$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer File: ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer (raw, json) Hash identifier: jfo3JjRLfokbUQ0UEM+KO9Ip6KMaZPnOyEHQvtUGaPY= Subject key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847443F01ADBEE0CC0ECE801F60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Sep 2024 14:01:52 +0000 Certificate not after: Wed 23 Dec 2026 15:01:52 +0000 Subordinate resources: IP: 192.197.90.0/24 IP: 198.96.6.0/24 IP: 198.96.24.0 -- 198.96.28.255 IP: 199.71.96.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Sep 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:44:3f:01:ad:be:e0:cc:0e:ce:80:1f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 19 14:01:52 2024 GMT Not After : Dec 23 15:01:52 2026 GMT Subject: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:e5:fd:9c:c1:0d:62:83:d8:8a:cf:46:42: 1a:24:d7:05:b0:a4:e4:4e:30:12:67:4b:f2:bd:94: e6:ef:34:b9:a5:93:87:ff:d8:35:f9:5b:ec:62:9a: fe:89:a1:94:c1:07:d6:d8:55:90:82:47:44:1b:de: 38:8c:ed:1c:30:89:13:03:63:b6:5d:3d:28:9e:1e: 83:09:a7:e7:45:3a:96:64:2a:b0:15:85:9f:67:83: 3a:f2:fa:c1:f5:88:4d:24:b3:04:5a:72:36:11:2a: c3:77:f9:43:39:47:0f:9d:cc:1e:c0:a4:77:bf:ae: a8:96:9c:62:72:97:45:a6:49:fe:70:c7:bb:06:92: 4d:1c:11:09:be:ea:d4:78:b0:b6:66:a1:70:e2:0b: 54:8a:b4:88:cb:0f:fd:d5:d0:8b:0b:79:9d:c2:55: 6c:8f:1f:a0:23:75:33:7e:e4:31:b6:98:23:25:d2: a0:ac:d4:1e:5d:ce:36:21:47:7a:f4:df:3d:fc:19: cc:12:e8:42:d3:7a:e3:c1:0e:9d:f3:82:e5:03:f1: 31:aa:ae:e0:c5:06:b8:d9:8c:49:13:4d:62:75:b0: 73:77:ca:7e:20:d0:dc:88:78:96:d6:75:a2:19:5d: 29:34:b6:bf:95:44:e6:1f:a9:b3:91:ee:e2:64:c2: 7a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.197.90.0/24 198.96.6.0/24 198.96.24.0-198.96.28.255 199.71.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:81:59:f5:71:67:f0:7f:81:23:1a:7b:b4:0a:89:78:fe:e4: 35:5b:d1:5b:a9:32:32:79:81:5a:6a:1e:7a:3f:2c:c9:4e:94: 7f:1c:63:ab:14:41:1b:6b:51:c9:f0:aa:e3:a6:c5:25:66:8a: 19:66:59:b1:bb:3b:19:ae:62:11:0c:79:74:8d:fa:a6:6d:73: ee:d1:c2:75:fd:36:b3:57:ce:bd:99:af:5e:51:f2:47:7c:f4: 2f:0b:61:48:0c:9e:34:c6:67:ef:22:74:58:cd:83:fa:6b:1b: 04:33:4f:39:d4:70:f3:1a:89:e5:0c:3e:0f:18:80:bf:1b:50: da:40:b4:7e:ca:20:6c:a9:b8:e2:c5:3b:da:86:ba:09:56:32: 97:d2:ff:9d:e4:77:2d:15:e5:d1:18:b0:8d:e5:dc:2d:96:b2: 9f:3a:0c:e6:62:50:d8:6a:79:b2:e3:04:20:4c:b5:42:09:08: 23:a1:47:47:b2:a7:b1:41:08:d9:17:65:99:ca:59:38:91:b6: a3:4f:3f:65:a1:ea:c5:bf:11:4c:14:a9:13:17:1c:a7:4c:b8: 91:63:10:a3:21:52:dc:a1:c0:35:9e:ff:65:be:29:69:38:40: 3a:9a:6a:4f:70:95:13:d6:64:a7:10:f4:ae:9d:b8:c3:e9:84: 21:27:ab:73 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEdEPwGtvuDMDs6AH2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkxOTE0MDE1MloXDTI2MTIyMzE1MDE1MlowLzEtMCsGA1UEAxMk YmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2N2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7Ll/ZzBDWKD2IrPRkIaJNcFsKTkTjASZ0vy vZTm7zS5pZOH/9g1+VvsYpr+iaGUwQfW2FWQgkdEG944jO0cMIkTA2O2XT0onh6D CafnRTqWZCqwFYWfZ4M68vrB9YhNJLMEWnI2ESrDd/lDOUcPncwewKR3v66olpxi cpdFpkn+cMe7BpJNHBEJvurUeLC2ZqFw4gtUirSIyw/91dCLC3mdwlVsjx+gI3Uz fuQxtpgjJdKgrNQeXc42IUd69N89/BnMEuhC03rjwQ6d84LlA/Exqq7gxQa42YxJ E01idbBzd8p+INDciHiW1nWiGV0pNLa/lUTmH6mzke7iZMJ6lQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFJGjIi2+i1iPtPsszYyR3haEDYgLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9i YTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2JhNTcwM2ZjLWIwZTItNGRkMy1h YmJjLTcxZDA4ZTFjNjdjNS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUx YzY3YzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMCYEAgABMCADBADAxVoDBADGYAYwDAMEA8ZgGAMEAMZgHAMEA8dH YDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBfgVn1cWfwf4EjGnu0Col4/uQ1W9FbqTIyeYFaah56PyzJTpR/ HGOrFEEba1HJ8KrjpsUlZooZZlmxuzsZrmIRDHl0jfqmbXPu0cJ1/TazV869ma9e UfJHfPQvC2FIDJ40xmfvInRYzYP6axsEM0851HDzGonlDD4PGIC/G1DaQLR+yiBs qbjixTvahroJVjKX0v+d5HctFeXRGLCN5dwtlrKfOgzmYlDYanmy4wQgTLVCCQgj oUdHsqexQQjZF2WZylk4kbajTz9loerFvxFMFKkTFxynTLiRYxCjIVLcocA1nv9l vilpOEA6mmpPcJUT1mSnEPSunbjD6YQhJ6tz -----END CERTIFICATE-----Generated at Thu Sep 19 19:54:56 2024 by rpki-client on console-ams.rpki-client.org