$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d5309bb-20c8-43de-bd87-329498ebf18d.cer File: 3d5309bb-20c8-43de-bd87-329498ebf18d.cer (raw, json) Hash identifier: kpy3xHQnRO0Slkuq0564vvaHym/fK6VyHmbxCCrPezs= Subject key identifier: D5:8A:B8:57:58:E4:E3:62:48:56:42:D6:69:BA:1E:53:49:2C:C1:14 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847E11531155D6D3DE2D25D2080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d5309bb-20c8-43de-bd87-329498ebf18d/3d5309bb-20c8-43de-bd87-329498ebf18d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d5309bb-20c8-43de-bd87-329498ebf18d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Nov 2024 18:19:32 +0000 Certificate not after: Wed 17 Feb 2027 18:19:32 +0000 Subordinate resources: IP: 192.146.1.0 -- 192.146.100.255 IP: 192.160.53.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e1:15:31:15:5d:6d:3d:e2:d2:5d:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 14 18:19:32 2024 GMT Not After : Feb 17 18:19:32 2027 GMT Subject: CN=3d5309bb-20c8-43de-bd87-329498ebf18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e3:9c:d1:27:91:98:b4:02:34:d5:53:77:c2: fd:a2:c5:61:8b:63:d5:93:59:3f:63:3b:50:60:00: ba:15:dc:40:e9:4a:a7:be:bc:e7:b4:55:0b:fd:fe: 6d:2f:ce:b8:ff:2d:45:d2:92:50:7a:0c:bc:5d:bb: b5:0c:d5:27:ec:0e:1a:10:68:77:f1:43:e7:be:fc: 88:9b:79:38:09:70:24:bd:90:b4:c1:b7:ab:da:90: a5:f6:94:0a:d5:ce:2f:b4:53:b1:b7:82:56:74:b8: bc:c0:d8:8f:c6:a0:82:cd:50:b1:d2:01:c2:a7:37: 98:b0:aa:e4:57:f2:13:98:00:0a:50:16:79:b0:ca: 22:82:94:0d:43:4f:5f:2a:e3:84:9a:18:ba:2d:ea: 44:17:9b:43:ad:c8:5f:41:25:cb:dd:f0:33:9e:8e: c7:67:a5:7b:03:f1:ee:34:a8:a9:59:21:95:0c:da: ae:4b:17:69:ff:f1:84:21:a1:38:a6:13:f3:e2:33: 05:95:5d:15:c9:c7:57:b6:7d:7a:d1:f6:a6:c1:22: 2d:30:b2:76:90:d5:6d:a9:00:0c:a3:75:e4:0d:b3: 0c:3c:74:b8:ee:62:1f:aa:4b:24:d3:57:c3:e3:13: 13:ed:26:22:77:9c:72:57:fc:a4:e8:73:71:ee:47: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8A:B8:57:58:E4:E3:62:48:56:42:D6:69:BA:1E:53:49:2C:C1:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d5309bb-20c8-43de-bd87-329498ebf18d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d5309bb-20c8-43de-bd87-329498ebf18d/3d5309bb-20c8-43de-bd87-329498ebf18d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.146.1.0-192.146.100.255 192.160.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:94:55:d5:03:49:bd:f2:54:96:71:26:07:b4:94:50:d8:f9: 94:38:e6:4b:6a:36:cd:bf:61:1d:f2:97:af:2b:7a:04:46:a9: 9d:80:05:5e:14:84:8b:dc:0b:23:a6:10:35:ee:b7:cf:0a:d3: 6e:5f:aa:17:91:c0:ba:52:28:34:e5:ad:40:e5:f1:35:6a:63: dd:60:5f:a6:f0:3b:92:1e:19:4c:e6:8a:1d:63:74:1f:f9:bd: 89:4c:ee:13:a6:df:cf:65:ab:0b:50:68:6e:b2:32:9b:d0:81: d7:1c:bf:63:24:81:0d:97:4c:7b:50:6e:dd:3d:6c:69:f0:98: ee:c9:bd:80:99:d9:23:6c:e6:cc:00:ed:c1:d9:4b:ed:5f:df: 47:b2:a9:fc:bc:0f:e1:e3:e6:18:05:87:f9:40:3b:28:be:e1: bc:05:c5:b6:2a:75:f6:48:d7:a9:aa:14:ec:91:b3:16:f6:6d: fc:e7:59:fb:f5:66:75:de:9a:21:40:23:aa:92:40:45:01:2d: db:fa:e7:5d:6f:df:59:1f:2c:8d:bf:20:cc:57:f6:b0:71:be: 1f:0c:11:3a:ed:c0:a9:7c:af:ff:51:fd:e8:2c:9c:f6:cf:2d: 65:1e:c8:c4:eb:60:65:53:a4:bd:a5:28:e2:3f:ef:c0:d6:ef: 1a:0b:ff:28 -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWEfhFTEVXW094tJdIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTExNDE4MTkzMloXDTI3MDIxNzE4MTkzMlowLzEtMCsGA1UEAxMk M2Q1MzA5YmItMjBjOC00M2RlLWJkODctMzI5NDk4ZWJmMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOOc0SeRmLQCNNVTd8L9osVhi2PVk1k/YztQ YAC6FdxA6UqnvrzntFUL/f5tL864/y1F0pJQegy8Xbu1DNUn7A4aEGh38UPnvvyI m3k4CXAkvZC0wber2pCl9pQK1c4vtFOxt4JWdLi8wNiPxqCCzVCx0gHCpzeYsKrk V/ITmAAKUBZ5sMoigpQNQ09fKuOEmhi6LepEF5tDrchfQSXL3fAzno7HZ6V7A/Hu NKipWSGVDNquSxdp//GEIaE4phPz4jMFlV0VycdXtn160famwSItMLJ2kNVtqQAM o3XkDbMMPHS47mIfqksk01fD4xMT7SYid5xyV/yk6HNx7kcTRQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFNWKuFdY5ONiSFZC1mm6HlNJLMEUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8z ZDUzMDliYi0yMGM4LTQzZGUtYmQ4Ny0zMjk0OThlYmYxOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzNkNTMwOWJiLTIwYzgtNDNkZS1i ZDg3LTMyOTQ5OGViZjE4ZC8zZDUzMDliYi0yMGM4LTQzZGUtYmQ4Ny0zMjk0OThl YmYxOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAMCSAQMEAMCSZAMEAMCgNTBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz lFXVA0m98lSWcSYHtJRQ2PmUOOZLajbNv2Ed8pevK3oERqmdgAVeFISL3AsjphA1 7rfPCtNuX6oXkcC6Uig05a1A5fE1amPdYF+m8DuSHhlM5oodY3Qf+b2JTO4Tpt/P ZasLUGhusjKb0IHXHL9jJIENl0x7UG7dPWxp8Jjuyb2AmdkjbObMAO3B2UvtX99H sqn8vA/h4+YYBYf5QDsovuG8BcW2KnX2SNepqhTskbMW9m3851n79WZ13pohQCOq kkBFAS3b+uddb99ZHyyNvyDMV/awcb4fDBE67cCpfK//Uf3oLJz2zy1lHsjE62Bl U6S9pSjiP+/A1u8aC/8o -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:02 2024 by rpki-client on console-ams.rpki-client.org