$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f6ac7b35-10b2-420e-8030-722c2450545e.cer File: f6ac7b35-10b2-420e-8030-722c2450545e.cer (raw, json) Hash identifier: ONmVeBpYDn8UoT/0CNnS6piKzQGQ9JayK5fXiWV8Rbo= Subject key identifier: 60:F0:5F:53:22:4B:8C:7B:AC:44:DA:08:F3:20:E5:F4:29:F2:19:CB Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584723FE3657FC9A20E9BA3FED00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f6ac7b35-10b2-420e-8030-722c2450545e/f6ac7b35-10b2-420e-8030-722c2450545e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f6ac7b35-10b2-420e-8030-722c2450545e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Sep 2024 00:45:27 +0000 Certificate not after: Sat 12 Dec 2026 01:45:27 +0000 Subordinate resources: AS: 11861 IP: 2602:fd2e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:23:fe:36:57:fc:9a:20:e9:ba:3f:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Sep 8 00:45:27 2024 GMT Not After : Dec 12 01:45:27 2026 GMT Subject: CN=f6ac7b35-10b2-420e-8030-722c2450545e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0d:b4:4d:c2:69:f3:8d:02:3c:51:18:ee:b6: 0b:87:cf:f7:6e:e6:11:2c:d8:c0:22:46:b2:6a:fc: 11:8f:e3:76:4c:40:04:23:ee:bb:60:9a:e5:01:46: 4b:6f:ad:2e:77:a7:e8:6f:f7:3b:87:47:e0:41:1c: 34:3d:ea:67:81:c4:1a:46:7d:12:dd:de:9d:21:e9: f0:c7:d6:4b:11:8a:05:40:0c:98:84:8a:31:20:3e: 6d:3b:8b:bd:4e:51:8c:65:d3:28:9e:40:fb:5a:a1: 00:f1:06:4e:8e:e8:41:3f:21:29:e2:c8:2d:d2:f6: 03:71:76:09:75:e9:23:50:42:a8:f5:96:9a:a3:99: f6:ac:7f:46:c7:dc:c1:db:20:ea:c1:36:88:a1:08: 00:b4:16:d1:c7:de:33:2c:bd:c4:94:fa:8c:92:ab: 72:be:56:75:48:42:da:c7:03:0a:f2:e0:cf:45:da: c7:ec:0b:89:95:3b:44:83:bb:94:50:80:07:b8:c4: 31:07:47:7b:29:e3:bd:d6:c1:df:78:28:f8:fc:fe: 31:7c:75:f6:72:6e:57:dd:92:96:9a:f8:88:71:7a: 66:cb:46:be:88:4e:51:53:af:39:29:ff:eb:54:53: 4c:f7:f6:4f:b5:37:9f:ee:2d:95:af:0a:9b:16:b5: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F0:5F:53:22:4B:8C:7B:AC:44:DA:08:F3:20:E5:F4:29:F2:19:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f6ac7b35-10b2-420e-8030-722c2450545e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f6ac7b35-10b2-420e-8030-722c2450545e/f6ac7b35-10b2-420e-8030-722c2450545e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd2e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11861 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b3:88:b4:4d:f4:b0:45:a5:e7:67:ed:45:67:6d:02:38:5b: 2b:6b:6f:65:9a:7a:ae:54:50:f1:26:bd:96:bd:26:9a:c3:f2: 59:1d:53:c2:76:4c:8b:77:4a:79:f3:58:a4:e6:37:19:21:97: 22:a5:0f:20:cb:c9:62:b5:fc:58:28:0d:7a:7d:08:40:37:20: 99:34:16:c0:41:0f:ce:8a:7d:ce:07:d3:e8:bd:13:1f:28:3b: 8b:ca:aa:e9:8a:07:ed:1a:ed:66:63:e6:66:05:7a:bf:e8:aa: 6f:fc:b7:39:fa:7c:a1:d9:85:ab:93:a8:6c:82:c1:db:21:cb: 05:a4:2b:56:3f:8f:35:fa:4f:18:4d:82:eb:c7:48:17:b8:46: 25:cf:a7:12:3d:ad:a4:3f:5a:35:a8:c4:ca:01:a8:1e:ed:04: 92:77:56:db:31:47:d7:f9:7c:5b:73:bc:17:4c:76:bd:1c:26: d6:1e:d5:27:ec:2f:d0:f4:49:f1:82:eb:a4:9e:43:83:bc:9b: ca:17:8b:be:0e:3f:9c:c8:ef:02:e1:72:62:4d:e2:dd:61:71: 65:8a:12:54:d8:e7:3c:b7:f2:87:fc:dd:ba:be:58:1b:58:d0: 3a:d6:52:4e:64:9d:31:75:b1:e1:c3:46:50:26:8f:0b:86:a5: 57:60:26:1c -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEcj/jZX/Jog6bo/7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI0MDkwODAwNDUyN1oXDTI2MTIxMjAxNDUyN1owLzEtMCsGA1UEAxMk ZjZhYzdiMzUtMTBiMi00MjBlLTgwMzAtNzIyYzI0NTA1NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw20TcJp840CPFEY7rYLh8/3buYRLNjAIkay avwRj+N2TEAEI+67YJrlAUZLb60ud6fob/c7h0fgQRw0PepngcQaRn0S3d6dIenw x9ZLEYoFQAyYhIoxID5tO4u9TlGMZdMonkD7WqEA8QZOjuhBPyEp4sgt0vYDcXYJ dekjUEKo9Zaao5n2rH9Gx9zB2yDqwTaIoQgAtBbRx94zLL3ElPqMkqtyvlZ1SELa xwMK8uDPRdrH7AuJlTtEg7uUUIAHuMQxB0d7KeO91sHfeCj4/P4xfHX2cm5X3ZKW mviIcXpmy0a+iE5RU685Kf/rVFNM9/ZPtTef7i2VrwqbFrV00QIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFGDwX1MiS4x7rETaCPMg5fQp8hnLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m NmFjN2IzNS0xMGIyLTQyMGUtODAzMC03MjJjMjQ1MDU0NWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Y2YWM3YjM1LTEwYjItNDIwZS04 MDMwLTcyMmMyNDUwNTQ1ZS9mNmFjN2IzNS0xMGIyLTQyMGUtODAzMC03MjJjMjQ1 MDU0NWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAv0uADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgIuVTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA0s4i0TfSwRaXnZ+1FZ20COFsra29lmnquVFDxJr2WvSaa w/JZHVPCdkyLd0p581ik5jcZIZcipQ8gy8litfxYKA16fQhANyCZNBbAQQ/Oin3O B9PovRMfKDuLyqrpigftGu1mY+ZmBXq/6Kpv/Lc5+nyh2YWrk6hsgsHbIcsFpCtW P481+k8YTYLrx0gXuEYlz6cSPa2kP1o1qMTKAage7QSSd1bbMUfX+Xxbc7wXTHa9 HCbWHtUn7C/Q9EnxguuknkODvJvKF4u+Dj+cyO8C4XJiTeLdYXFlihJU2Oc8t/KH /N26vlgbWNA61lJOZJ0xdbHhw0ZQJo8LhqVXYCYc -----END CERTIFICATE-----Generated at Thu Nov 21 16:22:22 2024 by rpki-client on console-ams.rpki-client.org