 67:96:19:a4:5f:a3:5e:19:9a:d1:fb:89:60:41:a8: fc:4f:1b:72:20:a7:7e:c9:5e:ed:45:6e:9b:03:db: 4f:99:65:97:00:68:0d:71:d6:6c:f4:d7:c9:9b:88: d0:04:a3:4e:e0:cd:90:f3:83:42:24:74:e2:32:7a: b9:6f:b9:ac:82:e1:19:c9:27:33:d4:06:40:5b:83: ea:a3:8e:c3:f1:1e:db:bd:52:9f:4b:ad:31:c9:20: 0c:11:eb:c0:b9:8f:a8:62:18:bd:fd:fd:df:db:57: 13:86:39:c6:f9:1f:2f:6a:88:42:5a:f3:29:82:2c: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2606:fb40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 984 62816 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c5:7c:28:47:1d:f4:fe:b0:fc:e6:df:ac:03:4d:9a:98:ec: 47:1c:fc:24:2e:0a:fe:d4:2f:42:dc:c9:3b:cc:90:e5:02:20: 43:56:ac:3a:6f:78:70:c1:9d:46:14:46:59:c7:f7:e7:bd:0e: 64:7a:39:ae:04:46:99:ae:a6:f7:75:4b:92:73:6e:e6:2c:d8: d4:bd:36:4c:e5:ed:8d:39:ef:88:05:35:d3:1f:2b:fa:09:48: d6:37:d9:ac:03:9d:fa:ee:f9:f0:65:d8:99:e4:b2:1b:b2:73: 17:76:6c:c6:45:d8:93:0a:58:c7:68:7c:a4:ae:14:2b:11:6d: 5f:e8:47:67:68:6e:48:23:18:f5:63:0b:09:b6:c9:a9:5a:25: 03:54:c7:6f:1f:99:19:07:69:8b:8b:26:a1:43:83:aa:85:bf: 19:c7:df:c3:ce:88:22:ab:27:a4:80:9e:2a:3a:01:84:f4:e8: 3a:da:fc:87:6d:5d:cc:ca:f2:ae:7a:e7:e3:f8:66:5c:9d:4a: 12:6d:1e:53:1f:c9:e7:f4:32:5f:7e:31:94:79:1e:d7:b2:c5: fa:34:85:d4:1b:d8:f8:e8:15:10:03:1e:c4:5d:53:ef:c3:92: 22:d8:e5:f9:6e:7e:13:b2:21:f7:ad:30:79:12:b6:1d:c9:09: 73:6c:53:6d -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEcXbh/92VPmCztR/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkwMzEyNDUyNloXDTI2MTIwNzEzNDUyNlowLzEtMCsGA1UEAxMk ODIzZTk3NzgtZTZlMy00ZDg1LWEyZTItN2U5MmNiYzk5ZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TSLzOsEzdhNufeW56ayXyGbEccZu6IeTdx9 NBiCHPTFhH4LRsMjJbLmFQapwflRdVmn2/DdgVlWgFd69hZ+c91AdLljB0glSkAd 9PLdk3vKKoLJ2E5DyggTJqCAAHwLctecL2BlkDNSIdweI9wOyqScZFnbp4yy2HIE 9VdVjLK9gqZuO0hnlhmkX6NeGZrR+4lgQaj8TxtyIKd+yV7tRW6bA9tPmWWXAGgN cdZs9NfJm4jQBKNO4M2Q84NCJHTiMnq5b7msguEZyScz1AZAW4Pqo47D8R7bvVKf S60xySAMEevAuY+oYhi9/f3f21cThjnG+R8vaohCWvMpgiyLnwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFA04A07Bw86n8e3Awta+z0S92uN8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 MjNlOTc3OC1lNmUzLTRkODUtYTJlMi03ZTkyY2JjOTlmMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzgyM2U5Nzc4LWU2ZTMtNGQ4NS1h MmUyLTdlOTJjYmM5OWYzOS84MjNlOTc3OC1lNmUzLTRkODUtYTJlMi03ZTkyY2Jj OTlmMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBvtAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkC AgPYAgMA9WAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAMsV8KEcd9P6w/ObfrANNmpjsRxz8JC4K/tQvQtzJ O8yQ5QIgQ1asOm94cMGdRhRGWcf3570OZHo5rgRGma6m93VLknNu5izY1L02TOXt jTnviAU10x8r+glI1jfZrAOd+u758GXYmeSyG7JzF3ZsxkXYkwpYx2h8pK4UKxFt X+hHZ2huSCMY9WMLCbbJqVolA1THbx+ZGQdpi4smoUODqoW/Gcffw86IIqsnpICe KjoBhPToOtr8h21dzMryrnrn4/hmXJ1KEm0eUx/J5/QyX34xlHke17LF+jSF1BvY +OgVEAMexF1T78OSItjl+W5+E7Ih960weRK2HckJc2xTbQ== -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:56 2024 by rpki-client on console-ams.rpki-client.org