$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260.cer File: a32f8632-bd41-4783-afca-fc93bcb85260.cer (raw, json) Hash identifier: TiCeC9e7QNAGDlTwZNWedhEmTrd7gpAOjyLf6CsgGJU= Subject key identifier: 4E:76:F5:2D:CF:B4:A8:64:5D:50:9F:3E:9A:C1:31:4D:4D:87:F3:83 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858471608CBC069DA42A2A5675280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Sep 2024 00:45:27 +0000 Certificate not after: Mon 07 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 398850 IP: 192.234.172.0/24 IP: 204.235.170.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:16:08:cb:c0:69:da:42:a2:a5:67:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 3 00:45:27 2024 GMT Not After : Dec 7 01:45:27 2026 GMT Subject: CN=a32f8632-bd41-4783-afca-fc93bcb85260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:14:38:ef:fb:22:05:55:de:fe:28:9f:08:76: be:42:b1:81:52:1c:03:0a:9c:01:80:21:2b:6a:01: 05:63:83:7d:8a:b6:ef:f3:01:0e:86:88:1e:4b:35: 3a:44:bd:f7:fa:87:bb:4f:8d:99:1a:76:63:07:5d: 64:a3:39:64:44:11:0c:16:53:6a:5a:0f:41:7c:1f: 9d:54:b9:88:2b:fe:0d:27:eb:23:93:cd:f7:13:31: fa:ad:51:60:42:4f:46:a4:f9:11:ff:62:85:88:c3: 05:48:5d:59:a2:4f:6c:0f:cc:9c:2f:3f:fd:c5:47: 26:f7:0d:4f:e5:95:9a:0c:b8:bb:e0:df:7d:03:37: 4f:8d:9a:6b:88:61:e9:09:9f:89:9e:84:4f:98:73: d3:b9:9c:6b:2f:c0:6f:f2:0b:f0:d5:ba:34:56:b8: a5:b0:3c:bb:e9:20:5a:25:b5:c9:8a:dc:a7:c4:e4: 23:ad:71:64:88:04:a0:3b:82:f1:b2:ee:4b:d8:7d: 30:20:f6:b4:ae:97:96:25:fe:9d:d9:8c:52:44:b8: dd:3b:73:d6:c3:73:0f:a4:12:7c:13:f7:eb:bc:31: 29:73:79:72:6e:f6:cf:d9:dd:a9:01:d9:b8:9b:0f: 1d:22:76:a2:09:6d:87:35:55:c0:e0:87:98:82:62: ec:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:76:F5:2D:CF:B4:A8:64:5D:50:9F:3E:9A:C1:31:4D:4D:87:F3:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.234.172.0/24 204.235.170.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398850 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:62:fa:2d:c7:a6:0c:99:0a:a1:64:4c:27:89:f2:8c:5e:09: ae:35:1b:f7:1b:f7:13:de:09:d1:2d:02:24:ca:43:0f:70:5d: 6c:95:86:a7:37:6f:c7:f2:43:41:a4:aa:95:08:50:60:13:96: e7:e1:ec:51:81:03:f3:b0:58:04:ac:fb:b2:7b:9b:14:a3:eb: b7:f8:0e:4f:31:46:70:9e:3f:15:b5:cc:5f:36:1c:a1:c6:81: 16:b4:a8:c8:dc:eb:4a:6c:e7:b4:c7:bb:f2:c7:7b:f5:54:b5: 55:89:50:ad:21:06:da:6b:8f:15:be:62:ef:75:42:3f:1b:1b: 9b:7f:2e:58:72:5d:c5:28:1f:10:1f:05:d2:4f:c6:05:a9:06: 58:4f:64:82:a6:48:83:1e:4e:81:ca:f8:54:a8:a2:2a:00:3d: c1:03:90:11:58:13:19:1e:ae:62:84:9f:5c:9f:50:c0:9b:67: d8:42:f6:d3:d5:ea:1a:28:e1:39:5b:f4:25:19:7c:7e:9e:c0: b2:1a:0f:df:f0:68:9b:7b:3d:67:aa:88:92:e7:0d:92:85:75: 2d:b4:1e:dd:bc:cf:50:79:30:20:71:d6:0a:ef:1f:be:e4:85: 6e:ab:e7:be:58:0f:45:96:9d:75:78:bb:fe:d0:47:c9:53:16: 34:d7:87:e9 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEcWCMvAadpCoqVnUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkwMzAwNDUyN1oXDTI2MTIwNzAxNDUyN1owLzEtMCsGA1UEAxMk YTMyZjg2MzItYmQ0MS00NzgzLWFmY2EtZmM5M2JjYjg1MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxQ47/siBVXe/iifCHa+QrGBUhwDCpwBgCEr agEFY4N9irbv8wEOhogeSzU6RL33+oe7T42ZGnZjB11kozlkRBEMFlNqWg9BfB+d VLmIK/4NJ+sjk833EzH6rVFgQk9GpPkR/2KFiMMFSF1Zok9sD8ycLz/9xUcm9w1P 5ZWaDLi74N99AzdPjZpriGHpCZ+JnoRPmHPTuZxrL8Bv8gvw1bo0VrilsDy76SBa JbXJitynxOQjrXFkiASgO4Lxsu5L2H0wIPa0rpeWJf6d2YxSRLjdO3PWw3MPpBJ8 E/frvDEpc3lybvbP2d2pAdm4mw8dInaiCW2HNVXA4IeYgmLs3wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFE529S3PtKhkXVCfPprBMU1Nh/ODMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h MzJmODYzMi1iZDQxLTQ3ODMtYWZjYS1mYzkzYmNiODUyNjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2EzMmY4NjMyLWJkNDEtNDc4My1h ZmNhLWZjOTNiY2I4NTI2MC9hMzJmODYzMi1iZDQxLTQ3ODMtYWZjYS1mYzkzYmNi ODUyNjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADA6qwDBAHM66owGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhYCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEti+i3HpgyZCqFkTCeJ8oxeCa41G/cb9xPeCdEt AiTKQw9wXWyVhqc3b8fyQ0GkqpUIUGATlufh7FGBA/OwWASs+7J7mxSj67f4Dk8x RnCePxW1zF82HKHGgRa0qMjc60ps57THu/LHe/VUtVWJUK0hBtprjxW+Yu91Qj8b G5t/LlhyXcUoHxAfBdJPxgWpBlhPZIKmSIMeToHK+FSooioAPcEDkBFYExkermKE n1yfUMCbZ9hC9tPV6hoo4Tlb9CUZfH6ewLIaD9/waJt7PWeqiJLnDZKFdS20Ht28 z1B5MCBx1grvH77khW6r575YD0WWnXV4u/7QR8lTFjTXh+k= -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:27 2024 by rpki-client on console-fra.rpki-client.org