$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807.cer File: c019befc-7c35-411f-a118-9d2c05733807.cer (raw, json) Hash identifier: DfQF8tcBLaaazHORKMoMjUl5nac5XdZIWMMNXhZVqwE= Subject key identifier: 6D:C6:97:EA:A7:EE:27:77:9D:FD:0E:EE:DF:6E:DE:26:53:3B:A7:26 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858474F76F1C4BB1124D78DE8D350 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/c019befc-7c35-411f-a118-9d2c05733807.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Sep 2024 14:28:28 +0000 Certificate not after: Sun 27 Dec 2026 15:28:28 +0000 Subordinate resources: IP: 174.34.231.0/24 IP: 174.34.235.0/24 IP: 2604:340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:76:f1:c4:bb:11:24:d7:8d:e8:d3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 23 14:28:28 2024 GMT Not After : Dec 27 15:28:28 2026 GMT Subject: CN=c019befc-7c35-411f-a118-9d2c05733807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:6c:78:72:09:a3:ae:7b:26:49:76:f7:16: 4e:2b:64:3c:e8:6f:49:09:2a:f6:d5:b9:6b:89:e4: 36:37:3d:03:4b:4b:bf:04:ab:38:5c:a3:88:30:23: a7:51:ae:a1:47:c2:68:a0:58:3b:49:40:96:e2:6e: 72:31:c5:e7:c8:e4:31:87:39:ea:70:6b:12:dd:74: 6c:dc:7f:dc:5e:08:c1:bd:cd:cc:81:e6:f1:8d:24: 11:a4:6a:81:f6:a4:d6:25:5f:69:43:ba:13:d1:39: 61:ab:c5:09:dd:50:5c:d8:3a:39:da:f4:a9:7c:04: 57:25:b7:17:de:46:e5:57:c7:33:67:58:e8:ed:e6: 29:a8:d6:8b:5a:38:90:14:78:cb:1c:ee:99:e4:9e: e0:02:b0:b0:c8:bb:a7:a7:5f:d3:a7:0e:cd:06:13: e2:79:76:26:be:16:81:f3:91:02:ff:8c:3c:30:67: d2:da:a4:b3:db:fb:a3:cc:0f:aa:d9:99:a3:82:36: 27:51:09:1c:9e:9d:f5:70:0e:9f:0e:c9:35:13:4d: c0:2a:cc:3f:aa:0d:35:dd:3d:9a:9d:d0:18:c2:72: 64:5e:0a:47:77:dd:45:69:a9:ca:8d:58:c6:74:81: e7:80:d8:04:32:72:93:6f:b0:ae:b1:73:29:31:4e: a0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C6:97:EA:A7:EE:27:77:9D:FD:0E:EE:DF:6E:DE:26:53:3B:A7:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c019befc-7c35-411f-a118-9d2c05733807/c019befc-7c35-411f-a118-9d2c05733807.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 174.34.231.0/24 174.34.235.0/24 IPv6: 2604:340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:6e:60:c7:3b:2e:06:bc:38:35:08:5d:f3:6e:14:09:b7:a2: b1:0d:9e:5e:f9:bc:19:6b:4e:74:d4:cf:da:e4:dd:16:4b:37: 7e:20:fe:54:2b:90:e2:a8:c5:78:41:26:69:53:b7:bc:4d:d3: 7c:bf:f3:e3:0a:de:b0:02:ea:03:ef:ee:9a:77:3c:46:09:2c: f4:93:16:64:0e:92:90:91:91:f9:d6:e1:3c:e4:36:b5:24:bc: c4:82:96:13:cf:1b:c5:29:af:23:24:5c:e9:77:23:ae:c5:da: 87:3a:3b:9b:c6:6b:4c:83:cf:ba:c5:4f:b1:15:90:0d:3a:12: 4e:e6:8a:40:c9:05:55:29:be:03:fa:51:e4:ad:56:a6:3c:37: c5:a5:85:07:51:40:5b:95:bf:74:58:87:60:9d:d4:4b:16:65: ae:b0:d0:61:c3:ff:41:f2:09:0d:1a:4b:1d:50:d6:77:bd:b7: b6:80:23:e5:3e:72:50:6e:4a:38:43:b6:4d:fb:62:01:9e:e0: 03:ad:e7:2e:7c:67:ba:c1:48:11:2a:b9:65:74:9d:4c:69:95: 52:f9:fa:5e:4f:1b:d8:4e:c3:7a:a5:e7:91:eb:d2:3a:f3:8c: 87:18:25:4e:a7:6e:ed:3b:a1:c7:f8:9a:bb:25:ad:53:45:e5: 93:3b:63:ae -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEdPdvHEuxEk143o01AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkyMzE0MjgyOFoXDTI2MTIyNzE1MjgyOFowLzEtMCsGA1UEAxMk YzAxOWJlZmMtN2MzNS00MTFmLWExMTgtOWQyYzA1NzMzODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF1seHIJo657Jkl29xZOK2Q86G9JCSr21blr ieQ2Nz0DS0u/BKs4XKOIMCOnUa6hR8JooFg7SUCW4m5yMcXnyOQxhznqcGsS3XRs 3H/cXgjBvc3MgebxjSQRpGqB9qTWJV9pQ7oT0Tlhq8UJ3VBc2Do52vSpfARXJbcX 3kblV8czZ1jo7eYpqNaLWjiQFHjLHO6Z5J7gArCwyLunp1/Tpw7NBhPieXYmvhaB 85EC/4w8MGfS2qSz2/ujzA+q2ZmjgjYnUQkcnp31cA6fDsk1E03AKsw/qg013T2a ndAYwnJkXgpHd91FaanKjVjGdIHngNgEMnKTb7CusXMpMU6gzQIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFG3Gl+qn7id3nf0O7t9u3iZTO6cmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j MDE5YmVmYy03YzM1LTQxMWYtYTExOC05ZDJjMDU3MzM4MDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2MwMTliZWZjLTdjMzUtNDExZi1h MTE4LTlkMmMwNTczMzgwNy9jMDE5YmVmYy03YzM1LTQxMWYtYTExOC05ZDJjMDU3 MzM4MDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBACuIucDBACuIuswDQQCAAIwBwMFACYEA0AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFW5gxzsuBrw4NQhd824UCbeisQ2eXvm8GWtOdNTP2uTdFks3fiD+VCuQ 4qjFeEEmaVO3vE3TfL/z4wresALqA+/umnc8Rgks9JMWZA6SkJGR+dbhPOQ2tSS8 xIKWE88bxSmvIyRc6XcjrsXahzo7m8ZrTIPPusVPsRWQDToSTuaKQMkFVSm+A/pR 5K1Wpjw3xaWFB1FAW5W/dFiHYJ3USxZlrrDQYcP/QfIJDRpLHVDWd723toAj5T5y UG5KOEO2TftiAZ7gA63nLnxnusFIESq5ZXSdTGmVUvn6Xk8b2E7DeqXnkevSOvOM hxglTqdu7Tuhx/iauyWtU0Xlkztjrg== -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:29 2024 by rpki-client on console-fra.rpki-client.org