$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5.cer File: 7491ca97-4125-4dca-a20b-fe4fb458e1c5.cer (raw, json) Hash identifier: foFRV/qzKphTyGhPeLRS9DNQ2pOPpdKDXa9Xil88nBc= Subject key identifier: 0A:2B:B6:25:B1:AA:22:E2:69:A9:C5:BE:E2:3C:F4:97:0D:9D:3B:DF Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584764D1C1E0466B294F6A57D700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/7491ca97-4125-4dca-a20b-fe4fb458e1c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Oct 2024 06:03:25 +0000 Certificate not after: Mon 04 Jan 2027 07:03:25 +0000 Subordinate resources: AS: 55036 IP: 192.129.70.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:64:d1:c1:e0:46:6b:29:4f:6a:57:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 1 06:03:25 2024 GMT Not After : Jan 4 07:03:25 2027 GMT Subject: CN=7491ca97-4125-4dca-a20b-fe4fb458e1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:d2:72:2c:ad:e8:a3:93:4f:a2:ac:5d:db: 2a:72:fe:cd:f9:ab:03:99:1f:2d:1f:6a:a8:f8:f2: 58:1f:4e:ca:d4:e6:bf:2b:22:b5:bd:aa:d8:5c:8f: 35:83:10:88:91:fb:da:d4:94:2d:fa:e9:48:ff:89: 12:fd:9d:4c:e0:26:ae:5f:22:f1:9b:e9:a2:90:55: 67:3c:42:c8:f8:66:c9:70:89:4b:60:85:a6:64:6b: e0:2c:a1:7c:78:6d:5e:86:79:96:db:82:ce:d8:1d: 83:3b:85:50:0d:be:82:74:52:fd:6c:d9:48:92:8f: a1:62:dd:99:43:cc:c5:24:79:a7:13:9f:f4:ae:22: 26:36:d9:a8:99:f8:ef:5f:6f:00:93:31:f8:b4:eb: 7a:50:af:ca:18:f7:96:2c:5c:c4:96:3a:43:80:4f: ed:dc:7c:fc:10:f7:83:51:79:e8:05:8b:db:3a:8f: b5:72:9a:5a:e4:59:c6:a5:66:05:e5:a7:9b:e9:1d: 3a:70:ca:94:49:bd:03:c2:46:3e:cf:62:ae:4e:64: 11:aa:c5:3f:16:b1:18:91:b8:29:13:3d:e0:df:a7: 05:8e:65:ba:5b:d5:07:63:80:b6:82:61:3e:f6:5c: 67:75:a6:ec:0a:f5:f5:40:0f:bf:64:2a:95:14:a6: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2B:B6:25:B1:AA:22:E2:69:A9:C5:BE:E2:3C:F4:97:0D:9D:3B:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/7491ca97-4125-4dca-a20b-fe4fb458e1c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.129.70.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55036 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:01:ab:50:93:8b:a7:f7:66:1a:28:c5:b3:a3:de:78:21:68: dc:c6:5f:9c:8a:3f:81:8a:3b:70:7f:e9:8e:b7:81:30:4c:d8: 84:57:6c:28:0e:88:d9:f7:77:f5:3a:a2:f8:84:ba:f5:db:a1: 2a:d1:5f:05:01:4d:05:38:81:98:56:63:a6:68:73:14:29:e8: 01:bc:af:38:cb:96:37:c7:f3:e7:f7:19:90:ac:5c:b4:5a:a1: 0d:68:d1:2f:08:52:f5:3a:4c:b2:52:75:f9:7d:35:6c:9f:9d: 21:05:79:38:29:9a:b1:b1:16:8f:62:99:a3:8b:74:24:97:a0: ab:f0:ac:ee:72:c3:1c:8c:61:8a:a7:90:be:8a:84:f6:a5:fe: 43:25:64:e5:a3:4e:75:58:90:5d:79:56:fe:5d:64:e6:39:19: 10:29:d9:f6:41:c8:2e:3e:72:74:a9:13:3d:9e:da:1f:0a:dd: 43:85:ca:fc:56:ac:35:9c:bb:1d:9b:bf:da:71:12:ca:b0:ef: 7c:cc:e3:e3:db:fb:f3:8a:c3:04:85:41:3a:b6:11:89:00:43: af:54:30:ad:96:26:36:51:19:cf:9b:70:bd:ac:d1:60:ab:6d: 70:cf:d3:d1:7c:75:fa:6f:4c:e8:bf:13:54:b1:1c:ea:af:c6: 8e:2c:31:92 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEdk0cHgRmspT2pX1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAwMTA2MDMyNVoXDTI3MDEwNDA3MDMyNVowLzEtMCsGA1UEAxMk NzQ5MWNhOTctNDEyNS00ZGNhLWEyMGItZmU0ZmI0NThlMWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7/Sciyt6KOTT6KsXdsqcv7N+asDmR8tH2qo +PJYH07K1Oa/KyK1varYXI81gxCIkfva1JQt+ulI/4kS/Z1M4CauXyLxm+mikFVn PELI+GbJcIlLYIWmZGvgLKF8eG1ehnmW24LO2B2DO4VQDb6CdFL9bNlIko+hYt2Z Q8zFJHmnE5/0riImNtmomfjvX28AkzH4tOt6UK/KGPeWLFzEljpDgE/t3Hz8EPeD UXnoBYvbOo+1cppa5FnGpWYF5aeb6R06cMqUSb0DwkY+z2KuTmQRqsU/FrEYkbgp Ez3g36cFjmW6W9UHY4C2gmE+9lxndabsCvX1QA+/ZCqVFKafswIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFAortiWxqiLiaanFvuI89JcNnTvfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83 NDkxY2E5Ny00MTI1LTRkY2EtYTIwYi1mZTRmYjQ1OGUxYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1Lzc0OTFjYTk3LTQxMjUtNGRjYS1h MjBiLWZlNGZiNDU4ZTFjNS83NDkxY2E5Ny00MTI1LTRkY2EtYTIwYi1mZTRmYjQ1 OGUxYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAgUYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANb8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEABq1CTi6f3ZhooxbOj3nghaNzGX5yKP4GKO3B/6Y63gTBM 2IRXbCgOiNn3d/U6oviEuvXboSrRXwUBTQU4gZhWY6ZocxQp6AG8rzjLljfH8+f3 GZCsXLRaoQ1o0S8IUvU6TLJSdfl9NWyfnSEFeTgpmrGxFo9imaOLdCSXoKvwrO5y wxyMYYqnkL6KhPal/kMlZOWjTnVYkF15Vv5dZOY5GRAp2fZByC4+cnSpEz2e2h8K 3UOFyvxWrDWcux2bv9pxEsqw73zM4+Pb+/OKwwSFQTq2EYkAQ69UMK2WJjZRGc+b cL2s0WCrbXDP09F8dfpvTOi/E1SxHOqvxo4sMZI= -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:03 2024 by rpki-client on console-ams.rpki-client.org