$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.cer File: 80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.cer (raw, json) Hash identifier: xG5EN2aJe/FQhwtdol/iHWT/r5hGjjcXXjGczG27t2o= Subject key identifier: 3A:A8:AF:11:24:B3:DA:34:6C:5D:87:E3:CB:FD:87:CC:E6:82:C5:78 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858476674FD50143D5761FDCE0280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Oct 2024 20:08:07 +0000 Certificate not after: Mon 04 Jan 2027 21:08:07 +0000 Subordinate resources: AS: 1312 AS: 26499 AS: 40220 IP: 45.3.64.0/18 IP: 128.173.0.0/16 IP: 192.70.138.0/24 IP: 192.70.187.0/24 IP: 192.122.175.0/24 IP: 198.82.0.0/16 IP: 2607:b400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:66:74:fd:50:14:3d:57:61:fd:ce:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 1 20:08:07 2024 GMT Not After : Jan 4 21:08:07 2027 GMT Subject: CN=80e5f0b2-a210-4b36-9e99-d0ee4e3583f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:1c:80:57:77:d5:e5:e8:95:a7:36:e4:b9: 47:14:06:74:b9:9c:3b:33:e7:a8:81:ed:0c:e0:3e: ef:79:c8:19:62:ad:0b:97:15:c5:ac:44:25:d9:be: 4d:e4:35:81:58:a8:af:a1:1e:a1:8e:f1:38:af:9c: 1f:56:be:af:92:e0:44:98:8b:6e:81:61:b9:32:fc: 1c:4a:b2:99:ff:70:a5:f2:d8:40:59:cf:b1:2e:65: 1d:bc:8e:c5:d2:d5:8a:69:d6:d8:db:59:a6:c8:cc: 9a:6f:f8:63:ad:f6:04:93:9e:02:9a:29:01:62:cf: ed:2c:c4:b3:68:8b:86:3c:a9:5f:0a:2e:cb:c0:25: ef:d8:87:17:74:e7:9c:01:b0:ef:e4:cc:6a:d4:93: d2:11:2b:10:78:7c:8c:3d:35:41:e7:32:e5:25:b3: 71:73:94:11:21:73:ef:f9:ec:95:76:f2:22:93:35: 16:5c:f6:45:cc:92:99:60:5d:ed:c5:a7:48:c0:c9: 9b:19:75:db:6d:2e:64:96:3d:8f:b1:d7:5e:a3:1a: 3e:c2:44:c0:a1:c1:bb:55:40:cf:37:94:a6:7e:11: c5:a2:b4:24:08:e0:54:f5:3b:73:1b:f3:80:be:cf: 7e:e5:f1:70:df:7d:96:f1:87:73:cc:8a:f5:1b:4a: 5e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A8:AF:11:24:B3:DA:34:6C:5D:87:E3:CB:FD:87:CC:E6:82:C5:78 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8/80e5f0b2-a210-4b36-9e99-d0ee4e3583f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 45.3.64.0/18 128.173.0.0/16 192.70.138.0/24 192.70.187.0/24 192.122.175.0/24 198.82.0.0/16 IPv6: 2607:b400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1312 26499 40220 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:27:8d:33:eb:98:b8:2c:dc:32:8a:c1:c6:bb:2d:ee:66:3f: 58:54:fb:d9:54:2e:c1:58:ed:a9:49:83:68:cb:d8:c5:e0:d3: f7:64:df:54:c2:7f:6d:1f:45:f9:a8:8d:46:2d:50:df:99:5f: 58:0f:3d:5c:7a:5b:94:1e:b2:3b:27:76:1e:e3:12:ba:70:41: 20:05:fe:1e:c5:67:df:e8:cc:9f:a3:e6:df:6f:f7:1e:bb:56: 66:70:f3:aa:2a:98:a0:a9:1c:55:f4:58:da:3c:94:3f:0c:3c: 0f:a1:7e:b8:ae:24:54:25:6d:12:fa:84:7f:39:c2:f3:42:34: f7:2f:8e:74:96:9e:11:51:25:93:ed:5c:f1:f9:66:f6:cd:4e: eb:2f:fe:d4:f6:cf:a1:43:0e:6b:54:38:51:22:11:dc:9a:b5: c5:bc:68:1c:b6:65:3e:80:1a:a7:dc:ba:20:7c:ee:b6:47:33: b2:de:6c:ff:8b:df:0e:ec:85:d5:ea:6d:31:d7:b6:0e:bb:68: 71:32:18:b2:a1:5e:ec:be:4a:11:91:49:bb:7c:d5:0d:18:a4: 6d:b6:33:91:0b:4e:ea:49:ef:ee:2c:23:40:b0:62:ef:25:da: 6b:8e:4c:8d:f6:ee:47:9f:93:b7:10:5b:fb:19:c7:0a:6a:61: 5e:bc:e1:0e -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWEdmdP1QFD1XYf3OAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAwMTIwMDgwN1oXDTI3MDEwNDIxMDgwN1owLzEtMCsGA1UEAxMk ODBlNWYwYjItYTIxMC00YjM2LTllOTktZDBlZTRlMzU4M2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDAcgFd31eXolac25LlHFAZ0uZw7M+eoge0M 4D7vecgZYq0LlxXFrEQl2b5N5DWBWKivoR6hjvE4r5wfVr6vkuBEmItugWG5Mvwc SrKZ/3Cl8thAWc+xLmUdvI7F0tWKadbY21mmyMyab/hjrfYEk54CmikBYs/tLMSz aIuGPKlfCi7LwCXv2IcXdOecAbDv5Mxq1JPSESsQeHyMPTVB5zLlJbNxc5QRIXPv +eyVdvIikzUWXPZFzJKZYF3txadIwMmbGXXbbS5klj2Psddeoxo+wkTAocG7VUDP N5SmfhHForQkCOBU9TtzG/OAvs9+5fFw332W8YdzzIr1G0pe6QIDAQABo4IETjCC BEowHQYDVR0OBBYEFDqorxEks9o0bF2H48v9h8zmgsV4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 MGU1ZjBiMi1hMjEwLTRiMzYtOWU5OS1kMGVlNGUzNTgzZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzgwZTVmMGIyLWEyMTAtNGIzNi05 ZTk5LWQwZWU0ZTM1ODNmOC84MGU1ZjBiMi1hMjEwLTRiMzYtOWU5OS1kMGVlNGUz NTgzZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwSgYIKwYBBQUH AQcBAf8EOzA5MCgEAgABMCIDBAYtA0ADAwCArQMEAMBGigMEAMBGuwMEAMB6rwMD AMZSMA0EAgACMAcDBQAmB7QAMCIGCCsGAQUFBwEIAQH/BBMwEaAPMA0CAgUgAgJn gwIDAJ0cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAGonjTPrmLgs3DKKwca7Le5mP1hU+9lULsFY7alJg2jL 2MXg0/dk31TCf20fRfmojUYtUN+ZX1gPPVx6W5Qesjsndh7jErpwQSAF/h7FZ9/o zJ+j5t9v9x67VmZw86oqmKCpHFX0WNo8lD8MPA+hfriuJFQlbRL6hH85wvNCNPcv jnSWnhFRJZPtXPH5ZvbNTusv/tT2z6FDDmtUOFEiEdyatcW8aBy2ZT6AGqfcuiB8 7rZHM7LebP+L3w7shdXqbTHXtg67aHEyGLKhXuy+ShGRSbt81Q0YpG22M5ELTupJ 7+4sI0CwYu8l2muOTI327kefk7cQW/sZxwpqYV684Q4= -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:28 2024 by rpki-client on console-fra.rpki-client.org