$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer File: 346c6ea1-4f1c-4579-b4b1-78891a34647a.cer (raw, json) Hash identifier: jB0YfR4irsFi56FuQvtzCl/YlVqYpJC66rh6bRwD334= Subject key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285846F254DABBD1E8447CEFB9E1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Aug 2024 05:49:36 +0000 Certificate not after: Tue 24 Nov 2026 06:49:36 +0000 Subordinate resources: AS: 7830 AS: 19740 IP: 162.211.76.0/22 IP: 162.216.120.0 -- 162.216.125.255 IP: 199.96.128.0/21 IP: 199.230.104.0/21 IP: 204.68.170.0/24 IP: 208.81.236.0/22 IP: 2607:fc30::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:f2:54:da:bb:d1:e8:44:7c:ef:b9:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Aug 21 05:49:36 2024 GMT Not After : Nov 24 06:49:36 2026 GMT Subject: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fc:58:14:9e:45:81:f6:a4:35:56:73:b4:1b: 4f:36:8e:0b:a0:fa:76:75:36:68:99:ed:5a:61:36: f5:c7:07:dd:db:06:38:0f:69:24:1c:a0:32:5c:29: 2d:8a:5e:ac:0e:f6:bf:49:e3:83:d8:73:6d:97:f1: 91:35:ab:12:1a:98:b3:dd:9d:c9:d8:9f:0b:4f:db: d4:9b:a8:96:3c:f7:a1:ea:9f:54:6b:c7:67:83:f6: 21:73:b1:f4:7d:54:ca:af:78:ef:d3:4e:a1:be:d5: 74:ac:1f:79:40:18:3d:dd:14:cb:a3:29:a8:13:fa: a8:bd:8d:f1:6a:9d:9f:78:28:b3:99:09:3d:69:cc: d8:42:4e:5c:df:74:c0:5e:12:76:0e:d0:b0:a5:59: 42:3e:c4:eb:ae:30:b8:a0:79:8f:10:ed:d6:8e:cd: 6a:3d:34:bb:26:04:e8:df:42:48:21:8f:d6:9b:fd: e8:77:6a:c4:d0:84:74:03:05:c2:b7:6d:d5:31:04: 1e:72:e8:bb:f4:5c:60:4b:82:a6:8a:45:7a:35:2c: ca:2f:ea:41:f8:7b:ba:7e:20:58:66:e3:3f:bf:fa: ab:21:af:cb:0f:28:60:5b:9b:db:df:c9:a8:84:11: 93:4f:a4:a1:b6:35:ea:f3:53:2a:8c:08:8c:fe:7c: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 162.211.76.0/22 162.216.120.0-162.216.125.255 199.96.128.0/21 199.230.104.0/21 204.68.170.0/24 208.81.236.0/22 IPv6: 2607:fc30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7830 19740 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e0:20:a5:91:71:0b:52:b5:80:88:09:97:ba:63:fb:38:f5: 4a:9c:1d:33:60:ae:61:f9:1e:62:93:a2:b6:96:62:75:5d:05: 05:36:4f:2b:ed:57:18:ee:03:18:df:af:d4:54:24:4e:0c:ba: f5:42:28:a6:66:99:73:94:84:e5:b4:ea:5f:33:72:fc:4d:5a: 67:30:6a:3b:13:45:79:55:85:01:78:6c:bb:ec:08:32:62:7a: 11:66:9a:70:f2:46:86:f0:e5:a8:51:47:06:a8:b6:ab:b0:de: 5e:b1:92:a9:93:ad:49:69:cf:ea:b1:99:a7:56:c3:ab:e5:63: 5c:7a:47:7b:87:04:c6:73:a3:f2:0e:bc:58:ff:b0:94:fd:74: 07:64:e3:2d:a7:b4:30:b6:6c:e2:4b:c4:61:4f:1b:f4:9c:dc: 2b:f0:28:7d:43:07:24:73:ba:f7:8f:c5:9c:a8:7e:b2:97:37: 1d:03:33:77:dc:f8:9f:b3:48:67:1c:d0:5c:29:d6:a9:d6:da: 2c:ad:37:5f:eb:a3:7d:10:ff:e7:4d:6d:c0:fb:e9:c3:02:5e: 47:f9:f3:05:94:af:8f:28:1f:9e:c2:6b:72:1c:67:00:43:6f: 1f:7e:22:55:e8:79:f9:2b:a1:46:95:1d:97:83:ae:42:a5:98: 55:1c:07:97 -----BEGIN CERTIFICATE----- MIIHQTCCBimgAwIBAgIUAQ0Mn0MoWEbyVNq70ehEfO+54cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDgyMTA1NDkzNloXDTI2MTEyNDA2NDkzNlowLzEtMCsGA1UEAxMk MzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2NDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfxYFJ5FgfakNVZztBtPNo4LoPp2dTZome1a YTb1xwfd2wY4D2kkHKAyXCktil6sDva/SeOD2HNtl/GRNasSGpiz3Z3J2J8LT9vU m6iWPPeh6p9Ua8dng/Yhc7H0fVTKr3jv006hvtV0rB95QBg93RTLoymoE/qovY3x ap2feCizmQk9aczYQk5c33TAXhJ2DtCwpVlCPsTrrjC4oHmPEO3Wjs1qPTS7JgTo 30JIIY/Wm/3od2rE0IR0AwXCt23VMQQecui79FxgS4KmikV6NSzKL+pB+Hu6fiBY ZuM/v/qrIa/LDyhgW5vb38mohBGTT6ShtjXq81MqjAiM/nxcbwIDAQABo4IEUzCC BE8wHQYDVR0OBBYEFHKNcteZ8hVBIr7r8Qmsz5a/v4Z2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z NDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzM0NmM2ZWExLTRmMWMtNDU3OS1i NGIxLTc4ODkxYTM0NjQ3YS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEz NDY0N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMDIEAgABMCwDBAKi00wwDAMEA6LYeAMEAaLYfAMEA8dggAMEA8fm aAMEAMxEqgMEAtBR7DANBAIAAjAHAwUAJgf8MDAdBggrBgEFBQcBCAEB/wQOMAyg CjAIAgIelgICTRwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAHOAgpZFxC1K1gIgJl7pj+zj1SpwdM2CuYfke YpOitpZidV0FBTZPK+1XGO4DGN+v1FQkTgy69UIopmaZc5SE5bTqXzNy/E1aZzBq OxNFeVWFAXhsu+wIMmJ6EWaacPJGhvDlqFFHBqi2q7DeXrGSqZOtSWnP6rGZp1bD q+VjXHpHe4cExnOj8g68WP+wlP10B2TjLae0MLZs4kvEYU8b9JzcK/AofUMHJHO6 94/FnKh+spc3HQMzd9z4n7NIZxzQXCnWqdbaLK03X+ujfRD/501twPvpwwJeR/nz BZSvjygfnsJrchxnAENvH34iVeh5+SuhRpUdl4OuQqWYVRwHlw== -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:02 2024 by rpki-client on console-fra.rpki-client.org