$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.cer File: 161b8b27-7c5e-4f07-9903-b425ee9ea1a3.cer (raw, json) Hash identifier: kwuug3xF5+MsLgtbIsvWjJFB2lR02UjVxWnzjSQPHUY= Subject key identifier: 3B:6B:4B:8B:E7:3E:2A:A0:D7:5A:F3:7E:8A:56:72:D9:5B:58:69:93 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847282F13A454EC25CCA8ED4100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Sep 2024 12:47:08 +0000 Certificate not after: Sun 13 Dec 2026 13:47:08 +0000 Subordinate resources: IP: 23.189.40.0/24 IP: 2602:f81d::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:28:2f:13:a4:54:ec:25:cc:a8:ed:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 9 12:47:08 2024 GMT Not After : Dec 13 13:47:08 2026 GMT Subject: CN=161b8b27-7c5e-4f07-9903-b425ee9ea1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:00:a4:12:92:7e:66:cc:9d:5e:59:12:3b: e1:a0:40:cc:65:f4:60:42:37:ec:b6:7c:20:a4:8a: ad:88:23:17:7e:cc:67:b9:fb:69:a1:70:7c:c4:69: de:5e:12:9d:59:68:61:ee:1f:55:45:35:00:72:e5: d7:a0:c9:3d:8d:cc:99:7e:14:16:04:a8:58:15:fa: 3d:23:a5:25:c0:9e:df:5c:07:70:fe:6b:e4:a0:1d: 3d:43:a8:cd:5a:a2:d7:5e:19:82:64:3a:bb:a3:a5: 95:ff:4a:f3:06:22:94:e4:56:77:d2:32:82:91:9d: 7e:f0:02:1a:20:2c:41:9c:8d:a7:d7:7b:0f:92:30: f4:e7:46:de:ae:a5:4c:1b:f2:77:15:0d:fe:5a:13: b9:03:3e:9f:cf:5f:74:d6:90:3f:20:f3:64:28:80: 00:11:7a:92:b8:11:72:43:4c:43:48:4e:ca:77:a9: e3:59:d3:53:d0:66:47:62:b0:4c:e9:2b:3d:d2:44: b5:75:42:37:ee:24:7a:6b:55:03:92:f6:1c:0f:f3: ba:a7:72:fb:76:e9:4e:05:3a:06:c7:ad:dc:7e:48: 69:de:83:c9:66:6d:7a:17:77:d1:74:d7:4c:8e:e2: ef:a8:de:99:c0:f4:0d:fa:85:80:c8:63:02:a1:a2: 19:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6B:4B:8B:E7:3E:2A:A0:D7:5A:F3:7E:8A:56:72:D9:5B:58:69:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/161b8b27-7c5e-4f07-9903-b425ee9ea1a3/161b8b27-7c5e-4f07-9903-b425ee9ea1a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.189.40.0/24 IPv6: 2602:f81d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:41:80:62:72:6a:e6:09:68:0a:ef:c8:9d:8e:a8:9b:06:68: 89:29:2a:06:16:77:cf:98:19:73:01:0b:ab:65:70:31:1e:f0: 17:0e:70:e5:c1:92:66:55:55:94:51:64:9f:76:ec:ff:24:ca: 8f:be:81:ea:31:a7:c8:5b:fd:74:37:50:c6:dc:4a:fa:c4:58: a6:b0:27:f2:9f:19:b5:11:35:06:05:2d:c7:69:8f:4e:ea:5e: 78:f5:0f:c4:a6:0e:94:83:16:7e:0f:18:89:bb:c9:ce:61:c7: be:d1:62:85:e9:f5:52:4e:b6:16:04:12:91:f9:c3:bc:9b:05: 0b:dc:6b:8f:7a:44:7a:f2:ee:20:14:b5:b7:d3:7f:04:6b:b8: 47:50:b5:e5:bb:d6:61:f6:ba:5f:c6:9f:e3:85:28:db:d0:bc: 43:d5:85:bf:97:27:74:40:66:cf:dd:f6:d7:1e:49:fa:b4:f3: 91:0e:47:fd:ee:d5:7e:a6:8b:75:be:ca:fb:e6:66:47:51:13: 22:f2:36:ee:d7:9f:b2:ad:57:ff:46:91:7b:80:20:69:0a:f5: 1c:07:cc:fe:70:30:db:04:22:04:f4:a3:12:1e:8e:b2:28:c0: d2:47:a8:b9:6f:62:05:1b:19:fe:f0:15:fc:6d:ad:3a:84:82: 97:2f:f2:72 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEcoLxOkVOwlzKjtQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkwOTEyNDcwOFoXDTI2MTIxMzEzNDcwOFowLzEtMCsGA1UEAxMk MTYxYjhiMjctN2M1ZS00ZjA3LTk5MDMtYjQyNWVlOWVhMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu50ApBKSfmbMnV5ZEjvhoEDMZfRgQjfstnwg pIqtiCMXfsxnuftpoXB8xGneXhKdWWhh7h9VRTUAcuXXoMk9jcyZfhQWBKhYFfo9 I6UlwJ7fXAdw/mvkoB09Q6jNWqLXXhmCZDq7o6WV/0rzBiKU5FZ30jKCkZ1+8AIa ICxBnI2n13sPkjD050berqVMG/J3FQ3+WhO5Az6fz1901pA/IPNkKIAAEXqSuBFy Q0xDSE7Kd6njWdNT0GZHYrBM6Ss90kS1dUI37iR6a1UDkvYcD/O6p3L7dulOBToG x63cfkhp3oPJZm16F3fRdNdMjuLvqN6ZwPQN+oWAyGMCoaIZ+wIDAQABo4IEDzCC BAswHQYDVR0OBBYEFDtrS4vnPiqg11rzfopWctlbWGmTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x NjFiOGIyNy03YzVlLTRmMDctOTkwMy1iNDI1ZWU5ZWExYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzE2MWI4YjI3LTdjNWUtNGYwNy05 OTAzLWI0MjVlZTllYTFhMy8xNjFiOGIyNy03YzVlLTRmMDctOTkwMy1iNDI1ZWU5 ZWExYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXvSgwDgQCAAIwCAMGACYC+B0AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AAdBgGJyauYJaArvyJ2OqJsGaIkpKgYWd8+YGXMBC6tlcDEe8BcOcOXBkmZVVZRR ZJ927P8kyo++geoxp8hb/XQ3UMbcSvrEWKawJ/KfGbURNQYFLcdpj07qXnj1D8Sm DpSDFn4PGIm7yc5hx77RYoXp9VJOthYEEpH5w7ybBQvca496RHry7iAUtbfTfwRr uEdQteW71mH2ul/Gn+OFKNvQvEPVhb+XJ3RAZs/d9tceSfq085EOR/3u1X6mi3W+ yvvmZkdREyLyNu7Xn7KtV/9GkXuAIGkK9RwHzP5wMNsEIgT0oxIejrIowNJHqLlv YgUbGf7wFfxtrTqEgpcv8nI= -----END CERTIFICATE-----Generated at Thu Sep 19 19:54:54 2024 by rpki-client on console-ams.rpki-client.org