$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2.cer File: d724146a-c9cc-45b0-8278-6947cf5ce1b2.cer (raw, json) Hash identifier: 5STh8EgFD9eVGEFI9jGbulPds4+mT9TTY6WGSj3ny5Q= Subject key identifier: D7:BB:AD:49:20:FA:30:49:9E:A2:FE:08:51:EE:B8:F7:9F:F9:DA:84 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858477EDC02C3B2DB6B69F7B1F280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/d724146a-c9cc-45b0-8278-6947cf5ce1b2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Oct 2024 13:55:06 +0000 Certificate not after: Wed 13 Jan 2027 14:55:06 +0000 Subordinate resources: AS: 7768 IP: 206.209.208.0/20 IP: 216.20.160.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7e:dc:02:c3:b2:db:6b:69:f7:b1:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Oct 10 13:55:06 2024 GMT Not After : Jan 13 14:55:06 2027 GMT Subject: CN=d724146a-c9cc-45b0-8278-6947cf5ce1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3d:21:ca:2f:1f:1e:0f:e4:55:f5:40:25:54: de:fe:1a:47:56:a7:71:39:73:62:7c:39:c1:f5:57: c5:bb:c2:84:10:8a:1c:a6:f8:e7:31:2a:5d:ba:92: 06:e8:13:bd:c1:13:6b:23:44:e5:3a:90:a3:7d:6d: 4f:df:f8:db:e3:47:5e:58:77:1d:bf:ba:7c:ac:3f: 67:6d:57:8f:30:06:29:84:59:52:ec:54:39:19:5b: 54:90:8a:62:c3:08:0a:f5:0f:a9:8f:51:c8:31:6a: 35:71:49:90:55:de:ac:9d:31:09:98:ae:42:76:e0: 53:9f:cd:5c:3e:7e:1d:7f:75:fa:33:55:3a:6c:c0: bf:97:05:76:aa:8e:08:e4:9a:4d:e5:20:ba:27:8c: 0a:13:09:af:bc:69:69:4d:68:32:0b:41:7e:a0:3d: 5d:44:9f:13:ba:ba:09:46:f8:0c:4c:00:48:1f:cc: 36:41:87:d2:07:9e:43:d0:db:93:ae:6c:ee:8a:b6: 23:18:75:8f:0c:be:8d:28:82:d0:81:e4:7b:51:80: c1:13:6c:35:3b:db:fa:df:2e:6a:99:bb:9d:82:4f: d3:d5:55:ab:f5:fe:d3:62:31:1e:2b:6c:66:b2:06: 14:34:f2:3d:62:5f:08:b1:63:b0:2a:83:70:d6:ce: f4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BB:AD:49:20:FA:30:49:9E:A2:FE:08:51:EE:B8:F7:9F:F9:DA:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/d724146a-c9cc-45b0-8278-6947cf5ce1b2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 206.209.208.0/20 216.20.160.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7768 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:54:4a:fd:df:30:54:83:2f:da:67:ca:5f:99:8e:2e:41:bf: ec:98:15:8a:76:57:e2:14:6e:62:f3:72:cc:d3:ce:5d:13:43: 93:fe:b7:86:36:04:1f:30:b6:13:c7:f6:61:2b:fe:d3:75:43: 1f:ff:f3:94:80:f0:85:68:c8:fa:21:04:9f:80:5a:16:b3:4b: 3c:cf:b1:ee:2b:90:25:91:0b:6c:0c:bd:63:48:ee:52:da:52: 37:97:cc:4e:8e:2a:6c:90:7a:18:08:53:66:4c:00:62:80:d4: 19:9f:d9:e0:6f:cc:e4:e3:09:00:a2:eb:63:a2:a5:fe:d9:53: 2a:32:2f:e2:10:43:c0:d5:b4:7b:ae:f2:5a:13:7a:7f:50:e4: 7f:2d:50:86:62:4f:78:4c:c1:21:cf:8e:9f:d0:b4:e9:0b:9d: 8b:e0:c4:35:da:13:7d:87:90:c7:89:92:9d:43:98:92:2e:8c: dd:85:7d:6e:56:ba:75:29:03:f9:6e:c8:2e:3c:c0:e8:b5:99: 75:18:24:c2:27:d3:17:33:ed:01:ae:a8:05:72:aa:93:7b:15: 58:d9:65:1a:4d:35:5f:25:71:cc:f6:98:55:36:8a:48:4d:95: 2c:ea:7c:97:1b:c2:03:3c:3c:c7:fd:e2:8e:e2:80:38:d3:b5: 46:45:f2:39 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEd+3ALDsttrafex8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MTAxMDEzNTUwNloXDTI3MDExMzE0NTUwNlowLzEtMCsGA1UEAxMk ZDcyNDE0NmEtYzljYy00NWIwLTgyNzgtNjk0N2NmNWNlMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz0hyi8fHg/kVfVAJVTe/hpHVqdxOXNifDnB 9VfFu8KEEIocpvjnMSpdupIG6BO9wRNrI0TlOpCjfW1P3/jb40deWHcdv7p8rD9n bVePMAYphFlS7FQ5GVtUkIpiwwgK9Q+pj1HIMWo1cUmQVd6snTEJmK5CduBTn81c Pn4df3X6M1U6bMC/lwV2qo4I5JpN5SC6J4wKEwmvvGlpTWgyC0F+oD1dRJ8TuroJ RvgMTABIH8w2QYfSB55D0NuTrmzuirYjGHWPDL6NKILQgeR7UYDBE2w1O9v63y5q mbudgk/T1VWr9f7TYjEeK2xmsgYUNPI9Yl8IsWOwKoNw1s70owIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFNe7rUkg+jBJnqL+CFHuuPef+dqEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9k NzI0MTQ2YS1jOWNjLTQ1YjAtODI3OC02OTQ3Y2Y1Y2UxYjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2Q3MjQxNDZhLWM5Y2MtNDViMC04 Mjc4LTY5NDdjZjVjZTFiMi9kNzI0MTQ2YS1jOWNjLTQ1YjAtODI3OC02OTQ3Y2Y1 Y2UxYjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBATO0dADBATYFKAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICHlgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEATlRK/d8wVIMv2mfKX5mOLkG/7JgVinZX4hRuYvNy zNPOXRNDk/63hjYEHzC2E8f2YSv+03VDH//zlIDwhWjI+iEEn4BaFrNLPM+x7iuQ JZELbAy9Y0juUtpSN5fMTo4qbJB6GAhTZkwAYoDUGZ/Z4G/M5OMJAKLrY6Kl/tlT KjIv4hBDwNW0e67yWhN6f1Dkfy1QhmJPeEzBIc+On9C06Qudi+DENdoTfYeQx4mS nUOYki6M3YV9bla6dSkD+W7ILjzA6LWZdRgkwifTFzPtAa6oBXKqk3sVWNllGk01 XyVxzPaYVTaKSE2VLOp8lxvCAzw8x/3ijuKAONO1RkXyOQ== -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:21 2024 by rpki-client on console-ams.rpki-client.org