$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer File: e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer (raw, json) Hash identifier: jp7BTKuLpenu7nUtmG8Cb4rXLFYtDRyUAi4oH1e+xTM= Subject key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F43285845F85AFF6884859E101A93C540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 May 2024 16:49:54 +0000 Certificate not after: Wed 26 Aug 2026 16:49:54 +0000 Subordinate resources: AS: 11546 AS: 11920 IP: 64.39.240.0/20 IP: 64.89.176.0/20 IP: 216.128.208.0/20 IP: 2600:900::/28 IP: 2620:53:8000::/48 IP: 2620:d5::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f8:5a:ff:68:84:85:9e:10:1a:93:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: May 23 16:49:54 2024 GMT Not After : Aug 26 16:49:54 2026 GMT Subject: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:26:16:90:1e:64:b9:c2:d5:4e:1e:ef:fc:d7: 5c:95:8f:64:d2:25:81:4d:1a:ac:7f:11:ef:13:97: 23:b8:4a:35:ab:34:e4:b6:49:b0:13:18:8b:1b:f5: 3f:4b:36:80:bb:26:96:7e:87:2c:ef:ef:fd:84:51: 51:8d:dd:b7:2b:ff:84:08:c3:8c:39:86:c4:ad:50: 3a:15:28:d1:f6:20:1d:ff:d2:80:86:34:1e:09:72: 73:dd:36:79:0c:b3:5c:e7:80:06:a1:da:0d:60:cf: fd:c7:6d:3b:7c:93:34:96:cf:c9:45:6a:41:37:92: 51:d4:4b:f1:b0:4e:bd:82:8f:67:d3:2d:cc:cf:f5: cc:b3:34:7e:68:a0:2f:14:2a:d3:a2:6c:f7:de:9c: 86:28:ca:a7:8b:46:55:63:49:cc:86:8f:bb:0b:f0: 37:32:10:6f:61:10:74:be:eb:83:92:fe:64:f1:a5: af:a1:35:8b:03:a3:08:2c:27:c0:9c:d7:f9:41:a6: 18:d0:81:ec:1d:9e:04:84:d2:f2:24:cd:45:6f:9d: 93:12:a2:d8:03:2f:be:26:65:59:b7:89:60:c6:94: 3c:35:b4:cb:25:44:cb:9b:4b:53:68:9c:ca:87:57: 18:83:fb:e2:2f:96:4b:ad:f9:c1:e0:a6:e2:b5:1e: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.39.240.0/20 64.89.176.0/20 216.128.208.0/20 IPv6: 2600:900::/28 2620:53:8000::/48 2620:d5::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11546 11920 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ce:e1:03:12:a7:c9:bb:e7:8b:a8:e8:24:57:e5:9c:08:8e: 76:b4:76:98:23:52:9e:18:9d:b4:b6:36:d2:a2:cf:e3:46:67: ea:54:6a:c3:6f:06:49:91:26:be:e6:35:d7:82:c4:4c:10:1a: 0d:59:8f:b8:d8:f6:26:1a:51:20:67:6e:d4:09:0a:97:c9:33: 8b:c2:65:f8:48:f1:75:4f:26:7a:07:08:d9:a3:87:e0:e0:86: 51:cc:cf:bd:94:1d:a2:20:6e:82:ef:7f:4b:6e:52:42:03:2a: 3c:02:97:a8:61:9a:76:af:81:cc:ec:b4:b2:15:ea:23:30:d6: ed:2a:e1:db:33:05:6c:94:d7:93:cb:4b:b6:9d:5e:ea:87:43: e4:ee:6b:0a:bd:78:50:c0:70:38:5e:cd:5b:b0:41:20:d7:f5: f5:6e:78:d6:ad:68:e6:a2:78:33:4e:f2:d7:e4:be:22:a8:9f: ba:48:13:49:72:3e:fb:40:a3:25:2f:8a:34:97:8a:46:8d:35: f0:e5:2a:f9:d0:c8:30:de:49:fa:13:22:51:5d:18:3c:a2:77: 94:83:67:20:57:72:d3:e0:c9:0f:85:7b:74:23:6c:1b:97:15: e7:93:f9:58:dd:ae:83:e5:3c:35:6a:58:23:8c:03:d0:5a:8a: eb:e5:f8:02 -----BEGIN CERTIFICATE----- MIIHOTCCBiGgAwIBAgIUAQ0Mn0MoWEX4Wv9ohIWeEBqTxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDUyMzE2NDk1NFoXDTI2MDgyNjE2NDk1NFowLzEtMCsGA1UEAxMk ZTE0ZWJkNWYtZDcyZi00ZmZlLWFlY2QtYWQyZDJiMWE4ZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyYWkB5kucLVTh7v/NdclY9k0iWBTRqsfxHv E5cjuEo1qzTktkmwExiLG/U/SzaAuyaWfocs7+/9hFFRjd23K/+ECMOMOYbErVA6 FSjR9iAd/9KAhjQeCXJz3TZ5DLNc54AGodoNYM/9x207fJM0ls/JRWpBN5JR1Evx sE69go9n0y3Mz/XMszR+aKAvFCrTomz33pyGKMqni0ZVY0nMho+7C/A3MhBvYRB0 vuuDkv5k8aWvoTWLA6MILCfAnNf5QaYY0IHsHZ4EhNLyJM1Fb52TEqLYAy++JmVZ t4lgxpQ8NbTLJUTLm0tTaJzKh1cYg/viL5ZLrfnB4KbitR5VuwIDAQABo4IESzCC BEcwHQYDVR0OBBYEFCiTlrorsDy5JgrJ45t8jsy0iDG5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l MTRlYmQ1Zi1kNzJmLTRmZmUtYWVjZC1hZDJkMmIxYThlZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2UxNGViZDVmLWQ3MmYtNGZmZS1h ZWNkLWFkMmQyYjFhOGVmZi9lMTRlYmQ1Zi1kNzJmLTRmZmUtYWVjZC1hZDJkMmIx YThlZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MBgEAgABMBIDBARAJ/ADBARAWbADBATYgNAwHwQCAAIwGQMFBCYA CQADBwAmIABTgAADBwAmIADVAAAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICLRoC Ai6QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIzO4QMSp8m754uo6CRX5ZwIjna0dpgjUp4YnbS2NtKiz+NG Z+pUasNvBkmRJr7mNdeCxEwQGg1Zj7jY9iYaUSBnbtQJCpfJM4vCZfhI8XVPJnoH CNmjh+DghlHMz72UHaIgboLvf0tuUkIDKjwCl6hhmnavgczstLIV6iMw1u0q4dsz BWyU15PLS7adXuqHQ+Tuawq9eFDAcDhezVuwQSDX9fVueNataOaieDNO8tfkviKo n7pIE0lyPvtAoyUvijSXikaNNfDlKvnQyDDeSfoTIlFdGDyid5SDZyBXctPgyQ+F e3QjbBuXFeeT+VjdroPlPDVqWCOMA9Baiuvl+AI= -----END CERTIFICATE-----Generated at Thu Nov 21 15:35:32 2024 by rpki-client on console-fra.rpki-client.org