$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer File: 324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer (raw, json) Hash identifier: p4wW4ZPOiqboXhrZDIbgpWtOBOrNMuCDU6lLpsdJhdc= Subject key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Authority key identifier: 71:C6:08:8A:D9:5A:BF:79:3E:F4:E2:C5:71:EB:C5:6B:28:D2:77:22 Certificate issuer: /CN=51cd99f7-2f42-4dec-b2c6-09bafaa3780e Certificate serial: 010D0C9F43285847B9AF4B55190CD5AABC74AC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 31 Oct 2024 15:37:41 +0000 Certificate not after: Wed 03 Feb 2027 16:37:41 +0000 Subordinate resources: AS: 26954 IP: 23.191.40.0/24 IP: 2602:f7de::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:b9:af:4b:55:19:0c:d5:aa:bc:74:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51cd99f7-2f42-4dec-b2c6-09bafaa3780e Validity Not Before: Oct 31 15:37:41 2024 GMT Not After : Feb 3 16:37:41 2027 GMT Subject: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:81:a3:a6:8c:fa:e9:75:0b:45:7c:ee:37: 8c:d6:bd:c0:60:0d:45:8d:2a:b0:aa:2c:7a:42:38: a5:38:5c:c9:b2:9c:07:a3:3a:f8:9d:ba:3f:bd:d5: e3:e8:82:f3:c0:d7:27:e8:cb:74:5b:8f:f7:8e:50: 41:c1:3e:72:ce:b3:00:90:c1:fc:d9:a1:c0:07:8b: 0d:5b:9a:81:01:5b:7f:c8:5c:eb:be:af:12:27:bd: cb:83:3c:1b:af:3a:40:ca:f4:66:dd:82:5c:4f:26: c8:16:b4:ed:7d:f4:ae:cc:21:e8:41:69:b5:85:cd: 44:1a:9b:c7:1d:db:3d:4c:f2:8e:f3:70:48:cf:b5: 27:32:59:d6:60:db:0e:d6:b3:6d:a8:71:15:cc:14: 47:43:b7:ce:8e:9d:60:4a:03:40:91:19:31:b6:4c: b6:db:94:88:cf:c8:18:21:5f:e1:91:50:2c:99:2a: 51:98:c7:63:bf:ee:4b:35:a9:00:c2:33:81:a6:08: e3:23:a1:fb:13:b0:10:40:fc:c8:9d:62:99:99:d1: 05:ff:ba:7c:f3:5c:99:d2:9d:51:73:87:5c:e9:4b: 33:05:2f:b4:13:fd:2b:49:d7:5a:80:05:48:1a:e7: bc:99:61:a5:dd:be:94:28:5d:55:cd:17:78:cf:6f: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl X509v3 Authority Key Identifier: keyid:71:C6:08:8A:D9:5A:BF:79:3E:F4:E2:C5:71:EB:C5:6B:28:D2:77:22 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer sbgp-ipAddrBlock: critical IPv4: 23.191.40.0/24 IPv6: 2602:f7de::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26954 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:51:1c:5b:f9:9f:ce:7e:0b:87:1c:bc:f2:c9:14:ad:d7:59: 03:76:d2:29:7a:97:50:51:2d:2c:44:0e:07:8b:86:c9:dd:d1: 9d:ae:6e:50:63:87:a1:3a:8f:ed:36:07:ad:99:e7:c2:5f:17: c5:da:07:51:af:7b:cb:56:b9:e2:49:42:be:17:fe:fc:27:fe: 7f:c8:b3:b2:10:16:ae:1d:0e:5b:73:fc:07:05:8f:60:71:8d: 39:34:f4:e1:b4:78:df:3d:88:fb:8f:5c:73:32:31:ff:0e:99: e8:43:6d:8a:8a:94:3e:e0:d3:8d:11:9f:14:3e:6f:80:3d:e3: ae:d2:2f:7f:27:f3:87:9e:30:7a:0c:ad:89:91:36:5f:08:2f: 60:02:f1:d1:e5:b5:30:b3:d7:7a:9f:8d:2d:d6:bc:7a:82:b8: 19:ae:79:02:df:5a:95:f9:3b:01:f3:81:f2:2e:df:7b:e7:c1: 53:8f:d2:b8:55:14:08:a4:db:14:0d:81:f8:ae:4b:4e:18:50: 90:0a:1b:1f:d8:3b:aa:eb:78:45:46:46:aa:22:88:d4:41:a0: a1:ef:1d:6c:58:20:aa:e1:70:69:1f:0f:63:0a:eb:58:f0:75: 46:51:ad:a7:7c:04:6f:25:49:f0:ef:4d:0f:56:80:33:95:cf: d4:56:e6:49 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEe5r0tVGQzVqrx0rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFjZDk5ZjctMmY0Mi00ZGVjLWIyYzYtMDliYWZhYTM3 ODBlMB4XDTI0MTAzMTE1Mzc0MVoXDTI3MDIwMzE2Mzc0MVowPTE7MDkGA1UEAxMy MzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3NjdjZjNkMGI5ZmRlNjIz MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgoGjpoz66XULRXzu N4zWvcBgDUWNKrCqLHpCOKU4XMmynAejOviduj+91ePogvPA1yfoy3Rbj/eOUEHB PnLOswCQwfzZocAHiw1bmoEBW3/IXOu+rxInvcuDPBuvOkDK9GbdglxPJsgWtO19 9K7MIehBabWFzUQam8cd2z1M8o7zcEjPtScyWdZg2w7Ws22ocRXMFEdDt86OnWBK A0CRGTG2TLbblIjPyBghX+GRUCyZKlGYx2O/7ks1qQDCM4GmCOMjofsTsBBA/Mid YpmZ0QX/unzzXJnSnVFzh1zpSzMFL7QT/StJ11qABUga57yZYaXdvpQoXVXNF3jP b+xdAgMBAAGjggPsMIID6DAdBgNVHQ4EFgQUP806g56hQX/ZiPPd/QRUGX+q9How ggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNyc3luYzovL3JzeW5j LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5 Zi1hMjI5LTBhYjcwZTQ4MTViYi8xLzCBiwYIKwYBBQUHMAqGf3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00 NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5RUExNDE3RkQ5ODhGM0RE RkQwNDU0MTk3RkFBRjQ3QS5tZnQwPAYIKwYBBQUHMA2GMGh0dHBzOi8vcnJkcC5w YWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTAD AQH/MIHcBgNVHR8EgdQwgdEwgc6ggcuggciGgcVyc3luYzovL3Jwa2kuYXJpbi5u ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw OGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2 ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0wOWJhZmFhMzc4MGUvNTFjZDk5 ZjctMmY0Mi00ZGVjLWIyYzYtMDliYWZhYTM3ODBlLmNybDAfBgNVHSMEGDAWgBRx xgiK2Vq/eT704sVx68VrKNJ3IjAOBgNVHQ8BAf8EBAMCAQYwgcAGCCsGAQUFBwEB BIGzMIGwMIGtBggrBgEFBQcwAoaBoHJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBv c2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcx ZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzUx Y2Q5OWY3LTJmNDItNGRlYy1iMmM2LTA5YmFmYWEzNzgwZS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXvygwDgQCAAIwCAMGACYC994AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmlKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB1RHFv5n85+C4ccvPLJFK3XWQN2 0il6l1BRLSxEDgeLhsnd0Z2ublBjh6E6j+02B62Z58JfF8XaB1Gve8tWueJJQr4X /vwn/n/Is7IQFq4dDltz/AcFj2BxjTk09OG0eN89iPuPXHMyMf8OmehDbYqKlD7g 040RnxQ+b4A9467SL38n84eeMHoMrYmRNl8IL2AC8dHltTCz13qfjS3WvHqCuBmu eQLfWpX5OwHzgfIu33vnwVOP0rhVFAik2xQNgfiuS04YUJAKGx/YO6rreEVGRqoi iNRBoKHvHWxYIKrhcGkfD2MK61jwdUZRrad8BG8lSfDvTQ9WgDOVz9RW5kk= -----END CERTIFICATE-----Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org