$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer File: 3aeb4dac-8911-4f44-9f24-1f5081193043.cer (raw, json) Hash identifier: jWHKwK1x11cPzfRqiwvGgIkcJcIvMt0ddTytTuqACRY= Subject key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584733CC4E90B99A034BF5F8E280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Sep 2024 16:37:50 +0000 Certificate not after: Thu 17 Dec 2026 17:37:50 +0000 Subordinate resources: AS: 33175 AS: 55077 IP: 23.128.208.0/24 IP: 103.25.230.0/24 IP: 104.36.4.0/22 IP: 198.44.204.0/22 IP: 206.83.142.0/24 IP: 2602:ff31::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:33:cc:4e:90:b9:9a:03:4b:f5:f8:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 13 16:37:50 2024 GMT Not After : Dec 17 17:37:50 2026 GMT Subject: CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5c:32:19:f9:91:61:4a:2f:f8:5f:b9:24:b4: 17:8a:7a:cc:14:fc:c4:e5:1e:cd:dc:9b:2b:fe:c9: 53:5a:c2:b3:92:04:5c:23:b5:04:72:4b:6e:52:e5: c6:58:00:bb:58:b8:88:36:7d:49:95:77:07:1c:20: dc:be:f2:19:d3:80:6d:c4:f1:fe:7e:06:ad:27:48: 91:70:31:ee:2c:2a:34:f8:a3:84:86:5c:c0:5a:c1: 66:34:bc:be:90:66:71:11:62:c1:bb:c9:40:60:f6: 74:75:bd:64:25:79:7d:36:43:88:f0:c8:9e:eb:08: 3d:a5:1e:14:8a:35:76:df:fa:7c:74:fa:99:be:15: 06:86:38:2d:02:f2:4c:8d:0a:79:27:40:dd:8d:13: ce:18:3b:02:f6:c0:7b:38:8e:34:1e:d2:0a:cc:7e: 37:64:d1:2c:34:3d:cc:81:06:16:09:a6:62:63:10: 86:6f:73:80:2f:8c:41:43:a1:4c:97:eb:5b:e2:95: 29:93:87:16:d8:22:06:c1:37:43:08:a2:59:40:9d: 23:71:5d:9f:42:c3:53:f9:ad:19:ea:40:04:1d:27: dc:d7:6f:a6:fe:ab:00:91:7f:d5:10:07:c8:e4:46: ad:7b:62:a1:90:db:6b:73:87:d9:a8:3a:4b:0e:70: 97:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.128.208.0/24 103.25.230.0/24 104.36.4.0/22 198.44.204.0/22 206.83.142.0/24 IPv6: 2602:ff31::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33175 55077 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a0:80:99:38:23:d3:64:40:16:d6:75:b5:5c:9a:6d:8e:ba: ea:e0:78:c2:08:91:30:47:19:aa:a3:32:df:9d:61:ba:bc:e7: 5c:9a:d5:76:da:b2:14:02:66:c7:0b:a0:3a:3f:bc:89:b8:30: 64:2f:b8:af:2c:2f:f2:45:db:72:1f:c5:6c:87:5b:ef:79:6a: 06:71:d3:94:f0:58:53:1d:14:d4:72:57:7d:42:c0:13:eb:29: 1d:75:51:0e:4b:0d:31:a7:6a:f6:eb:08:8c:bb:b6:3d:e7:0f: f0:20:6c:73:7a:0f:3e:fc:af:cb:64:01:0c:88:02:1c:c9:fd: ef:a2:b9:7c:1d:61:62:56:b4:8b:cb:52:cd:ab:6b:c4:1e:9d: 18:1e:09:1e:a6:29:2e:ce:c2:ea:a8:45:f0:e6:c8:09:03:45: cf:09:e6:70:d9:53:05:2a:79:02:c8:01:fb:e7:62:b9:f1:05: a6:7f:68:f0:ec:94:1a:47:fd:36:47:a5:9b:ea:41:ac:d7:e1: 50:f1:02:e4:17:92:37:e7:62:26:ab:12:39:f3:7d:dd:39:15: 94:06:c3:f5:c3:54:d7:0a:23:19:93:cc:0c:9d:f4:c3:4f:98: 88:ea:84:eb:5f:75:6b:1e:a3:79:7f:59:6e:f7:84:0b:aa:b4: eb:4e:47:e3 -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEczzE6QuZoDS/X44oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkxMzE2Mzc1MFoXDTI2MTIxNzE3Mzc1MFowLzEtMCsGA1UEAxMk M2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkzMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVwyGfmRYUov+F+5JLQXinrMFPzE5R7N3Jsr /slTWsKzkgRcI7UEcktuUuXGWAC7WLiINn1JlXcHHCDcvvIZ04BtxPH+fgatJ0iR cDHuLCo0+KOEhlzAWsFmNLy+kGZxEWLBu8lAYPZ0db1kJXl9NkOI8Mie6wg9pR4U ijV23/p8dPqZvhUGhjgtAvJMjQp5J0DdjRPOGDsC9sB7OI40HtIKzH43ZNEsND3M gQYWCaZiYxCGb3OAL4xBQ6FMl+tb4pUpk4cW2CIGwTdDCKJZQJ0jcV2fQsNT+a0Z 6kAEHSfc12+m/qsAkX/VEAfI5Eate2KhkNtrc4fZqDpLDnCXnQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFJb/MXkkteE6dLAATVBWw20SR16dMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z YWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNhZWI0ZGFjLTg5MTEtNGY0NC05 ZjI0LTFmNTA4MTE5MzA0My8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODEx OTMwNDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwRwYIKwYBBQUH AQcBAf8EODA2MCQEAgABMB4DBAAXgNADBABnGeYDBAJoJAQDBALGLMwDBADOU44w DgQCAAIwCAMGBCYC/zEAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCBlwIDANcl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEiggJk4I9NkQBbWdbVcmm2OuurgeMIIkTBHGaqjMt+dYbq851ya 1XbashQCZscLoDo/vIm4MGQvuK8sL/JF23IfxWyHW+95agZx05TwWFMdFNRyV31C wBPrKR11UQ5LDTGnavbrCIy7tj3nD/AgbHN6Dz78r8tkAQyIAhzJ/e+iuXwdYWJW tIvLUs2ra8QenRgeCR6mKS7OwuqoRfDmyAkDRc8J5nDZUwUqeQLIAfvnYrnxBaZ/ aPDslBpH/TZHpZvqQazX4VDxAuQXkjfnYiarEjnzfd05FZQGw/XDVNcKIxmTzAyd 9MNPmIjqhOtfdWseo3l/WW73hAuqtOtOR+M= -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:02 2024 by rpki-client on console-fra.rpki-client.org