$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fb08522-3798-445b-a3fd-5fd3a50c9281.cer File: 4fb08522-3798-445b-a3fd-5fd3a50c9281.cer (raw, json) Hash identifier: k8S7rWHHtVI04VQXs+udOhW6IjYLpVdll6RVGafU8bI= Subject key identifier: BC:DE:2E:9F:68:22:4F:85:19:2B:89:E1:62:4F:42:57:01:B9:26:1E Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847931D70A7C4E0FC1F0D96BF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fb08522-3798-445b-a3fd-5fd3a50c9281/4fb08522-3798-445b-a3fd-5fd3a50c9281.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fb08522-3798-445b-a3fd-5fd3a50c9281/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 17 Oct 2024 20:03:06 +0000 Certificate not after: Wed 20 Jan 2027 21:03:06 +0000 Subordinate resources: AS: 395551 IP: 74.118.133.0/24 IP: 162.221.36.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:93:1d:70:a7:c4:e0:fc:1f:0d:96:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 17 20:03:06 2024 GMT Not After : Jan 20 21:03:06 2027 GMT Subject: CN=4fb08522-3798-445b-a3fd-5fd3a50c9281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:9f:3c:85:33:d4:8d:4a:5c:24:fd:4f:3f: 70:a7:6b:f6:c8:2d:76:ef:8b:a2:1a:65:6d:77:45: a1:25:56:66:b7:bc:dd:01:18:ff:52:13:40:22:c6: a2:34:95:0a:b5:a7:13:f7:4d:b7:fe:5d:70:cc:7e: e4:b9:6e:e3:6d:cd:39:17:bd:ce:3c:28:aa:21:c4: ec:f9:db:c7:e1:6b:8d:03:92:be:39:d0:33:ce:ac: 14:d9:ad:e0:81:22:67:2e:22:94:ce:83:3c:fb:be: 29:fb:b4:9a:f7:b2:fc:ce:c1:2b:f1:08:5d:3c:ae: 1e:79:a2:bd:d8:99:01:04:4a:b2:f3:65:05:38:8f: 47:9c:76:ab:b9:dd:af:af:c9:79:a4:07:2e:86:7d: c2:49:47:da:05:29:41:3b:4a:f8:3c:54:82:90:f1: cc:55:15:c5:e8:f9:0d:b5:59:2d:92:18:0c:ed:15: 2c:8e:b7:00:b6:5c:84:e6:a8:01:48:bd:fa:75:1e: e1:bf:12:40:8c:d8:3d:ab:16:05:31:75:fa:46:b1: d5:02:9c:24:f4:c9:9a:a8:1a:3c:1e:eb:be:8a:e9: 36:33:42:ee:90:45:eb:6a:cd:a0:31:86:b5:61:ea: ed:20:ee:7d:f6:27:f1:fc:44:7f:c5:a2:07:7a:24: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DE:2E:9F:68:22:4F:85:19:2B:89:E1:62:4F:42:57:01:B9:26:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fb08522-3798-445b-a3fd-5fd3a50c9281/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4fb08522-3798-445b-a3fd-5fd3a50c9281/4fb08522-3798-445b-a3fd-5fd3a50c9281.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 74.118.133.0/24 162.221.36.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395551 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:dd:bb:a4:2f:42:71:e6:18:98:42:c8:8c:67:84:e3:c9:61: 96:30:7d:24:72:30:fe:ce:eb:e0:f2:3a:76:a6:bd:4a:79:51: f3:a1:a6:c1:51:1c:7a:ae:b8:c3:b9:27:05:a7:95:1c:b5:bb: b5:74:d2:c6:50:a3:4f:52:b0:ec:b7:51:92:06:c3:b2:31:5c: 25:25:36:d8:92:4e:e8:94:03:40:77:ae:a1:3e:8d:f1:e9:a0: 6b:71:b5:6e:51:25:c4:1c:2c:15:a6:2f:24:1f:bd:a7:10:5c: 53:1a:f7:6d:7a:84:cf:10:9c:ee:99:cd:28:a4:b2:4c:75:1a: c5:90:14:4f:5c:b4:83:87:89:2c:2e:be:a6:2b:28:01:59:4e: 7c:de:69:20:66:09:8d:92:b2:c7:51:4b:d4:32:51:e5:81:59: 59:a8:e8:78:20:f6:91:79:1d:d5:b0:a4:7d:a9:f9:c5:f5:fe: 99:3d:53:ea:39:a2:ea:46:9d:9f:cf:32:85:3a:50:58:23:99: da:ef:64:70:60:2a:7c:79:28:59:f4:72:bd:07:4a:b7:3a:01: 96:79:2b:2e:c1:47:89:b2:ed:68:75:13:43:a5:bb:39:48:dd: 87:6f:06:a8:dd:d5:3a:4b:81:7d:03:29:51:d1:b1:92:81:e9: 00:98:38:ac -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEeTHXCnxOD8Hw2Wv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAxNzIwMDMwNloXDTI3MDEyMDIxMDMwNlowLzEtMCsGA1UEAxMk NGZiMDg1MjItMzc5OC00NDViLWEzZmQtNWZkM2E1MGM5MjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+KfPIUz1I1KXCT9Tz9wp2v2yC1274uiGmVt d0WhJVZmt7zdARj/UhNAIsaiNJUKtacT9023/l1wzH7kuW7jbc05F73OPCiqIcTs +dvH4WuNA5K+OdAzzqwU2a3ggSJnLiKUzoM8+74p+7Sa97L8zsEr8QhdPK4eeaK9 2JkBBEqy82UFOI9HnHarud2vr8l5pAcuhn3CSUfaBSlBO0r4PFSCkPHMVRXF6PkN tVktkhgM7RUsjrcAtlyE5qgBSL36dR7hvxJAjNg9qxYFMXX6RrHVApwk9MmaqBo8 Huu+iuk2M0LukEXras2gMYa1YertIO599ifx/ER/xaIHeiSsdwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFLzeLp9oIk+FGSuJ4WJPQlcBuSYeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80 ZmIwODUyMi0zNzk4LTQ0NWItYTNmZC01ZmQzYTUwYzkyODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzRmYjA4NTIyLTM3OTgtNDQ1Yi1h M2ZkLTVmZDNhNTBjOTI4MS80ZmIwODUyMi0zNzk4LTQ0NWItYTNmZC01ZmQzYTUw YzkyODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABKdoUDBAGi3SQwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgkfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEDdu6QvQnHmGJhCyIxnhOPJYZYwfSRyMP7O6+Dy OnamvUp5UfOhpsFRHHquuMO5JwWnlRy1u7V00sZQo09SsOy3UZIGw7IxXCUlNtiS TuiUA0B3rqE+jfHpoGtxtW5RJcQcLBWmLyQfvacQXFMa9216hM8QnO6ZzSikskx1 GsWQFE9ctIOHiSwuvqYrKAFZTnzeaSBmCY2SssdRS9QyUeWBWVmo6Hgg9pF5HdWw pH2p+cX1/pk9U+o5oupGnZ/PMoU6UFgjmdrvZHBgKnx5KFn0cr0HSrc6AZZ5Ky7B R4my7Wh1E0OluzlI3YdvBqjd1TpLgX0DKVHRsZKB6QCYOKw= -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:27 2024 by rpki-client on console-fra.rpki-client.org