$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer File: dafe2535-2dc5-4d47-b03e-d44eea26032f.cer (raw, json) Hash identifier: mmGrFGtnPiAt0rHMXE45Me+y7drZ2tmnpFXg6aGxFyA= Subject key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858474766355F3018DEEA030BB580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Sep 2024 17:08:17 +0000 Certificate not after: Thu 24 Dec 2026 18:08:17 +0000 Subordinate resources: AS: 20185 IP: 63.246.48.0/20 IP: 76.10.240.0/20 IP: 192.92.112.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:47:66:35:5f:30:18:de:ea:03:0b:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 20 17:08:17 2024 GMT Not After : Dec 24 18:08:17 2026 GMT Subject: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:b0:b7:eb:3d:3b:b4:81:98:15:39:0e:a5: a4:db:64:75:6f:ed:4a:6f:cb:2d:2f:5a:7c:26:59: a0:db:4a:f3:40:04:c6:a5:58:cb:f1:96:cd:41:ba: e6:44:0b:f0:d3:63:31:e9:8b:75:c1:26:a3:8e:5c: e0:e8:8d:16:86:69:bf:26:b9:0d:97:dd:ea:fb:54: f7:13:ee:01:bd:92:5d:19:99:9d:60:d3:fc:49:19: 81:d7:72:23:f1:5e:d7:d3:98:96:eb:4a:0d:b5:95: f7:ea:61:8c:65:56:46:f7:58:ed:e4:5b:43:78:f1: 6b:06:e7:6e:c8:27:d7:bb:c8:74:1d:10:31:94:c6: 90:c5:c0:c2:4f:ff:15:40:20:31:02:eb:0d:cd:63: a5:6d:1c:2c:5b:28:d5:dd:83:dd:6c:97:14:ad:18: ae:4e:df:7c:0a:89:49:d3:2f:b7:f6:4c:1f:0b:b0: fe:d8:5e:18:2b:51:9f:35:6d:16:91:b9:f2:e5:c0: 35:34:28:37:6f:f6:a1:78:07:05:76:9c:b4:9b:2a: 57:cd:f1:3f:c9:5b:12:0d:18:8d:ce:95:f9:5c:43: 2d:d3:c4:a3:ca:66:4c:e7:ac:30:23:c8:a0:3b:d3: dd:65:9c:81:52:42:20:80:1e:fc:6b:ff:29:6a:f7: af:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 63.246.48.0/20 76.10.240.0/20 192.92.112.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20185 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:cc:73:24:07:e8:56:43:f8:cb:17:fc:c4:c7:83:3a:79:39: c2:b5:7a:98:df:47:17:4d:fe:f4:b6:5a:25:8f:fd:5b:70:83: 66:9d:2c:0c:17:28:59:7e:d0:0c:f3:61:c6:95:7c:2f:d3:d6: ee:74:8b:73:29:56:5f:b3:a2:13:79:8c:08:93:48:93:53:b5: df:e8:39:cc:a2:85:95:9a:8b:77:da:1b:d1:8d:09:4a:22:36: e1:37:83:82:76:b1:e5:9e:da:5c:f5:67:14:1f:55:99:f3:ed: d8:ad:0c:31:cc:0c:77:4c:e6:b2:02:f7:cf:2a:c0:06:88:f5: 2e:09:08:4b:14:83:31:98:48:2e:f5:c2:f1:e6:c3:f0:e6:29: 35:a3:1c:76:1f:8b:4c:dd:a6:ac:04:99:2a:ec:50:91:e6:f8: cb:ff:f1:45:77:2b:9a:0c:a1:e5:ac:05:5f:91:6f:34:cd:9d: a2:9c:7c:dd:4b:eb:7e:13:93:8c:91:09:d3:f4:b9:20:ac:1b: b2:29:75:de:7c:d7:13:a2:cc:b9:ca:e3:f1:93:f0:2f:1f:a2: 0c:f8:98:8b:94:53:7c:8c:61:3d:21:a5:8b:28:fc:1c:8d:c7: 2a:4a:aa:7d:7d:7f:6a:59:8c:4e:4f:32:3a:a2:b2:88:4c:9f: 6f:92:5a:67 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEdHZjVfMBje6gMLtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkyMDE3MDgxN1oXDTI2MTIyNDE4MDgxN1owLzEtMCsGA1UEAxMk ZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYwMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07Cwt+s9O7SBmBU5DqWk22R1b+1Kb8stL1p8 Jlmg20rzQATGpVjL8ZbNQbrmRAvw02Mx6Yt1wSajjlzg6I0Whmm/JrkNl93q+1T3 E+4BvZJdGZmdYNP8SRmB13Ij8V7X05iW60oNtZX36mGMZVZG91jt5FtDePFrBudu yCfXu8h0HRAxlMaQxcDCT/8VQCAxAusNzWOlbRwsWyjV3YPdbJcUrRiuTt98ColJ 0y+39kwfC7D+2F4YK1GfNW0Wkbny5cA1NCg3b/aheAcFdpy0mypXzfE/yVsSDRiN zpX5XEMt08SjymZM56wwI8igO9PdZZyBUkIggB78a/8pavevWwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFDfLdYw7Odm5+i+1HO+ZEGeXuesQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9k YWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2RhZmUyNTM1LTJkYzUtNGQ0Ny1i MDNlLWQ0NGVlYTI2MDMyZi9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEy NjAzMmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAQ/9jADBARMCvADBADAXHAwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICTtkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAMxzJAfoVkP4yxf8xMeDOnk5wrV6mN9H F03+9LZaJY/9W3CDZp0sDBcoWX7QDPNhxpV8L9PW7nSLcylWX7OiE3mMCJNIk1O1 3+g5zKKFlZqLd9ob0Y0JSiI24TeDgnax5Z7aXPVnFB9VmfPt2K0MMcwMd0zmsgL3 zyrABoj1LgkISxSDMZhILvXC8ebD8OYpNaMcdh+LTN2mrASZKuxQkeb4y//xRXcr mgyh5awFX5FvNM2dopx83UvrfhOTjJEJ0/S5IKwbsil13nzXE6LMucrj8ZPwLx+i DPiYi5RTfIxhPSGliyj8HI3HKkqqfX1/almMTk8yOqKyiEyfb5JaZw== -----END CERTIFICATE-----Generated at Thu Nov 21 18:56:11 2024 by rpki-client on console-ams.rpki-client.org