$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df.cer File: 1023a4c7-42d2-43d3-969f-e275de93e1df.cer (raw, json) Hash identifier: soxCZXknf4xU7SxS31d1VD3+mQu/P0o9Nrnmh/O3O+U= Subject key identifier: 55:B4:D1:00:88:36:44:5F:7B:74:9D:DA:6E:C2:34:61:33:0A:BD:E0 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584717A4F8C515C3F4ABA6173B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1023a4c7-42d2-43d3-969f-e275de93e1df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Sep 2024 14:35:56 +0000 Certificate not after: Mon 07 Dec 2026 15:35:56 +0000 Subordinate resources: AS: 54786 IP: 151.148.0.0/21 IP: 161.188.210.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:17:a4:f8:c5:15:c3:f4:ab:a6:17:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 3 14:35:56 2024 GMT Not After : Dec 7 15:35:56 2026 GMT Subject: CN=1023a4c7-42d2-43d3-969f-e275de93e1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4f:ea:d3:da:bd:72:87:dd:d3:f0:69:99:ff: 57:de:c0:b2:a4:92:88:6c:ea:4e:20:e3:ee:59:9b: eb:43:7a:8e:fe:ea:08:87:7a:0f:f4:fc:5c:7b:50: 8d:ae:43:1c:01:9c:94:a4:3a:d2:aa:94:c6:c2:65: fb:b0:9e:22:38:42:c8:3f:23:d0:1a:14:35:28:a0: 20:01:f7:ff:02:52:c9:2d:2a:9b:89:86:17:28:d9: 50:63:48:a7:7d:15:cf:b8:bc:c1:3b:74:61:f5:a2: d5:3a:a2:48:7b:4c:0c:66:ef:3f:26:10:fd:ed:25: 59:52:39:f1:32:b0:2d:c5:fa:57:15:b7:dc:15:d0: 58:e6:04:f2:1b:3f:5d:22:60:9a:29:8d:84:ee:04: bf:34:c6:7a:90:cb:a3:b6:6f:7e:56:23:68:72:dd: 3e:3e:22:05:ef:f3:f7:e8:14:e5:0e:2d:60:7e:9a: 51:47:a0:ef:a8:0f:8f:bd:4b:9f:b4:4e:af:5b:d6: e8:a1:c3:d7:8b:bc:42:3a:00:31:13:a8:3b:36:26: e1:cd:d5:29:66:d7:89:8e:4e:8d:68:33:94:f3:40: 30:80:6f:02:7a:c6:33:ba:18:61:44:d0:8e:68:1e: 03:d4:32:14:7f:e4:93:9b:82:35:dc:00:b2:23:f6: 57:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B4:D1:00:88:36:44:5F:7B:74:9D:DA:6E:C2:34:61:33:0A:BD:E0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1023a4c7-42d2-43d3-969f-e275de93e1df/1023a4c7-42d2-43d3-969f-e275de93e1df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 151.148.0.0/21 161.188.210.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54786 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8e:3c:de:de:f2:0e:6d:cf:8a:e0:1a:3b:71:34:55:fe:88: 9b:69:c6:4f:20:b6:19:01:1d:65:fd:38:1e:f6:30:d2:f4:36: b9:7f:48:80:82:d6:59:0c:22:72:72:33:e3:9b:2a:95:13:49: 9b:36:b0:ce:59:9b:21:7b:55:cc:3a:73:a8:cb:d3:3c:54:1b: 39:34:e8:a4:fa:c2:35:20:76:c1:f2:e5:88:f4:37:54:11:d5: a1:53:c8:e0:10:de:21:62:34:a0:58:23:66:81:83:41:e2:46: 68:be:0f:5a:33:07:d0:24:60:78:54:2d:0d:62:53:cc:38:15: ac:96:c4:35:2d:3a:78:a5:60:04:2a:ef:7b:bc:b8:cd:b1:17: 51:90:f9:5f:f5:bb:68:c7:97:77:96:75:c7:a0:12:b3:2e:31: 05:dd:bf:76:49:10:81:ab:3e:5d:94:fc:e9:37:16:5e:9e:83: 12:4f:c6:af:d0:94:c2:43:12:df:4d:89:ed:5c:e7:06:c7:a8: 90:2d:d7:89:5a:d4:af:d3:76:42:d0:77:45:82:24:af:c1:05: 9e:13:98:7c:c2:bc:f8:db:37:be:56:35:b6:df:72:8e:89:17: 50:87:db:94:95:4e:b0:21:2d:1d:8f:3a:8d:83:b3:1e:74:00: 3a:86:65:7d -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEcXpPjFFcP0q6YXOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkwMzE0MzU1NloXDTI2MTIwNzE1MzU1NlowLzEtMCsGA1UEAxMk MTAyM2E0YzctNDJkMi00M2QzLTk2OWYtZTI3NWRlOTNlMWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0/q09q9cofd0/Bpmf9X3sCypJKIbOpOIOPu WZvrQ3qO/uoIh3oP9Pxce1CNrkMcAZyUpDrSqpTGwmX7sJ4iOELIPyPQGhQ1KKAg Aff/AlLJLSqbiYYXKNlQY0infRXPuLzBO3Rh9aLVOqJIe0wMZu8/JhD97SVZUjnx MrAtxfpXFbfcFdBY5gTyGz9dImCaKY2E7gS/NMZ6kMujtm9+ViNoct0+PiIF7/P3 6BTlDi1gfppRR6DvqA+PvUuftE6vW9boocPXi7xCOgAxE6g7NibhzdUpZteJjk6N aDOU80AwgG8CesYzuhhhRNCOaB4D1DIUf+STm4I13ACyI/ZXzwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFFW00QCINkRfe3Sd2m7CNGEzCr3gMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x MDIzYTRjNy00MmQyLTQzZDMtOTY5Zi1lMjc1ZGU5M2UxZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzEwMjNhNGM3LTQyZDItNDNkMy05 NjlmLWUyNzVkZTkzZTFkZi8xMDIzYTRjNy00MmQyLTQzZDMtOTY5Zi1lMjc1ZGU5 M2UxZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAOXlAADBAChvNIwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANYCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABSOPN7e8g5tz4rgGjtxNFX+iJtpxk8gthkBHWX9 OB72MNL0Nrl/SICC1lkMInJyM+ObKpUTSZs2sM5ZmyF7Vcw6c6jL0zxUGzk06KT6 wjUgdsHy5Yj0N1QR1aFTyOAQ3iFiNKBYI2aBg0HiRmi+D1ozB9AkYHhULQ1iU8w4 FayWxDUtOnilYAQq73u8uM2xF1GQ+V/1u2jHl3eWdcegErMuMQXdv3ZJEIGrPl2U /Ok3Fl6egxJPxq/QlMJDEt9Nie1c5wbHqJAt14la1K/TdkLQd0WCJK/BBZ4TmHzC vPjbN75WNbbfco6JF1CH25SVTrAhLR2POo2Dsx50ADqGZX0= -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:02 2024 by rpki-client on console-fra.rpki-client.org