$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae.cer File: c501b1e0-0018-475e-9d4b-5090237060ae.cer (raw, json) Hash identifier: GESFzMm/lvIoK8nBJk0C8j+huOOiXVoOFCvlMoYOwUo= Subject key identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847A94BBF4F5AA1F5AB5D18E000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Oct 2024 18:44:11 +0000 Certificate not after: Thu 28 Jan 2027 19:44:11 +0000 Subordinate resources: AS: 54840 IP: 130.250.158.0/23 IP: 192.30.212.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a9:4b:bf:4f:5a:a1:f5:ab:5d:18:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 25 18:44:11 2024 GMT Not After : Jan 28 19:44:11 2027 GMT Subject: CN=c501b1e0-0018-475e-9d4b-5090237060ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:1f:40:f5:f8:af:44:b7:26:43:c0:41:14: 2d:be:31:21:a5:b1:d3:cb:92:38:50:4f:8b:0e:8d: b7:83:b4:9d:4d:ca:88:0b:93:2e:e5:43:94:f6:da: 6b:0d:81:6b:e8:a6:39:76:1d:94:9a:8e:6d:81:0a: 01:9c:d2:04:07:5d:d9:f6:c9:d4:73:5c:84:21:ed: 38:d4:05:51:3e:ee:09:b6:2a:10:0c:92:d6:ad:5e: ef:5b:2b:c7:d0:c5:fd:ac:83:bb:ff:aa:22:ea:41: 0d:53:61:fc:4a:89:62:6f:e4:bb:cf:e0:7c:ba:48: 3a:69:a9:b0:1c:a7:72:84:07:44:fb:0d:29:22:d7: 33:d6:31:8a:17:16:94:f7:da:3c:98:79:93:58:bf: b9:b5:a6:6f:68:9b:d1:ad:d7:29:6a:13:ab:51:30: 29:4b:40:d4:d6:0b:b7:b1:88:db:b4:cc:51:5a:7f: 19:91:01:1e:e7:52:39:75:a7:77:b1:18:e8:ed:9f: 74:44:23:d4:a9:da:68:b0:cd:3f:18:94:66:ba:a9: b9:25:04:50:dc:f8:0f:09:38:db:95:55:06:ea:df: 2e:53:60:33:20:66:9d:fb:be:2b:c7:ac:20:14:3d: 1f:5b:a9:c6:8a:3c:c8:0e:b5:93:92:14:d9:6f:22: d8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:88:97:9D:A7:79:1F:C4:E2:01:65:FC:6C:5D:DC:10:BB:BA:AC:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c501b1e0-0018-475e-9d4b-5090237060ae/c501b1e0-0018-475e-9d4b-5090237060ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 130.250.158.0/23 192.30.212.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54840 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:8f:53:46:03:79:b8:46:97:5d:fa:2d:1b:d4:48:aa:96:50: 2d:44:43:34:a6:bf:2c:a3:20:23:9c:cb:b7:d0:b1:f7:cb:07: 4e:6a:7e:7c:ed:83:6a:f6:e7:2f:7d:3d:bb:fa:11:06:cc:90: a9:96:f7:61:2a:d6:ef:3e:a9:94:2a:14:83:2c:08:f2:80:0d: 1e:52:a2:d6:16:fe:2e:0c:96:0f:d0:2e:45:72:25:e6:54:0a: 12:66:94:38:1d:9f:d5:56:ee:dd:50:ea:e4:f6:9d:f5:46:4d: eb:16:1a:e9:15:f6:d9:36:c2:a3:9e:0d:15:9a:fb:10:35:2f: 01:42:09:f8:ab:26:59:34:59:f6:c3:1b:4c:1b:2c:b6:73:31: cc:d8:43:eb:fd:38:7e:d7:96:7b:92:21:e1:5b:9a:70:0a:d6: 02:35:54:3a:67:e1:a3:fd:29:44:d4:0a:a2:7a:a6:40:28:fb: e6:cf:ff:29:e5:d1:81:b2:21:2f:8f:eb:54:fd:bc:4d:1f:41: 3f:0f:82:d5:f9:db:2d:64:19:5d:13:34:5c:01:a3:4f:cd:0a: 24:31:af:e5:8c:95:e2:7d:7a:27:99:d3:03:fd:20:d2:73:25: f9:79:5f:f0:36:ad:d9:7a:bd:82:24:dc:e3:1f:50:50:49:3d: 6b:e2:54:30 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEepS79PWqH1q10Y4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAyNTE4NDQxMVoXDTI3MDEyODE5NDQxMVowLzEtMCsGA1UEAxMk YzUwMWIxZTAtMDAxOC00NzVlLTlkNGItNTA5MDIzNzA2MGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiUfQPX4r0S3JkPAQRQtvjEhpbHTy5I4UE+L Do23g7SdTcqIC5Mu5UOU9tprDYFr6KY5dh2Umo5tgQoBnNIEB13Z9snUc1yEIe04 1AVRPu4JtioQDJLWrV7vWyvH0MX9rIO7/6oi6kENU2H8Solib+S7z+B8ukg6aamw HKdyhAdE+w0pItcz1jGKFxaU99o8mHmTWL+5taZvaJvRrdcpahOrUTApS0DU1gu3 sYjbtMxRWn8ZkQEe51I5dad3sRjo7Z90RCPUqdposM0/GJRmuqm5JQRQ3PgPCTjb lVUG6t8uU2AzIGad+74rx6wgFD0fW6nGijzIDrWTkhTZbyLYyQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFMuIl52neR/E4gFl/Gxd3BC7uqzFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9j NTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3MDYwYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2M1MDFiMWUwLTAwMTgtNDc1ZS05 ZDRiLTUwOTAyMzcwNjBhZS9jNTAxYjFlMC0wMDE4LTQ3NWUtOWQ0Yi01MDkwMjM3 MDYwYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAGC+p4DBALAHtQwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANY4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEuPU0YDebhGl136LRvUSKqWUC1EQzSmvyyjICOc y7fQsffLB05qfnztg2r25y99Pbv6EQbMkKmW92Eq1u8+qZQqFIMsCPKADR5SotYW /i4Mlg/QLkVyJeZUChJmlDgdn9VW7t1Q6uT2nfVGTesWGukV9tk2wqOeDRWa+xA1 LwFCCfirJlk0WfbDG0wbLLZzMczYQ+v9OH7XlnuSIeFbmnAK1gI1VDpn4aP9KUTU CqJ6pkAo++bP/ynl0YGyIS+P61T9vE0fQT8PgtX52y1kGV0TNFwBo0/NCiQxr+WM leJ9eieZ0wP9INJzJfl5X/A2rdl6vYIk3OMfUFBJPWviVDA= -----END CERTIFICATE-----Generated at Thu Nov 21 19:16:31 2024 by rpki-client on console-fra.rpki-client.org