$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.cer File: 0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.cer (raw, json) Hash identifier: dOPfQQw4Sa6/tMLLG+dxEcjnyIDciaSPMIy7hmT9tY0= Subject key identifier: 7C:32:C4:33:EC:1A:5E:9A:5F:89:F7:D9:82:A5:C2:4D:24:F5:A7:1B Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847A8EEFF62529FFABCEFBCB900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Oct 2024 15:37:18 +0000 Certificate not after: Thu 28 Jan 2027 16:37:18 +0000 Subordinate resources: AS: 53571 IP: 199.181.152.0/22 IP: 204.155.96.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a8:ee:ff:62:52:9f:fa:bc:ef:bc:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 25 15:37:18 2024 GMT Not After : Jan 28 16:37:18 2027 GMT Subject: CN=0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:f0:c3:af:8a:f3:e4:c4:36:83:06:5f:e2: 83:02:9c:97:d6:06:2b:3e:46:20:b8:ce:c5:52:fb: 8c:9a:e6:ed:42:47:19:36:57:cf:a2:67:5c:25:66: 77:33:bc:b0:36:af:7b:08:2e:2e:e9:7d:b5:aa:1e: f0:f3:6f:56:d4:fa:c9:70:8c:2b:85:7f:95:ff:2d: f1:78:4c:b8:38:c1:a5:15:8f:2b:87:96:9b:8e:af: 07:73:9f:35:a6:d5:fc:58:a7:4c:2d:0d:57:0b:99: cc:5f:f5:a3:d3:1b:31:4a:41:2a:84:6d:b1:1c:b0: 08:eb:e4:bf:a3:04:6a:03:e4:23:ca:5a:36:12:b3: d4:f8:bf:29:8c:2e:0f:1c:d4:35:30:fa:67:f4:ab: 94:f9:b2:aa:91:62:9e:81:7c:88:b0:e5:dc:6b:40: 0b:e0:b6:ba:4e:d6:94:67:33:51:ce:2b:57:97:72: d5:64:16:42:2f:cb:77:a2:ed:65:db:13:a8:37:27: b7:10:44:a9:f7:07:74:5b:b3:38:4b:a3:30:ac:e3: d9:8d:08:05:38:29:92:8e:70:70:c7:3c:55:80:91: 78:b3:fe:4e:65:e3:7c:cc:5d:0f:be:ef:da:05:9f: 8c:ec:1a:d5:80:fc:c9:64:02:9f:1b:ce:5b:81:01: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:32:C4:33:EC:1A:5E:9A:5F:89:F7:D9:82:A5:C2:4D:24:F5:A7:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1/0aeaf07a-939d-4d98-a7c8-6ef9c73ea5a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 199.181.152.0/22 204.155.96.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53571 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:61:e1:2c:60:0d:1b:f8:0b:e2:fe:00:cf:f6:0b:d5:73:79: 86:9d:d8:d2:5b:95:fc:74:03:de:92:b5:0b:32:9b:15:6d:f0: 1e:3b:eb:f8:0a:32:fa:e8:06:d8:84:66:ed:86:ca:0c:60:2b: f4:ab:3f:d5:f2:3a:7f:43:17:32:1a:b8:f9:07:2f:cf:1c:98: 70:c9:94:20:7a:db:92:44:df:28:e2:14:8c:df:fe:60:0b:01: ef:81:2b:65:47:cf:15:a8:8a:2e:f7:70:57:5c:98:91:b5:2d: d9:ec:4f:87:ce:5e:8e:92:52:3f:86:b3:ac:a8:09:33:2d:0f: 1d:75:a8:f2:fc:56:b8:9e:90:90:92:31:d3:22:c2:3d:9d:27: 50:ab:82:6f:69:78:e4:cd:5f:c0:60:0d:74:48:1e:49:2a:6c: 93:8d:bb:2f:57:80:67:61:0d:e1:ef:c6:6e:16:90:ad:fe:29: 62:87:a7:7d:4b:68:3c:d3:0e:c4:46:a6:e4:85:f5:3b:1b:f5: a5:71:c7:c6:d7:31:94:a8:5e:f6:3e:bb:28:68:4f:2a:7f:40: c2:20:2b:b7:52:d3:ec:6e:56:ba:8b:f6:58:58:16:4b:f9:ad: 3a:e6:e6:96:e4:8a:a3:5f:4c:00:f8:91:a7:ca:04:8a:b6:82: 0b:30:49:5c -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEeo7v9iUp/6vO+8uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAyNTE1MzcxOFoXDTI3MDEyODE2MzcxOFowLzEtMCsGA1UEAxMk MGFlYWYwN2EtOTM5ZC00ZDk4LWE3YzgtNmVmOWM3M2VhNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoofww6+K8+TENoMGX+KDApyX1gYrPkYguM7F UvuMmubtQkcZNlfPomdcJWZ3M7ywNq97CC4u6X21qh7w829W1PrJcIwrhX+V/y3x eEy4OMGlFY8rh5abjq8Hc581ptX8WKdMLQ1XC5nMX/Wj0xsxSkEqhG2xHLAI6+S/ owRqA+Qjylo2ErPU+L8pjC4PHNQ1MPpn9KuU+bKqkWKegXyIsOXca0AL4La6TtaU ZzNRzitXl3LVZBZCL8t3ou1l2xOoNye3EESp9wd0W7M4S6MwrOPZjQgFOCmSjnBw xzxVgJF4s/5OZeN8zF0Pvu/aBZ+M7BrVgPzJZAKfG85bgQGeIQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFHwyxDPsGl6aX4n32YKlwk0k9acbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8w YWVhZjA3YS05MzlkLTRkOTgtYTdjOC02ZWY5YzczZWE1YTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzBhZWFmMDdhLTkzOWQtNGQ5OC1h N2M4LTZlZjljNzNlYTVhMS8wYWVhZjA3YS05MzlkLTRkOTgtYTdjOC02ZWY5Yzcz ZWE1YTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHtZgDBATMm2AwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANFDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAClh4SxgDRv4C+L+AM/2C9VzeYad2NJblfx0A96S tQsymxVt8B476/gKMvroBtiEZu2GygxgK/SrP9XyOn9DFzIauPkHL88cmHDJlCB6 25JE3yjiFIzf/mALAe+BK2VHzxWoii73cFdcmJG1LdnsT4fOXo6SUj+Gs6yoCTMt Dx11qPL8VriekJCSMdMiwj2dJ1Crgm9peOTNX8BgDXRIHkkqbJONuy9XgGdhDeHv xm4WkK3+KWKHp31LaDzTDsRGpuSF9Tsb9aVxx8bXMZSoXvY+uyhoTyp/QMIgK7dS 0+xuVrqL9lhYFkv5rTrm5pbkiqNfTAD4kafKBIq2ggswSVw= -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:25 2024 by rpki-client on console-fra.rpki-client.org