$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer File: 60f3bf9e-9df6-4935-a73a-d336655a686b.cer (raw, json) Hash identifier: fiaBBR9HLbhgSEA+NijVn2KTvWKba5AduBdi9rRh1G8= Subject key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858475B61B622DE5AD1E658316280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Sep 2024 20:55:23 +0000 Certificate not after: Thu 31 Dec 2026 21:55:23 +0000 Subordinate resources: AS: 19107 IP: 68.235.0.0/20 IP: 162.219.152.0/22 IP: 216.234.64.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5b:61:b6:22:de:5a:d1:e6:58:31:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 27 20:55:23 2024 GMT Not After : Dec 31 21:55:23 2026 GMT Subject: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:28:3e:3e:f8:82:00:6d:66:0d:af:51:cc: 55:fd:48:52:ed:68:8b:e7:51:e0:06:01:b4:30:d2: b6:84:a2:a6:12:dd:10:06:40:6d:cb:76:89:78:87: 53:c4:1c:4d:d1:89:5b:84:f0:5a:a3:86:88:07:6e: ff:60:8f:48:9a:28:1c:4c:66:00:3c:68:14:20:76: f4:7c:3f:37:7e:f6:3a:15:39:f7:5a:9c:88:7b:b5: 82:34:8c:29:2f:7e:71:59:a5:f7:cf:6c:91:1d:b6: 47:2c:45:a4:ee:4d:a1:2e:0d:f1:1f:68:a3:de:91: 5b:7c:2d:f4:8b:66:58:d0:a5:93:2d:40:0c:0f:55: 26:83:51:04:62:a5:8e:2d:8c:8a:13:50:1f:c5:c8: 5f:4c:11:e9:5c:60:68:d4:0f:c1:75:1e:c3:9e:7e: 03:5e:96:fc:b4:16:8e:27:d1:41:ff:a7:eb:4b:d5: 91:8d:44:84:69:2f:7b:98:c0:19:44:b9:9e:a4:42: ad:b0:88:fe:a0:31:cd:27:fe:7c:9d:da:81:d2:42: 9a:fc:0c:f3:b7:fe:b9:90:79:61:09:42:40:98:86: 9f:e9:69:50:f9:b1:5d:c5:7a:43:48:f3:d7:66:df: 45:68:7d:1b:88:b1:24:83:fe:47:76:79:ac:33:c1: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 68.235.0.0/20 162.219.152.0/22 216.234.64.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19107 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a2:06:88:4d:6d:c7:36:d1:ed:06:5b:80:40:85:3f:1f:5b: ba:e0:e1:02:51:98:92:18:80:a9:12:2b:df:8c:1c:8b:3d:90: af:9f:00:2a:60:69:d3:ea:77:eb:08:63:6a:92:f5:77:86:01: 9f:2e:d8:68:e8:d7:8f:57:d3:98:77:92:8c:87:46:76:29:ec: 1b:f7:ce:92:91:df:3f:fa:e8:9d:ea:0d:cc:ad:03:a6:a3:d6: 54:cb:29:fc:fb:bf:d5:33:da:4e:05:23:2e:4b:3b:5d:d9:4c: 83:6a:f4:9a:98:13:35:20:16:54:3c:0c:9e:a0:99:62:d3:1e: 86:0f:eb:40:78:85:fe:60:c9:e4:ee:44:24:48:26:03:95:cc: ea:a1:6a:16:ff:81:ab:1c:4f:78:ac:6b:3e:a2:d1:29:2f:42: 58:d6:e5:5a:f9:7f:df:d6:93:98:6f:1f:94:e1:e6:f5:7b:8d: 46:56:cf:b8:b2:2c:3e:ae:e4:5f:58:c6:f0:5b:cb:05:47:8b: 7e:9f:ce:ff:78:f4:60:5c:76:29:4f:21:9c:57:34:a7:0a:e5: ef:28:6c:23:7b:48:0f:8f:50:1c:67:ac:10:0b:1d:ac:8c:05: 7a:a5:c9:b7:af:be:71:ad:34:ef:0e:51:19:cb:ae:ac:2c:ba: 77:d6:57:2e -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEdbYbYi3lrR5lgxYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkyNzIwNTUyM1oXDTI2MTIzMTIxNTUyM1owLzEtMCsGA1UEAxMk NjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2ODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4EoPj74ggBtZg2vUcxV/UhS7WiL51HgBgG0 MNK2hKKmEt0QBkBty3aJeIdTxBxN0YlbhPBao4aIB27/YI9ImigcTGYAPGgUIHb0 fD83fvY6FTn3WpyIe7WCNIwpL35xWaX3z2yRHbZHLEWk7k2hLg3xH2ij3pFbfC30 i2ZY0KWTLUAMD1Umg1EEYqWOLYyKE1AfxchfTBHpXGBo1A/BdR7Dnn4DXpb8tBaO J9FB/6frS9WRjUSEaS97mMAZRLmepEKtsIj+oDHNJ/58ndqB0kKa/Azzt/65kHlh CUJAmIaf6WlQ+bFdxXpDSPPXZt9FaH0biLEkg/5HdnmsM8HJPQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFFXxypDgfNZVRtedoNMGmhf2ozhSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82 MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzYwZjNiZjllLTlkZjYtNDkzNS1h NzNhLWQzMzY2NTVhNjg2Yi82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1 YTY4NmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBARE6wADBAKi25gDBATY6kAwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICSqMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASaIGiE1txzbR7QZbgECFPx9buuDhAlGY khiAqRIr34wciz2Qr58AKmBp0+p36whjapL1d4YBny7YaOjXj1fTmHeSjIdGdins G/fOkpHfP/roneoNzK0DpqPWVMsp/Pu/1TPaTgUjLks7XdlMg2r0mpgTNSAWVDwM nqCZYtMehg/rQHiF/mDJ5O5EJEgmA5XM6qFqFv+BqxxPeKxrPqLRKS9CWNblWvl/ 39aTmG8flOHm9XuNRlbPuLIsPq7kX1jG8FvLBUeLfp/O/3j0YFx2KU8hnFc0pwrl 7yhsI3tID49QHGesEAsdrIwFeqXJt6++ca007w5RGcuurCy6d9ZXLg== -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:03 2024 by rpki-client on console-ams.rpki-client.org