$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer File: a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer (raw, json) Hash identifier: gIzZPdTnAbbZH/4fnY+ZaavTFsWSSduxUBqscUxpjas= Subject key identifier: 84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847CD871FFC9ABF4D9FD5A34D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 Nov 2024 18:12:55 +0000 Certificate not after: Wed 10 Feb 2027 18:12:55 +0000 Subordinate resources: AS: 32815 IP: 199.247.128.0/20 IP: 2607:e140::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:cd:87:1f:fc:9a:bf:4d:9f:d5:a3:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Nov 7 18:12:55 2024 GMT Not After : Feb 10 18:12:55 2027 GMT Subject: CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:e6:29:ce:8a:d0:8d:7e:59:f1:3e:b7:64: 1a:a7:6b:76:5d:08:a6:ca:fb:b8:f5:a7:e6:4c:a7: 92:8c:9b:2e:8e:74:bb:46:f7:bd:6d:d8:93:84:88: c4:18:9f:f5:ad:e6:e5:54:b2:73:3c:1b:4e:15:7b: 13:c2:0a:eb:cf:d4:62:d4:44:f1:e2:db:99:de:09: 75:d1:3d:8f:06:65:a5:18:f2:2f:25:74:80:96:f9: b5:15:f7:a3:4a:ac:fa:a9:7e:52:ff:07:04:61:47: b6:75:65:17:d1:b9:cd:26:42:d2:90:94:a1:94:8a: eb:60:4c:73:0a:8e:73:a2:30:26:d7:41:15:0a:3f: e0:6d:1c:6c:96:72:0d:97:25:98:89:ad:de:74:ae: 98:ac:75:ef:44:ef:c2:53:ca:0d:22:42:32:8a:b8: 79:74:d9:bf:d2:41:66:49:85:e5:5f:78:f2:64:1c: 8a:68:d6:6a:cb:d9:c4:d8:5c:77:5a:36:ab:c9:bc: 53:18:8c:ac:60:7d:d3:42:b0:4e:72:3e:85:69:c3: 67:27:5a:18:2a:9f:bd:26:1e:31:6f:a2:60:7e:44: bd:c3:6d:0d:e5:95:32:72:23:a3:23:53:ae:85:a6: f8:6f:a2:c2:86:77:16:b8:da:59:f2:c0:8d:97:77: cc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 199.247.128.0/20 IPv6: 2607:e140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32815 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:db:35:41:f3:d5:85:bd:6e:3f:07:a4:22:91:a1:39:17:13: 07:67:38:51:77:fa:c9:0c:8e:5b:a4:bf:ce:e3:c1:0e:cf:dc: 0a:18:58:b2:c7:56:ba:0d:74:d8:66:db:08:03:6a:24:1f:77: c3:d5:98:a8:74:d7:51:d2:84:84:2d:67:b7:ff:42:4f:f4:ed: 1a:76:4e:b8:d9:60:ac:e8:29:21:c5:88:f4:c7:15:94:42:d7: 57:70:03:a1:f3:af:77:1a:ea:4e:2c:b0:02:90:8b:c2:97:84: 6e:58:12:55:46:a5:ca:52:cb:17:4e:8f:3a:b7:1f:b4:04:07: ee:ec:ad:3a:4a:75:89:fc:99:09:75:46:35:23:0a:36:ab:54: 25:d7:8f:eb:9e:fe:c4:a3:5b:bf:15:23:b6:2e:40:46:72:83: 0f:45:6a:a8:59:77:ed:52:f5:38:78:78:33:3e:31:42:54:f3: 97:73:63:74:f1:85:dc:11:b1:cd:14:58:91:d7:6e:b3:dc:f2: f9:cd:71:1a:ad:17:d3:0a:fd:00:bd:88:7e:dc:5e:68:84:7c: 3c:31:ad:fd:e6:a3:5a:a5:05:5e:f0:e6:13:ac:0c:ed:75:8e: f0:10:df:ca:90:ea:d8:b2:b8:d3:ad:27:cf:fa:27:d2:fb:3a: 01:88:7a:b0 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEfNhx/8mr9Nn9WjTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTEwNzE4MTI1NVoXDTI3MDIxMDE4MTI1NVowLzEtMCsGA1UEAxMk YTk2OTRjMjEtMTc4Yy00ZTdiLTllNzgtMDhiYzk3OGM1ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszHmKc6K0I1+WfE+t2Qap2t2XQimyvu49afm TKeSjJsujnS7Rve9bdiThIjEGJ/1reblVLJzPBtOFXsTwgrrz9Ri1ETx4tuZ3gl1 0T2PBmWlGPIvJXSAlvm1FfejSqz6qX5S/wcEYUe2dWUX0bnNJkLSkJShlIrrYExz Co5zojAm10EVCj/gbRxslnINlyWYia3edK6YrHXvRO/CU8oNIkIyirh5dNm/0kFm SYXlX3jyZByKaNZqy9nE2Fx3WjarybxTGIysYH3TQrBOcj6FacNnJ1oYKp+9Jh4x b6JgfkS9w20N5ZUyciOjI1Ouhab4b6LChncWuNpZ8sCNl3fMjwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIQ5gU9npPBpq2tZfaPqHGbuRIgfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h OTY5NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJjOTc4YzVlNmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2E5Njk0YzIxLTE3OGMtNGU3Yi05 ZTc4LTA4YmM5NzhjNWU2Zi9hOTY5NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJjOTc4 YzVlNmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBATH94AwDQQCAAIwBwMFACYH4UAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIAvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEnbNUHz1YW9bj8HpCKRoTkXEwdn OFF3+skMjlukv87jwQ7P3AoYWLLHVroNdNhm2wgDaiQfd8PVmKh011HShIQtZ7f/ Qk/07Rp2TrjZYKzoKSHFiPTHFZRC11dwA6Hzr3ca6k4ssAKQi8KXhG5YElVGpcpS yxdOjzq3H7QEB+7srTpKdYn8mQl1RjUjCjarVCXXj+ue/sSjW78VI7YuQEZygw9F aqhZd+1S9Th4eDM+MUJU85dzY3TxhdwRsc0UWJHXbrPc8vnNcRqtF9MK/QC9iH7c XmiEfDwxrf3mo1qlBV7w5hOsDO11jvAQ38qQ6tiyuNOtJ8/6J9L7OgGIerA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:18 2024 by rpki-client on console-ams.rpki-client.org