$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c.cer File: 17f9c1e2-52bb-4203-8401-c0bc0b65723c.cer (raw, json) Hash identifier: ucx7dxEjpQgAqkkVstO+wjGFYFy74i7KhyyFmyfFnak= Subject key identifier: 5D:E4:06:F7:F9:02:96:C0:92:0D:3C:F2:D8:22:6E:48:80:1B:D2:36 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847BC25EF7D7E4A17C141A61640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c/17f9c1e2-52bb-4203-8401-c0bc0b65723c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Nov 2024 12:48:21 +0000 Certificate not after: Sun 24 Jan 2027 07:41:25 +0000 Subordinate resources: AS: 22599 IP: 2602:f7b6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bc:25:ef:7d:7e:4a:17:c1:41:a6:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 1 12:48:21 2024 GMT Not After : Jan 24 07:41:25 2027 GMT Subject: CN=17f9c1e2-52bb-4203-8401-c0bc0b65723c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9f:f4:20:1e:eb:a5:47:78:42:22:dd:40:8b: cf:4c:1c:ed:4c:5f:be:18:47:a9:94:8f:b5:6c:65: fa:6c:ea:c8:75:29:6f:be:48:e0:18:dd:2e:1c:67: cd:07:40:88:5f:c3:48:4c:7a:30:4c:3f:d8:af:b4: aa:c2:70:d3:11:40:1c:15:a8:ca:26:f0:93:3d:fc: 47:77:e5:41:ac:e3:e5:0a:c5:4f:59:06:e7:46:05: 7d:c6:d0:40:25:43:fb:da:2f:ef:ed:d9:86:75:56: 11:33:d8:51:82:32:95:f8:e1:df:52:21:22:e6:dc: 1b:11:01:88:84:ee:a9:c5:bf:d5:8d:3c:77:c7:39: e6:6a:36:ba:81:59:86:7b:b1:4c:b7:49:f9:97:24: 8d:48:07:59:f9:5e:1d:59:0b:32:5f:0e:65:79:54: d8:65:a0:bc:e3:66:ea:d8:cd:c9:75:b9:7b:87:67: b8:ae:6f:5b:b9:e1:b4:e7:39:7d:f5:49:1e:d9:57: 77:3d:74:82:ed:e5:6f:5d:61:43:88:ec:fa:e5:8c: 01:31:64:40:06:f1:ea:fa:bf:0f:b0:b8:f3:cd:bf: 07:57:66:92:fc:e1:bb:d3:c4:7a:d5:ad:b3:16:61: f6:cf:a5:92:37:12:33:12:87:fb:14:ef:ce:90:55: 4e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E4:06:F7:F9:02:96:C0:92:0D:3C:F2:D8:22:6E:48:80:1B:D2:36 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/17f9c1e2-52bb-4203-8401-c0bc0b65723c/17f9c1e2-52bb-4203-8401-c0bc0b65723c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv6: 2602:f7b6::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22599 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:55:2d:f1:74:df:76:4e:a4:a9:f0:ee:2f:55:78:db:8d:aa: 34:b7:0b:40:4e:ee:ce:1d:3f:3e:0f:a9:65:70:5e:41:b4:39: e8:8f:60:1d:e8:27:e6:92:46:67:87:bf:7b:93:89:2d:32:87: 99:91:b6:c1:b5:9c:a4:86:04:25:3d:32:fc:11:b5:82:bd:a7: d4:7e:6b:ee:28:e3:3f:b7:19:43:db:f5:79:53:dc:69:bf:ef: 86:d0:50:1b:32:40:38:82:d6:71:51:86:fe:f3:81:ad:07:a7: cc:b6:3a:92:a7:cc:e1:af:93:21:bc:88:29:60:cf:92:1b:d2: 9a:f3:f9:9e:ec:82:a3:c0:50:38:5e:a0:50:47:6a:eb:df:be: 06:90:c2:8e:33:c8:6a:84:d7:40:67:e9:7f:18:3b:71:81:07: fe:fe:53:32:0e:51:90:fb:14:29:cc:15:24:29:1a:b5:e0:ce: 35:e8:dd:8a:f3:8b:d2:04:68:e2:98:34:e9:35:3d:63:b3:bf: b9:0f:4e:15:d8:f1:a1:48:2a:71:9a:f5:45:81:14:b4:fb:fd: 3f:1f:73:1d:4e:20:06:d5:4f:cb:b2:99:30:bb:e3:fb:60:61: d1:7d:4d:a0:86:c2:f2:ce:b9:4b:8a:9b:75:21:d0:19:2e:3b: f8:a2:07:28 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEe8Je99fkoXwUGmFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTEwMTEyNDgyMVoXDTI3MDEyNDA3NDEyNVowLzEtMCsGA1UEAxMk MTdmOWMxZTItNTJiYi00MjAzLTg0MDEtYzBiYzBiNjU3MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5/0IB7rpUd4QiLdQIvPTBztTF++GEeplI+1 bGX6bOrIdSlvvkjgGN0uHGfNB0CIX8NITHowTD/Yr7SqwnDTEUAcFajKJvCTPfxH d+VBrOPlCsVPWQbnRgV9xtBAJUP72i/v7dmGdVYRM9hRgjKV+OHfUiEi5twbEQGI hO6pxb/VjTx3xznmaja6gVmGe7FMt0n5lySNSAdZ+V4dWQsyXw5leVTYZaC842bq 2M3Jdbl7h2e4rm9bueG05zl99Uke2Vd3PXSC7eVvXWFDiOz65YwBMWRABvHq+r8P sLjzzb8HV2aS/OG708R61a2zFmH2z6WSNxIzEof7FO/OkFVOeQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFF3kBvf5ApbAkg088tgibkiAG9I2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8x N2Y5YzFlMi01MmJiLTQyMDMtODQwMS1jMGJjMGI2NTcyM2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzE3ZjljMWUyLTUyYmItNDIwMy04 NDAxLWMwYmMwYjY1NzIzYy8xN2Y5YzFlMi01MmJiLTQyMDMtODQwMS1jMGJjMGI2 NTcyM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAve2ADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgJYRzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQARVS3xdN92TqSp8O4vVXjbjao0twtATu7OHT8+D6llcF5B tDnoj2Ad6CfmkkZnh797k4ktMoeZkbbBtZykhgQlPTL8EbWCvafUfmvuKOM/txlD 2/V5U9xpv++G0FAbMkA4gtZxUYb+84GtB6fMtjqSp8zhr5MhvIgpYM+SG9Ka8/me 7IKjwFA4XqBQR2rr374GkMKOM8hqhNdAZ+l/GDtxgQf+/lMyDlGQ+xQpzBUkKRq1 4M416N2K84vSBGjimDTpNT1js7+5D04V2PGhSCpxmvVFgRS0+/0/H3MdTiAG1U/L spkwu+P7YGHRfU2ghsLyzrlLipt1IdAZLjv4ogco -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:13 2024 by rpki-client on console-ams.rpki-client.org