$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer File: 8a57b69a-d683-4350-83d4-e449c0242b7d.cer (raw, json) Hash identifier: q0pNQCU06mJHAfITLNRtbckVjWMacwHLiFeEfIvHZ84= Subject key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285846F40A1757B5ABA972F0E97700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Aug 2024 20:30:35 +0000 Certificate not after: Tue 24 Nov 2026 21:30:35 +0000 Subordinate resources: AS: 55134 IP: 23.173.72.0/24 IP: 70.34.112.0/20 IP: 172.111.16.0/22 IP: 2602:fc67::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:f4:0a:17:57:b5:ab:a9:72:f0:e9:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Aug 21 20:30:35 2024 GMT Not After : Nov 24 21:30:35 2026 GMT Subject: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9d:6e:0a:77:f2:c1:c3:85:37:af:f1:0e:6d: 64:6e:0e:55:78:b6:3e:9b:41:a8:b8:66:db:02:fc: 16:30:19:b5:42:37:72:dc:34:26:83:ab:1a:d3:da: e0:1c:c8:6e:02:a3:3a:f0:33:f8:18:2f:e0:76:de: 03:0c:38:aa:1c:66:a0:c3:f3:c9:cf:69:72:52:ee: 80:a3:b5:81:bf:e3:20:b2:31:1d:d0:10:31:f6:9d: df:f3:b4:9f:81:dd:c7:e0:de:33:11:32:89:8a:62: de:66:a9:36:e1:9d:21:16:c3:02:b3:74:62:b4:af: b3:b4:93:33:e2:9e:17:40:1d:d8:3d:53:9e:d7:a5: f9:e5:b2:68:30:2f:a1:db:ab:28:1c:a8:64:a6:ce: ac:d4:06:e3:58:8f:1e:8b:61:9a:61:32:29:f6:8e: 92:b4:29:c5:a0:9c:c4:cc:36:6c:8b:56:b9:18:03: b2:b7:3f:41:4a:69:14:8d:f9:44:8f:20:47:ba:9f: 56:f7:0b:25:43:a1:cc:86:86:2c:de:07:7c:48:76: 1b:bf:ec:0f:07:1d:a3:21:bf:82:b2:b9:3c:aa:55: 32:e2:7c:5c:e2:96:32:11:ee:a1:2f:ef:f3:59:ce: b1:a5:17:98:91:64:3c:cf:c4:4b:94:60:71:3d:2b: 58:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.173.72.0/24 70.34.112.0/20 172.111.16.0/22 IPv6: 2602:fc67::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55134 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c6:0f:79:8e:74:30:da:e6:53:98:1d:c1:82:35:11:f9:63: 79:89:b5:b5:84:e2:80:b6:31:e1:a7:69:fc:d9:e2:74:fa:9d: 99:04:a3:d9:1f:e6:6c:68:12:0a:83:13:ad:91:8a:09:02:81: 23:9b:ad:75:4f:d4:02:37:a0:b6:ca:e4:06:3a:ff:5d:c1:a0: 4e:69:60:e5:08:6a:09:82:67:b2:6e:e0:52:0a:00:c8:7d:0e: 15:2c:d6:78:28:19:6d:84:fb:7d:12:6f:12:2d:34:2c:00:ba: 5e:91:d6:3d:f6:97:d2:ff:2e:63:34:da:88:f9:63:b8:96:b5: 37:19:71:7c:e3:c5:aa:eb:e5:65:12:96:19:75:95:3b:e1:17: c4:a6:71:1c:a1:ef:2b:80:fc:68:31:af:0c:56:04:e2:37:6a: ba:2f:16:f0:a8:5d:99:d0:14:d5:c5:19:36:7a:c2:c9:40:4e: 10:89:20:10:2d:3e:12:e8:f4:44:a2:44:e1:f2:24:bb:88:5a: 6d:41:49:82:68:af:c0:e4:22:fe:9b:f7:4d:86:76:fb:00:d5: 98:5f:4e:c8:18:50:6e:d0:5b:c3:f4:bb:b2:4d:90:f8:30:73: 37:66:e6:d1:60:bc:b5:22:69:ad:7f:c2:3a:58:ce:12:8b:44: d7:6f:c4:10 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEb0ChdXtaupcvDpdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDgyMTIwMzAzNVoXDTI2MTEyNDIxMzAzNVowLzEtMCsGA1UEAxMk OGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQyYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg51uCnfywcOFN6/xDm1kbg5VeLY+m0GouGbb AvwWMBm1Qjdy3DQmg6sa09rgHMhuAqM68DP4GC/gdt4DDDiqHGagw/PJz2lyUu6A o7WBv+MgsjEd0BAx9p3f87Sfgd3H4N4zETKJimLeZqk24Z0hFsMCs3RitK+ztJMz 4p4XQB3YPVOe16X55bJoMC+h26soHKhkps6s1AbjWI8ei2GaYTIp9o6StCnFoJzE zDZsi1a5GAOytz9BSmkUjflEjyBHup9W9wslQ6HMhoYs3gd8SHYbv+wPBx2jIb+C srk8qlUy4nxc4pYyEe6hL+/zWc6xpReYkWQ8z8RLlGBxPStY7QIDAQABo4IENzCC BDMwHQYDVR0OBBYEFDiNBqS41bUuMkD5BJfNUxHchW8JMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84 YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzhhNTdiNjlhLWQ2ODMtNDM1MC04 M2Q0LWU0NDljMDI0MmI3ZC84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAy NDJiN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXrUgDBARGInADBAKsbxAwDgQCAAIwCAMGBCYC /GcAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDXXjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBxg95jnQw 2uZTmB3BgjUR+WN5ibW1hOKAtjHhp2n82eJ0+p2ZBKPZH+ZsaBIKgxOtkYoJAoEj m611T9QCN6C2yuQGOv9dwaBOaWDlCGoJgmeybuBSCgDIfQ4VLNZ4KBlthPt9Em8S LTQsALpekdY99pfS/y5jNNqI+WO4lrU3GXF848Wq6+VlEpYZdZU74RfEpnEcoe8r gPxoMa8MVgTiN2q6LxbwqF2Z0BTVxRk2esLJQE4QiSAQLT4S6PREokTh8iS7iFpt QUmCaK/A5CL+m/dNhnb7ANWYX07IGFBu0FvD9LuyTZD4MHM3ZubRYLy1Immtf8I6 WM4Si0TXb8QQ -----END CERTIFICATE-----Generated at Thu Sep 19 19:54:55 2024 by rpki-client on console-ams.rpki-client.org