$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer File: d9a6669b-6d25-4186-a757-3c289bdc8031.cer (raw, json) Hash identifier: LMxQHc3kfTwCfa6eQIznsVJCvMNL7IUBXv0i/8dDnC8= Subject key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F43285847585E937287C1585C19C12988 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Sep 2024 19:01:39 +0000 Certificate not after: Wed 30 Dec 2026 20:01:39 +0000 Subordinate resources: AS: 12022 IP: 192.190.188.0/23 IP: 208.83.152.0/21 IP: 2620:a3:c020::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:58:5e:93:72:87:c1:58:5c:19:c1:29:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 26 19:01:39 2024 GMT Not After : Dec 30 20:01:39 2026 GMT Subject: CN=d9a6669b-6d25-4186-a757-3c289bdc8031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0f:c7:9e:c4:72:7e:6c:cf:e9:90:e3:e0:0c: 56:8e:a5:ef:9c:a4:40:96:3d:de:de:68:5a:d7:77: 4e:55:42:d0:f7:06:cc:b7:8b:58:68:49:70:eb:9a: c6:c9:73:61:fc:a4:e7:b3:d0:81:46:11:d9:31:9b: 7c:47:2b:f4:3d:b0:55:31:46:24:09:da:93:47:4c: 76:64:cc:6e:46:e1:1d:fe:79:42:af:1d:9f:0b:fe: 2a:41:c9:c4:cc:04:f6:6e:37:e6:d0:69:6e:f2:bd: 81:1e:89:60:e8:85:05:38:f0:ed:6d:bf:22:6c:b5: 86:30:23:26:64:c7:8c:59:02:37:c5:c1:72:86:1b: b2:74:32:ce:06:86:c9:1f:9d:60:82:7a:cd:97:93: da:7a:a8:34:10:6e:61:1b:eb:ef:67:3d:0d:ca:2c: fc:ff:82:07:e5:80:c1:f2:c2:c2:cc:51:cf:81:81: 75:a7:6f:22:b9:39:40:8e:ea:c6:5e:9f:09:19:c2: 18:cf:b1:64:54:5c:21:ff:47:0c:e3:89:4a:e1:af: 11:1d:56:1d:ce:74:00:c3:57:ee:5e:33:20:a9:bf: 3d:12:13:04:8e:58:78:1b:6c:fc:a5:3d:82:cd:0b: 30:1e:ab:a5:3c:f1:da:bb:1c:72:e3:d7:d9:d7:f1: 74:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 192.190.188.0/23 208.83.152.0/21 IPv6: 2620:a3:c020::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12022 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0b:d0:32:22:21:3d:5b:1b:c3:19:96:1a:fb:71:6f:8f:6e: 95:19:5c:57:ae:e9:01:fc:50:00:9f:78:c4:84:79:3c:91:0f: 99:22:f6:e0:07:e6:75:cc:d8:23:09:98:c5:5a:8f:1b:32:e5: 31:43:81:b3:59:3f:db:a9:93:f6:51:07:fe:46:69:5b:1f:20: 2e:5f:a2:43:db:65:2e:2d:c6:4b:d1:aa:a2:48:54:e2:a5:74: 09:6f:00:7e:24:8c:d9:11:68:cf:68:61:d5:38:05:2d:2c:e2: 24:af:46:e9:39:09:43:8b:82:1d:5a:d0:41:79:76:fe:36:57: ff:dc:96:95:82:39:f3:f0:df:7e:d2:59:98:33:2e:f3:93:0a: 3c:16:93:6c:36:0d:2a:b4:71:84:14:4a:e7:c7:61:02:9f:72: 22:ed:4b:05:c3:62:a5:19:2d:8f:2a:0e:32:ca:2f:46:0c:15: 61:0a:83:7a:7e:c9:0c:29:06:a3:00:07:cf:2c:54:52:ce:d7: 24:2b:59:06:86:8d:3e:2a:15:04:35:78:67:89:8b:20:b7:2e: d1:7a:5c:4f:47:fb:d3:56:cd:5f:d6:98:2c:ce:80:74:c0:99: c5:0f:14:7d:37:64:f3:c8:94:11:35:ff:ce:0c:28:6e:ef:b5: e4:83:fa:3e -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEdYXpNyh8FYXBnBKYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkyNjE5MDEzOVoXDTI2MTIzMDIwMDEzOVowLzEtMCsGA1UEAxMk ZDlhNjY2OWItNmQyNS00MTg2LWE3NTctM2MyODliZGM4MDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ/HnsRyfmzP6ZDj4AxWjqXvnKRAlj3e3mha 13dOVULQ9wbMt4tYaElw65rGyXNh/KTns9CBRhHZMZt8Ryv0PbBVMUYkCdqTR0x2 ZMxuRuEd/nlCrx2fC/4qQcnEzAT2bjfm0Glu8r2BHolg6IUFOPDtbb8ibLWGMCMm ZMeMWQI3xcFyhhuydDLOBobJH51ggnrNl5Paeqg0EG5hG+vvZz0Nyiz8/4IH5YDB 8sLCzFHPgYF1p28iuTlAjurGXp8JGcIYz7FkVFwh/0cM44lK4a8RHVYdznQAw1fu XjMgqb89EhMEjlh4G2z8pT2CzQswHqulPPHauxxy49fZ1/F0owIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFO5SEC8uZ9ucl090/pXr30ns5GsXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9k OWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJkYzgwMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2Q5YTY2NjliLTZkMjUtNDE4Ni1h NzU3LTNjMjg5YmRjODAzMS9kOWE2NjY5Yi02ZDI1LTQxODYtYTc1Ny0zYzI4OWJk YzgwMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAHAvrwDBAPQU5gwDwQCAAIwCQMHACYgAKPAIDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgIu9jBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcC9AyIiE9WxvDGZYa +3Fvj26VGVxXrukB/FAAn3jEhHk8kQ+ZIvbgB+Z1zNgjCZjFWo8bMuUxQ4GzWT/b qZP2UQf+RmlbHyAuX6JD22UuLcZL0aqiSFTipXQJbwB+JIzZEWjPaGHVOAUtLOIk r0bpOQlDi4IdWtBBeXb+Nlf/3JaVgjnz8N9+0lmYMy7zkwo8FpNsNg0qtHGEFErn x2ECn3Ii7UsFw2KlGS2PKg4yyi9GDBVhCoN6fskMKQajAAfPLFRSztckK1kGho0+ KhUENXhniYsgty7RelxPR/vTVs1f1pgszoB0wJnFDxR9N2TzyJQRNf/ODChu77Xk g/o+ -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:11 2024 by rpki-client on console-ams.rpki-client.org