$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer File: aae4f0de-2296-435c-b411-b16981804498.cer (raw, json) Hash identifier: S9cEUpFJ7SKVt421F3odedjj0VW4huNks50Inohimqk= Subject key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847150B33FA84825F01735B7980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Sep 2024 16:14:30 +0000 Certificate not after: Sun 06 Dec 2026 17:14:30 +0000 Subordinate resources: AS: 398268 IP: 199.58.88.0/22 IP: 2602:fd7b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:15:0b:33:fa:84:82:5f:01:73:5b:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 2 16:14:30 2024 GMT Not After : Dec 6 17:14:30 2026 GMT Subject: CN=aae4f0de-2296-435c-b411-b16981804498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:ac:ea:98:39:48:af:5a:0e:e2:eb:78:50: 64:bd:dd:dc:67:03:96:5e:47:64:cc:0d:b5:7f:46: 1c:5f:6f:fa:f1:40:51:26:e5:4d:60:1c:b0:6e:7c: 2e:ef:5e:1d:fe:75:72:18:92:7c:a1:13:48:49:d2: 64:7c:f8:c6:f8:5c:0b:3e:06:e8:55:e4:f8:82:1b: f6:e8:a7:21:86:ba:ba:f0:3e:0c:d2:59:96:5b:7f: 1b:cd:18:a9:35:e9:7b:c3:04:37:71:0c:88:cb:32: 17:c6:9d:9c:da:67:6c:ae:5e:d9:39:50:17:ce:96: e5:96:d3:e4:8b:0f:27:d5:c9:f8:91:1f:f5:a6:64: 5c:4c:b4:ee:68:06:41:b7:8a:8f:ee:a6:e9:d2:f8: b1:1a:09:d4:06:cf:99:16:4e:62:ef:ae:54:71:d7: 3e:c9:b1:99:bf:b9:d3:ea:26:52:72:35:3f:7a:2c: cc:9e:cc:f6:c1:03:ad:62:8f:4a:f7:3e:9d:eb:87: 9c:ef:12:0e:e6:63:a3:9a:4c:81:6f:2f:48:9e:e9: ea:16:3e:76:45:f9:e0:5f:20:b1:a6:dc:a5:1e:95: ef:30:cf:90:a5:a4:ce:30:ce:91:62:eb:d3:54:0e: 26:60:7e:25:4d:8d:7d:6e:64:1d:22:34:64:f2:ef: 5c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 199.58.88.0/22 IPv6: 2602:fd7b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398268 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:03:a0:7b:4a:f6:d9:4b:c5:03:d2:e7:e8:bd:95:0a:6b:50: 66:1e:d3:41:27:11:00:5a:b0:36:be:ac:0e:d2:3a:b8:c1:0b: 3e:d9:64:09:cf:84:9b:ba:32:e3:00:74:dc:12:a7:df:0e:c0: 49:12:62:df:e9:5a:ff:d4:3e:37:26:30:d8:46:53:51:23:ff: 42:ee:c2:8b:5a:92:2a:b1:70:c9:c9:84:e9:60:54:ad:c6:19: ec:e6:1d:73:93:4f:25:13:fe:02:88:db:7f:33:17:51:42:02: d2:95:32:71:31:f4:fa:fa:61:ea:04:a9:a4:2d:41:e6:ec:d6: b2:f8:11:a7:dd:02:79:03:56:41:c6:e4:a8:60:d0:32:97:5d: ab:fa:5a:45:60:f5:8e:59:d5:b1:13:7c:4c:66:54:32:7d:54: 26:dd:fd:0a:8b:bd:61:85:09:ce:fc:0d:2f:28:fe:4c:0d:ab: b7:3b:76:99:3f:04:bc:57:75:cc:78:ea:89:d8:db:0f:0b:4e: c1:a0:21:63:d6:9d:27:d5:f1:d4:43:9a:d6:fb:e9:6b:60:3d: 5f:31:ae:bd:5e:a2:e2:00:50:5c:2d:65:63:1e:b9:81:6f:e1: d8:aa:5b:28:e2:3c:21:d9:cd:ad:0c:88:08:4c:97:6c:85:93: 8b:37:f6:99 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEcVCzP6hIJfAXNbeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkwMjE2MTQzMFoXDTI2MTIwNjE3MTQzMFowLzEtMCsGA1UEAxMk YWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0NDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTes6pg5SK9aDuLreFBkvd3cZwOWXkdkzA21 f0YcX2/68UBRJuVNYBywbnwu714d/nVyGJJ8oRNISdJkfPjG+FwLPgboVeT4ghv2 6Kchhrq68D4M0lmWW38bzRipNel7wwQ3cQyIyzIXxp2c2mdsrl7ZOVAXzpblltPk iw8n1cn4kR/1pmRcTLTuaAZBt4qP7qbp0vixGgnUBs+ZFk5i765Ucdc+ybGZv7nT 6iZScjU/eizMnsz2wQOtYo9K9z6d64ec7xIO5mOjmkyBby9InunqFj52RfngXyCx ptylHpXvMM+QpaTOMM6RYuvTVA4mYH4lTY19bmQdIjRk8u9c0wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFB/TJ2RNWLmvxX9Egk37j7ceGM9tMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h YWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2FhZTRmMGRlLTIyOTYtNDM1Yy1i NDExLWIxNjk4MTgwNDQ5OC9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4 MDQ0OTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHOlgwDgQCAAIwCAMGBCYC/XsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYTvDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFA6B7SvbZS8UD0ufovZUKa1Bm HtNBJxEAWrA2vqwO0jq4wQs+2WQJz4SbujLjAHTcEqffDsBJEmLf6Vr/1D43JjDY RlNRI/9C7sKLWpIqsXDJyYTpYFStxhns5h1zk08lE/4CiNt/MxdRQgLSlTJxMfT6 +mHqBKmkLUHm7Nay+BGn3QJ5A1ZBxuSoYNAyl12r+lpFYPWOWdWxE3xMZlQyfVQm 3f0Ki71hhQnO/A0vKP5MDau3O3aZPwS8V3XMeOqJ2NsPC07BoCFj1p0n1fHUQ5rW ++lrYD1fMa69XqLiAFBcLWVjHrmBb+HYqlso4jwh2c2tDIgITJdshZOLN/aZ -----END CERTIFICATE-----Generated at Sun Nov 10 03:36:05 2024 by rpki-client on console-ams.rpki-client.org