$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer File: 1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer (raw, json) Hash identifier: YU3WV60oMbcbRoGdwqNEYxYa7orEPzb6yi61tLvGyGo= Subject key identifier: 60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847BABE430832B74F54654CF100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Nov 2024 00:43:39 +0000 Certificate not after: Thu 04 Feb 2027 01:43:39 +0000 Subordinate resources: AS: 18671 IP: 66.180.224.0/20 IP: 152.44.64.0/21 IP: 2605:8b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ba:be:43:08:32:b7:4f:54:65:4c:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 1 00:43:39 2024 GMT Not After : Feb 4 01:43:39 2027 GMT Subject: CN=1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:9f:60:c4:05:f7:73:b9:76:7f:69:4f:d0: 4f:92:85:e7:1f:cf:e1:56:c2:c4:0b:06:30:57:35: a6:1e:c1:5a:c7:26:85:ea:62:19:d7:1d:d5:5c:a7: 86:18:e0:54:73:4d:ad:5e:9c:ac:c4:f7:5a:e3:7d: 9e:60:10:12:10:26:fc:89:dd:36:a8:56:1d:c0:94: 37:42:e6:53:d5:36:ef:0f:30:ab:5d:ac:31:27:63: 94:12:ef:72:98:84:86:6f:5b:08:b4:71:e9:5d:05: 23:5d:34:29:09:06:d5:ec:0e:d4:3f:f2:a2:0e:5d: 39:a6:a4:1f:82:e9:a4:20:db:db:f8:29:51:df:74: 5e:b1:7e:93:78:cf:3b:42:fd:99:30:63:6b:bc:99: d4:df:1b:a4:9d:fd:dc:9a:f9:cb:94:50:65:3e:02: f2:78:fd:0f:11:2d:ca:4f:96:44:f9:06:89:49:5a: c6:0b:da:69:4d:5f:d8:30:b7:5e:86:64:db:45:2d: 7d:e5:e3:74:3b:7a:68:5c:8d:56:ec:5f:72:28:4d: e6:f2:67:dc:49:a3:c9:43:91:0f:66:b3:9a:1e:4e: af:28:3b:55:fa:ac:a8:18:0e:47:bf:69:ad:2a:8e: 42:8e:02:cd:b8:84:73:90:8c:65:22:ee:11:6a:81: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 66.180.224.0/20 152.44.64.0/21 IPv6: 2605:8b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18671 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d2:f7:0d:69:55:c2:10:1d:e5:48:b0:2c:77:57:7f:33:bd: f1:95:92:b8:be:5c:ee:d3:2d:e6:ad:6f:97:72:10:cf:fe:08: 4c:5a:b6:3f:e2:07:fe:75:2b:42:38:10:8d:96:17:01:dd:b7: a7:f6:89:dd:1a:b7:80:80:4e:91:03:ad:b5:51:ce:7e:76:58: 0a:19:30:94:69:0d:0e:62:76:96:8d:e5:d9:bb:aa:8f:84:b8: d9:1e:61:00:ca:90:28:92:72:d5:0d:72:e8:2b:5a:e8:4b:0f: f1:59:3f:8b:95:33:46:29:1b:b6:0d:06:07:ef:d8:e7:e4:98: 8a:c9:6f:84:d9:50:fe:16:ee:3a:ff:73:d9:cb:98:41:d0:0f: 1f:6f:0b:e0:52:12:a1:c9:3f:c3:ab:6c:93:47:9f:2f:72:d4: 55:5b:0e:e0:17:fd:9d:dd:84:c3:69:f8:4d:42:03:40:b4:51: a6:ff:eb:3a:a8:b1:07:ca:00:18:0d:06:de:0f:e3:37:73:0f: 2e:f0:4f:2b:fa:98:c9:a2:58:ee:d1:0d:f6:4d:a1:c7:f8:da: 24:31:6b:c4:72:02:b9:88:46:4a:3d:20:d9:64:7e:0b:72:db: fd:f1:ae:6b:59:97:a5:ea:f6:ff:5c:78:fd:aa:ba:32:cc:d1: 74:aa:e0:68 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEe6vkMIMrdPVGVM8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTEwMTAwNDMzOVoXDTI3MDIwNDAxNDMzOVowLzEtMCsGA1UEAxMk MTAyNmYyZDUtYjFmZS00N2YyLTlkMmUtMGJiNzVhN2IxOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfCfYMQF93O5dn9pT9BPkoXnH8/hVsLECwYw VzWmHsFaxyaF6mIZ1x3VXKeGGOBUc02tXpysxPda432eYBASECb8id02qFYdwJQ3 QuZT1TbvDzCrXawxJ2OUEu9ymISGb1sItHHpXQUjXTQpCQbV7A7UP/KiDl05pqQf gumkINvb+ClR33ResX6TeM87Qv2ZMGNrvJnU3xuknf3cmvnLlFBlPgLyeP0PES3K T5ZE+QaJSVrGC9ppTV/YMLdehmTbRS195eN0O3poXI1W7F9yKE3m8mfcSaPJQ5EP ZrOaHk6vKDtV+qyoGA5Hv2mtKo5CjgLNuIRzkIxlIu4RaoHzkwIDAQABo4IELzCC BCswHQYDVR0OBBYEFGAZaFwSGtjNfMFevpMgPEdO0OqaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x MDI2ZjJkNS1iMWZlLTQ3ZjItOWQyZS0wYmI3NWE3YjE4ZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzEwMjZmMmQ1LWIxZmUtNDdmMi05 ZDJlLTBiYjc1YTdiMThlZC8xMDI2ZjJkNS1iMWZlLTQ3ZjItOWQyZS0wYmI3NWE3 YjE4ZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARCtOADBAOYLEAwDQQCAAIwBwMFACYFiwAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICSO8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASdL3DWlVwhAd5UiwLHdX fzO98ZWSuL5c7tMt5q1vl3IQz/4ITFq2P+IH/nUrQjgQjZYXAd23p/aJ3Rq3gIBO kQOttVHOfnZYChkwlGkNDmJ2lo3l2buqj4S42R5hAMqQKJJy1Q1y6Cta6EsP8Vk/ i5UzRikbtg0GB+/Y5+SYislvhNlQ/hbuOv9z2cuYQdAPH28L4FISock/w6tsk0ef L3LUVVsO4Bf9nd2Ew2n4TUIDQLRRpv/rOqixB8oAGA0G3g/jN3MPLvBPK/qYyaJY 7tEN9k2hx/jaJDFrxHICuYhGSj0g2WR+C3Lb/fGua1mXper2/1x4/aq6MszRdKrg aA== -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:25 2024 by rpki-client on console-fra.rpki-client.org