$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer File: 8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer (raw, json) Hash identifier: DbmsBrFqbcgnuarEnu/aVEg55zOJxGfUjJtN4ctWMTw= Subject key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858475373D76669387D4EA9B4D940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Sep 2024 00:45:26 +0000 Certificate not after: Tue 29 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 26284 IP: 64.251.208.0/23 IP: 216.250.0.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:53:73:d7:66:69:38:7d:4e:a9:b4:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 25 00:45:26 2024 GMT Not After : Dec 29 01:45:26 2026 GMT Subject: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5e:5b:43:a6:3c:4c:34:69:5b:c3:a1:f2:f7: f2:38:28:f6:fa:eb:1e:d5:7d:37:6b:c7:2c:49:d8: 86:99:09:9f:f1:a7:dd:24:6b:3b:e6:eb:05:85:ca: fa:56:7a:c8:60:1d:dc:15:95:5e:41:f6:04:a6:3a: 72:fb:bc:b3:ff:30:85:76:90:d3:4c:57:74:8d:9e: 50:59:5a:8b:16:06:8e:ea:8d:44:2d:0a:00:c1:a0: 1e:8f:ec:7a:63:a3:38:44:a9:9e:d4:56:67:e5:cb: 95:42:ca:8b:6f:68:d1:e3:de:b0:5d:70:64:d6:5e: 5c:34:3c:e6:a6:17:d6:91:fb:f3:15:e1:66:d9:d7: bb:43:04:21:78:6e:34:cd:32:53:0e:57:d5:87:22: b0:fa:e5:8f:ea:6e:a5:8a:22:ec:3a:f6:0f:cc:48: 08:94:6e:24:b7:91:39:db:da:e5:31:98:a7:2f:84: fa:b4:57:4b:35:3f:1c:c7:03:4a:fe:72:2f:70:70: 62:a4:57:75:ea:f3:1a:8e:20:4b:a2:9c:02:1c:b3: 81:c2:8f:99:1c:aa:4a:fb:17:02:61:4a:6a:a5:d8: 69:e7:eb:b3:7b:3d:8c:96:13:46:4b:de:e8:31:ed: 2d:f2:49:be:9e:7d:66:98:5a:b4:7f:10:04:38:79: 1e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.251.208.0/23 216.250.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26284 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6c:64:9b:4a:73:d3:41:a8:d4:30:7f:71:44:30:7a:c3:06: f3:ef:a0:74:46:80:30:12:59:f3:d5:23:aa:20:80:f5:10:02: d2:7a:c4:d5:4c:dc:f8:96:40:39:a2:e6:01:9d:a8:d9:80:be: 7a:f3:61:23:3e:37:d6:4f:b1:bf:d6:84:cd:1d:52:e2:ec:1d: ee:25:be:2e:57:b6:98:81:a4:ff:d5:1d:38:96:92:19:5d:ff: 44:3a:b3:40:44:f7:05:d7:02:a5:86:74:72:8e:0b:8e:94:61: 21:cb:7e:bf:5a:44:b1:a6:95:22:3d:17:39:9e:b4:f4:1d:2c: ad:ab:8b:77:d0:a7:52:16:08:28:46:e0:b4:14:36:43:4f:cc: 25:ce:2e:b6:3d:26:cc:1d:2b:07:57:96:05:f3:fd:c6:da:14: fc:bc:57:04:40:49:b2:3d:9e:3b:8b:29:97:a3:d7:e8:a4:87: ca:d2:2e:4f:17:13:f4:a3:9d:e1:f1:f4:ad:08:8c:19:97:d2: 86:e7:37:9d:72:15:77:6d:e8:93:2f:83:4a:f7:9e:7d:73:8f: aa:08:36:e8:40:0d:65:96:3e:f2:9f:87:4f:6d:aa:a3:71:26: ea:bf:f1:5d:c7:1a:84:d6:f4:92:48:cd:7d:22:3c:e5:3f:d1: 09:53:b5:ab -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEdTc9dmaTh9Tqm02UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkyNTAwNDUyNloXDTI2MTIyOTAxNDUyNlowLzEtMCsGA1UEAxMk OGVlNTJiMGQtYjE1Yy00YjljLWFhM2EtM2Q0YTRkMzZhZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l5bQ6Y8TDRpW8Oh8vfyOCj2+use1X03a8cs SdiGmQmf8afdJGs75usFhcr6VnrIYB3cFZVeQfYEpjpy+7yz/zCFdpDTTFd0jZ5Q WVqLFgaO6o1ELQoAwaAej+x6Y6M4RKme1FZn5cuVQsqLb2jR496wXXBk1l5cNDzm phfWkfvzFeFm2de7QwQheG40zTJTDlfVhyKw+uWP6m6liiLsOvYPzEgIlG4kt5E5 29rlMZinL4T6tFdLNT8cxwNK/nIvcHBipFd16vMajiBLopwCHLOBwo+ZHKpK+xcC YUpqpdhp5+uzez2MlhNGS97oMe0t8km+nn1mmFq0fxAEOHkenwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFOB0OSrblObUIzRdqWG7DyjksnbYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 ZWU1MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRhNGQzNmFkMjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzhlZTUyYjBkLWIxNWMtNGI5Yy1h YTNhLTNkNGE0ZDM2YWQyMS84ZWU1MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRhNGQz NmFkMjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAFA+9ADBALY+gAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICZqwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAoWxkm0pz00Go1DB/cUQwesMG8++gdEaAMBJZ89Uj qiCA9RAC0nrE1Uzc+JZAOaLmAZ2o2YC+evNhIz431k+xv9aEzR1S4uwd7iW+Lle2 mIGk/9UdOJaSGV3/RDqzQET3BdcCpYZ0co4LjpRhIct+v1pEsaaVIj0XOZ609B0s rauLd9CnUhYIKEbgtBQ2Q0/MJc4utj0mzB0rB1eWBfP9xtoU/LxXBEBJsj2eO4sp l6PX6KSHytIuTxcT9KOd4fH0rQiMGZfShuc3nXIVd23oky+DSveefXOPqgg26EAN ZZY+8p+HT22qo3Em6r/xXccahNb0kkjNfSI85T/RCVO1qw== -----END CERTIFICATE-----Generated at Thu Nov 21 16:21:57 2024 by rpki-client on console-ams.rpki-client.org