$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer File: afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer (raw, json) Hash identifier: lT1AWtUnmaqg3ES5qaVNJYBSVY5OXzztiatynd9cfZk= Subject key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847181E851479B4B78A8B810A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Sep 2024 18:40:51 +0000 Certificate not after: Mon 07 Dec 2026 19:40:51 +0000 Subordinate resources: AS: 36667 IP: 198.35.120.0/21 IP: 2620:c:8000::/48 IP: 2620:109:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:18:1e:85:14:79:b4:b7:8a:8b:81:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 3 18:40:51 2024 GMT Not After : Dec 7 19:40:51 2026 GMT Subject: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:30:2e:04:f9:90:72:e2:ed:73:5a:6e:07: c3:8b:70:4d:e1:2a:eb:e8:05:d1:d4:4c:33:6c:81: ba:9b:48:51:f6:d4:1b:49:10:55:7c:e7:74:02:2c: a3:a9:f5:49:5c:8d:d6:bf:e3:82:74:3b:27:3d:07: 1d:14:7c:b1:83:d4:6a:7b:ab:01:07:53:f1:b2:09: fc:5e:8b:7b:4f:c0:f0:59:51:74:f2:0c:27:2a:e5: ed:fc:5d:71:30:b0:7f:b7:e6:62:7e:99:99:e2:ad: 88:45:9e:2b:bc:ed:66:29:49:54:d7:6c:0c:3b:0c: cf:21:b9:d2:df:b4:eb:cf:d8:da:09:0c:ca:35:a7: 9b:91:d5:9d:49:84:ba:7f:e7:5f:59:80:74:1f:b3: f0:74:d0:f9:d2:b7:f7:94:93:fe:9c:a6:c2:fa:83: d7:d2:62:ca:aa:fa:e1:ce:82:b3:9e:2c:5a:63:8c: 9b:bd:5d:03:eb:7a:09:a8:59:7c:be:5f:e0:f2:a2: 57:ba:7b:86:ff:b4:ad:e7:ac:bf:e5:26:08:c1:96: b9:ff:10:2f:71:d3:c8:8e:c1:9b:02:85:75:50:bf: a2:06:f0:23:08:c2:44:41:8d:c9:05:05:e1:41:30: 86:fa:22:f0:90:fe:85:3d:b5:2f:e5:67:22:f9:af: c1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 198.35.120.0/21 IPv6: 2620:c:8000::/48 2620:109:6000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36667 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:be:2d:da:23:98:33:c1:da:a0:33:96:18:8c:d6:16:3b:8b: a1:c5:b6:0a:46:39:c2:21:74:4e:82:a0:43:d3:ef:5e:a1:17: 17:c3:94:54:48:32:0e:aa:fe:19:5f:3b:04:d3:7f:fe:3c:94: 7f:ae:90:de:dc:3e:6c:09:f5:8d:2f:01:ff:6b:5d:dd:7f:b8: 03:3e:f8:88:83:2d:3a:18:f4:e9:57:61:a0:b4:98:a7:c3:4c: 5c:aa:1b:de:98:d5:4f:df:be:7b:60:c1:eb:38:83:6c:a6:14: 07:3a:d8:3c:64:52:fd:d3:5b:86:0f:23:9f:3a:e2:20:e8:50: 79:e3:8c:d5:58:6c:4f:58:67:c5:34:de:a0:97:fe:75:72:71: d6:72:e4:33:db:5f:ff:72:71:0b:5c:0f:c8:71:bd:2e:27:b5: 77:0f:31:86:56:fb:f9:6d:96:45:7b:75:9f:2c:a6:8e:51:37: 9b:46:44:d2:08:b4:c4:ae:aa:d7:42:a8:0a:0c:51:af:ce:67: 3d:ab:b4:81:66:63:54:7b:07:eb:ab:36:d7:d1:20:29:02:00: 7a:ac:19:f7:16:3f:67:30:4c:ae:b8:6d:2c:95:7f:49:54:f2: ed:b5:d3:a2:c6:6e:dd:25:b7:e4:ff:7f:07:24:e1:cb:f2:4b: 37:48:af:c4 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEcYHoUUebS3iouBCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkwMzE4NDA1MVoXDTI2MTIwNzE5NDA1MVowLzEtMCsGA1UEAxMk YWZkMWZlM2ItN2UyNC00ZDI3LWJiMTAtYmViOWNlMmQ2OTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArywwLgT5kHLi7XNabgfDi3BN4Srr6AXR1Ewz bIG6m0hR9tQbSRBVfOd0AiyjqfVJXI3Wv+OCdDsnPQcdFHyxg9Rqe6sBB1Pxsgn8 Xot7T8DwWVF08gwnKuXt/F1xMLB/t+ZifpmZ4q2IRZ4rvO1mKUlU12wMOwzPIbnS 37Trz9jaCQzKNaebkdWdSYS6f+dfWYB0H7PwdND50rf3lJP+nKbC+oPX0mLKqvrh zoKznixaY4ybvV0D63oJqFl8vl/g8qJXunuG/7St56y/5SYIwZa5/xAvcdPIjsGb AoV1UL+iBvAjCMJEQY3JBQXhQTCG+iLwkP6FPbUv5Wci+a/BvQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFO+jLB5WNBDynzYzW+Fz3eZZxIkJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9h ZmQxZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5Y2UyZDY5MjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2FmZDFmZTNiLTdlMjQtNGQyNy1i YjEwLWJlYjljZTJkNjkyMi9hZmQxZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5Y2Uy ZDY5MjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMAwEAgABMAYDBAPGI3gwGAQCAAIwEgMHACYgAAyAAAMHBCYgAQlg ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAjzswVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABr4t2iOYM8Ha oDOWGIzWFjuLocW2CkY5wiF0ToKgQ9PvXqEXF8OUVEgyDqr+GV87BNN//jyUf66Q 3tw+bAn1jS8B/2td3X+4Az74iIMtOhj06VdhoLSYp8NMXKob3pjVT9++e2DB6ziD bKYUBzrYPGRS/dNbhg8jnzriIOhQeeOM1VhsT1hnxTTeoJf+dXJx1nLkM9tf/3Jx C1wPyHG9Lie1dw8xhlb7+W2WRXt1nyymjlE3m0ZE0gi0xK6q10KoCgxRr85nPau0 gWZjVHsH66s219EgKQIAeqwZ9xY/ZzBMrrhtLJV/SVTy7bXTosZu3SW35P9/ByTh y/JLN0ivxA== -----END CERTIFICATE-----Generated at Thu Sep 19 18:23:03 2024 by rpki-client on console-fra.rpki-client.org