$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer File: 8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer (raw, json) Hash identifier: sfOQmBWxspawn71eK+slyJNPC0Z/byiieLjNIpEHC/0= Subject key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847B7F47706AB90D0D5CF5CF980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 31 Oct 2024 00:45:26 +0000 Certificate not after: Wed 03 Feb 2027 01:45:26 +0000 Subordinate resources: AS: 22597 IP: 23.159.120.0/24 IP: 2607:5fc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b7:f4:77:06:ab:90:d0:d5:cf:5c:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Oct 31 00:45:26 2024 GMT Not After : Feb 3 01:45:26 2027 GMT Subject: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:70:bb:58:21:76:0d:97:ce:12:2e:a0:3d: ec:c1:b3:e0:a6:32:54:09:be:71:a3:76:c3:ba:4a: 60:ec:d8:c1:0a:32:6e:1a:9d:e6:19:27:6c:05:c8: 4d:bb:8e:08:eb:2a:97:12:98:0a:ee:bd:20:df:e3: 64:e9:83:96:e1:7e:e5:c9:54:bb:60:18:73:35:79: 3e:3b:60:91:1b:29:32:82:f9:03:cd:c7:b3:e4:89: 45:2f:2c:4d:99:c5:17:82:56:5e:2f:57:5f:b1:e7: 54:c6:4c:75:15:14:f6:47:41:d7:db:83:3d:43:08: 20:32:e8:ea:8f:41:94:10:1d:b0:d4:9c:a2:77:fc: bd:67:71:93:f6:9a:58:45:db:09:82:ef:9b:7a:05: 10:14:e2:67:90:ad:ca:fb:e5:de:a6:05:38:6b:3e: 30:26:d6:4a:3a:c4:75:47:f7:53:f2:c4:67:c8:cf: 9f:27:62:b8:08:ab:2c:c6:2f:ab:03:02:4f:98:49: 54:28:f2:cd:59:28:3f:0d:d7:6c:17:4e:84:1c:af: b8:ca:9e:25:c7:cb:5f:1c:ed:8d:a1:0e:df:ea:06: cb:ec:a5:6b:0e:5f:2f:dd:74:13:7a:ff:74:96:5c: ee:72:d2:86:78:40:16:b7:40:ca:d6:41:b6:4a:ac: 2c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.159.120.0/24 IPv6: 2607:5fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22597 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:44:93:74:40:ef:f0:b1:f5:ca:77:90:2f:f5:96:f8:8b:ec: 31:7f:b9:93:1a:3c:44:47:b2:cd:fb:4b:f1:42:3d:ef:e6:8f: 05:c7:40:46:bc:7c:6b:e1:d8:d1:69:b9:57:26:51:b9:f2:e9: 2c:67:91:a8:59:c2:56:58:87:ce:1e:d1:1e:19:5f:e4:c4:bb: 88:d1:ad:4f:6f:1b:8b:d2:13:02:83:c2:85:1f:64:6f:f2:66: aa:bb:4b:99:69:67:9b:36:f5:a6:21:a2:44:d8:a2:3b:27:75: 11:79:bd:3d:85:7f:bb:66:0f:0d:e4:d3:c3:b9:14:50:02:68: 2d:7c:5c:86:65:bb:fc:89:23:7f:31:00:bf:11:d0:9b:bc:02: c0:8d:71:23:89:82:98:5a:19:83:32:32:e3:83:ec:b3:b2:55: 57:13:4c:1e:e6:1d:58:dc:17:93:7f:2a:c1:4e:94:a5:5b:a0: 81:84:33:35:79:1e:18:77:24:ed:88:ee:dd:e5:b3:06:12:a2: 11:72:d5:61:7d:3d:5c:94:11:55:0c:cd:f3:2f:0e:44:60:e0: 59:cf:3e:f1:4f:57:9c:25:5f:14:d8:94:21:ee:32:ae:04:55: 8e:bc:a2:d5:ac:c5:9d:be:6f:4b:40:3c:a2:97:ad:07:18:d8: a7:66:b9:07 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEe39HcGq5DQ1c9c+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTAzMTAwNDUyNloXDTI3MDIwMzAxNDUyNlowLzEtMCsGA1UEAxMk OGFmZDg4OTUtMTFlOS00M2Q0LWJiOWYtNjQwNDJiMWQyOGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/xwu1ghdg2XzhIuoD3swbPgpjJUCb5xo3bD ukpg7NjBCjJuGp3mGSdsBchNu44I6yqXEpgK7r0g3+Nk6YOW4X7lyVS7YBhzNXk+ O2CRGykygvkDzcez5IlFLyxNmcUXglZeL1dfsedUxkx1FRT2R0HX24M9QwggMujq j0GUEB2w1Jyid/y9Z3GT9ppYRdsJgu+begUQFOJnkK3K++XepgU4az4wJtZKOsR1 R/dT8sRnyM+fJ2K4CKssxi+rAwJPmElUKPLNWSg/DddsF06EHK+4yp4lx8tfHO2N oQ7f6gbL7KVrDl8v3XQTev90llzuctKGeEAWt0DK1kG2SqwsjQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFBiVriYA6+agYOoZEHtZlnru4lgXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIxZDI4ZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzhhZmQ4ODk1LTExZTktNDNkNC1i YjlmLTY0MDQyYjFkMjhmNi84YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIx ZDI4ZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXn3gwDQQCAAIwBwMFACYHX8AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICWEUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaUSTdEDv8LH1yneQL/WW+IvsMX+5 kxo8REeyzftL8UI97+aPBcdARrx8a+HY0Wm5VyZRufLpLGeRqFnCVliHzh7RHhlf 5MS7iNGtT28bi9ITAoPChR9kb/JmqrtLmWlnmzb1piGiRNiiOyd1EXm9PYV/u2YP DeTTw7kUUAJoLXxchmW7/IkjfzEAvxHQm7wCwI1xI4mCmFoZgzIy44Pss7JVVxNM HuYdWNwXk38qwU6UpVuggYQzNXkeGHck7Yju3eWzBhKiEXLVYX09XJQRVQzN8y8O RGDgWc8+8U9XnCVfFNiUIe4yrgRVjryi1azFnb5vS0A8opetBxjYp2a5Bw== -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:57 2024 by rpki-client on console-ams.rpki-client.org