$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer File: 39812a66-44de-45e0-a65d-fd3a7673a954.cer (raw, json) Hash identifier: lYJLNFNsJXnysfkwxel4wZzwEsqLS1zs79Y7vZ8NRwM= Subject key identifier: 8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584877ABE556D6F31AF81AAAC1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Jan 2025 16:54:26 +0000 Certificate not after: Tue 09 Feb 2027 14:53:18 +0000 Subordinate resources: AS: 401574 IP: 23.151.56.0/24 IP: 2607:39c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Feb 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:ab:e5:56:d6:f3:1a:f8:1a:aa:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Jan 7 16:54:26 2025 GMT Not After : Feb 9 14:53:18 2027 GMT Subject: CN=39812a66-44de-45e0-a65d-fd3a7673a954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ae:fa:9f:aa:2a:bb:4e:5a:65:8a:5a:f3:dd: 45:ea:4a:c0:e5:50:03:2b:60:36:ce:ad:0e:41:76: b5:7d:16:fe:25:71:4c:7f:cd:fd:c6:3b:14:a8:66: cf:64:f4:be:fa:21:91:de:27:ad:2d:6a:10:f1:ee: 19:ca:fb:e0:c2:a0:d5:26:d3:e1:75:dc:ca:ab:23: cb:d3:98:0a:8d:44:ac:da:10:a2:96:3d:ff:c5:3c: d3:0a:73:90:e3:f2:7d:b2:65:01:a2:69:bc:43:d5: e0:80:b2:c3:81:0c:4c:22:3e:bd:da:7d:13:c0:36: 27:c4:10:1c:1a:11:82:87:2b:5a:05:9f:0f:cc:c9: 15:a0:99:3e:52:18:83:f4:c7:70:e3:1a:ee:32:d2: 0b:3c:9e:22:a7:8d:83:bf:ae:de:ce:50:31:fd:95: 09:8b:48:61:08:a4:c2:73:4a:c7:32:38:65:5e:de: b2:92:a4:eb:3c:a3:c7:43:0f:47:7d:1b:c3:b1:fb: 3d:97:74:8f:e0:05:a3:20:e9:69:bc:af:8b:e8:8a: 5c:31:4c:ce:1d:73:88:ac:87:6e:8b:0c:61:6b:76: 97:d1:77:82:63:7b:ce:95:7d:40:a7:8d:a8:9e:66: e6:a9:fc:10:2c:2b:24:ca:fb:72:e1:30:9a:6d:11: ae:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.151.56.0/24 IPv6: 2607:39c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401574 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:24:e5:6b:07:25:d8:20:64:fa:26:31:31:d2:c5:06:7a:30: 6b:a3:ff:2d:96:58:d2:af:dd:eb:e3:87:61:4d:0a:a3:c8:52: 32:4d:d6:74:38:98:51:6c:d6:e1:94:75:3d:4f:19:a1:97:f4: ff:a6:c7:a4:e2:75:77:e6:18:3a:52:23:7e:3f:22:0f:14:b3: b8:ed:0b:07:1f:11:15:ba:13:6c:39:cf:ec:3d:00:98:e1:1d: c4:cd:59:85:a0:4f:e0:67:32:7a:0e:df:e9:68:87:01:48:62: 47:57:34:07:b5:55:b3:27:97:79:95:6c:5e:f7:15:c3:24:1d: 29:eb:4b:b4:77:eb:b1:f1:d4:ef:ee:b7:b8:6c:b2:ce:79:16: 5c:80:f8:69:d3:a8:2e:98:01:73:e9:b8:c6:99:f9:28:2d:05: a4:b0:39:aa:d4:b5:c6:d0:fd:87:18:d1:e6:3c:36:31:cc:1c: 0f:d6:bc:72:01:e3:c9:9f:e4:1a:93:0d:fb:a0:8e:35:32:78: 37:a5:a7:2c:5d:bb:6f:03:7a:4e:6b:01:88:88:97:da:be:33: 50:be:c6:f8:c8:00:cd:1c:15:a8:5b:dd:5a:79:5c:ec:aa:d9: fe:ec:a0:5c:7b:e5:b9:bb:24:c9:8e:46:4a:f2:da:ac:ab:54: 2a:31:2b:a2 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEh3q+VW1vMa+BqqwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDEwNzE2NTQyNloXDTI3MDIwOTE0NTMxOFowLzEtMCsGA1UEAxMk Mzk4MTJhNjYtNDRkZS00NWUwLWE2NWQtZmQzYTc2NzNhOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi676n6oqu05aZYpa891F6krA5VADK2A2zq0O QXa1fRb+JXFMf839xjsUqGbPZPS++iGR3ietLWoQ8e4ZyvvgwqDVJtPhddzKqyPL 05gKjUSs2hCilj3/xTzTCnOQ4/J9smUBomm8Q9XggLLDgQxMIj692n0TwDYnxBAc GhGChytaBZ8PzMkVoJk+UhiD9Mdw4xruMtILPJ4ip42Dv67ezlAx/ZUJi0hhCKTC c0rHMjhlXt6ykqTrPKPHQw9HfRvDsfs9l3SP4AWjIOlpvK+L6IpcMUzOHXOIrIdu iwxha3aX0XeCY3vOlX1Ap42onmbmqfwQLCskyvty4TCabRGuTwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIy5zWENTS9yhSvwAdKbuemd35iHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z OTgxMmE2Ni00NGRlLTQ1ZTAtYTY1ZC1mZDNhNzY3M2E5NTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzM5ODEyYTY2LTQ0ZGUtNDVlMC1h NjVkLWZkM2E3NjczYTk1NC8zOTgxMmE2Ni00NGRlLTQ1ZTAtYTY1ZC1mZDNhNzY3 M2E5NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXlzgwDQQCAAIwBwMFACYHOcAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiCmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADwk5WsHJdggZPomMTHSxQZ6MGuj /y2WWNKv3evjh2FNCqPIUjJN1nQ4mFFs1uGUdT1PGaGX9P+mx6TidXfmGDpSI34/ Ig8Us7jtCwcfERW6E2w5z+w9AJjhHcTNWYWgT+BnMnoO3+lohwFIYkdXNAe1VbMn l3mVbF73FcMkHSnrS7R367Hx1O/ut7hsss55FlyA+GnTqC6YAXPpuMaZ+SgtBaSw OarUtcbQ/YcY0eY8NjHMHA/WvHIB48mf5BqTDfugjjUyeDelpyxdu28Dek5rAYiI l9q+M1C+xvjIAM0cFahb3Vp5XOyq2f7soFx75bm7JMmORkry2qyrVCoxK6I= -----END CERTIFICATE-----Generated at Thu Feb 6 18:53:43 2025 by rpki-client