$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer File: 89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer (raw, json) Hash identifier: Jb441uu+SOLjNl0GeMcKpmX0jjF9PwI1f/Oh3fHeK1Y= Subject key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285846D24B90757D47D9392E38DF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Aug 2024 18:25:01 +0000 Certificate not after: Thu 12 Nov 2026 19:25:01 +0000 Subordinate resources: AS: 395978 IP: 64.190.101.0/24 IP: 173.252.143.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:d2:4b:90:75:7d:47:d9:39:2e:38:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Aug 9 18:25:01 2024 GMT Not After : Nov 12 19:25:01 2026 GMT Subject: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:30:61:58:25:2b:20:75:25:4d:7b:b8:15: 67:8c:ef:e8:de:ff:55:f9:1c:2e:c1:4f:4c:19:81: d6:c0:69:59:e5:f6:45:97:dd:3c:f7:cd:7a:82:37: 24:7f:94:e5:94:81:78:31:68:30:f5:b7:12:3d:13: b1:99:12:f2:f6:5f:75:e1:74:fa:b5:7c:75:3b:73: 1a:68:bc:61:a5:6a:f0:ba:4f:19:1e:6b:44:e2:6a: b0:47:41:05:ab:09:d8:31:0f:4b:ee:df:13:f6:67: ab:a6:78:5a:78:2a:ee:5b:03:79:1b:55:d8:1a:b5: 37:06:5d:11:48:f6:b8:8e:f5:b5:6a:ba:24:d2:a0: 79:5d:02:33:49:b6:fb:75:0c:21:67:bf:9b:20:ba: fd:40:0e:c8:52:92:da:f0:4b:7e:90:10:75:d2:27: 7b:ad:75:99:8d:bf:41:47:71:f8:de:6d:99:5e:49: b0:5d:35:d3:12:ab:d3:74:f3:d0:0a:cc:6f:91:98: da:20:af:7d:cc:e4:57:65:f4:4a:c0:0f:aa:af:85: 0b:e9:fb:75:ca:bb:e6:5e:32:f6:9d:2c:d7:46:ae: 40:84:ae:fe:b0:79:be:fa:e9:07:da:b7:0f:62:8e: 29:a2:ee:9a:87:8a:7f:49:21:41:94:91:4f:1b:35: 71:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 64.190.101.0/24 173.252.143.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395978 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:14:05:64:36:df:6d:9d:ff:d7:51:39:a0:c8:41:48:4e:21: 06:e2:22:96:ad:f8:d9:f6:92:68:38:a2:bc:5b:81:cf:b4:64: af:f3:79:4a:05:f4:8b:9a:34:7d:f3:1a:bf:18:67:e5:85:46: 37:bc:e6:fa:bb:72:95:a2:e8:3d:48:15:28:0a:69:d0:f7:25: f4:43:11:4f:b3:0f:7e:a2:71:af:28:a5:19:85:f8:b1:86:23: af:a6:ad:5d:5f:e6:a0:b4:c4:69:42:a6:d5:e4:60:a1:de:cd: d9:43:1c:34:69:df:29:9e:57:5a:a0:13:9d:66:f6:da:81:75: b4:de:de:98:34:fb:20:55:03:ca:95:8d:5e:52:c7:c0:9c:e4: 6f:55:9e:4d:b5:3a:aa:d9:f0:b8:57:28:57:36:71:bf:58:82: 5f:5a:02:41:ec:e0:b2:91:9d:7f:e3:08:77:cb:2d:ec:00:07: 0a:e7:d4:e2:bc:11:2d:45:5d:e2:8b:cc:37:3f:9b:77:42:94: 10:6a:3e:dc:49:6c:e5:5b:a0:f3:a6:06:ba:20:9d:9a:bd:90: 3d:ba:44:19:be:a9:13:1d:25:0a:19:1b:9d:91:79:81:18:a2: 36:8b:68:83:6b:b4:72:41:f6:44:d1:f1:0f:ae:c1:b6:5f:0e: bb:e2:b9:ba -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEbSS5B1fUfZOS443wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDgwOTE4MjUwMVoXDTI2MTExMjE5MjUwMVowLzEtMCsGA1UEAxMk ODliMDg3N2YtZjdhYy00YzEzLTlhMTAtYjAyMzU4ZWUwMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCEwYVglKyB1JU17uBVnjO/o3v9V+RwuwU9M GYHWwGlZ5fZFl9089816gjckf5TllIF4MWgw9bcSPROxmRLy9l914XT6tXx1O3Ma aLxhpWrwuk8ZHmtE4mqwR0EFqwnYMQ9L7t8T9merpnhaeCruWwN5G1XYGrU3Bl0R SPa4jvW1arok0qB5XQIzSbb7dQwhZ7+bILr9QA7IUpLa8Et+kBB10id7rXWZjb9B R3H43m2ZXkmwXTXTEqvTdPPQCsxvkZjaIK99zORXZfRKwA+qr4UL6ft1yrvmXjL2 nSzXRq5AhK7+sHm++ukH2rcPYo4pou6ah4p/SSFBlJFPGzVxzQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFOKqlzHcw7+5xanEV2AFbU68G7yrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 OWIwODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIzNThlZTAwYmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1Lzg5YjA4NzdmLWY3YWMtNGMxMy05 YTEwLWIwMjM1OGVlMDBiYy84OWIwODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIzNThl ZTAwYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABAvmUDBACt/I8wGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgrKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAYUBWQ2322d/9dROaDIQUhOIQbiIpat+Nn2kmg4 orxbgc+0ZK/zeUoF9IuaNH3zGr8YZ+WFRje85vq7cpWi6D1IFSgKadD3JfRDEU+z D36ica8opRmF+LGGI6+mrV1f5qC0xGlCptXkYKHezdlDHDRp3ymeV1qgE51m9tqB dbTe3pg0+yBVA8qVjV5Sx8Cc5G9Vnk21OqrZ8LhXKFc2cb9Ygl9aAkHs4LKRnX/j CHfLLewABwrn1OK8ES1FXeKLzDc/m3dClBBqPtxJbOVboPOmBrognZq9kD26RBm+ qRMdJQoZG52ReYEYojaLaINrtHJB9kTR8Q+uwbZfDrviubo= -----END CERTIFICATE-----Generated at Thu Sep 19 19:54:55 2024 by rpki-client on console-ams.rpki-client.org