$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f.cer File: a29a8287-cde6-44dc-b043-729b2dc9ed7f.cer (raw, json) Hash identifier: vQkwNswy2cwbiX2aaprdIAqMo8RxCaRBEyUIBrlGw4s= Subject key identifier: 6A:4B:5C:ED:8E:BA:4F:ED:AF:ED:63:6C:68:9C:E8:BE:37:BE:08:AD Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847A319CF368DC62ED25521B680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/a29a8287-cde6-44dc-b043-729b2dc9ed7f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Oct 2024 13:28:43 +0000 Certificate not after: Tue 26 Jan 2027 14:28:43 +0000 Subordinate resources: IP: 108.187.0.0/16 IP: 192.163.160.0/19 IP: 192.229.64.0/18 IP: 192.238.128.0/17 IP: 216.152.224.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a3:19:cf:36:8d:c6:2e:d2:55:21:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 23 13:28:43 2024 GMT Not After : Jan 26 14:28:43 2027 GMT Subject: CN=a29a8287-cde6-44dc-b043-729b2dc9ed7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:aa:1d:79:ef:c9:36:6f:ca:43:82:54:fb: 67:05:13:98:89:5d:c3:dc:8e:ba:ab:ef:7c:2e:a1: 82:a5:67:bb:67:91:f8:c8:ba:a0:90:60:48:08:a3: 4d:40:0e:d8:5c:cc:14:a7:e0:eb:56:ee:d6:67:fd: 84:40:18:b8:d0:41:26:59:1f:e1:a2:52:d7:9c:df: cb:5c:d0:ca:04:ec:9e:4c:6f:dd:c4:b0:ac:76:2b: e3:46:0e:63:a4:6d:55:f5:a5:84:e1:cb:80:6b:ac: 25:8e:e1:66:46:6a:36:3f:4d:da:f6:66:f5:6e:8d: 57:6c:b3:71:54:32:6d:94:f8:fb:db:04:b1:ee:a2: ab:1c:fa:59:b5:a7:90:51:cc:72:c6:c3:e7:d5:1b: b6:7c:ce:c7:0f:32:af:cd:47:28:5f:a6:6a:4f:df: de:38:8d:fd:77:b2:3a:11:51:9d:10:25:9b:9d:53: df:b9:a8:6e:1c:e6:bb:11:42:ac:15:86:a9:c7:de: db:34:58:2d:20:53:db:d2:f5:e4:a4:6c:23:98:7a: a2:0e:b4:d2:d9:30:4e:e5:2c:7b:8a:f1:c6:c1:71: 7d:36:5a:68:14:40:59:f1:dd:01:ef:bd:04:0f:d2: 07:e9:79:d5:2d:c8:81:26:44:99:9d:3c:51:5c:dd: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4B:5C:ED:8E:BA:4F:ED:AF:ED:63:6C:68:9C:E8:BE:37:BE:08:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/a29a8287-cde6-44dc-b043-729b2dc9ed7f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 108.187.0.0/16 192.163.160.0/19 192.229.64.0/18 192.238.128.0/17 216.152.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a1:5c:da:e9:57:09:d0:aa:da:95:8f:f4:4f:b2:28:a5:04: c3:19:89:2e:83:e7:ec:9f:f4:d2:6f:0d:aa:ad:99:c8:3c:69: f2:e2:00:eb:c8:b7:b8:f4:21:3a:e3:11:f6:c6:9d:0e:5f:bf: f9:5d:7e:b7:6b:78:8d:52:81:33:55:33:d6:5e:e3:92:45:93: d6:58:b5:81:8e:5e:dd:9b:f0:47:ed:d2:f2:67:db:75:61:c8: eb:b6:d4:d7:15:53:2d:22:77:74:fd:7d:7a:8d:1c:fa:d7:6c: 7e:64:2b:a7:a2:aa:a4:49:6d:c9:ae:08:a3:b3:67:fc:3e:58: 39:5c:5d:9a:3f:3a:e9:74:04:7e:65:f3:e5:c2:07:9c:46:52: 45:d2:a9:43:55:53:47:0c:a4:14:b7:9c:09:5f:d4:54:72:a9: 41:eb:8d:10:ce:99:f7:4b:fe:95:1d:44:2a:cd:9a:7d:d4:29: 6c:10:69:da:5c:7d:08:cf:c9:54:c2:3f:16:57:9d:de:cb:d4: 47:c9:e3:b9:3a:56:eb:dd:16:25:0c:83:8f:b2:28:99:4f:9d: 0e:c0:02:72:e6:a3:9a:0b:c8:b3:f7:f2:4d:ba:4f:08:5a:5a: 42:69:13:00:35:e3:f0:63:5a:53:9b:a3:6a:46:9b:43:f5:b0: 76:f6:63:28 -----BEGIN CERTIFICATE----- MIIHBDCCBeygAwIBAgIUAQ0Mn0MoWEejGc82jcYu0lUhtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAyMzEzMjg0M1oXDTI3MDEyNjE0Mjg0M1owLzEtMCsGA1UEAxMk YTI5YTgyODctY2RlNi00NGRjLWIwNDMtNzI5YjJkYzllZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhKqHXnvyTZvykOCVPtnBROYiV3D3I66q+98 LqGCpWe7Z5H4yLqgkGBICKNNQA7YXMwUp+DrVu7WZ/2EQBi40EEmWR/holLXnN/L XNDKBOyeTG/dxLCsdivjRg5jpG1V9aWE4cuAa6wljuFmRmo2P03a9mb1bo1XbLNx VDJtlPj72wSx7qKrHPpZtaeQUcxyxsPn1Ru2fM7HDzKvzUcoX6ZqT9/eOI39d7I6 EVGdECWbnVPfuahuHOa7EUKsFYapx97bNFgtIFPb0vXkpGwjmHqiDrTS2TBO5Sx7 ivHGwXF9NlpoFEBZ8d0B770ED9IH6XnVLciBJkSZnTxRXN380QIDAQABo4IEFjCC BBIwHQYDVR0OBBYEFGpLXO2Ouk/tr+1jbGic6L43vgitMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h MjlhODI4Ny1jZGU2LTQ0ZGMtYjA0My03MjliMmRjOWVkN2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2EyOWE4Mjg3LWNkZTYtNDRkYy1i MDQzLTcyOWIyZGM5ZWQ3Zi9hMjlhODI4Ny1jZGU2LTQ0ZGMtYjA0My03MjliMmRj OWVkN2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMCMEAgABMB0DAwBsuwMEBcCjoAMEBsDlQAMEB8DugAMEBNiY4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBMoVza6VcJ0KralY/0T7IopQTDGYkug+fsn/TSbw2qrZnIPGny4gDr yLe49CE64xH2xp0OX7/5XX63a3iNUoEzVTPWXuOSRZPWWLWBjl7dm/BH7dLyZ9t1 YcjrttTXFVMtInd0/X16jRz612x+ZCunoqqkSW3Jrgijs2f8Plg5XF2aPzrpdAR+ ZfPlwgecRlJF0qlDVVNHDKQUt5wJX9RUcqlB640Qzpn3S/6VHUQqzZp91ClsEGna XH0Iz8lUwj8WV53ey9RHyeO5Olbr3RYlDIOPsiiZT50OwAJy5qOaC8iz9/JNuk8I WlpCaRMANePwY1pTm6NqRptD9bB29mMo -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:29 2024 by rpki-client on console-fra.rpki-client.org