$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer File: 5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer (raw, json) Hash identifier: k+YT0OyDSMyL0upm7W4VvOz1BkBs+yLAr1pzG8gZw+8= Subject key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847E0F411AFC53A860EA9C71380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Nov 2024 17:12:47 +0000 Certificate not after: Wed 17 Feb 2027 17:12:47 +0000 Subordinate resources: AS: 399624 IP: 23.129.68.0/24 IP: 2602:f7a7::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e0:f4:11:af:c5:3a:86:0e:a9:c7:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 14 17:12:47 2024 GMT Not After : Feb 17 17:12:47 2027 GMT Subject: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:19:f9:b8:3e:bb:9e:4d:1e:ca:62:6b:35: 63:70:7b:83:22:fc:1b:21:57:15:05:6f:a9:be:13: fd:46:74:dc:7a:ab:7d:5e:15:54:e2:5e:52:07:fc: 86:be:fb:73:82:86:28:c8:67:b4:3c:99:e5:87:6f: 4a:3b:64:0b:a3:88:ca:db:53:f7:1f:25:ed:6f:92: 32:93:68:a3:e0:5c:79:b4:f2:bb:50:f6:0a:39:ec: a6:98:4a:dd:76:b6:83:c3:9c:73:d3:74:96:33:45: 0c:6b:18:0b:f6:82:cf:bf:f6:8e:85:06:80:7c:02: 09:60:7e:94:4c:26:85:e3:d5:de:81:22:4d:99:3e: bf:c9:58:95:3c:aa:1a:73:97:54:15:5f:ee:df:01: 83:05:88:66:61:b5:f6:f8:40:23:9d:b2:3e:52:39: 3e:f1:4f:35:7e:70:c2:5e:b9:f2:3d:2a:e0:3e:e6: 6d:79:8f:5d:f8:6b:86:eb:70:51:da:bf:71:96:ce: 62:20:da:93:52:9b:7d:d3:af:57:97:70:9e:a4:b6: c3:d5:3c:d7:bc:22:01:55:16:c8:ae:c3:99:97:df: b6:7f:d1:86:87:95:b2:69:00:6b:5f:84:70:3d:7c: 7a:26:b5:2a:d9:f5:88:9f:27:ee:47:6b:3b:21:cf: 13:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.129.68.0/24 IPv6: 2602:f7a7::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399624 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:3f:ec:df:7d:46:09:37:bc:82:fb:d1:6d:44:12:b8:fe:c5: 3e:f2:3f:87:75:3f:01:50:10:28:10:10:b5:65:ec:52:3b:29: e1:6c:39:a6:cd:af:e3:d3:c7:f9:cc:22:82:5c:04:d5:87:a4: a1:7f:45:9f:6d:d0:1b:f1:40:93:ca:5b:5c:2a:73:37:a9:62: 4e:82:f4:85:cb:2c:45:66:33:0c:1b:5a:00:f4:5d:f0:10:d7: 52:b4:6e:4b:0a:6a:d6:5d:00:4c:4a:1f:6e:f1:ad:3b:e5:3a: 26:c9:a7:45:10:81:69:33:3b:36:83:e8:23:11:10:5b:d4:3a: 6a:87:05:e6:06:04:68:6d:7d:b4:a6:a7:78:bb:23:69:37:25: 5d:3e:2d:b4:cd:6c:df:90:fd:7b:4a:3c:91:45:3c:f4:7c:ca: 4c:df:b7:8c:be:2d:2e:11:d8:fa:e0:df:b7:d1:c7:7e:8f:15: 78:2c:6f:b9:1c:05:52:6b:18:ae:45:fd:1e:21:df:f6:8b:43: e6:e9:63:5d:a8:40:0a:f5:f6:3d:e8:e8:cc:31:ca:93:92:37: cc:d3:6f:2b:cd:a4:6f:fb:28:6d:a5:ca:29:09:dc:83:f2:06: c1:31:11:92:7e:97:70:6d:b0:8e:d4:ed:ec:18:b5:f6:98:08: c1:b7:5b:14 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEfg9BGvxTqGDqnHE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTExNDE3MTI0N1oXDTI3MDIxNzE3MTI0N1owLzEtMCsGA1UEAxMk NWUyMmM1OWUtMjkwNC00ZWE2LWIwNDQtMGE5ZmFjMzk0NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig0Z+bg+u55NHspiazVjcHuDIvwbIVcVBW+p vhP9RnTceqt9XhVU4l5SB/yGvvtzgoYoyGe0PJnlh29KO2QLo4jK21P3HyXtb5Iy k2ij4Fx5tPK7UPYKOeymmErddraDw5xz03SWM0UMaxgL9oLPv/aOhQaAfAIJYH6U TCaF49XegSJNmT6/yViVPKoac5dUFV/u3wGDBYhmYbX2+EAjnbI+Ujk+8U81fnDC XrnyPSrgPuZteY9d+GuG63BR2r9xls5iINqTUpt9069Xl3CepLbD1TzXvCIBVRbI rsOZl9+2f9GGh5WyaQBrX4RwPXx6JrUq2fWInyfuR2s7Ic8TYwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFQKtfQO6z/96vMibuZE9u/rzJBpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMzOTQ2Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzVlMjJjNTllLTI5MDQtNGVhNi1i MDQ0LTBhOWZhYzM5NDZjYy81ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMz OTQ2Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgUQwDgQCAAIwCAMGACYC96cAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYZCDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJP+zffUYJN7yC+9FtRBK4/sU+ 8j+HdT8BUBAoEBC1ZexSOynhbDmmza/j08f5zCKCXATVh6Shf0WfbdAb8UCTyltc KnM3qWJOgvSFyyxFZjMMG1oA9F3wENdStG5LCmrWXQBMSh9u8a075TomyadFEIFp Mzs2g+gjERBb1DpqhwXmBgRobX20pqd4uyNpNyVdPi20zWzfkP17SjyRRTz0fMpM 37eMvi0uEdj64N+30cd+jxV4LG+5HAVSaxiuRf0eId/2i0Pm6WNdqEAK9fY96OjM McqTkjfM028rzaRv+yhtpcopCdyD8gbBMRGSfpdwbbCO1O3sGLX2mAjBt1sU -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:16 2024 by rpki-client on console-ams.rpki-client.org