$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b29fd627-dc75-4d1c-8e9b-6a7640beedd4.cer File: b29fd627-dc75-4d1c-8e9b-6a7640beedd4.cer (raw, json) Hash identifier: x3Vkjapy9pQBmcQZhEjt7e1d+eMp54Iv6jVDol1Lb7g= Subject key identifier: 5D:E0:40:22:1C:DC:2E:33:EF:83:EE:4C:1E:2C:CB:61:A9:55:59:3E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285847E787EED77AC245A95F939600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b29fd627-dc75-4d1c-8e9b-6a7640beedd4/b29fd627-dc75-4d1c-8e9b-6a7640beedd4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b29fd627-dc75-4d1c-8e9b-6a7640beedd4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Nov 2024 01:45:34 +0000 Certificate not after: Sat 20 Feb 2027 01:45:34 +0000 Subordinate resources: AS: 397163 IP: 23.157.176.0/24 IP: 2605:31c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:87:ee:d7:7a:c2:45:a9:5f:93:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 17 01:45:34 2024 GMT Not After : Feb 20 01:45:34 2027 GMT Subject: CN=b29fd627-dc75-4d1c-8e9b-6a7640beedd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:14:0d:58:1d:14:89:67:e2:1d:7a:04:69: 6e:32:f2:e4:4f:38:99:fc:c0:93:02:10:6a:bd:5f: 0f:f5:58:e9:c0:6b:b8:c8:28:6a:73:a6:9a:ac:70: 1d:bd:42:6f:c2:c0:12:ff:38:b2:7a:73:af:f4:d0: 96:56:3f:a2:dd:49:22:23:58:bc:46:da:6a:40:a0: a1:3a:b0:46:e0:19:9c:57:d4:e2:fd:d1:2f:b6:b6: c6:2d:41:3f:57:50:10:7e:64:18:71:1f:b7:96:16: 93:fd:4d:85:cd:ba:fb:1b:88:9e:cb:02:41:f7:a3: a5:f8:49:d1:cb:2e:f0:5f:07:05:4c:23:f3:b2:62: d6:ae:5b:d3:3e:9d:2b:a1:e4:a5:30:ac:a5:90:dc: c8:d7:05:b2:0f:0c:66:9d:ed:37:58:e0:c2:ce:33: b5:d1:fd:da:e0:82:cf:1a:43:14:d0:7f:f6:0d:f2: 0b:11:77:27:71:e6:1c:e1:8b:58:fb:fe:20:77:4a: 71:0c:7c:15:32:29:0f:24:a4:c7:a7:2b:51:36:86: 1c:13:0f:5f:63:7b:36:df:65:f5:db:93:68:7b:9f: 08:f5:f9:ff:09:1a:42:c5:97:38:8c:3f:5e:06:fe: 2d:77:f6:5d:97:6a:c5:18:bf:d8:07:e9:91:8a:46: c0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E0:40:22:1C:DC:2E:33:EF:83:EE:4C:1E:2C:CB:61:A9:55:59:3E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b29fd627-dc75-4d1c-8e9b-6a7640beedd4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b29fd627-dc75-4d1c-8e9b-6a7640beedd4/b29fd627-dc75-4d1c-8e9b-6a7640beedd4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.157.176.0/24 IPv6: 2605:31c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397163 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6c:80:6c:e4:38:2d:39:a7:ac:09:9d:4a:5f:88:ac:d3:31: d8:15:72:0b:33:3f:a1:aa:2b:a9:f9:c7:6c:82:2d:05:64:4f: 97:17:1f:68:28:f8:6f:d0:fd:c5:fd:bb:24:0a:1e:70:9b:25: 97:32:db:2d:ed:51:b0:ff:04:84:39:45:15:4c:12:69:d4:70: dd:cd:1f:fd:55:12:e0:34:63:02:87:dd:08:7d:0f:25:56:07: 9f:28:57:7d:20:0b:9b:5e:05:ba:76:dc:4b:36:ae:a5:e7:54: 17:88:b4:55:14:bc:cf:b4:73:4b:12:78:aa:f4:6d:05:3f:b7: 04:01:0f:3b:cc:97:ff:98:e4:f3:b5:1d:a1:96:44:15:35:c6: ab:c0:96:8d:5c:3c:06:5e:ec:23:ab:26:02:6f:59:a4:56:d5: 21:b6:ac:f8:7e:0e:66:c6:d3:58:69:49:1d:6b:27:03:f4:85: 54:9d:bc:cc:be:9f:e3:0e:93:c1:c3:6a:fc:7f:ec:5f:c6:99: f6:99:24:a3:32:b4:8e:65:91:4a:b0:f0:90:ea:49:81:61:74: c3:00:86:6c:48:4f:d6:31:c1:c9:f3:83:b7:ff:bb:e2:ec:bb: 03:ab:96:6c:79:5f:85:bc:63:43:6a:3c:3d:a3:9a:15:07:77: 66:e8:08:d8 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEfnh+7XesJFqV+TlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MTExNzAxNDUzNFoXDTI3MDIyMDAxNDUzNFowLzEtMCsGA1UEAxMk YjI5ZmQ2MjctZGM3NS00ZDFjLThlOWItNmE3NjQwYmVlZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQQUDVgdFIln4h16BGluMvLkTziZ/MCTAhBq vV8P9VjpwGu4yChqc6aarHAdvUJvwsAS/ziyenOv9NCWVj+i3UkiI1i8RtpqQKCh OrBG4BmcV9Ti/dEvtrbGLUE/V1AQfmQYcR+3lhaT/U2Fzbr7G4ieywJB96Ol+EnR yy7wXwcFTCPzsmLWrlvTPp0roeSlMKylkNzI1wWyDwxmne03WODCzjO10f3a4ILP GkMU0H/2DfILEXcnceYc4YtY+/4gd0pxDHwVMikPJKTHpytRNoYcEw9fY3s232X1 25Noe58I9fn/CRpCxZc4jD9eBv4td/Zdl2rFGL/YB+mRikbAEwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFF3gQCIc3C4z74PuTB4sy2GpVVk+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i MjlmZDYyNy1kYzc1LTRkMWMtOGU5Yi02YTc2NDBiZWVkZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2IyOWZkNjI3LWRjNzUtNGQxYy04 ZTliLTZhNzY0MGJlZWRkNC9iMjlmZDYyNy1kYzc1LTRkMWMtOGU5Yi02YTc2NDBi ZWVkZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXnbAwDQQCAAIwBwMFACYFMcAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg9rMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHNsgGzkOC05p6wJnUpfiKzTMdgV cgszP6GqK6n5x2yCLQVkT5cXH2go+G/Q/cX9uyQKHnCbJZcy2y3tUbD/BIQ5RRVM EmnUcN3NH/1VEuA0YwKH3Qh9DyVWB58oV30gC5teBbp23Es2rqXnVBeItFUUvM+0 c0sSeKr0bQU/twQBDzvMl/+Y5PO1HaGWRBU1xqvAlo1cPAZe7COrJgJvWaRW1SG2 rPh+DmbG01hpSR1rJwP0hVSdvMy+n+MOk8HDavx/7F/GmfaZJKMytI5lkUqw8JDq SYFhdMMAhmxIT9Yxwcnzg7f/u+LsuwOrlmx5X4W8Y0NqPD2jmhUHd2boCNg= -----END CERTIFICATE-----Generated at Thu Nov 21 16:22:08 2024 by rpki-client on console-ams.rpki-client.org