$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer File: a32aa006-ef22-4905-8c82-2651c19859b9.cer (raw, json) Hash identifier: +iVKb63SCSAABSr6SX4fJqJj9pXvRTq6+7zB2CQR0a0= Subject key identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847A0845314F3E5A932D7C98500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Oct 2024 15:15:54 +0000 Certificate not after: Mon 25 Jan 2027 16:15:54 +0000 Subordinate resources: IP: 199.212.26.0/23 IP: 199.212.30.0/24 IP: 199.212.37.0 -- 199.212.39.255 IP: 199.212.60.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a0:84:53:14:f3:e5:a9:32:d7:c9:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 22 15:15:54 2024 GMT Not After : Jan 25 16:15:54 2027 GMT Subject: CN=a32aa006-ef22-4905-8c82-2651c19859b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:fd:51:21:58:f1:28:ad:bb:a1:f2:17:a2: 9a:00:eb:a6:8b:90:19:15:1e:50:f4:1d:1a:25:c5: 6b:26:b8:b3:5e:f1:60:0f:ad:78:3a:c0:10:9e:b3: 5f:09:3f:14:45:57:49:f8:03:cf:b5:50:d8:ce:81: e3:69:6e:88:f1:bf:88:4a:76:5c:32:e1:39:ef:c5: ce:53:80:a2:ba:0e:33:36:5a:0d:d6:1d:86:2d:d7: 9a:8e:64:0c:7d:08:0b:35:e1:33:71:6a:b6:d9:a3: 0e:3c:bd:df:4a:c2:b9:90:e1:47:47:80:f2:d1:6e: d9:2b:13:7f:6b:6e:d4:62:7d:87:a7:46:63:25:46: 27:47:bc:e6:51:67:aa:cb:22:a7:8a:fe:0c:b9:13: f0:32:16:4c:49:db:f2:3b:69:ef:df:6a:c0:be:ee: 3a:cd:6b:ad:cd:af:57:91:7c:69:09:81:9e:ae:90: 34:2c:43:56:a8:42:0c:7d:8e:f4:c2:2d:19:03:9a: 7c:de:9f:e1:3e:6f:e3:6c:ba:f4:47:8d:05:6a:38: 5a:1c:3a:df:0a:4e:86:07:b7:aa:59:d7:6d:4d:0b: 23:86:bc:a9:31:38:7d:0d:ab:ba:dc:f4:da:4e:d0: 41:20:72:6d:46:bb:25:c7:da:a6:d9:45:7d:05:f9: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 199.212.26.0/23 199.212.30.0/24 199.212.37.0-199.212.39.255 199.212.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d6:33:ab:e1:7b:3a:d9:3a:a5:f3:2c:78:09:c1:d9:fe:38: 06:da:eb:35:6e:9b:57:7c:27:79:4b:c6:c0:11:c4:f0:f8:f9: f2:b6:89:fc:0f:61:78:12:50:01:9c:84:4c:ac:28:a5:7d:bd: 54:53:b7:e4:a3:9f:00:4a:50:95:05:ac:2d:cd:be:3a:f3:ba: 5d:9f:88:1f:47:c5:d5:10:51:7c:95:35:2d:70:30:af:3c:13: bd:23:f4:c8:31:7e:e1:d0:9a:13:09:1b:84:3d:ca:ba:76:13: c7:0d:e0:70:41:46:dd:7a:be:b1:86:0a:44:85:a5:a0:f0:68: 1e:5c:22:d9:89:f3:66:a0:eb:c0:0d:d0:94:03:53:0c:81:95: ab:b9:ad:6f:eb:49:3c:98:c2:8a:3d:98:c2:91:c0:80:16:96: 8d:4f:2a:7e:a5:77:9e:cf:83:e5:4c:bb:71:26:1c:e4:a0:bd: b6:bb:3b:79:63:46:5f:90:36:da:e5:0a:d6:83:2a:2d:53:3c: 39:ce:35:b0:15:b2:c1:19:8a:3f:89:54:02:5f:b5:81:e9:59: 14:e9:21:a5:c3:3d:cf:be:64:08:a1:54:04:92:9a:82:c0:e3: 2c:1b:92:51:38:32:88:92:a8:cf:f3:3c:1c:81:10:79:b9:23: 10:58:99:93 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEeghFMU8+WpMtfJhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAyMjE1MTU1NFoXDTI3MDEyNTE2MTU1NFowLzEtMCsGA1UEAxMk YTMyYWEwMDYtZWYyMi00OTA1LThjODItMjY1MWMxOTg1OWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxj9USFY8Situ6HyF6KaAOumi5AZFR5Q9B0a JcVrJrizXvFgD614OsAQnrNfCT8URVdJ+APPtVDYzoHjaW6I8b+ISnZcMuE578XO U4Ciug4zNloN1h2GLdeajmQMfQgLNeEzcWq22aMOPL3fSsK5kOFHR4Dy0W7ZKxN/ a27UYn2Hp0ZjJUYnR7zmUWeqyyKniv4MuRPwMhZMSdvyO2nv32rAvu46zWutza9X kXxpCYGerpA0LENWqEIMfY70wi0ZA5p83p/hPm/jbLr0R40FajhaHDrfCk6GB7eq WddtTQsjhrypMTh9Dau63PTaTtBBIHJtRrslx9qm2UV9BfmZMwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFBqxRtaJyJMTGHLljNahqJmsup5PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h MzJhYTAwNi1lZjIyLTQ5MDUtOGM4Mi0yNjUxYzE5ODU5YjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2EzMmFhMDA2LWVmMjItNDkwNS04 YzgyLTI2NTFjMTk4NTliOS9hMzJhYTAwNi1lZjIyLTQ5MDUtOGM4Mi0yNjUxYzE5 ODU5YjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMCYEAgABMCADBAHH1BoDBADH1B4wDAMEAMfUJQMEA8fUIAMEAcfU PDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAM1jOr4Xs62Tql8yx4CcHZ/jgG2us1bptXfCd5S8bAEcTw+Pny ton8D2F4ElABnIRMrCilfb1UU7fko58ASlCVBawtzb4687pdn4gfR8XVEFF8lTUt cDCvPBO9I/TIMX7h0JoTCRuEPcq6dhPHDeBwQUbder6xhgpEhaWg8GgeXCLZifNm oOvADdCUA1MMgZWrua1v60k8mMKKPZjCkcCAFpaNTyp+pXeez4PlTLtxJhzkoL22 uzt5Y0ZfkDba5QrWgyotUzw5zjWwFbLBGYo/iVQCX7WB6VkU6SGlwz3PvmQIoVQE kpqCwOMsG5JRODKIkqjP8zwcgRB5uSMQWJmT -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:09 2024 by rpki-client on console-ams.rpki-client.org