$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer File: 0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer (raw, json) Hash identifier: QSTyX2Xp5ijbcuNykOhWVG2EWPoGodNhfEhBfn82weE= Subject key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858481B3533BC4E2F7DEC955FF900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Dec 2024 14:00:55 +0000 Certificate not after: Wed 10 Feb 2027 14:20:27 +0000 Subordinate resources: AS: 8003 AS: 13847 IP: 23.128.236.0/24 IP: 2602:f7a8::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1b:35:33:bc:4e:2f:7d:ec:95:5f:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Dec 5 14:00:55 2024 GMT Not After : Feb 10 14:20:27 2027 GMT Subject: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:d5:5e:e6:f7:08:c8:71:12:d1:59:10:97: a8:43:00:d1:15:2d:e1:0e:3b:20:fc:d2:ec:fd:63: 5b:36:82:15:26:89:8a:07:57:98:c6:ff:81:aa:e9: 65:e5:6b:df:4e:3a:b0:42:37:e8:82:eb:4d:db:17: 23:58:18:4c:ec:ae:5f:0c:9e:43:f5:a9:96:10:91: ee:46:8b:c3:f7:4f:ec:47:79:fe:c0:b5:2c:d6:ca: 9a:d8:92:09:61:5f:a6:e9:97:2e:e1:0d:0b:2c:8a: c7:a5:4f:e5:57:6e:ba:05:7b:52:0b:e4:da:db:95: 5e:90:e1:60:07:1d:e9:7f:a9:6d:3f:b6:9a:50:d3: 95:b0:5a:70:b4:4c:3d:3c:2f:6c:9a:4a:70:e4:61: a8:0f:dd:8d:3d:36:57:ea:23:09:c4:9f:d0:8a:41: 0f:49:f7:32:eb:0a:d8:e9:05:b6:50:a8:90:ce:4a: e5:3e:09:08:b8:ef:b8:34:96:53:25:31:bc:3a:f2: 98:d8:4e:6c:3a:6c:59:d5:49:4b:83:d1:d8:28:68: 3f:03:ec:1d:37:44:21:2c:c3:0d:a4:3d:f6:a7:4a: 57:44:10:37:4a:26:b8:78:f6:91:7a:57:88:01:40: 1c:2f:ea:6a:23:6c:ba:fb:f9:b0:7c:4a:1a:97:7a: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.128.236.0/24 IPv6: 2602:f7a8::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8003 13847 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:62:27:ec:aa:24:9f:a9:7d:5f:83:00:c8:f1:aa:a9:71:60: 49:0a:25:ce:3e:70:57:cf:58:ae:c4:1b:06:a1:c5:f7:52:69: 3c:9d:b7:9e:2f:39:da:2c:db:d7:10:33:81:ac:19:85:7a:50: 72:c6:93:13:57:08:09:a1:ad:6f:e0:4d:30:96:8f:28:a9:19: b7:b7:7b:47:41:e0:34:d5:73:5c:af:f4:c7:13:35:c8:b3:5e: 79:57:a2:4c:d6:9e:89:1a:42:6c:ca:6e:d8:37:61:61:f5:5d: 91:b4:e7:6b:05:b6:89:82:59:04:62:cc:f2:33:59:90:b4:55: ec:bb:2a:4f:50:6e:11:5d:11:9f:63:4b:eb:d0:48:f5:b7:53: 62:9a:b0:7b:e9:62:c2:66:08:d3:f4:e4:74:57:79:fc:cc:3f: 1b:92:6a:42:93:f1:5b:44:72:a6:b6:7f:cb:eb:13:9c:e6:6d: be:b1:a1:0b:b8:b6:28:29:eb:97:4f:62:28:6f:de:51:b7:42: 60:e1:79:53:70:1e:b9:c5:96:37:79:8c:54:f1:f5:88:23:a7: ac:0a:84:76:93:07:22:7e:75:a0:53:8f:26:01:df:7c:bc:f6: 23:e9:f6:84:82:7f:cb:02:16:23:44:86:21:0f:83:1a:17:8e: 9c:06:99:a8 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEgbNTO8Ti997JVf+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTIwNTE0MDA1NVoXDTI3MDIxMDE0MjAyN1owLzEtMCsGA1UEAxMk MGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2YjhkNDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuDVXub3CMhxEtFZEJeoQwDRFS3hDjsg/NLs /WNbNoIVJomKB1eYxv+Bqull5WvfTjqwQjfogutN2xcjWBhM7K5fDJ5D9amWEJHu RovD90/sR3n+wLUs1sqa2JIJYV+m6Zcu4Q0LLIrHpU/lV266BXtSC+Ta25VekOFg Bx3pf6ltP7aaUNOVsFpwtEw9PC9smkpw5GGoD92NPTZX6iMJxJ/QikEPSfcy6wrY 6QW2UKiQzkrlPgkIuO+4NJZTJTG8OvKY2E5sOmxZ1UlLg9HYKGg/A+wdN0QhLMMN pD32p0pXRBA3Sia4ePaReleIAUAcL+pqI2y6+/mwfEoal3rBAQIDAQABo4IELjCC BCowHQYDVR0OBBYEFHjctT4gGIfD0zl+afRyZKvxe7DUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8w YzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzBjMmI3NmZiLTA1NTUtNGJlZC1i NzliLTIwZWM1NmI4ZDQxMC8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZi OGQ0MTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgOwwDgQCAAIwCAMGACYC96gAMB0GCCsGAQUF BwEIAQH/BA4wDKAKMAgCAh9DAgI2FzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCSYifsqiSfqX1fgwDI8aqp cWBJCiXOPnBXz1iuxBsGocX3Umk8nbeeLznaLNvXEDOBrBmFelByxpMTVwgJoa1v 4E0wlo8oqRm3t3tHQeA01XNcr/THEzXIs155V6JM1p6JGkJsym7YN2Fh9V2RtOdr BbaJglkEYszyM1mQtFXsuypPUG4RXRGfY0vr0Ej1t1NimrB76WLCZgjT9OR0V3n8 zD8bkmpCk/FbRHKmtn/L6xOc5m2+saELuLYoKeuXT2Iob95Rt0Jg4XlTcB65xZY3 eYxU8fWII6esCoR2kwcifnWgU48mAd98vPYj6faEgn/LAhYjRIYhD4MaF46cBpmo -----END CERTIFICATE-----Generated at Sat Feb 15 06:47:41 2025 by rpki-client