$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861.cer File: 14cc8f83-07a3-438f-8c3d-046fdc6f7861.cer (raw, json) Hash identifier: abxkxa3MUtfX9JqV7NxFREzgJNkAhC9xFvFLFMHzLec= Subject key identifier: 23:7E:09:9A:6F:83:61:9A:1F:35:CF:5A:DB:33:21:E1:5E:8D:F5:A7 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847B3573A962D4B90CA29E17D08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Oct 2024 09:05:24 +0000 Certificate not after: Mon 01 Feb 2027 10:05:24 +0000 Subordinate resources: IP: 198.175.167.0 -- 198.175.170.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b3:57:3a:96:2d:4b:90:ca:29:e1:7d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 29 09:05:24 2024 GMT Not After : Feb 1 10:05:24 2027 GMT Subject: CN=14cc8f83-07a3-438f-8c3d-046fdc6f7861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e3:50:8b:9b:bb:90:db:ae:e3:25:88:a4:ef: ab:7b:04:90:22:79:34:0c:b0:b1:96:86:0f:7b:01: a8:b0:2e:63:65:a9:a5:fb:30:d1:d0:6c:42:62:bc: 94:c6:98:e1:e4:c0:26:3b:45:34:39:65:8d:ec:0f: c1:e1:89:ce:db:b2:63:03:a9:c9:eb:93:e1:45:79: 99:bd:2c:18:9d:db:9d:62:9a:ce:88:c8:7d:28:bc: dd:c9:d8:b1:9d:6d:12:fb:f5:b1:09:90:00:df:58: cd:b6:0a:cf:61:f0:51:d9:77:5f:56:97:85:39:9f: f7:a9:6f:5e:b4:60:54:e0:95:25:56:4f:9e:77:90: ee:4f:36:76:23:6b:f6:69:a6:d0:75:50:d1:ad:a4: 7f:bb:5a:52:9c:a1:5a:30:b6:30:10:f4:f4:cc:1e: 90:ad:f6:4e:3c:9f:49:1e:51:ff:58:d2:1f:41:e3: dd:bf:d9:4e:25:01:2c:c1:45:aa:97:06:b9:fc:48: 8a:6b:50:25:44:e2:c6:c7:4e:ac:ee:aa:f3:a6:ab: 80:2d:de:08:37:d2:ef:d5:f7:7e:a4:86:cb:36:45: 22:b6:d7:a2:47:82:1a:da:35:d0:dd:58:3c:f2:e9: 8e:38:e8:16:66:16:c2:26:75:51:cd:9f:35:72:7d: ae:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7E:09:9A:6F:83:61:9A:1F:35:CF:5A:DB:33:21:E1:5E:8D:F5:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 198.175.167.0-198.175.170.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9f:dc:2e:37:41:9a:59:aa:10:98:19:b9:ec:15:00:27:13: fa:bc:c3:c1:1c:ae:5e:f7:07:78:fd:92:06:65:f9:58:d3:4b: 58:52:95:fc:4b:d5:44:02:27:0f:69:f4:06:71:e8:f8:08:49: 66:46:07:fb:05:2e:a6:32:57:6f:55:d7:b7:7d:63:ae:67:3f: 7f:1e:c2:bc:de:25:11:55:97:4f:6d:a4:f4:9d:c6:3d:fc:94: 12:63:99:69:ec:1c:7b:67:90:7e:87:37:8f:fe:70:36:91:28: fb:3e:a2:06:05:0a:b1:60:3b:fb:96:1f:26:6f:1d:4f:bf:77: e3:1e:72:58:d4:4a:42:3d:51:88:47:f4:57:84:1e:f2:69:02: 78:ae:ea:55:e1:ca:3d:e0:96:c3:08:f7:0e:a4:64:13:66:c1: 64:0a:b4:75:c8:b4:78:88:07:4a:c6:b1:0d:9c:46:0c:4f:fc: 93:9e:a2:9a:e9:33:73:59:d2:0a:68:bc:cc:64:8d:2f:a9:4e: b9:60:52:90:2e:f4:1d:a8:b1:09:26:17:3d:59:24:19:b1:61: 23:0a:36:d2:e9:91:4c:6d:78:19:e6:68:fa:1d:cc:9a:2a:77: 3d:4a:d6:c8:b7:ec:37:1e:3b:3a:9a:cc:a0:a3:36:0f:d4:69: e9:b3:85:d4 -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEezVzqWLUuQyinhfQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAyOTA5MDUyNFoXDTI3MDIwMTEwMDUyNFowLzEtMCsGA1UEAxMk MTRjYzhmODMtMDdhMy00MzhmLThjM2QtMDQ2ZmRjNmY3ODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiONQi5u7kNuu4yWIpO+rewSQInk0DLCxloYP ewGosC5jZaml+zDR0GxCYryUxpjh5MAmO0U0OWWN7A/B4YnO27JjA6nJ65PhRXmZ vSwYndudYprOiMh9KLzdydixnW0S+/WxCZAA31jNtgrPYfBR2XdfVpeFOZ/3qW9e tGBU4JUlVk+ed5DuTzZ2I2v2aabQdVDRraR/u1pSnKFaMLYwEPT0zB6QrfZOPJ9J HlH/WNIfQePdv9lOJQEswUWqlwa5/EiKa1AlROLGx06s7qrzpquALd4IN9Lv1fd+ pIbLNkUitteiR4Ia2jXQ3Vg88umOOOgWZhbCJnVRzZ81cn2u0QIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFCN+CZpvg2GaHzXPWtszIeFejfWnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x NGNjOGY4My0wN2EzLTQzOGYtOGMzZC0wNDZmZGM2Zjc4NjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzE0Y2M4ZjgzLTA3YTMtNDM4Zi04 YzNkLTA0NmZkYzZmNzg2MS8xNGNjOGY4My0wN2EzLTQzOGYtOGMzZC0wNDZmZGM2 Zjc4NjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMavpwMEAMavqjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACn9wuN0Ga WaoQmBm57BUAJxP6vMPBHK5e9wd4/ZIGZflY00tYUpX8S9VEAicPafQGcej4CElm Rgf7BS6mMldvVde3fWOuZz9/HsK83iURVZdPbaT0ncY9/JQSY5lp7Bx7Z5B+hzeP /nA2kSj7PqIGBQqxYDv7lh8mbx1Pv3fjHnJY1EpCPVGIR/RXhB7yaQJ4rupV4co9 4JbDCPcOpGQTZsFkCrR1yLR4iAdKxrENnEYMT/yTnqKa6TNzWdIKaLzMZI0vqU65 YFKQLvQdqLEJJhc9WSQZsWEjCjbS6ZFMbXgZ5mj6HcyaKnc9StbIt+w3Hjs6msyg ozYP1Gnps4XU -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:01 2024 by rpki-client on console-ams.rpki-client.org