$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff.cer File: 06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff.cer (raw, json) Hash identifier: QNVlLklghU/QK5UJiJ2Kzt0nMaLTcuqqxw16jrUI1M4= Subject key identifier: 6F:BE:3B:91:BC:C7:7E:51:92:EE:36:86:B3:32:14:5A:20:B1:26:B2 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858479E1DE31AD6893D82E7E73580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Oct 2024 18:37:53 +0000 Certificate not after: Sun 24 Jan 2027 19:37:53 +0000 Subordinate resources: IP: 136.180.0.0/16 IP: 198.136.134.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9e:1d:e3:1a:d6:89:3d:82:e7:e7:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 21 18:37:53 2024 GMT Not After : Jan 24 19:37:53 2027 GMT Subject: CN=06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:3d:c2:0c:08:db:12:d8:dc:0f:03:9e:80: 65:13:f6:7f:c0:e0:fe:ff:ed:e5:1a:21:60:fd:8a: 9c:06:fa:08:ec:31:e0:8f:1f:95:e6:ef:e4:c9:14: 44:69:33:db:d5:eb:a1:09:e1:c6:cb:f6:cd:db:7f: 5d:c0:40:85:d2:ea:8c:f8:6b:61:65:06:5e:4e:76: 8a:ba:5c:2d:58:fa:29:8d:40:ec:cc:4c:60:cd:0d: a9:ad:c7:c5:4c:4e:eb:a9:e7:14:71:56:13:63:71: 97:35:0a:c7:27:21:da:db:51:b1:e4:12:8c:05:76: f0:6d:3d:aa:fb:3e:b2:fa:c3:32:5c:c1:6d:f6:dc: d1:6c:7f:0b:89:4c:f2:49:5e:54:74:f2:ce:43:d6: 12:c7:e2:7b:99:47:d5:44:04:ee:fc:2b:4d:6b:a2: 56:77:c1:09:91:01:f5:9b:59:bf:7d:cb:4f:d9:53: 57:3b:94:61:d4:c2:07:9f:5c:a5:1b:b0:dc:a8:e7: fa:b9:02:4e:49:b1:9e:f0:3a:dc:62:a2:ee:c5:25: 7c:89:37:b8:a4:95:a2:77:15:9e:55:5d:71:55:68: d0:f5:ce:e0:a3:b5:73:aa:76:97:ef:5e:4a:c9:0f: 19:31:eb:43:4c:79:18:a0:30:c8:02:25:f2:3a:bb: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BE:3B:91:BC:C7:7E:51:92:EE:36:86:B3:32:14:5A:20:B1:26:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff/06ae5c00-e913-4c51-86d3-b8ec0fe8d5ff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 136.180.0.0/16 198.136.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a8:df:95:ec:15:86:45:eb:01:04:bf:fa:f5:b7:67:6c:ca: ff:78:e5:a4:83:d2:c9:55:e7:2a:74:72:0c:b5:72:1f:37:93: 4b:84:d6:a1:3f:17:49:b7:4a:4b:1c:1d:f7:74:9a:e0:ba:3a: f4:47:f3:ec:22:e5:82:36:44:23:ec:7a:56:26:ba:eb:7e:82: b5:60:c5:99:62:ad:83:39:51:71:21:7e:95:8a:ac:36:4f:70: 18:1a:86:64:f6:18:94:35:6e:02:78:95:8e:39:c4:40:d1:45: ee:52:a5:09:5b:52:37:9c:9f:0b:31:07:2e:69:c7:52:3f:5f: 95:6e:db:58:27:0b:85:fa:d7:49:c8:29:a9:ba:be:e7:7e:34: 71:dc:80:20:dc:10:09:68:51:b7:a2:61:30:1b:ea:96:40:74: 19:21:8d:ec:b4:b3:84:d3:c6:f9:cb:e5:9b:81:2a:4e:ea:8a: e0:e9:6f:69:ea:4c:1a:aa:b4:7c:a6:38:67:ee:ed:34:f5:1a: 7d:9d:ca:36:20:e0:37:78:d2:8e:cc:82:7d:cd:ec:18:d4:83: cf:a3:6d:3f:de:c2:00:cd:09:4c:c5:8b:53:c3:71:82:0d:f8: 0c:dc:4a:b4:0a:e9:36:d9:b3:a0:96:b1:60:b0:ae:9b:f4:4c: fe:02:8f:19 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEeeHeMa1ok9gufnNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAyMTE4Mzc1M1oXDTI3MDEyNDE5Mzc1M1owLzEtMCsGA1UEAxMk MDZhZTVjMDAtZTkxMy00YzUxLTg2ZDMtYjhlYzBmZThkNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowQ9wgwI2xLY3A8DnoBlE/Z/wOD+/+3lGiFg /YqcBvoI7DHgjx+V5u/kyRREaTPb1euhCeHGy/bN239dwECF0uqM+GthZQZeTnaK ulwtWPopjUDszExgzQ2prcfFTE7rqecUcVYTY3GXNQrHJyHa21Gx5BKMBXbwbT2q +z6y+sMyXMFt9tzRbH8LiUzySV5UdPLOQ9YSx+J7mUfVRATu/CtNa6JWd8EJkQH1 m1m/fctP2VNXO5Rh1MIHn1ylG7DcqOf6uQJOSbGe8DrcYqLuxSV8iTe4pJWidxWe VV1xVWjQ9c7go7VzqnaX715KyQ8ZMetDTHkYoDDIAiXyOrtvNQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFG++O5G8x35Rku42hrMyFFogsSayMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8w NmFlNWMwMC1lOTEzLTRjNTEtODZkMy1iOGVjMGZlOGQ1ZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzA2YWU1YzAwLWU5MTMtNGM1MS04 NmQzLWI4ZWMwZmU4ZDVmZi8wNmFlNWMwMC1lOTEzLTRjNTEtODZkMy1iOGVjMGZl OGQ1ZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCItAMEAMaIhjBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgqN+V7BWGResB BL/69bdnbMr/eOWkg9LJVecqdHIMtXIfN5NLhNahPxdJt0pLHB33dJrgujr0R/Ps IuWCNkQj7HpWJrrrfoK1YMWZYq2DOVFxIX6Viqw2T3AYGoZk9hiUNW4CeJWOOcRA 0UXuUqUJW1I3nJ8LMQcuacdSP1+VbttYJwuF+tdJyCmpur7nfjRx3IAg3BAJaFG3 omEwG+qWQHQZIY3stLOE08b5y+WbgSpO6org6W9p6kwaqrR8pjhn7u009Rp9nco2 IOA3eNKOzIJ9zewY1IPPo20/3sIAzQlMxYtTw3GCDfgM3Eq0Cuk22bOglrFgsK6b 9Ez+Ao8Z -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:12 2024 by rpki-client on console-ams.rpki-client.org