$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer File: a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer (raw, json) Hash identifier: y+Qe3kvCjdZvAyFTR6yMnZxSiqKsfcynulRFhZX5Cpc= Subject key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858472298DDC33A37A5771B1BA380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Sep 2024 12:45:26 +0000 Certificate not after: Fri 11 Dec 2026 13:45:26 +0000 Subordinate resources: AS: 64289 IP: 23.155.72.0/24 IP: 206.71.158.0/24 IP: 2602:2ea::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:22:98:dd:c3:3a:37:a5:77:1b:1b:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 7 12:45:26 2024 GMT Not After : Dec 11 13:45:26 2026 GMT Subject: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:b3:9a:30:af:6b:d6:cc:46:3a:f4:c3:33: be:2e:59:eb:5b:33:eb:18:21:da:50:49:72:9c:6b: fd:2f:db:3d:fa:3b:90:eb:c7:9e:ec:0f:67:29:c1: b8:fb:54:19:4a:a8:c8:07:91:11:fe:fe:e2:d2:b4: 19:bf:69:cc:44:98:15:9c:a8:54:29:cf:ef:e4:ce: cc:b6:ad:cd:45:7e:a6:df:26:89:ad:60:6e:fe:f3: 91:54:24:73:be:e5:71:f0:16:53:94:f1:55:5c:93: 9a:a1:91:f1:0f:40:73:be:0d:b1:0a:59:6e:2e:fd: 3c:16:f4:4c:7f:4e:dc:cf:71:7b:9e:cb:54:e9:14: eb:e0:60:8c:41:02:19:01:0f:34:69:e1:1c:f8:09: c3:fe:8e:34:f9:2d:ea:e8:20:17:e1:c0:16:ac:5f: dd:b9:d4:07:14:0b:63:ab:90:e2:b6:0d:de:91:4e: 87:e1:9d:b4:10:e0:84:09:d5:c5:bb:66:c7:d3:2f: 03:02:9d:b2:d5:fe:63:92:5b:39:9a:08:83:b5:53: 59:e9:c5:37:55:79:32:53:b8:bb:bb:62:fd:c9:de: 9d:c3:b6:19:87:dd:6c:5f:3c:27:17:18:0e:da:9d: 17:9c:5e:43:b2:e5:b0:91:09:d1:4d:77:5b:f4:64: 79:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.155.72.0/24 206.71.158.0/24 IPv6: 2602:2ea::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64289 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:a5:3c:41:9f:b6:8a:f5:bb:de:4b:b8:e7:4d:fd:9d:93:18: 3c:35:1f:e2:ca:af:01:f6:1c:77:02:86:1c:fb:47:4c:a1:a8: 43:90:ea:25:53:f3:9e:5d:1c:7c:e1:3b:b8:45:79:12:53:9e: 33:f2:44:b2:6c:de:09:ca:60:9f:ec:5a:a7:68:4d:09:7c:53: ed:52:ce:0b:a2:2d:6d:f9:e9:e3:12:0c:fd:58:3c:3f:76:18: 80:ad:87:d7:8a:51:1a:08:f3:88:a0:0f:bc:ee:70:22:04:5e: b7:9e:6b:ff:f9:60:35:0a:7e:76:84:0e:78:98:50:33:e5:ff: 8e:73:a9:84:fd:7d:5d:73:7a:f1:3c:8c:1d:ad:78:f1:2b:e5: 0d:44:90:35:e5:6f:6a:75:9b:68:32:f2:cd:eb:8b:e5:28:ed: b3:b4:3c:54:d4:f2:85:39:66:98:48:c6:64:07:48:af:6c:25: 2d:b5:42:f5:71:e9:e0:a2:3f:5f:c7:13:a8:3b:cd:de:d4:af: cf:a9:66:9e:81:ce:22:6f:b3:ff:fe:86:d6:df:65:ba:70:e9: 7f:43:d3:ae:f3:6c:05:bb:00:c2:f6:4e:15:bc:52:f7:2f:22: 77:2d:f5:fb:e9:e3:b5:bd:3a:2d:f2:f4:d1:3e:36:07:d3:fd: 71:24:cf:4d -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEcimN3DOjeldxsbo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkwNzEyNDUyNloXDTI2MTIxMTEzNDUyNlowLzEtMCsGA1UEAxMk YTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJkMDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynyzmjCva9bMRjr0wzO+LlnrWzPrGCHaUEly nGv9L9s9+juQ68ee7A9nKcG4+1QZSqjIB5ER/v7i0rQZv2nMRJgVnKhUKc/v5M7M tq3NRX6m3yaJrWBu/vORVCRzvuVx8BZTlPFVXJOaoZHxD0Bzvg2xClluLv08FvRM f07cz3F7nstU6RTr4GCMQQIZAQ80aeEc+AnD/o40+S3q6CAX4cAWrF/dudQHFAtj q5Ditg3ekU6H4Z20EOCECdXFu2bH0y8DAp2y1f5jkls5mgiDtVNZ6cU3VXkyU7i7 u2L9yd6dw7YZh91sXzwnFxgO2p0XnF5DsuWwkQnRTXdb9GR5DwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFDMN0VP+NRIH3VeKKRtr5hfbHFj0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h MjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2EyM2JjMDdkLTU0YzYtNDE1Zi05 ZGMxLWMxYTIwOWYyZDA4MC9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlm MmQwODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXm0gDBADOR54wDgQCAAIwCAMGBCYCAuoAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD7ITBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCMpTxBn7aK9bveS7jn Tf2dkxg8NR/iyq8B9hx3AoYc+0dMoahDkOolU/OeXRx84Tu4RXkSU54z8kSybN4J ymCf7FqnaE0JfFPtUs4Loi1t+enjEgz9WDw/dhiArYfXilEaCPOIoA+87nAiBF63 nmv/+WA1Cn52hA54mFAz5f+Oc6mE/X1dc3rxPIwdrXjxK+UNRJA15W9qdZtoMvLN 64vlKO2ztDxU1PKFOWaYSMZkB0ivbCUttUL1cengoj9fxxOoO83e1K/PqWaegc4i b7P//obW32W6cOl/Q9Ou82wFuwDC9k4VvFL3LyJ3LfX76eO1vTot8vTRPjYH0/1x JM9N -----END CERTIFICATE-----Generated at Thu Nov 21 16:22:06 2024 by rpki-client on console-ams.rpki-client.org