$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer File: 3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer (raw, json) Hash identifier: HmdPyVR9RN/W6/e6TvNhcQP3zxFIqJu8fFKVMn2KtU8= Subject key identifier: 8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858472E43DBAAE3E34929450FEE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Sep 2024 17:03:52 +0000 Certificate not after: Tue 15 Dec 2026 18:03:52 +0000 Subordinate resources: AS: 55010 IP: 137.83.57.0/24 IP: 192.75.158.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2e:43:db:aa:e3:e3:49:29:45:0f:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 11 17:03:52 2024 GMT Not After : Dec 15 18:03:52 2026 GMT Subject: CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:1e:0a:22:2a:0c:bc:90:2f:2e:4b:c2:9a: 80:77:10:d2:d7:ec:c2:ca:00:a6:f3:1b:d0:f0:de: 39:af:41:46:a4:cd:d8:db:db:6a:4c:17:c3:13:09: 3e:b7:25:1e:db:8f:0f:e6:f7:c9:9f:5c:dd:2d:7f: 98:bb:e6:d7:f4:a2:66:bd:5e:8e:2b:8d:96:ea:93: 0f:68:e9:db:d7:cd:84:e1:9b:ca:9f:63:eb:04:c9: 75:f4:cc:2e:f3:d6:af:6f:c1:79:d0:3e:0f:df:35: 3a:36:b0:dc:59:a0:e6:49:21:ac:71:6f:36:d3:b1: 23:7f:9d:2b:a1:c9:01:df:52:99:58:0c:fd:6e:b6: 33:5f:d1:0d:29:3a:e1:f2:a3:8b:64:30:b7:17:c3: 84:58:61:df:b4:a7:4f:b9:21:a7:6b:0f:ea:31:39: 4f:85:ca:22:b4:63:70:78:1d:7f:63:cd:42:09:d5: 81:f5:ce:63:06:0b:05:5b:cf:c8:7a:79:8c:42:a4: 30:b0:32:ce:93:35:55:47:db:a5:5f:5f:3c:09:de: 31:c4:9c:7e:7a:f9:1b:8c:23:8f:95:dc:10:0e:a0: 47:61:36:a5:1d:02:a3:aa:57:73:f2:84:bc:f4:35: 4a:af:b2:47:9f:e9:2e:76:d6:cb:a4:d7:23:23:77: 86:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 137.83.57.0/24 192.75.158.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55010 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:51:79:33:0f:2e:6e:29:7b:6e:c1:ce:84:ed:b8:10:c8:92: 92:1f:4d:22:29:74:63:a0:bb:f8:a0:83:ce:63:f8:1d:4f:b6: 72:f3:85:63:25:b8:06:86:67:6d:f7:52:b3:4f:f6:ba:9d:5e: ab:68:7c:d6:de:e9:4a:73:b0:a3:99:66:8e:19:48:bd:8e:1f: 13:e3:d3:e0:87:53:01:3f:f9:e7:54:2f:e1:1e:14:66:fd:23: 88:f8:53:14:85:31:12:77:d0:8c:1c:ae:c4:5e:10:f7:0d:a0: 3a:3d:14:46:ed:73:6a:a6:40:72:ab:9c:6f:50:07:11:94:be: 4f:20:40:a1:29:ff:c8:7e:d5:51:9d:46:51:37:3a:e8:96:6e: 8d:3e:ce:8a:06:63:7d:be:16:cf:b2:38:1d:75:6c:26:46:32: e9:fd:e4:15:d6:19:cf:62:14:82:cd:9d:02:1e:20:7b:49:90: c4:ec:63:d6:dd:23:a8:f0:f3:d3:42:7f:ea:b5:61:0d:fe:9c: 4a:d8:e0:9c:90:6b:91:69:9f:f7:43:be:b2:6f:79:22:6f:9c: c4:97:23:3d:eb:77:40:2e:11:38:62:79:dd:bb:4a:ed:f6:0d: 6c:48:d7:d7:b8:55:82:d7:d7:e6:57:94:13:2c:f0:10:04:cf: bb:1e:09:6f -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEcuQ9uq4+NJKUUP7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkxMTE3MDM1MloXDTI2MTIxNTE4MDM1MlowLzEtMCsGA1UEAxMk M2M3ZDUwMmEtY2YxMy00ZWUwLWJkYjEtZDhmZDBhZmM2Y2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW0eCiIqDLyQLy5LwpqAdxDS1+zCygCm8xvQ 8N45r0FGpM3Y29tqTBfDEwk+tyUe248P5vfJn1zdLX+Yu+bX9KJmvV6OK42W6pMP aOnb182E4ZvKn2PrBMl19Mwu89avb8F50D4P3zU6NrDcWaDmSSGscW8207Ejf50r ockB31KZWAz9brYzX9ENKTrh8qOLZDC3F8OEWGHftKdPuSGnaw/qMTlPhcoitGNw eB1/Y81CCdWB9c5jBgsFW8/IenmMQqQwsDLOkzVVR9ulX188Cd4xxJx+evkbjCOP ldwQDqBHYTalHQKjqldz8oS89DVKr7JHn+kudtbLpNcjI3eGqwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFI3FDdusn/0Kg2FVyNs7WVrXOgPOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z YzdkNTAyYS1jZjEzLTRlZTAtYmRiMS1kOGZkMGFmYzZjZWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNjN2Q1MDJhLWNmMTMtNGVlMC1i ZGIxLWQ4ZmQwYWZjNmNlYi8zYzdkNTAyYS1jZjEzLTRlZTAtYmRiMS1kOGZkMGFm YzZjZWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACJUzkDBADAS54wGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANbiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEJReTMPLm4pe27BzoTtuBDIkpIfTSIpdGOgu/ig g85j+B1PtnLzhWMluAaGZ233UrNP9rqdXqtofNbe6UpzsKOZZo4ZSL2OHxPj0+CH UwE/+edUL+EeFGb9I4j4UxSFMRJ30IwcrsReEPcNoDo9FEbtc2qmQHKrnG9QBxGU vk8gQKEp/8h+1VGdRlE3OuiWbo0+zooGY32+Fs+yOB11bCZGMun95BXWGc9iFILN nQIeIHtJkMTsY9bdI6jw89NCf+q1YQ3+nErY4JyQa5Fpn/dDvrJveSJvnMSXIz3r d0AuEThied27Su32DWxI19e4VYLX1+ZXlBMs8BAEz7seCW8= -----END CERTIFICATE-----Generated at Thu Sep 19 19:54:55 2024 by rpki-client on console-ams.rpki-client.org