$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer File: 4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer (raw, json) Hash identifier: NYqKMcCBxT1/Sl76urkFTpTJdsrhfN05QRv3wMPtKQE= Subject key identifier: 2C:1E:0B:FA:9C:8A:2D:A8:61:80:34:5F:5C:29:54:05:11:3D:64:B5 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858470700CE73415762E47E50B5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Aug 2024 15:32:14 +0000 Certificate not after: Tue 01 Dec 2026 16:32:14 +0000 Subordinate resources: AS: 27458 IP: 23.169.40.0/24 IP: 2602:f9bc::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:07:00:ce:73:41:57:62:e4:7e:50:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Aug 28 15:32:14 2024 GMT Not After : Dec 1 16:32:14 2026 GMT Subject: CN=4dbb61da-2e8b-4329-96f7-b408b17cd6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:3b:8b:c4:1b:35:3e:11:07:92:2a:f8:1c: e9:8a:69:ed:b1:76:a1:34:79:0f:df:86:91:90:79: 5e:e7:93:49:a6:9c:8e:75:89:35:41:9d:9c:eb:5b: 9a:f3:39:d7:60:8f:28:40:d6:ef:13:19:e5:bd:8d: b8:de:61:0a:34:49:82:d1:11:f8:6a:9b:63:1b:51: be:d7:ce:99:35:33:de:f1:57:4a:1a:55:6b:f1:cc: d1:4d:b5:df:41:d7:47:86:8c:d4:04:d0:fb:5d:19: 82:8b:92:dc:1c:b3:51:a0:3a:e2:97:96:7d:10:76: ba:75:36:79:d4:3b:da:59:a7:f8:3b:d0:56:c9:2e: 95:f8:b5:bc:11:39:90:e3:7e:ec:7e:11:84:96:d1: b0:b5:a8:08:ed:d5:0d:62:0a:b1:31:1b:ee:2a:5d: 4c:7d:24:44:95:74:76:8e:bf:b8:9b:17:0e:cb:5f: a8:e4:dc:89:cf:32:4a:4b:34:99:aa:84:57:5a:33: 58:9e:7c:6d:04:8f:56:7b:51:0f:4f:40:a2:ea:ba: d9:36:8b:e6:9e:59:79:ee:54:d2:8f:c9:ea:2b:b0: 1e:93:d5:5b:5b:5f:76:84:67:74:f7:b0:b2:cb:7a: 8d:11:16:6c:9c:c8:54:35:19:87:02:1c:f3:20:f7: db:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1E:0B:FA:9C:8A:2D:A8:61:80:34:5F:5C:29:54:05:11:3D:64:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.169.40.0/24 IPv6: 2602:f9bc::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27458 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2b:c5:cd:de:f3:fa:fe:36:bd:63:eb:4b:ae:3c:df:22:2c: 8f:e7:76:5b:18:89:a5:47:47:16:51:ca:b4:dd:d1:64:d9:cf: 97:0b:5d:b7:17:76:bf:df:ec:20:ac:86:3f:3a:08:33:af:e6: 1a:cf:62:c2:28:86:85:c8:2e:94:52:a0:dc:9b:01:63:aa:04: 5e:00:93:b5:cb:a6:b0:aa:70:cd:e2:7a:0a:f4:d3:cf:9e:be: ec:c2:d4:28:00:df:0a:0d:2e:23:4a:ac:28:70:a4:30:ba:60: 83:5b:bc:2c:20:63:d1:f5:c1:a2:7a:13:b2:5f:b1:c9:62:e6: af:f9:af:fa:fb:e4:a2:59:5d:65:db:11:eb:49:fa:9d:05:4b: bd:41:f9:af:c1:7c:44:0c:36:a1:4c:9b:ef:a9:5f:8f:dc:e3: e3:dd:23:73:a1:73:62:f6:4e:63:a1:b5:59:3e:08:bc:72:01: bb:5b:26:54:18:79:bf:2e:73:c6:37:a5:00:a9:8c:77:9d:3b: 2c:72:44:4c:82:a9:cc:ca:2f:26:b7:0c:12:70:92:5e:66:6f: 9d:ef:88:1c:bd:2b:99:ed:9e:ba:92:e7:27:28:1e:b4:30:6b: cc:b6:90:4e:37:75:d9:57:87:f9:d6:be:6c:e5:c4:5b:9e:fd: 94:d8:61:bf -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEcHAM5zQVdi5H5QtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDgyODE1MzIxNFoXDTI2MTIwMTE2MzIxNFowLzEtMCsGA1UEAxMk NGRiYjYxZGEtMmU4Yi00MzI5LTk2ZjctYjQwOGIxN2NkNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pE7i8QbNT4RB5Iq+BzpimntsXahNHkP34aR kHle55NJppyOdYk1QZ2c61ua8znXYI8oQNbvExnlvY243mEKNEmC0RH4aptjG1G+ 186ZNTPe8VdKGlVr8czRTbXfQddHhozUBND7XRmCi5LcHLNRoDril5Z9EHa6dTZ5 1DvaWaf4O9BWyS6V+LW8ETmQ437sfhGEltGwtagI7dUNYgqxMRvuKl1MfSRElXR2 jr+4mxcOy1+o5NyJzzJKSzSZqoRXWjNYnnxtBI9We1EPT0Ci6rrZNovmnll57lTS j8nqK7Aek9VbW192hGd097Cyy3qNERZsnMhUNRmHAhzzIPfboQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFCweC/qcii2oYYA0X1wpVAURPWS1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80 ZGJiNjFkYS0yZThiLTQzMjktOTZmNy1iNDA4YjE3Y2Q2ZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzRkYmI2MWRhLTJlOGItNDMyOS05 NmY3LWI0MDhiMTdjZDZkMi80ZGJiNjFkYS0yZThiLTQzMjktOTZmNy1iNDA4YjE3 Y2Q2ZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqSgwDgQCAAIwCAMGACYC+bwAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmtCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEsrxc3e8/r+Nr1j60uuPN8iLI/n dlsYiaVHRxZRyrTd0WTZz5cLXbcXdr/f7CCshj86CDOv5hrPYsIohoXILpRSoNyb AWOqBF4Ak7XLprCqcM3iegr008+evuzC1CgA3woNLiNKrChwpDC6YINbvCwgY9H1 waJ6E7Jfscli5q/5r/r75KJZXWXbEetJ+p0FS71B+a/BfEQMNqFMm++pX4/c4+Pd I3Ohc2L2TmOhtVk+CLxyAbtbJlQYeb8uc8Y3pQCpjHedOyxyREyCqczKLya3DBJw kl5mb53viBy9K5ntnrqS5ycoHrQwa8y2kE43ddlXh/nWvmzlxFue/ZTYYb8= -----END CERTIFICATE-----Generated at Thu Sep 19 19:54:55 2024 by rpki-client on console-ams.rpki-client.org