$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer File: 0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer (raw, json) Hash identifier: fNH3Baeb8Pi9Xgvgfn47Q2Qzzg+13oZ4WpaazYpDLos= Subject key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847B7DBB87565C3AFC673F78880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Oct 2024 23:55:35 +0000 Certificate not after: Wed 03 Feb 2027 00:55:35 +0000 Subordinate resources: AS: 10702 AS: 14702 IP: 134.20.0.0/16 IP: 141.221.0.0/16 IP: 2620:0:2b80::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b7:db:b8:75:65:c3:af:c6:73:f7:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 30 23:55:35 2024 GMT Not After : Feb 3 00:55:35 2027 GMT Subject: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d1:f1:f5:d9:cf:a7:a1:a9:66:e9:77:cb:1f: 80:c1:ba:c0:54:00:dd:6f:96:d0:5c:02:2f:38:df: 02:24:31:10:a4:10:eb:76:76:88:99:6d:15:cb:c6: cd:37:85:a7:76:0b:83:f6:91:63:14:e0:7c:6f:85: 2f:af:34:44:9a:57:e6:aa:cb:97:19:33:c0:c7:28: e1:89:7d:75:97:0d:de:c6:90:fb:b4:b2:9a:05:38: e4:44:42:bd:85:0b:9b:0a:66:6e:75:71:94:74:bc: 22:e2:92:6b:90:b1:ae:f0:de:77:53:52:5a:34:8c: d3:18:12:c7:e3:af:9e:8c:5d:6c:93:84:af:36:54: 4a:b8:7b:62:03:a1:d2:79:d9:93:f9:3f:9e:c5:14: 37:58:e4:6f:17:66:f0:ce:2f:89:55:b5:21:0b:5b: 0e:fe:97:4c:66:ca:78:ef:bd:1a:3a:f3:5b:0e:22: a2:d9:34:b9:92:bb:c4:2a:9b:5f:15:d6:67:d3:31: b1:1b:c9:85:2d:69:3d:b2:52:3b:49:e0:f1:e5:4d: d6:2c:a8:76:43:74:90:f1:05:30:da:db:75:77:e5: d6:ce:82:20:c5:2d:5f:ba:fe:d7:03:a2:ef:a2:7d: 9f:48:7d:15:a9:36:57:fe:ac:71:e8:27:1c:44:9a: fc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 134.20.0.0/16 141.221.0.0/16 IPv6: 2620:0:2b80::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10702 14702 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1b:5a:4a:f1:06:58:d8:0d:28:c4:1d:1b:ef:31:15:87:44: a2:6c:de:ff:36:73:cc:e9:e6:38:1e:3c:8d:af:bc:b8:07:68: 96:14:fe:f1:ee:ce:d5:65:be:bf:25:7d:b3:d8:c0:4b:5c:e4: 6f:19:2c:43:eb:ed:eb:b8:34:bf:34:21:db:67:92:82:9d:e0: 27:50:10:fe:f3:c9:cd:9b:e8:82:7f:67:cb:51:e7:b0:3a:9f: 80:4f:47:f3:cb:ef:b4:1f:0e:51:7e:f4:98:74:86:0f:44:43: 3c:68:10:de:1e:23:54:53:44:b1:08:a0:18:e6:27:6a:e4:99: d4:69:26:e4:d0:1e:09:41:ee:9b:e1:b5:bb:f1:e2:50:8d:39: 55:52:36:8a:66:85:56:38:53:05:89:26:3a:29:f7:75:ca:78: 86:b7:95:be:07:8b:7c:3a:96:05:2a:eb:22:1b:7e:1b:36:9e: 39:7c:16:74:ce:9c:79:fb:76:11:0d:b6:6f:03:08:1f:eb:6e: fb:32:7d:bd:11:db:c5:5f:11:04:c1:2f:7b:ad:f1:22:29:60: a3:91:e8:31:bc:49:c4:29:5d:2e:22:57:07:67:0c:37:eb:a1: 33:97:64:56:34:75:39:02:f6:26:76:bf:f8:90:d8:4b:1e:b3: 94:83:3c:8f -----BEGIN CERTIFICATE----- MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEe327h1ZcOvxnP3iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAzMDIzNTUzNVoXDTI3MDIwMzAwNTUzNVowLzEtMCsGA1UEAxMk MGI4YjIwY2EtMmExZS00NzQyLWI2M2MtNGIzYjFkMTUxZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNHx9dnPp6GpZul3yx+AwbrAVADdb5bQXAIv ON8CJDEQpBDrdnaImW0Vy8bNN4WndguD9pFjFOB8b4UvrzREmlfmqsuXGTPAxyjh iX11lw3expD7tLKaBTjkREK9hQubCmZudXGUdLwi4pJrkLGu8N53U1JaNIzTGBLH 46+ejF1sk4SvNlRKuHtiA6HSedmT+T+exRQ3WORvF2bwzi+JVbUhC1sO/pdMZsp4 770aOvNbDiKi2TS5krvEKptfFdZn0zGxG8mFLWk9slI7SeDx5U3WLKh2Q3SQ8QUw 2tt1d+XWzoIgxS1fuv7XA6Lvon2fSH0VqTZX/qxx6CccRJr8SwIDAQABo4IEMzCC BC8wHQYDVR0OBBYEFPP/WKpAAV4d0F0Qt3io+GXSnUIMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8w YjhiMjBjYS0yYTFlLTQ3NDItYjYzYy00YjNiMWQxNTFmMTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzBiOGIyMGNhLTJhMWUtNDc0Mi1i NjNjLTRiM2IxZDE1MWYxNS8wYjhiMjBjYS0yYTFlLTQ3NDItYjYzYy00YjNiMWQx NTFmMTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBAEAgABMAoDAwCGFAMDAI3dMA8EAgACMAkDBwQmIAAAK4AwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICKc4CAjluMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIAbWkrxBljYDSjE HRvvMRWHRKJs3v82c8zp5jgePI2vvLgHaJYU/vHuztVlvr8lfbPYwEtc5G8ZLEPr 7eu4NL80IdtnkoKd4CdQEP7zyc2b6IJ/Z8tR57A6n4BPR/PL77QfDlF+9Jh0hg9E QzxoEN4eI1RTRLEIoBjmJ2rkmdRpJuTQHglB7pvhtbvx4lCNOVVSNopmhVY4UwWJ Jjop93XKeIa3lb4Hi3w6lgUq6yIbfhs2njl8FnTOnHn7dhENtm8DCB/rbvsyfb0R 28VfEQTBL3ut8SIpYKOR6DG8ScQpXS4iVwdnDDfroTOXZFY0dTkC9iZ2v/iQ2Ese s5SDPI8= -----END CERTIFICATE-----Generated at Thu Feb 6 18:27:14 2025 by rpki-client