$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.cer File: 3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.cer (raw, json) Hash identifier: ioe6WZymTvzQKftm24Kx7pn7ujE/B8/6CckLVwvkAdc= Subject key identifier: D8:9E:DC:D7:20:00:0E:AC:D1:C6:40:9B:9C:68:96:80:C9:62:2B:EB Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858471835B6E303B0DC5F0ED87100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Sep 2024 19:27:35 +0000 Certificate not after: Mon 07 Dec 2026 20:27:35 +0000 Subordinate resources: AS: 401285 IP: 209.182.222.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:18:35:b6:e3:03:b0:dc:5f:0e:d8:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 3 19:27:35 2024 GMT Not After : Dec 7 20:27:35 2026 GMT Subject: CN=3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1e:76:21:2a:b8:86:c2:c5:39:5b:18:81:df: 50:fe:ea:1b:3b:3c:f3:d4:5c:24:6a:bb:cd:98:19: 25:9b:3d:30:8a:22:08:d4:cf:d1:c4:ee:a8:c1:84: 99:6f:80:44:59:48:cc:aa:6d:c6:cd:8e:05:89:07: 2b:8a:f3:40:34:dc:3d:4c:32:aa:50:68:10:5f:a6: 06:60:c2:63:da:c3:ad:1c:68:7b:76:e3:99:ac:d5: 76:07:84:1a:36:97:ae:1a:aa:c6:cb:0b:63:f2:d8: d5:40:83:e1:8a:47:b8:e9:76:00:2f:00:cc:aa:5c: 5e:56:53:73:f7:f5:b1:52:e5:86:24:59:43:89:e6: 62:31:51:2e:30:cd:67:3a:b1:4f:25:69:3e:5f:b8: ab:3f:62:7f:57:50:0c:4b:ba:8c:16:e8:1c:7a:5a: 6f:ef:bc:1c:74:47:6a:b2:e1:3a:9f:fe:fe:0f:f9: 3a:08:7e:7a:15:d5:af:79:01:39:e5:a6:0b:8c:5f: 76:38:24:85:1b:8a:e5:34:66:a4:28:bd:e9:9c:34: e5:03:19:9a:a0:a6:89:d7:2b:1f:46:d1:0a:38:45: 81:01:24:92:db:04:c0:52:5f:7f:fb:07:9b:95:a8: e0:e4:01:87:c8:6f:06:57:a4:22:e3:44:c8:20:3c: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9E:DC:D7:20:00:0E:AC:D1:C6:40:9B:9C:68:96:80:C9:62:2B:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 209.182.222.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401285 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:88:6b:de:bb:f8:03:70:9b:54:e1:ac:65:c3:10:0c:90:e7: 8e:4c:8d:b6:03:e6:31:7f:57:e2:f2:01:cd:a7:ef:c0:82:51: 4b:53:46:ab:d1:99:e6:0e:6b:42:8c:09:29:29:d5:0e:a1:ef: 5f:b4:fc:7d:92:8c:ca:c5:a8:9f:ee:27:c8:74:f0:1d:57:5e: 58:f6:80:df:fe:f9:50:0b:6f:af:34:4b:58:32:7a:0b:eb:85: f3:ab:ec:e5:3d:2a:78:ab:51:18:35:95:9b:cd:57:09:7b:8a: 45:92:a0:19:7d:be:c7:ad:4a:e7:60:7c:dd:40:3c:51:bd:f9: d7:9c:d8:2a:35:c0:b7:4e:9f:83:86:d5:a5:ba:2a:a1:74:da: 06:51:ed:e8:1b:09:0d:a1:e3:fa:19:55:23:b9:9f:c1:d6:d5: c5:30:d8:79:71:54:7b:45:10:86:3f:a5:69:8a:cd:5b:76:9b: 4b:cc:98:a4:3c:4c:df:46:bf:e8:09:e4:4c:23:8f:c0:04:78: cd:5c:8e:4a:12:f8:00:59:bb:ce:a0:38:10:31:db:61:5c:d8: 06:34:06:1c:9c:1e:63:db:5a:c1:20:f7:49:e8:44:cc:15:61: f0:d6:91:8a:33:01:6c:73:39:ae:bc:01:5f:ea:8a:7a:2f:12: 19:f9:c1:ed -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEcYNbbjA7DcXw7YcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkwMzE5MjczNVoXDTI2MTIwNzIwMjczNVowLzEtMCsGA1UEAxMk M2M4YjZjNTgtYjk1MS00ZWM4LTlmZmItM2VjMWE2M2NkNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh52ISq4hsLFOVsYgd9Q/uobOzzz1FwkarvN mBklmz0wiiII1M/RxO6owYSZb4BEWUjMqm3GzY4FiQcrivNANNw9TDKqUGgQX6YG YMJj2sOtHGh7duOZrNV2B4QaNpeuGqrGywtj8tjVQIPhike46XYALwDMqlxeVlNz 9/WxUuWGJFlDieZiMVEuMM1nOrFPJWk+X7irP2J/V1AMS7qMFugcelpv77wcdEdq suE6n/7+D/k6CH56FdWveQE55aYLjF92OCSFG4rlNGakKL3pnDTlAxmaoKaJ1ysf RtEKOEWBASSS2wTAUl9/+weblajg5AGHyG8GV6Qi40TIIDy+awIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNie3NcgAA6s0cZAm5xoloDJYivrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z YzhiNmM1OC1iOTUxLTRlYzgtOWZmYi0zZWMxYTYzY2Q2MWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNjOGI2YzU4LWI5NTEtNGVjOC05 ZmZiLTNlYzFhNjNjZDYxZC8zYzhiNmM1OC1iOTUxLTRlYzgtOWZmYi0zZWMxYTYz Y2Q2MWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADRtt4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bh+FMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHeIa967+ANwm1ThrGXDEAyQ545MjbYD5jF/V+LyAc2n78CC UUtTRqvRmeYOa0KMCSkp1Q6h71+0/H2SjMrFqJ/uJ8h08B1XXlj2gN/++VALb680 S1gyegvrhfOr7OU9KnirURg1lZvNVwl7ikWSoBl9vsetSudgfN1APFG9+dec2Co1 wLdOn4OG1aW6KqF02gZR7egbCQ2h4/oZVSO5n8HW1cUw2HlxVHtFEIY/pWmKzVt2 m0vMmKQ8TN9Gv+gJ5Ewjj8AEeM1cjkoS+ABZu86gOBAx22Fc2AY0BhycHmPbWsEg 90noRMwVYfDWkYozAWxzOa68AV/qinovEhn5we0= -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:02 2024 by rpki-client on console-fra.rpki-client.org