$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a95cd217-44ff-4334-904a-61d439f62127.cer File: a95cd217-44ff-4334-904a-61d439f62127.cer (raw, json) Hash identifier: xyCuQvaH8nc3ZYEi/fRnILlAaPuafCK8r5SzyM6A3Vs= Subject key identifier: F0:CD:42:F5:FC:99:21:0D:DB:0B:22:0D:3C:01:01:67:FD:2D:F0:5C Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858475B6C2C734515F15F13407780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a95cd217-44ff-4334-904a-61d439f62127/a95cd217-44ff-4334-904a-61d439f62127.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a95cd217-44ff-4334-904a-61d439f62127/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Sep 2024 21:16:28 +0000 Certificate not after: Thu 31 Dec 2026 22:16:28 +0000 Subordinate resources: IP: 216.225.0.0 -- 216.225.23.255 IP: 216.225.28.0/22 IP: 216.225.128.0/20 IP: 216.225.208.0 -- 216.225.255.255 IP: 2604:3780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:5b:6c:2c:73:45:15:f1:5f:13:40:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 27 21:16:28 2024 GMT Not After : Dec 31 22:16:28 2026 GMT Subject: CN=a95cd217-44ff-4334-904a-61d439f62127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:36:01:c0:15:a0:79:14:1c:61:42:10:07:4e: 7e:8f:ba:13:39:4e:6d:b8:7f:f7:41:d7:29:b7:74: de:ae:35:a9:8d:87:34:a9:f1:99:05:9b:ab:15:d4: 0f:e2:db:39:6a:d1:0c:69:2e:da:ae:f2:68:e6:ec: d0:e7:39:0a:e5:68:66:cf:b0:c1:15:a9:63:a3:74: 87:72:de:d9:d7:c0:4c:45:03:fa:c7:0a:b2:89:36: 6e:38:2e:a5:e0:c4:a2:0b:13:48:c9:c8:f7:fb:3f: fb:ca:23:5e:d1:a8:24:c2:78:c4:ab:d6:a0:4f:80: f9:47:56:40:44:df:ac:c7:6b:d8:5f:20:b5:2a:ba: 88:97:fa:04:3b:c3:1e:7e:8a:db:08:57:70:08:72: 79:05:25:75:86:59:82:64:a0:6b:20:c8:01:5e:fd: e7:c6:72:9e:88:48:7b:53:12:84:10:bf:63:e3:42: ad:54:a4:83:68:45:ea:12:80:ba:21:60:bd:ab:30: 83:d9:85:da:3a:28:79:fb:04:3d:be:a2:59:21:9a: 59:7c:36:4d:69:69:f3:dc:9e:3a:e8:25:3e:7f:a9: e5:df:57:11:43:e3:10:ec:92:99:05:62:5c:eb:b0: cb:41:ad:c5:af:fd:c8:29:57:86:3a:34:5b:e9:ee: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CD:42:F5:FC:99:21:0D:DB:0B:22:0D:3C:01:01:67:FD:2D:F0:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a95cd217-44ff-4334-904a-61d439f62127/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a95cd217-44ff-4334-904a-61d439f62127/a95cd217-44ff-4334-904a-61d439f62127.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 216.225.0.0-216.225.23.255 216.225.28.0/22 216.225.128.0/20 216.225.208.0-216.225.255.255 IPv6: 2604:3780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:49:2a:1a:cd:7e:17:83:fb:28:cf:3e:78:65:bd:dd:d0:86: 82:33:67:06:07:06:88:83:62:c8:5a:1a:d5:cd:15:70:57:89: 4a:5e:d2:65:81:6d:ae:be:54:f3:ce:de:bf:b4:85:1f:8d:68: 61:a2:39:b8:c7:79:de:42:34:79:a7:56:d4:42:7f:90:e3:30: f8:9e:e9:67:f6:6b:be:5b:16:1b:b8:2c:7c:1b:32:83:1f:dd: 6f:ff:7c:62:c9:5a:cc:06:17:58:48:48:0e:63:28:3a:0b:c1: ef:30:5e:8b:a9:07:6b:53:31:34:60:09:58:e7:6c:c4:02:a0: bb:10:e7:0d:1e:1e:cf:03:6f:be:ad:6e:f0:82:04:65:b4:73: 11:11:a1:e5:32:99:ec:2b:2e:6c:c1:b1:4c:34:2e:06:41:f1: bd:18:96:2e:ac:b4:5c:fe:fd:22:9f:97:cb:ff:78:3e:44:c0: f3:16:40:ef:d9:f7:58:f0:42:0d:5c:62:70:f0:d6:b4:bb:ef: 5a:3c:f3:81:e6:7b:91:0c:cc:33:47:7a:5c:ac:65:c4:e5:53: d6:8d:2e:f1:c6:f1:1a:2a:dd:38:65:40:bd:0d:35:f2:b1:4d: a5:5f:ec:e5:38:f1:3e:d6:70:dd:1b:2a:b7:4e:97:43:41:65: d6:85:75:5e -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEdbbCxzRRXxXxNAd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkyNzIxMTYyOFoXDTI2MTIzMTIyMTYyOFowLzEtMCsGA1UEAxMk YTk1Y2QyMTctNDRmZi00MzM0LTkwNGEtNjFkNDM5ZjYyMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTYBwBWgeRQcYUIQB05+j7oTOU5tuH/3Qdcp t3TerjWpjYc0qfGZBZurFdQP4ts5atEMaS7arvJo5uzQ5zkK5Whmz7DBFaljo3SH ct7Z18BMRQP6xwqyiTZuOC6l4MSiCxNIycj3+z/7yiNe0agkwnjEq9agT4D5R1ZA RN+sx2vYXyC1KrqIl/oEO8MeforbCFdwCHJ5BSV1hlmCZKBrIMgBXv3nxnKeiEh7 UxKEEL9j40KtVKSDaEXqEoC6IWC9qzCD2YXaOih5+wQ9vqJZIZpZfDZNaWnz3J46 6CU+f6nl31cRQ+MQ7JKZBWJc67DLQa3Fr/3IKVeGOjRb6e5XiQIDAQABo4IELjCC BCowHQYDVR0OBBYEFPDNQvX8mSEN2wsiDTwBAWf9LfBcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h OTVjZDIxNy00NGZmLTQzMzQtOTA0YS02MWQ0MzlmNjIxMjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2E5NWNkMjE3LTQ0ZmYtNDMzNC05 MDRhLTYxZDQzOWY2MjEyNy9hOTVjZDIxNy00NGZmLTQzMzQtOTA0YS02MWQ0Mzlm NjIxMjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MCwEAgABMCYwCwMDANjhAwQD2OEQAwQC2OEcAwQE2OGAMAsDBATY 4dADAwHY4DANBAIAAjAHAwUAJgQ3gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcSSoazX4Xg/sozz54Zb3d 0IaCM2cGBwaIg2LIWhrVzRVwV4lKXtJlgW2uvlTzzt6/tIUfjWhhojm4x3neQjR5 p1bUQn+Q4zD4nuln9mu+WxYbuCx8GzKDH91v/3xiyVrMBhdYSEgOYyg6C8HvMF6L qQdrUzE0YAlY52zEAqC7EOcNHh7PA2++rW7wggRltHMREaHlMpnsKy5swbFMNC4G QfG9GJYurLRc/v0in5fL/3g+RMDzFkDv2fdY8EINXGJw8Na0u+9aPPOB5nuRDMwz R3pcrGXE5VPWjS7xxvEaKt04ZUC9DTXysU2lX+zlOPE+1nDdGyq3TpdDQWXWhXVe -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:29 2024 by rpki-client on console-fra.rpki-client.org