$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer File: ac9a4ddd-a4d3-42f8-a810-268e79a03184.cer (raw, json) Hash identifier: t3NEhgMngt9AHHiEdq8FlKWwjKsCxPmXY+58VZIsMTg= Subject key identifier: E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858479E2F5F91F2A7B798E8F22AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Oct 2024 19:13:07 +0000 Certificate not after: Sun 24 Jan 2027 20:13:07 +0000 Subordinate resources: AS: 54957 IP: 198.162.225.0/24 IP: 198.181.168.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9e:2f:5f:91:f2:a7:b7:98:e8:f2:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 21 19:13:07 2024 GMT Not After : Jan 24 20:13:07 2027 GMT Subject: CN=ac9a4ddd-a4d3-42f8-a810-268e79a03184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:58:b6:ff:5c:d6:bf:58:3d:1e:57:7f:1f:12: 9c:14:34:f8:b9:34:01:9e:ca:4d:24:fb:2e:8a:13: 92:0a:bd:45:1a:3e:dd:84:a1:ee:eb:89:28:8b:cb: 2a:f4:bb:14:e1:22:9b:24:f6:8d:14:10:5a:2e:9c: 9c:06:db:d0:37:a9:c9:9c:39:f8:67:45:b6:f4:f9: 9c:54:f3:4a:4a:65:2d:9a:1f:9b:3b:83:2a:d5:5b: 6d:3d:ba:c1:ef:8d:8d:e1:51:da:f0:48:4e:14:68: 4b:49:1b:90:e8:38:95:71:38:10:b0:52:38:4a:ce: 3f:63:c0:8c:80:fa:43:1e:88:fe:c5:c1:23:42:4e: 48:08:6e:dd:db:51:43:31:cb:d7:ea:40:67:26:76: a1:8f:a0:e9:64:59:31:5b:aa:a1:de:f4:a3:62:cc: 8d:63:3c:a3:69:fe:a4:7d:05:19:d3:19:1d:bf:95: 33:0e:77:f1:bf:5c:ca:cd:51:d9:57:60:80:88:03: 00:4f:2f:5d:f5:f4:f6:37:62:48:f7:14:e2:1d:24: df:8b:0f:4d:6e:8a:f8:d3:13:a7:72:1a:12:0c:c0: 3b:7d:f1:04:ef:a1:e1:32:f1:56:16:70:af:09:8b: 92:92:56:0a:8a:64:36:1d:22:6c:bc:5c:8d:bd:e7: ff:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:08:02:F7:F3:99:DD:37:5A:81:CB:66:EA:25:F4:E0:59:FB:7A:87 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ac9a4ddd-a4d3-42f8-a810-268e79a03184/ac9a4ddd-a4d3-42f8-a810-268e79a03184.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 198.162.225.0/24 198.181.168.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54957 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a4:98:a2:d5:12:60:ec:46:77:f5:a0:41:66:35:30:ba:88: d7:98:e5:d1:ba:eb:ea:85:39:98:e2:01:1a:00:87:1e:a7:ca: 40:2c:86:8a:7e:8d:ba:61:00:b7:50:24:d5:b3:c9:f1:f4:4a: 64:20:2b:84:3e:44:d9:bd:4a:57:ff:3e:2e:6d:eb:85:a2:3d: be:ee:04:67:98:ee:5a:4d:8f:7d:65:68:18:74:a8:65:9a:e4: 88:bc:c1:72:8d:21:5d:84:6a:23:4b:a5:7c:df:8a:87:d5:02: 06:b1:6d:6e:cb:29:c7:17:9c:ae:3a:6f:a1:f2:a2:16:ee:d7: 4a:aa:5e:ec:05:93:7c:b1:ad:f8:fd:ba:35:d7:a9:0a:03:02: d0:43:a8:30:ed:0f:41:81:12:17:13:74:65:42:32:ed:ea:5b: af:b7:51:f0:a8:0c:eb:11:72:bf:e5:4c:37:6a:42:6a:e6:c0: 20:6a:3f:bd:f4:2b:4f:1c:4a:d2:b9:80:74:90:b0:3f:bd:7f: c4:94:0a:fd:38:b7:bb:8f:c6:cf:d1:b3:56:00:61:00:99:84: 74:24:43:72:ea:ff:d8:dd:d0:59:c4:db:90:72:b0:b8:53:23: 47:4b:bb:ad:52:89:80:ab:81:28:4f:22:f4:12:06:4c:3a:f6: 6e:78:78:4a -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEeeL1+R8qe3mOjyKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAyMTE5MTMwN1oXDTI3MDEyNDIwMTMwN1owLzEtMCsGA1UEAxMk YWM5YTRkZGQtYTRkMy00MmY4LWE4MTAtMjY4ZTc5YTAzMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFi2/1zWv1g9Hld/HxKcFDT4uTQBnspNJPsu ihOSCr1FGj7dhKHu64koi8sq9LsU4SKbJPaNFBBaLpycBtvQN6nJnDn4Z0W29Pmc VPNKSmUtmh+bO4Mq1VttPbrB742N4VHa8EhOFGhLSRuQ6DiVcTgQsFI4Ss4/Y8CM gPpDHoj+xcEjQk5ICG7d21FDMcvX6kBnJnahj6DpZFkxW6qh3vSjYsyNYzyjaf6k fQUZ0xkdv5UzDnfxv1zKzVHZV2CAiAMATy9d9fT2N2JI9xTiHSTfiw9Nbor40xOn choSDMA7ffEE76HhMvFWFnCvCYuSklYKimQ2HSJsvFyNvef/0QIDAQABo4IEITCC BB0wHQYDVR0OBBYEFOUIAvfzmd03WoHLZuol9OBZ+3qHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h YzlhNGRkZC1hNGQzLTQyZjgtYTgxMC0yNjhlNzlhMDMxODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2FjOWE0ZGRkLWE0ZDMtNDJmOC1h ODEwLTI2OGU3OWEwMzE4NC9hYzlhNGRkZC1hNGQzLTQyZjgtYTgxMC0yNjhlNzlh MDMxODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGouEDBADGtagwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANatMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC6kmKLVEmDsRnf1oEFmNTC6iNeY5dG66+qFOZji ARoAhx6nykAshop+jbphALdQJNWzyfH0SmQgK4Q+RNm9Slf/Pi5t64WiPb7uBGeY 7lpNj31laBh0qGWa5Ii8wXKNIV2EaiNLpXzfiofVAgaxbW7LKccXnK46b6Hyohbu 10qqXuwFk3yxrfj9ujXXqQoDAtBDqDDtD0GBEhcTdGVCMu3qW6+3UfCoDOsRcr/l TDdqQmrmwCBqP730K08cStK5gHSQsD+9f8SUCv04t7uPxs/Rs1YAYQCZhHQkQ3Lq /9jd0FnE25BysLhTI0dLu61SiYCrgShPIvQSBkw69m54eEo= -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:18 2024 by rpki-client on console-ams.rpki-client.org