$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer File: 868a77c4-49cd-4821-b1f2-58d35028b0ed.cer (raw, json) Hash identifier: mkVNbX2GpeVm6v5JOqWDHFa8mWFR7ooMVvnzK7+Hc0Q= Subject key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858471C12B2FFF6882DA8EA315400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Sep 2024 04:40:16 +0000 Certificate not after: Wed 09 Dec 2026 05:40:16 +0000 Subordinate resources: AS: 46970 IP: 192.189.40.0/24 IP: 199.242.28.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1c:12:b2:ff:f6:88:2d:a8:ea:31:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 5 04:40:16 2024 GMT Not After : Dec 9 05:40:16 2026 GMT Subject: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:48:5e:7e:42:27:a9:e6:00:c4:e0:08:e0: d5:e8:f7:b4:3e:10:af:e2:51:e2:23:1a:4e:f7:63: 99:b7:8a:c5:8d:1a:2d:5e:2f:cf:ae:a3:15:24:c4: 0b:77:90:97:7b:1b:22:7e:5b:6b:32:50:88:a2:88: 20:34:e0:3c:43:9a:79:f4:57:c4:2d:95:20:d9:34: df:d7:12:bd:58:8d:12:96:1d:08:21:d4:e5:7b:64: fc:55:5e:66:e0:15:5d:83:e2:c3:9f:6d:17:41:f8: b9:8f:a5:60:56:48:60:a3:37:a2:1d:02:02:a2:65: a0:a6:e0:b6:30:92:09:82:6a:eb:77:c2:b4:30:cf: e3:50:e7:2b:d9:ed:72:93:b0:7c:f9:52:96:2e:8a: 71:ec:8d:32:e2:1e:e1:e7:90:c3:97:18:5e:70:25: 34:79:41:db:1b:08:97:e9:3c:dd:7a:f3:c3:31:92: 22:25:1d:ea:8f:65:cf:49:fc:1d:5a:d1:0e:3d:9e: 88:6f:59:1e:49:16:89:37:40:90:e5:b0:cb:9e:93: 05:4f:ec:36:32:9c:97:55:aa:24:f7:20:1c:23:50: 7b:b3:af:52:62:bb:01:a5:4a:27:18:cf:ad:b5:4c: d6:7c:cd:dd:9f:a0:33:3b:d7:30:24:c1:e6:4c:69: 3a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.189.40.0/24 199.242.28.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46970 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:52:77:51:65:b4:59:73:cc:b8:c3:f6:7b:b6:1b:b3:3c:8b: b7:5c:dc:c7:e6:6c:92:b0:d3:7c:d5:b6:b0:53:c0:d2:b3:4c: fb:f6:56:d3:e2:64:14:57:e3:d9:a6:d9:16:78:69:bd:ee:cf: 86:89:aa:d0:cb:8e:bc:c9:ec:d5:30:2f:7e:99:fa:c1:06:c9: 34:dd:2a:b6:4b:19:9b:1e:b2:14:dd:4a:57:88:07:a2:a2:f7: d4:6a:44:ec:1d:f4:d7:51:85:d2:94:fa:47:89:8a:92:66:43: 0e:18:2c:a6:9b:78:0b:b3:b9:06:93:06:00:83:f2:25:37:c5: fa:7c:e5:5c:38:87:31:c3:24:6f:f7:2d:8f:7b:b4:67:73:c1: 1b:6b:54:c0:ac:4f:b0:d9:87:92:4e:23:b6:24:0c:51:48:ff: ea:79:10:0a:d3:fa:29:ce:18:ac:30:95:b3:c2:2a:93:e0:06: 3d:15:bf:29:bd:b3:86:5e:77:ca:a6:c9:4e:83:89:9c:db:3a: 8e:e2:a3:cf:24:17:87:fd:e2:bb:d5:88:d1:9e:5f:f8:ef:2a: ef:17:78:ce:02:aa:0c:55:32:eb:5b:33:24:97:0c:4f:3c:67: 39:09:76:13:80:f6:7e:a2:e8:fc:7f:9c:a6:78:0d:96:4f:e8: 5f:bd:81:e1 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEccErL/9ogtqOoxVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkwNTA0NDAxNloXDTI2MTIwOTA1NDAxNlowLzEtMCsGA1UEAxMk ODY4YTc3YzQtNDljZC00ODIxLWIxZjItNThkMzUwMjhiMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2FIXn5CJ6nmAMTgCODV6Pe0PhCv4lHiIxpO 92OZt4rFjRotXi/PrqMVJMQLd5CXexsifltrMlCIooggNOA8Q5p59FfELZUg2TTf 1xK9WI0Slh0IIdTle2T8VV5m4BVdg+LDn20XQfi5j6VgVkhgozeiHQIComWgpuC2 MJIJgmrrd8K0MM/jUOcr2e1yk7B8+VKWLopx7I0y4h7h55DDlxhecCU0eUHbGwiX 6TzdevPDMZIiJR3qj2XPSfwdWtEOPZ6Ib1keSRaJN0CQ5bDLnpMFT+w2MpyXVaok 9yAcI1B7s69SYrsBpUonGM+ttUzWfM3dn6AzO9cwJMHmTGk6jwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFKIZ8Ot6XyS7IFkDyKuOKADIVqwBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 NjhhNzdjNC00OWNkLTQ4MjEtYjFmMi01OGQzNTAyOGIwZWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1Lzg2OGE3N2M0LTQ5Y2QtNDgyMS1i MWYyLTU4ZDM1MDI4YjBlZC84NjhhNzdjNC00OWNkLTQ4MjEtYjFmMi01OGQzNTAy OGIwZWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAvSgDBALH8hwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALd6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEVSd1FltFlzzLjD9nu2G7M8i7dc3MfmbJKw03zV trBTwNKzTPv2VtPiZBRX49mm2RZ4ab3uz4aJqtDLjrzJ7NUwL36Z+sEGyTTdKrZL GZseshTdSleIB6Ki99RqROwd9NdRhdKU+keJipJmQw4YLKabeAuzuQaTBgCD8iU3 xfp85Vw4hzHDJG/3LY97tGdzwRtrVMCsT7DZh5JOI7YkDFFI/+p5EArT+inOGKww lbPCKpPgBj0Vvym9s4Zed8qmyU6DiZzbOo7io88kF4f94rvViNGeX/jvKu8XeM4C qgxVMutbMySXDE88ZzkJdhOA9n6i6Px/nKZ4DZZP6F+9geE= -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:03 2024 by rpki-client on console-fra.rpki-client.org