$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137.cer File: aed19c9c-a75a-48f8-98f4-685aa357a137.cer (raw, json) Hash identifier: xl9VRQYVS4ecBFVH1jyNmKyGsNYRI36BO3KOqEYl2ng= Subject key identifier: 71:BA:16:13:89:DA:69:E7:49:42:23:6D:82:66:01:57:18:E7:83:22 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858473A53AFDF1B25EFF7CF803180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/aed19c9c-a75a-48f8-98f4-685aa357a137.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Sep 2024 00:45:27 +0000 Certificate not after: Sun 20 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 46883 IP: 199.192.88.0/22 IP: 199.255.184.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3a:53:af:df:1b:25:ef:f7:cf:80:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 16 00:45:27 2024 GMT Not After : Dec 20 01:45:27 2026 GMT Subject: CN=aed19c9c-a75a-48f8-98f4-685aa357a137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:1b:de:15:6e:db:05:35:46:74:6b:38:1e: d0:1a:93:9a:ad:09:61:aa:a8:32:ae:37:33:66:79: ba:99:e9:6c:3b:e9:a9:6b:89:b1:b9:ff:8e:1e:07: 9c:72:55:51:dd:23:8b:d6:be:7d:e0:b3:ee:db:d4: 5f:6e:f3:03:af:0f:43:4b:ba:49:95:4d:5d:22:95: c1:86:af:36:d3:b3:66:a6:7f:62:98:d9:15:10:eb: d5:d5:80:b8:69:12:ca:9b:6f:12:ca:4a:b8:96:db: 33:82:71:7b:66:2b:b4:79:fc:9c:b4:04:f4:a8:41: 44:ff:bb:9a:c6:8d:ec:0b:c5:c7:de:31:b4:1e:c6: c7:a8:e0:c7:1e:2f:d6:6a:82:0e:e6:c8:02:6c:fa: 6b:4e:da:34:9b:5a:e8:29:2c:b0:d4:24:93:da:30: 74:0e:47:1a:8b:10:19:81:8b:80:5c:49:0a:48:b8: 0e:81:72:9d:4a:05:4d:19:46:2a:2e:ef:92:04:57: fe:6f:5f:b0:a6:b7:1f:0d:d3:c1:e2:2f:6a:9b:a2: 5f:30:49:f5:38:b0:7c:8c:9b:ce:3b:8a:25:06:82: c3:53:f7:de:6d:d5:6c:de:6a:6c:ad:dd:5d:45:a9: 4b:09:23:e7:f7:cc:2a:20:89:90:26:22:66:16:24: 48:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BA:16:13:89:DA:69:E7:49:42:23:6D:82:66:01:57:18:E7:83:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aed19c9c-a75a-48f8-98f4-685aa357a137/aed19c9c-a75a-48f8-98f4-685aa357a137.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.192.88.0/22 199.255.184.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46883 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:89:af:c3:b7:a1:c0:08:8b:17:47:7a:2c:23:a0:57:e9:11: a2:9a:cb:2c:26:f1:80:b2:93:28:81:76:1b:4b:35:b9:d8:96: ad:ca:71:fb:06:61:f9:7e:57:22:76:a2:fb:0e:f8:3c:f7:00: 42:6a:01:74:3e:88:ff:f5:51:e0:0e:5c:d7:3a:0d:7d:38:ff: 43:fa:7d:60:7c:97:1c:b1:b6:8c:1f:32:c2:a9:b9:74:92:1e: 87:74:36:23:ca:28:5c:84:4d:0c:2c:90:f3:99:ca:91:fe:c7: 5d:8d:c6:da:18:ef:e0:35:a2:ce:9d:fc:db:1e:d4:64:00:ee: 00:00:a6:0c:77:b5:e9:c6:a0:63:ea:93:18:0e:3f:e5:5d:75: 65:13:a6:50:9b:5e:6a:65:d2:87:8d:4b:2b:29:5d:21:62:d9: 49:fe:2d:a5:59:c9:3f:31:2d:84:93:e8:ff:e7:26:6c:50:34: 30:88:65:af:ce:7e:23:07:9c:1b:4a:9b:29:31:73:13:bb:ee: df:46:4a:db:07:d7:03:af:2a:11:32:0c:df:d5:cc:1c:c6:a8: 38:2e:82:ad:23:a1:16:95:0c:6f:4f:a3:27:93:91:9c:b6:6d: 82:48:b3:5e:4f:70:fa:cb:39:a9:1b:d2:60:24:67:e3:a5:b5: 15:3f:f2:d8 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEc6U6/fGyXv98+AMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkxNjAwNDUyN1oXDTI2MTIyMDAxNDUyN1owLzEtMCsGA1UEAxMk YWVkMTljOWMtYTc1YS00OGY4LTk4ZjQtNjg1YWEzNTdhMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq00b3hVu2wU1RnRrOB7QGpOarQlhqqgyrjcz Znm6melsO+mpa4mxuf+OHgecclVR3SOL1r594LPu29RfbvMDrw9DS7pJlU1dIpXB hq8207Nmpn9imNkVEOvV1YC4aRLKm28Sykq4ltszgnF7Ziu0efyctAT0qEFE/7ua xo3sC8XH3jG0HsbHqODHHi/WaoIO5sgCbPprTto0m1roKSyw1CST2jB0DkcaixAZ gYuAXEkKSLgOgXKdSgVNGUYqLu+SBFf+b1+wprcfDdPB4i9qm6JfMEn1OLB8jJvO O4olBoLDU/febdVs3mpsrd1dRalLCSPn98wqIImQJiJmFiRIDwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFHG6FhOJ2mnnSUIjbYJmAVcY54MiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h ZWQxOWM5Yy1hNzVhLTQ4ZjgtOThmNC02ODVhYTM1N2ExMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FlZDE5YzljLWE3NWEtNDhmOC05 OGY0LTY4NWFhMzU3YTEzNy9hZWQxOWM5Yy1hNzVhLTQ4ZjgtOThmNC02ODVhYTM1 N2ExMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHwFgDBALH/7gwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALcjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACOJr8O3ocAIixdHeiwjoFfpEaKayywm8YCykyiB dhtLNbnYlq3KcfsGYfl+VyJ2ovsO+Dz3AEJqAXQ+iP/1UeAOXNc6DX04/0P6fWB8 lxyxtowfMsKpuXSSHod0NiPKKFyETQwskPOZypH+x12NxtoY7+A1os6d/Nse1GQA 7gAApgx3tenGoGPqkxgOP+VddWUTplCbXmpl0oeNSyspXSFi2Un+LaVZyT8xLYST 6P/nJmxQNDCIZa/OfiMHnBtKmykxcxO77t9GStsH1wOvKhEyDN/VzBzGqDgugq0j oRaVDG9PoyeTkZy2bYJIs15PcPrLOakb0mAkZ+OltRU/8tg= -----END CERTIFICATE-----Generated at Thu Nov 21 16:22:08 2024 by rpki-client on console-ams.rpki-client.org