$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer File: 987bdf9f-7000-4d71-b90f-a12e26fdce76.cer (raw, json) Hash identifier: uc7w0eHRMFnb35+CvJKlabCvhRPtNzhm2D0UHK0Ji50= Subject key identifier: B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285846D04851658D59327238B48580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 Aug 2024 01:06:52 +0000 Certificate not after: Thu 12 Nov 2026 02:06:52 +0000 Subordinate resources: IP: 23.185.168.0/24 IP: 2602:f862::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:d0:48:51:65:8d:59:32:72:38:b4:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Aug 9 01:06:52 2024 GMT Not After : Nov 12 02:06:52 2026 GMT Subject: CN=987bdf9f-7000-4d71-b90f-a12e26fdce76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a8:b6:a0:1b:62:af:ff:d3:0e:10:eb:cc:51: 4f:2f:8a:ba:ce:cd:4d:68:27:70:05:9d:d3:18:e0: b1:17:eb:32:78:80:27:c6:b9:23:fd:fd:70:aa:b6: 2f:b5:61:32:1f:00:ad:87:75:99:80:a6:e7:af:fe: 1b:b9:27:5e:10:62:cb:43:3d:11:12:5c:ce:60:33: 69:e0:31:23:99:7b:94:19:1b:78:3f:1e:76:21:22: 06:c1:f3:e8:63:a2:bc:2d:e1:fa:d6:01:fb:8b:78: 63:2c:d9:5f:2a:04:1e:86:67:f2:2a:ad:5a:0d:68: 6d:98:f9:2f:d1:e7:3b:33:65:d8:d8:19:5d:99:91: 8e:67:f0:ce:7f:42:75:a7:b2:e6:fe:dc:67:33:e2: 66:40:39:b5:98:ec:c5:ad:3c:ec:80:23:db:fd:49: 67:b4:34:27:ac:19:80:58:26:bd:04:11:99:3d:ee: 45:27:ae:98:c0:d9:00:c5:11:22:a1:04:81:c7:62: fa:54:49:c2:70:84:39:75:a1:17:16:ef:09:64:cc: 3d:76:d9:e3:6a:9f:4b:41:a5:e5:57:1a:d1:c0:8f: 92:87:b8:98:09:48:41:cc:0f:b5:d8:eb:ca:8f:d0: 52:40:ba:71:ce:20:47:30:22:5f:3e:1d:71:c8:5d: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 23.185.168.0/24 IPv6: 2602:f862::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d6:69:6c:16:ac:84:5a:26:ef:13:af:8d:78:cb:51:9b:b1: f3:d2:b4:3f:34:b2:25:16:a3:9f:7f:a7:11:00:44:0c:b5:a2: c8:ee:1f:df:d1:1e:c1:90:b7:98:0d:b1:a9:b1:b5:5a:89:82: bf:74:66:82:98:b9:93:36:cf:8a:be:d3:dc:df:84:03:17:cb: 9c:66:bd:f6:f0:6b:8d:a3:89:c0:88:69:48:c2:cb:d4:89:e4: d8:d7:81:d3:b6:a5:57:ee:a4:90:f4:cf:fa:f4:fb:39:2a:f4: 6b:1c:5c:88:46:6f:ea:50:07:dc:b1:4c:a6:79:5d:40:6d:bb: 18:b8:01:0e:16:88:19:d1:38:78:80:3e:58:f0:10:f8:25:0a: bf:43:ec:c1:02:5f:8f:38:ab:1c:17:78:b1:be:1b:e9:85:74: 42:c3:5e:3b:d3:eb:1a:20:5e:f3:00:93:0f:32:db:c6:f4:02: cb:7a:dc:80:e7:90:33:c1:14:df:3d:8b:80:09:aa:3e:72:50: 62:9f:97:8f:2d:61:93:d6:1c:f1:97:45:fa:6a:a3:1a:42:b1: 1a:91:0d:96:00:f9:27:a7:e5:e8:95:5a:ff:b6:4c:9e:5b:b9: 78:6a:e5:e4:a3:36:1d:95:63:be:80:af:ff:5c:46:53:d5:1f: 1d:a1:8b:a1 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEbQSFFljVkycji0hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDgwOTAxMDY1MloXDTI2MTExMjAyMDY1MlowLzEtMCsGA1UEAxMk OTg3YmRmOWYtNzAwMC00ZDcxLWI5MGYtYTEyZTI2ZmRjZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKi2oBtir//TDhDrzFFPL4q6zs1NaCdwBZ3T GOCxF+syeIAnxrkj/f1wqrYvtWEyHwCth3WZgKbnr/4buSdeEGLLQz0RElzOYDNp 4DEjmXuUGRt4Px52ISIGwfPoY6K8LeH61gH7i3hjLNlfKgQehmfyKq1aDWhtmPkv 0ec7M2XY2BldmZGOZ/DOf0J1p7Lm/txnM+JmQDm1mOzFrTzsgCPb/UlntDQnrBmA WCa9BBGZPe5FJ66YwNkAxREioQSBx2L6VEnCcIQ5daEXFu8JZMw9dtnjap9LQaXl VxrRwI+Sh7iYCUhBzA+12OvKj9BSQLpxziBHMCJfPh1xyF3nJwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFLW/th/kxQaqN7thBnRvp57wYg8uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85 ODdiZGY5Zi03MDAwLTRkNzEtYjkwZi1hMTJlMjZmZGNlNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1Lzk4N2JkZjlmLTcwMDAtNGQ3MS1i OTBmLWExMmUyNmZkY2U3Ni85ODdiZGY5Zi03MDAwLTRkNzEtYjkwZi1hMTJlMjZm ZGNlNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXuagwDgQCAAIwCAMGACYC+GIAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHTWaWwWrIRaJu8Tr414y1GbsfPStD80siUWo59/pxEARAy1osjuH9/RHsGQt5gN samxtVqJgr90ZoKYuZM2z4q+09zfhAMXy5xmvfbwa42jicCIaUjCy9SJ5NjXgdO2 pVfupJD0z/r0+zkq9GscXIhGb+pQB9yxTKZ5XUBtuxi4AQ4WiBnROHiAPljwEPgl Cr9D7MECX484qxwXeLG+G+mFdELDXjvT6xogXvMAkw8y28b0Ast63IDnkDPBFN89 i4AJqj5yUGKfl48tYZPWHPGXRfpqoxpCsRqRDZYA+Sen5eiVWv+2TJ5buXhq5eSj Nh2VY76Ar/9cRlPVHx2hi6E= -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:03 2024 by rpki-client on console-fra.rpki-client.org