$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6f682f1c-5d97-4e94-a874-9de77945067d.cer File: 6f682f1c-5d97-4e94-a874-9de77945067d.cer (raw, json) Hash identifier: s3qf5ZyEN9PbjKXoERRfKpxpJsVpNMg9OIIgY5pMEtU= Subject key identifier: 64:15:09:09:B1:C9:31:04:79:C1:59:EE:F9:D3:BE:ED:DE:EA:88:29 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858474F9781EF2C8B61E9719138A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6f682f1c-5d97-4e94-a874-9de77945067d/6f682f1c-5d97-4e94-a874-9de77945067d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6f682f1c-5d97-4e94-a874-9de77945067d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Sep 2024 15:34:05 +0000 Certificate not after: Sun 27 Dec 2026 16:34:05 +0000 Subordinate resources: AS: 33227 IP: 66.218.176.0/20 IP: 74.214.16.0/20 IP: 162.249.152.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:4f:97:81:ef:2c:8b:61:e9:71:91:38:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 23 15:34:05 2024 GMT Not After : Dec 27 16:34:05 2026 GMT Subject: CN=6f682f1c-5d97-4e94-a874-9de77945067d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ab:3c:18:d7:43:7f:c8:99:72:5e:52:1d:0e: a5:41:2f:c8:16:2a:1f:5b:b4:8f:ea:1e:19:c8:cd: f4:b6:87:90:74:b3:9a:ca:41:0b:81:26:1c:cd:25: d2:9f:a1:3f:82:02:0c:30:4a:f5:71:f3:82:84:47: ef:e9:0d:a6:02:6b:9e:02:da:7c:13:5b:ae:c3:6b: c0:02:bf:02:56:81:fa:1d:16:52:32:01:6b:b3:19: 9e:4d:33:af:39:1b:e4:63:38:6a:5f:c9:0b:c5:ce: 91:65:a5:ae:dd:e5:be:72:fa:cc:40:6e:a5:f6:a2: 74:4b:4a:23:ff:d0:02:e2:66:9c:c3:f0:f4:b8:90: 1c:d5:48:24:89:57:9f:49:3d:5f:01:8e:4b:53:bf: a8:21:ea:b9:32:10:16:bc:71:2c:0b:70:9e:7e:38: 8c:7c:64:08:e3:d6:f5:f5:c8:a5:ca:6f:57:d5:79: 7f:cf:fd:2a:71:47:e6:95:ea:70:78:d2:93:a2:4c: 0d:dd:7d:ec:ed:60:ec:fa:b6:aa:12:a3:ae:b9:8c: ec:e0:81:12:e5:db:30:6f:1a:f0:89:f1:32:f0:00: e2:87:ef:d1:25:4b:9b:1a:d7:a5:b8:85:92:f6:ee: 7c:67:26:f6:1e:60:a2:fb:fc:ae:10:d8:da:c8:71: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:15:09:09:B1:C9:31:04:79:C1:59:EE:F9:D3:BE:ED:DE:EA:88:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6f682f1c-5d97-4e94-a874-9de77945067d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6f682f1c-5d97-4e94-a874-9de77945067d/6f682f1c-5d97-4e94-a874-9de77945067d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 66.218.176.0/20 74.214.16.0/20 162.249.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33227 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:6b:88:19:f4:0a:0a:48:ba:fb:f1:dd:4d:dc:b8:38:44:6a: 9d:c4:cc:e8:ed:28:27:da:4c:0d:b7:f2:fb:5c:2a:72:45:dd: 1c:23:de:f1:43:df:03:c9:e4:3f:e9:61:0d:4f:74:26:98:1f: 42:1b:74:7b:2b:09:f8:22:8a:38:87:15:e6:85:d2:61:77:6b: 63:dd:50:c9:c4:86:00:20:49:38:d8:32:2f:ff:5a:2d:41:b1: b5:ec:10:d2:ca:3a:4e:4a:a5:a7:ab:94:d4:31:b7:f4:3b:99: 28:d0:dd:0d:0a:0f:b9:71:0c:2d:34:f2:b5:af:9c:66:89:a3: 53:2e:55:0e:ed:96:b6:b5:01:2c:96:96:de:81:5a:1e:d1:00: 49:82:4f:1a:63:9a:58:c5:af:43:1a:0c:8d:2f:32:39:53:a1: 3d:9b:e4:fe:42:6d:ba:45:1e:05:ca:1d:bf:cb:4e:c0:bd:90: e7:c2:b1:c7:1c:84:f3:46:6a:9e:75:35:de:f8:a5:b1:5a:a5: 45:ae:30:d3:b8:fc:e1:e6:60:e4:a9:37:5e:ae:ea:a6:2c:3b: 01:99:0f:28:79:f8:2f:22:3b:02:de:9c:35:55:b0:4d:d1:63: b8:cf:8c:ca:6f:0a:a7:8a:9e:c1:f2:39:76:5d:ef:f1:be:72: d9:e9:f7:42 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEdPl4HvLIth6XGROKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkyMzE1MzQwNVoXDTI2MTIyNzE2MzQwNVowLzEtMCsGA1UEAxMk NmY2ODJmMWMtNWQ5Ny00ZTk0LWE4NzQtOWRlNzc5NDUwNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqs8GNdDf8iZcl5SHQ6lQS/IFiofW7SP6h4Z yM30toeQdLOaykELgSYczSXSn6E/ggIMMEr1cfOChEfv6Q2mAmueAtp8E1uuw2vA Ar8CVoH6HRZSMgFrsxmeTTOvORvkYzhqX8kLxc6RZaWu3eW+cvrMQG6l9qJ0S0oj /9AC4macw/D0uJAc1UgkiVefST1fAY5LU7+oIeq5MhAWvHEsC3CefjiMfGQI49b1 9cilym9X1Xl/z/0qcUfmlepweNKTokwN3X3s7WDs+raqEqOuuYzs4IES5dswbxrw ifEy8ADih+/RJUubGteluIWS9u58Zyb2HmCi+/yuENjayHFYnQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFGQVCQmxyTEEecFZ7vnTvu3e6ogpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82 ZjY4MmYxYy01ZDk3LTRlOTQtYTg3NC05ZGU3Nzk0NTA2N2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzZmNjgyZjFjLTVkOTctNGU5NC1h ODc0LTlkZTc3OTQ1MDY3ZC82ZjY4MmYxYy01ZDk3LTRlOTQtYTg3NC05ZGU3Nzk0 NTA2N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBARC2rADBARK1hADBAKi+ZgwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAIHLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBACtriBn0CgpIuvvx3U3cuDhEap3EzOjt KCfaTA238vtcKnJF3Rwj3vFD3wPJ5D/pYQ1PdCaYH0IbdHsrCfgiijiHFeaF0mF3 a2PdUMnEhgAgSTjYMi//Wi1BsbXsENLKOk5KpaerlNQxt/Q7mSjQ3Q0KD7lxDC00 8rWvnGaJo1MuVQ7tlra1ASyWlt6BWh7RAEmCTxpjmljFr0MaDI0vMjlToT2b5P5C bbpFHgXKHb/LTsC9kOfCsccchPNGap51Nd74pbFapUWuMNO4/OHmYOSpN16u6qYs OwGZDyh5+C8iOwLenDVVsE3RY7jPjMpvCqeKnsHyOXZd7/G+ctnp90I= -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:28 2024 by rpki-client on console-fra.rpki-client.org