$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer File: ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer (raw, json) Hash identifier: KAzDKZTBpvf5+qeWxv8EOkKRRIsYY/hy41r5YVmQenU= Subject key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847A113F32CB9339C1FB799EF68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Oct 2024 20:05:17 +0000 Certificate not after: Mon 25 Jan 2027 21:05:17 +0000 Subordinate resources: AS: 395567 AS: 396058 IP: 64.225.240.0/22 IP: 172.83.200.0/24 IP: 192.111.24.0/22 IP: 198.73.0.0 -- 198.73.4.255 IP: 207.65.42.0/23 IP: 216.153.24.0/22 IP: 2602:fead::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a1:13:f3:2c:b9:33:9c:1f:b7:99:ef:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 22 20:05:17 2024 GMT Not After : Jan 25 21:05:17 2027 GMT Subject: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:06:ea:61:7f:e8:6a:e2:25:2a:c4:fc:e2: 93:31:c4:ca:dc:3f:02:1b:71:44:87:4f:e2:6d:32: 31:24:a8:55:75:4e:06:52:78:45:4f:ea:04:29:b8: 94:f7:6e:43:9e:92:4a:39:6f:aa:4c:8f:9c:a2:10: 80:c7:4a:53:c7:49:db:fa:a7:f8:ef:5b:42:7b:a0: c8:b8:4b:c7:22:8d:77:df:22:c4:65:e1:98:e6:03: fb:f3:48:03:75:fa:41:6d:78:e0:29:c9:30:d2:95: 43:6b:46:a5:86:8e:a6:1e:ca:0e:b1:57:42:86:5d: 1f:3e:97:8a:59:e6:02:0b:14:aa:fc:9d:6c:30:86: 32:4c:c4:b5:89:a1:e4:5a:21:8c:0d:50:e0:a5:5d: 2f:ee:0e:12:41:96:d8:48:e0:72:21:ff:47:3a:85: 75:54:86:d7:65:00:5b:e6:a0:73:86:fe:7b:46:24: bc:a4:0a:df:9b:a6:a6:41:3c:0b:90:7d:0e:b7:a1: 10:89:5c:ec:e6:0d:18:ed:55:1f:9e:ea:5b:2a:ae: bf:06:87:ee:d9:b3:cd:04:df:8c:ab:9d:f9:8a:f3: 6a:96:fa:78:d3:98:63:40:05:3c:1a:3e:97:27:5d: 1f:d3:4e:5c:fa:33:e0:ed:c5:e1:66:bd:c9:fb:dd: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 64.225.240.0/22 172.83.200.0/24 192.111.24.0/22 198.73.0.0-198.73.4.255 207.65.42.0/23 216.153.24.0/22 IPv6: 2602:fead::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395567 396058 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e0:2f:75:93:5b:3c:81:be:dd:97:35:b9:bc:a2:c8:b6:eb: 4b:e4:c8:4d:fb:e0:14:4b:9a:9a:26:0e:9a:9f:51:18:89:27: 16:b1:ee:f8:93:82:86:cb:fc:28:0b:42:20:c9:81:01:fa:aa: 42:c2:7d:d2:e2:14:70:82:64:6c:ae:c9:14:58:d7:ec:e7:52: 03:8b:e5:4d:d1:9a:81:1b:a3:c9:13:48:21:43:9d:b0:0f:7a: 83:03:1c:7f:31:e1:24:1d:5b:0d:ed:ed:9d:5e:0b:ec:6e:95: 19:c7:b2:0f:43:6a:6d:13:8f:ce:df:07:40:55:64:c6:19:ac: 18:56:d7:d8:d5:0d:0c:27:28:5d:20:8c:ef:fb:1c:ca:5c:e2: eb:dd:e0:ec:31:eb:61:c2:2c:de:5f:2c:51:d5:b8:ef:f2:0b: 3a:f5:98:ad:e1:d3:aa:23:37:3a:fe:0b:95:9f:ca:d9:89:75: 6a:15:34:d3:27:76:47:33:3c:25:cb:af:d1:38:af:35:55:a5: 23:1c:fd:8b:4e:0c:3b:74:cd:18:bb:e5:9c:71:9a:e3:cd:d0: fd:28:bd:b9:dd:c2:a5:5f:cf:60:19:39:73:d6:c3:68:c0:11: d4:af:8c:4e:ca:5c:86:df:b2:cf:1c:de:04:db:2a:88:83:25: 37:97:de:62 -----BEGIN CERTIFICATE----- MIIHQzCCBiugAwIBAgIUAQ0Mn0MoWEehE/MsuTOcH7eZ72gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAyMjIwMDUxN1oXDTI3MDEyNTIxMDUxN1owLzEtMCsGA1UEAxMk YWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXgG6mF/6GriJSrE/OKTMcTK3D8CG3FEh0/i bTIxJKhVdU4GUnhFT+oEKbiU925DnpJKOW+qTI+cohCAx0pTx0nb+qf471tCe6DI uEvHIo133yLEZeGY5gP780gDdfpBbXjgKckw0pVDa0alho6mHsoOsVdChl0fPpeK WeYCCxSq/J1sMIYyTMS1iaHkWiGMDVDgpV0v7g4SQZbYSOByIf9HOoV1VIbXZQBb 5qBzhv57RiS8pArfm6amQTwLkH0Ot6EQiVzs5g0Y7VUfnupbKq6/Bofu2bPNBN+M q535ivNqlvp405hjQAU8Gj6XJ10f005c+jPg7cXhZr3J+91LaQIDAQABo4IEVTCC BFEwHQYDVR0OBBYEFEPG2WVWMIeSgkoFwdfOYaPNXT4ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h ZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2FlNzdiNWFmLWExYjUtNDg1OC1i NjFkLWYwOWZkNjdmN2NiMy9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3 ZjdjYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMDEEAgABMCsDBAJA4fADBACsU8gDBALAbxgwCwMDAMZJAwQAxkkE AwQBz0EqAwQC2JkYMA4EAgACMAgDBgQmAv6tADAfBggrBgEFBQcBCAEB/wQQMA6g DDAKAgMGCS8CAwYLGjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBG4C91k1s8gb7dlzW5vKLItutL5MhN++AU S5qaJg6an1EYiScWse74k4KGy/woC0IgyYEB+qpCwn3S4hRwgmRsrskUWNfs51ID i+VN0ZqBG6PJE0ghQ52wD3qDAxx/MeEkHVsN7e2dXgvsbpUZx7IPQ2ptE4/O3wdA VWTGGawYVtfY1Q0MJyhdIIzv+xzKXOLr3eDsMethwizeXyxR1bjv8gs69Zit4dOq Izc6/guVn8rZiXVqFTTTJ3ZHMzwly6/ROK81VaUjHP2LTgw7dM0Yu+WccZrjzdD9 KL253cKlX89gGTlz1sNowBHUr4xOylyG37LPHN4E2yqIgyU3l95i -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:09 2024 by rpki-client on console-ams.rpki-client.org