$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699.cer File: 5fca320f-a628-49d3-afa7-8717a0ad5699.cer (raw, json) Hash identifier: WKv/vmWTug+8HzKlsspYUnSTynGCvzjSLth/Ba9np18= Subject key identifier: 56:5C:77:50:01:C8:93:A8:08:A9:9D:5E:97:E2:E2:97:26:C9:E3:4F Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584751455284DC40005FD1D09560 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Sep 2024 06:00:06 +0000 Certificate not after: Mon 28 Dec 2026 07:00:06 +0000 Subordinate resources: AS: 33425 AS: 46992 IP: 166.19.0.0/16 IP: 192.112.160.0/20 IP: 198.176.96.0/20 IP: 207.53.232.0/22 IP: 216.153.48.0/20 IP: 2607:240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:51:45:52:84:dc:40:00:5f:d1:d0:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 24 06:00:06 2024 GMT Not After : Dec 28 07:00:06 2026 GMT Subject: CN=5fca320f-a628-49d3-afa7-8717a0ad5699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:0c:b3:87:aa:06:0a:04:37:13:4e:33:a4: 27:bd:86:36:4d:fe:ca:e3:e1:b3:eb:fe:0b:f7:06: 51:ed:f1:fc:9b:61:f3:6e:77:68:42:6b:9e:81:ea: 64:de:22:e9:88:ca:79:15:52:f7:cc:3d:64:10:8f: 68:44:59:20:29:f6:da:88:ae:75:b7:89:96:c4:3b: 44:fd:63:1c:a4:5f:69:5f:f9:1c:cb:5e:52:d8:6f: c9:43:2a:b9:0d:97:64:f2:a1:36:99:87:a9:72:cb: 2e:ca:28:2e:56:cb:18:16:fe:b7:a7:46:c2:0b:fe: 28:42:4d:9d:ff:4e:41:44:cf:9c:25:0d:65:5c:3f: 31:31:32:ba:59:f2:82:0a:e3:78:18:79:66:dd:4b: 8a:cd:86:ec:23:41:f6:d5:5a:99:41:8e:ff:67:b4: 6f:2c:c0:c7:86:a6:28:e1:79:94:0e:29:ac:36:ab: ef:15:90:4e:54:00:20:da:63:71:42:14:8a:8f:e5: bf:68:37:fe:6f:99:45:11:9a:d6:fe:3f:6d:9d:c0: ef:53:bd:58:ca:18:00:2c:03:11:43:c2:d3:3c:b2: 65:1a:fa:a5:44:4c:da:bc:9d:8e:d4:04:c8:45:4b: 18:ef:a7:b3:fd:92:9f:b9:2c:91:1d:c5:dc:87:19: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5C:77:50:01:C8:93:A8:08:A9:9D:5E:97:E2:E2:97:26:C9:E3:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5fca320f-a628-49d3-afa7-8717a0ad5699/5fca320f-a628-49d3-afa7-8717a0ad5699.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 166.19.0.0/16 192.112.160.0/20 198.176.96.0/20 207.53.232.0/22 216.153.48.0/20 IPv6: 2607:240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33425 46992 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:18:ed:47:76:c1:0a:f9:b7:59:f1:44:a9:9d:27:5c:66:5e: 7b:33:62:92:73:1c:70:98:f8:fb:ba:44:bf:77:ff:7a:52:e5: 7d:99:80:a4:80:51:88:ef:1b:94:6f:f5:cc:f3:cc:23:59:38: 0a:ef:c9:eb:1c:24:4a:78:9d:36:f3:0b:73:29:40:84:78:b4: 3e:94:68:e1:48:57:04:de:05:57:a8:9a:4e:a5:fa:9f:cf:ad: f4:11:57:f8:86:56:82:90:b5:bd:48:50:22:06:9f:bb:bc:4a: 95:d0:ac:2e:f9:8a:aa:0a:3e:9d:4e:36:ac:6b:81:62:15:7a: 98:90:9c:a8:b2:7c:0b:de:8a:e6:d5:c1:f4:ef:e6:a7:6b:2a: 88:fb:0d:6a:e0:6e:87:e4:7b:3a:23:68:63:15:f4:16:98:06: 3c:5b:e3:fe:b1:7b:7d:e5:85:f6:00:2a:8d:03:af:7e:94:50: 3d:08:08:eb:32:b4:31:e3:4b:34:b1:f1:3d:f5:f8:ac:60:ff: b5:49:d8:71:0d:de:10:e3:78:c8:49:17:e3:2c:3c:42:b0:7c: 10:4b:10:c8:71:95:9d:dc:0e:0b:c6:ee:a6:46:9f:fd:63:50: 3b:2f:5c:0f:86:63:09:f5:1f:dc:2b:a7:0e:cc:1d:23:41:b3: ba:85:a0:14 -----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWEdRRVKE3EAAX9HQlWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkyNDA2MDAwNloXDTI2MTIyODA3MDAwNlowLzEtMCsGA1UEAxMk NWZjYTMyMGYtYTYyOC00OWQzLWFmYTctODcxN2EwYWQ1Njk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv4Ms4eqBgoENxNOM6QnvYY2Tf7K4+Gz6/4L 9wZR7fH8m2HzbndoQmuegepk3iLpiMp5FVL3zD1kEI9oRFkgKfbaiK51t4mWxDtE /WMcpF9pX/kcy15S2G/JQyq5DZdk8qE2mYepcssuyiguVssYFv63p0bCC/4oQk2d /05BRM+cJQ1lXD8xMTK6WfKCCuN4GHlm3UuKzYbsI0H21VqZQY7/Z7RvLMDHhqYo 4XmUDimsNqvvFZBOVAAg2mNxQhSKj+W/aDf+b5lFEZrW/j9tncDvU71YyhgALAMR Q8LTPLJlGvqlREzavJ2O1ATIRUsY76ez/ZKfuSyRHcXchxn7HQIDAQABo4IERjCC BEIwHQYDVR0OBBYEFFZcd1AByJOoCKmdXpfi4pcmyeNPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81 ZmNhMzIwZi1hNjI4LTQ5ZDMtYWZhNy04NzE3YTBhZDU2OTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzVmY2EzMjBmLWE2MjgtNDlkMy1h ZmE3LTg3MTdhMGFkNTY5OS81ZmNhMzIwZi1hNjI4LTQ5ZDMtYWZhNy04NzE3YTBh ZDU2OTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwRQYIKwYBBQUH AQcBAf8ENjA0MCMEAgABMB0DAwCmEwMEBMBwoAMEBMawYAMEAs816AMEBNiZMDAN BAIAAjAHAwUAJgcCQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAgpECAwC3kDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBAGO1HdsEK+bdZ8USpnSdcZl57M2KScxxwmPj7ukS/d/96UuV9mYCk gFGI7xuUb/XM88wjWTgK78nrHCRKeJ028wtzKUCEeLQ+lGjhSFcE3gVXqJpOpfqf z630EVf4hlaCkLW9SFAiBp+7vEqV0Kwu+YqqCj6dTjasa4FiFXqYkJyosnwL3orm 1cH07+anayqI+w1q4G6H5Hs6I2hjFfQWmAY8W+P+sXt95YX2ACqNA69+lFA9CAjr MrQx40s0sfE99fisYP+1SdhxDd4Q43jISRfjLDxCsHwQSxDIcZWd3A4Lxu6mRp/9 Y1A7L1wPhmMJ9R/cK6cOzB0jQbO6haAU -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:03 2024 by rpki-client on console-ams.rpki-client.org