$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer File: 425f73bb-63fc-4aec-8f78-14a58f92bf2e.cer (raw, json) Hash identifier: Qzxa1roEOoZPp0x7fqUXCWsG9cLkjTXp36Qhqhqz72k= Subject key identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847B0184FF9BDF3BD58A2F9D180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Oct 2024 05:11:12 +0000 Certificate not after: Sun 31 Jan 2027 06:11:12 +0000 Subordinate resources: AS: 397700 IP: 23.188.24.0/24 IP: 2602:f826::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b0:18:4f:f9:bd:f3:bd:58:a2:f9:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 28 05:11:12 2024 GMT Not After : Jan 31 06:11:12 2027 GMT Subject: CN=425f73bb-63fc-4aec-8f78-14a58f92bf2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c2:bd:82:8a:ba:a3:fd:af:0c:eb:6c:81:28: 0b:8c:25:0b:f5:bd:63:aa:90:b5:57:9d:90:9b:ce: e3:6b:3b:f9:96:f5:96:05:ea:2a:03:5a:a0:f1:a9: 9c:ec:9e:44:c1:11:5e:bc:0f:08:9e:fa:b0:82:3d: d8:89:3b:b3:0e:f3:16:ce:cc:f8:da:62:52:20:ac: 02:22:63:a2:a6:73:9a:f9:56:69:ac:5e:13:de:5a: 03:59:7d:98:3c:0c:4c:f7:29:f7:cc:ab:c6:fc:f3: d1:c6:7f:f4:bc:9b:8b:31:e5:c1:50:31:24:b3:49: 37:7c:28:a0:49:b4:77:75:83:87:7b:21:09:01:5e: 15:4d:0d:31:a3:8c:14:fe:4c:fb:09:88:b0:39:e2: a7:54:df:d6:36:c9:ce:c6:4d:90:08:e8:21:01:6c: 3c:db:e0:ca:8a:72:fb:f6:46:4d:a3:9a:97:89:cf: 9f:2f:34:4e:07:2b:00:c7:3e:15:63:72:2d:72:99: ca:b9:56:35:8b:95:00:bc:20:25:eb:a9:da:14:7d: 86:e7:ec:a8:09:e2:04:a3:d0:4f:76:47:26:96:2f: 57:7b:a1:27:f8:33:c3:55:e6:d6:0d:ed:1c:ae:bc: 59:3b:5b:1a:fb:d2:f8:04:df:06:ca:d2:bd:af:ab: dc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:26:08:8C:5E:FC:FA:48:C6:45:88:C6:E6:0D:D6:29:F7:93:5B:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/425f73bb-63fc-4aec-8f78-14a58f92bf2e/425f73bb-63fc-4aec-8f78-14a58f92bf2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.188.24.0/24 IPv6: 2602:f826::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397700 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:47:3c:01:73:e1:8b:4d:34:84:99:27:76:3e:76:de:e6:15: 5b:46:77:be:98:24:94:ee:21:5b:f2:14:4a:df:ec:a4:d0:7c: 09:f0:27:c8:eb:9d:2b:9a:24:e9:27:6d:ef:a6:21:b9:3b:eb: 96:a1:a2:d6:0f:b8:39:c3:cc:b2:62:08:82:6c:58:84:6b:4f: db:81:05:80:37:93:15:b8:3f:27:ba:9d:37:96:10:42:3b:cf: 76:e8:11:da:90:66:ea:b9:f6:7a:b7:a7:ce:b8:2e:0b:de:7d: 4e:bb:1d:05:35:f4:96:67:73:d9:75:4f:ee:de:f6:bb:7b:58: f5:68:3f:d7:83:7b:51:21:a4:84:28:85:e7:58:32:9d:be:be: 66:68:97:56:d3:9e:df:b2:2a:b1:0e:36:aa:e1:2c:6c:ca:8e: 42:a4:7f:b7:fa:59:37:36:f9:54:69:5c:35:ca:8f:23:38:92: a3:f3:b1:ca:e6:f9:8a:7a:f7:26:d1:f0:ec:36:2d:fb:bf:bf: a2:39:19:34:e1:ac:8e:07:b6:bd:bf:1d:95:4e:48:7e:2b:6a: 62:0b:e7:57:5e:8d:a1:a9:e7:1d:16:44:1c:70:b0:8c:b3:af: 8d:1c:ff:65:ef:2e:c8:78:0f:95:35:6f:83:1e:6f:7a:42:c9: ed:c5:29:29 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEewGE/5vfO9WKL50YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAyODA1MTExMloXDTI3MDEzMTA2MTExMlowLzEtMCsGA1UEAxMk NDI1ZjczYmItNjNmYy00YWVjLThmNzgtMTRhNThmOTJiZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8K9goq6o/2vDOtsgSgLjCUL9b1jqpC1V52Q m87jazv5lvWWBeoqA1qg8amc7J5EwRFevA8Invqwgj3YiTuzDvMWzsz42mJSIKwC ImOipnOa+VZprF4T3loDWX2YPAxM9yn3zKvG/PPRxn/0vJuLMeXBUDEks0k3fCig SbR3dYOHeyEJAV4VTQ0xo4wU/kz7CYiwOeKnVN/WNsnOxk2QCOghAWw82+DKinL7 9kZNo5qXic+fLzROBysAxz4VY3ItcpnKuVY1i5UAvCAl66naFH2G5+yoCeIEo9BP dkcmli9Xe6En+DPDVebWDe0crrxZO1sa+9L4BN8GytK9r6vchwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFM8mCIxe/PpIxkWIxuYN1in3k1uoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80 MjVmNzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1OGY5MmJmMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzQyNWY3M2JiLTYzZmMtNGFlYy04 Zjc4LTE0YTU4ZjkyYmYyZS80MjVmNzNiYi02M2ZjLTRhZWMtOGY3OC0xNGE1OGY5 MmJmMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXvBgwDgQCAAIwCAMGBCYC+CYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYRhDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRRzwBc+GLTTSEmSd2Pnbe5hVb Rne+mCSU7iFb8hRK3+yk0HwJ8CfI650rmiTpJ23vpiG5O+uWoaLWD7g5w8yyYgiC bFiEa0/bgQWAN5MVuD8nup03lhBCO8926BHakGbqufZ6t6fOuC4L3n1Oux0FNfSW Z3PZdU/u3va7e1j1aD/Xg3tRIaSEKIXnWDKdvr5maJdW057fsiqxDjaq4Sxsyo5C pH+3+lk3NvlUaVw1yo8jOJKj87HK5vmKevcm0fDsNi37v7+iORk04ayOB7a9vx2V Tkh+K2piC+dXXo2hqecdFkQccLCMs6+NHP9l7y7IeA+VNW+DHm96QsntxSkp -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:15 2024 by rpki-client on console-ams.rpki-client.org