$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer File: 28a37b7d-0765-4e15-9558-c5b3800ca7ce.cer (raw, json) Hash identifier: sIu/GaV4OEznu7uilX+gQ0kyYQR2JJDE4ym1h1E/Aws= Subject key identifier: 18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584765C1C4B1F8EC46EFFF544E20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Oct 2024 14:07:01 +0000 Certificate not after: Mon 04 Jan 2027 15:07:01 +0000 Subordinate resources: IP: 199.71.12.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:65:c1:c4:b1:f8:ec:46:ef:ff:54:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 1 14:07:01 2024 GMT Not After : Jan 4 15:07:01 2027 GMT Subject: CN=28a37b7d-0765-4e15-9558-c5b3800ca7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:26:c0:b6:83:19:71:fa:bf:50:7e:b3:43:87: 73:e5:4c:6b:dd:5d:1f:d5:6a:23:7c:e9:b0:2c:1a: 3b:f5:bb:42:60:7b:84:34:6a:30:85:c7:8e:73:5a: 10:cf:c9:51:ef:db:19:4f:c9:10:43:e3:75:78:00: 4d:c7:cc:42:e0:c5:47:28:4a:e6:d1:82:75:42:6a: 67:a1:bf:1f:77:75:c8:ec:5c:2a:dd:d6:0c:12:ad: 0e:fb:32:b6:80:35:87:bb:cc:63:28:a5:e6:35:2a: 8e:d7:04:5f:72:5c:c0:ec:bb:9d:7a:72:4d:00:51: f1:7f:f8:0d:54:1c:f7:22:b5:d8:85:a8:6b:98:0e: 46:89:73:62:92:57:1c:86:d1:e4:a4:51:2b:5c:bb: c9:93:cf:4f:9d:ea:7e:3a:45:de:7d:0b:00:7e:65: c6:74:2b:e5:80:73:49:1c:47:95:b5:5c:fa:d0:cd: 40:cf:2d:bb:08:58:d1:d7:e3:12:70:80:8b:76:b1: 2e:38:ea:31:70:1f:70:24:30:11:b8:7f:d2:13:d5: 9f:35:1c:d1:86:7e:c9:7b:50:f9:f8:e7:03:5d:75: 11:d4:39:db:ec:d4:3d:13:65:26:e0:4b:ff:72:42: 69:f1:05:41:e7:1c:50:48:03:b5:d9:6f:bc:a9:08: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:62:C4:BE:12:02:F0:CA:2E:56:56:18:FE:F9:14:0A:91:00:5F:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/28a37b7d-0765-4e15-9558-c5b3800ca7ce/28a37b7d-0765-4e15-9558-c5b3800ca7ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 199.71.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f6:76:eb:b9:87:0a:61:4a:2e:55:2d:ed:d9:e7:28:43:e5: 4e:e1:fa:84:a2:e5:9a:5d:7d:9d:47:90:bb:11:b2:c0:28:b6: b5:45:1f:e6:96:a7:34:22:b3:d3:15:fb:3c:ab:73:68:01:53: 28:e3:7e:76:7c:71:69:70:fa:91:b2:9d:05:55:36:d6:f5:da: f7:4a:6b:f1:8c:4a:88:6f:9d:e6:45:2a:52:fe:73:5f:90:f7: db:6b:4c:74:f1:3e:df:f3:0d:a9:b2:89:61:89:bb:b9:4f:f4: db:de:85:c6:3f:3f:f7:5f:54:5c:ef:13:0c:0e:18:ab:de:7e: 31:26:e7:6b:27:a6:a1:fa:57:4a:0a:62:87:05:24:84:8b:d1: 09:f5:46:78:ed:41:5e:a9:04:00:99:e7:4c:7c:27:4a:f4:d8: 30:38:59:a2:5d:9a:e5:b3:fe:41:01:21:14:c8:e7:51:08:e7: d0:1c:82:a8:a1:77:6e:f7:c7:6a:ce:9a:b8:4d:b1:e2:dd:08: a4:c8:82:91:67:52:04:f6:f9:8f:22:5d:b2:26:02:fc:90:ad: 8d:1b:f4:93:32:1d:db:7c:0a:f9:5a:28:65:77:1f:35:0b:6f: 90:13:9c:44:ff:07:76:63:80:be:1c:da:98:22:7c:50:91:e0: ce:99:0d:85 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEdlwcSx+OxG7/9UTiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAwMTE0MDcwMVoXDTI3MDEwNDE1MDcwMVowLzEtMCsGA1UEAxMk MjhhMzdiN2QtMDc2NS00ZTE1LTk1NTgtYzViMzgwMGNhN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlybAtoMZcfq/UH6zQ4dz5Uxr3V0f1WojfOmw LBo79btCYHuENGowhceOc1oQz8lR79sZT8kQQ+N1eABNx8xC4MVHKErm0YJ1Qmpn ob8fd3XI7Fwq3dYMEq0O+zK2gDWHu8xjKKXmNSqO1wRfclzA7LudenJNAFHxf/gN VBz3IrXYhahrmA5GiXNiklcchtHkpFErXLvJk89Pnep+OkXefQsAfmXGdCvlgHNJ HEeVtVz60M1Azy27CFjR1+MScICLdrEuOOoxcB9wJDARuH/SE9WfNRzRhn7Je1D5 +OcDXXUR1Dnb7NQ9E2Um4Ev/ckJp8QVB5xxQSAO12W+8qQg5SwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBhixL4SAvDKLlZWGP75FAqRAF9PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8y OGEzN2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIzODAwY2E3Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzI4YTM3YjdkLTA3NjUtNGUxNS05 NTU4LWM1YjM4MDBjYTdjZS8yOGEzN2I3ZC0wNzY1LTRlMTUtOTU1OC1jNWIzODAw Y2E3Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADHRwwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAvZ267mHCmFKLlUt7dnn KEPlTuH6hKLlml19nUeQuxGywCi2tUUf5panNCKz0xX7PKtzaAFTKON+dnxxaXD6 kbKdBVU21vXa90pr8YxKiG+d5kUqUv5zX5D322tMdPE+3/MNqbKJYYm7uU/0296F xj8/919UXO8TDA4Yq95+MSbnayemofpXSgpihwUkhIvRCfVGeO1BXqkEAJnnTHwn SvTYMDhZol2a5bP+QQEhFMjnUQjn0ByCqKF3bvfHas6auE2x4t0IpMiCkWdSBPb5 jyJdsiYC/JCtjRv0kzId23wK+VooZXcfNQtvkBOcRP8HdmOAvhzamCJ8UJHgzpkN hQ== -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:02 2024 by rpki-client on console-ams.rpki-client.org