$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer File: 5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer (raw, json) Hash identifier: T52Dqarh0HEQ1U1s7WMOa4N+J4JfZztYsaw5SSCL49A= Subject key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584754FB668038582A1B235E3B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Sep 2024 13:54:24 +0000 Certificate not after: Tue 29 Dec 2026 14:54:24 +0000 Subordinate resources: IP: 152.216.0.0 -- 152.225.255.255 IP: 204.62.146.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:54:fb:66:80:38:58:2a:1b:23:5e:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 25 13:54:24 2024 GMT Not After : Dec 29 14:54:24 2026 GMT Subject: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:57:32:03:5a:1c:95:7e:4a:11:80:46:54: dd:ed:ef:8f:20:7f:5e:8d:67:a7:9c:ee:1a:e4:20: 91:80:1a:f7:9c:2d:14:6f:06:6f:56:e3:90:b6:d7: 4a:91:23:7b:7f:95:b6:ce:21:57:f7:56:5f:f8:5a: af:93:6c:36:4a:9e:bf:29:96:df:11:ff:e1:1f:76: 11:e0:34:09:ec:af:b2:fc:60:c5:29:ed:95:62:4f: ce:58:5b:1a:73:f8:c9:c9:a9:63:1e:46:9c:13:40: 41:ce:3a:57:b4:3b:18:29:2b:7a:fa:22:37:ca:60: 09:7c:13:0b:2a:81:f9:48:38:7e:d4:b1:c7:dc:ef: 51:eb:7f:3e:1b:65:f3:5c:27:af:77:60:76:aa:e2: a2:ba:70:87:33:d3:b9:43:7a:a1:c0:c8:cc:63:4a: 6c:3f:f1:7d:b6:60:57:1e:20:e9:c9:27:a5:db:9d: 98:d6:42:42:35:6b:ac:75:2d:73:e1:b0:93:e1:1c: 0d:77:8c:1a:1b:3e:1f:51:2a:7a:24:7f:df:0e:cb: 65:8a:5f:c1:39:85:8f:71:b7:8b:65:92:88:2f:5e: 82:45:b3:2d:1f:19:9a:84:29:99:b9:9c:fa:32:e7: a2:80:39:24:c9:bd:25:8e:1f:b7:83:26:ca:24:fe: 43:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 152.216.0.0-152.225.255.255 204.62.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7a:36:0b:70:fb:25:d9:f4:c2:6b:0a:91:1f:59:96:d2:d9: 09:cd:2a:1c:d9:07:1f:8c:52:b2:a3:63:89:a4:7e:a2:95:fb: e0:57:10:ce:73:04:ee:f5:89:c3:d7:2f:a0:f6:ed:23:d6:37: d0:e4:c9:a4:61:b5:0a:24:dd:5a:37:c5:6a:55:db:1c:66:17: 17:d2:a4:07:b1:a9:f4:20:52:8d:fd:96:bd:82:5f:18:4b:7f: df:ff:da:f6:4d:73:33:46:82:e0:c4:69:02:8b:9f:a1:08:34: ed:5b:f3:f0:0e:dd:da:73:56:6d:57:b7:db:c2:cb:94:b4:7a: 2c:7e:cc:f4:2a:44:ca:21:99:e7:22:77:3a:18:7a:36:fe:5b: 9a:43:3b:14:f8:d8:92:4e:99:21:d0:fd:c0:aa:9f:30:42:18: 6d:31:e6:d1:93:f4:53:1d:4e:d0:bd:5b:23:76:36:38:2d:53: b7:f7:f7:f6:60:71:76:92:e1:a1:89:d0:c8:a2:6c:97:9e:14: cd:2b:4a:c7:b6:d2:a5:71:96:d9:79:d5:27:3a:b7:9c:2e:17: d0:af:6c:17:27:bf:7a:c3:1b:5d:63:ab:55:78:d9:17:d7:38: b7:77:95:15:0d:ec:93:3f:47:98:36:fe:f0:af:ed:f6:6c:7b: 51:96:ba:de -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEdU+2aAOFgqGyNeO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkyNTEzNTQyNFoXDTI2MTIyOTE0NTQyNFowLzEtMCsGA1UEAxMk NWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBmYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNxXMgNaHJV+ShGARlTd7e+PIH9ejWennO4a 5CCRgBr3nC0UbwZvVuOQttdKkSN7f5W2ziFX91Zf+Fqvk2w2Sp6/KZbfEf/hH3YR 4DQJ7K+y/GDFKe2VYk/OWFsac/jJyaljHkacE0BBzjpXtDsYKSt6+iI3ymAJfBML KoH5SDh+1LHH3O9R638+G2XzXCevd2B2quKiunCHM9O5Q3qhwMjMY0psP/F9tmBX HiDpySel252Y1kJCNWusdS1z4bCT4RwNd4waGz4fUSp6JH/fDstlil/BOYWPcbeL ZZKIL16CRbMtHxmahCmZuZz6MueigDkkyb0ljh+3gybKJP5DJwIDAQABo4IECzCC BAcwHQYDVR0OBBYEFAo7cISIBW675H+eTO434o9TfL6CMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzVkZGJjYTlhLTk2MGUtNDNhMS1h ODY1LWYwYzEwMGQwZmM3YS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBk MGZjN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIwCgMDA5jYAwMBmOADBADMPpIwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASXo2 C3D7Jdn0wmsKkR9ZltLZCc0qHNkHH4xSsqNjiaR+opX74FcQznME7vWJw9cvoPbt I9Y30OTJpGG1CiTdWjfFalXbHGYXF9KkB7Gp9CBSjf2WvYJfGEt/3//a9k1zM0aC 4MRpAoufoQg07Vvz8A7d2nNWbVe328LLlLR6LH7M9CpEyiGZ5yJ3Ohh6Nv5bmkM7 FPjYkk6ZIdD9wKqfMEIYbTHm0ZP0Ux1O0L1bI3Y2OC1Tt/f39mBxdpLhoYnQyKJs l54UzStKx7bSpXGW2XnVJzq3nC4X0K9sFye/esMbXWOrVXjZF9c4t3eVFQ3skz9H mDb+8K/t9mx7UZa63g== -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:27 2024 by rpki-client on console-fra.rpki-client.org