$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer File: db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer (raw, json) Hash identifier: QP6Z3h95F1T3a1D+yMRee+JKwSI6uH9FWu7Yb2509eA= Subject key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F432858474749770A33AC3F2F71AAFD60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Sep 2024 16:10:22 +0000 Certificate not after: Thu 24 Dec 2026 17:10:22 +0000 Subordinate resources: AS: 53991 IP: 162.244.6.0/23 IP: 164.152.124.0/23 IP: 199.83.244.0/22 IP: 199.193.156.0/22 IP: 206.188.216.0/23 IP: 216.245.154.0/23 IP: 2602:80b:6000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:47:49:77:0a:33:ac:3f:2f:71:aa:fd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Sep 20 16:10:22 2024 GMT Not After : Dec 24 17:10:22 2026 GMT Subject: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:d3:9b:9f:76:f3:c0:b3:8c:80:e7:2e:e3: 7e:07:c7:13:96:84:cc:28:b1:c8:9d:f8:de:86:c9: 77:f5:f7:ef:41:b2:68:00:9e:41:a1:15:68:56:7d: 4a:42:07:5b:c2:6f:5b:3d:2f:31:ec:c5:b3:3f:ce: 0a:dd:25:3a:84:ae:29:3d:7a:37:fe:c7:ed:c0:0d: f9:e3:ab:48:40:46:6a:a7:8d:2a:99:3f:c0:8e:6d: 41:0f:e3:a0:3f:aa:d2:61:d7:13:ab:ed:c3:53:3b: b4:9a:03:24:0e:26:81:44:c4:1f:5a:96:1d:0c:75: 04:fa:32:31:3a:e1:81:c7:0b:6a:d5:93:b5:9c:49: 42:a0:1b:2a:14:64:a9:70:60:b6:75:9e:88:ef:ad: 81:32:a1:27:88:92:08:02:c2:97:22:73:6c:ab:b0: 9a:fe:c0:91:90:dd:4e:96:f9:1c:ef:05:42:92:27: 74:bb:70:c1:70:aa:a8:4b:20:59:36:11:71:cc:3d: 4d:78:17:98:21:01:3b:d7:66:68:cf:84:e7:27:37: 7a:59:ba:55:00:1f:bd:c1:8e:63:7e:a0:88:27:05: d3:8c:7d:70:fb:d4:9d:69:3c:12:ef:0f:60:a0:8d: 27:53:15:04:9b:9e:87:17:35:87:fd:06:5d:c8:8f: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 162.244.6.0/23 164.152.124.0/23 199.83.244.0/22 199.193.156.0/22 206.188.216.0/23 216.245.154.0/23 IPv6: 2602:80b:6000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53991 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:49:f4:8f:e0:75:e6:d9:70:fa:bc:12:bd:e6:fb:b0:a9:5d: 14:e7:29:2d:19:a0:26:b9:37:3b:df:03:ca:34:93:7c:b9:c7: 8c:24:11:d5:58:ff:86:bf:89:1c:3a:42:41:87:6d:c4:84:fe: 53:3a:ae:39:ab:c1:9d:d9:34:51:72:db:d4:4a:a0:73:2d:47: 44:c4:8e:18:8a:20:21:da:56:c2:81:4a:21:66:0e:60:0b:69: 99:e7:dd:b4:1c:35:9a:32:57:65:78:1f:de:a8:f3:84:9b:ec: f0:99:82:a4:e5:a2:fd:2d:ca:d1:ac:f4:d0:78:c7:35:b8:20: 49:fa:f4:2b:c7:2a:75:32:ad:81:83:93:4b:4f:0b:2b:fc:99: d3:c2:9b:ad:0e:6d:97:a9:54:b6:82:33:59:dc:e7:13:ac:35: 4c:bc:5b:41:9a:9e:7d:66:45:2b:16:6a:51:67:68:fd:6d:ec: 9a:d4:72:db:99:a5:06:8f:c2:6e:f6:86:79:af:47:23:e3:ef: d1:a6:05:d8:b6:0a:e8:a7:b6:0b:44:90:ce:d6:b7:bb:24:cd: 11:67:33:5f:61:7c:63:6f:f6:16:a8:50:62:fb:71:7b:b7:8a: a0:99:d6:df:cf:37:03:e3:43:12:ae:9c:c4:d9:45:1d:be:7e: 68:28:58:57 -----BEGIN CERTIFICATE----- MIIHNzCCBh+gAwIBAgIUAQ0Mn0MoWEdHSXcKM6w/L3Gq/WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI0MDkyMDE2MTAyMloXDTI2MTIyNDE3MTAyMlowLzEtMCsGA1UEAxMk ZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2YjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ3Tm59288CzjIDnLuN+B8cTloTMKLHInfje hsl39ffvQbJoAJ5BoRVoVn1KQgdbwm9bPS8x7MWzP84K3SU6hK4pPXo3/sftwA35 46tIQEZqp40qmT/Ajm1BD+OgP6rSYdcTq+3DUzu0mgMkDiaBRMQfWpYdDHUE+jIx OuGBxwtq1ZO1nElCoBsqFGSpcGC2dZ6I762BMqEniJIIAsKXInNsq7Ca/sCRkN1O lvkc7wVCkid0u3DBcKqoSyBZNhFxzD1NeBeYIQE712Zoz4TnJzd6WbpVAB+9wY5j fqCIJwXTjH1w+9SdaTwS7w9goI0nUxUEm56HFzWH/QZdyI9tVwIDAQABo4IESTCC BEUwHQYDVR0OBBYEFG+MvGP+I9fEqAYJOrW2oWqjlFi7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9k YjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2RiMjYxN2MwLTAzZjQtNGFkNy05 ZDExLTM2YjJjNjQ5NmI3ZC9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0 OTZiN2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwTQYIKwYBBQUH AQcBAf8EPjA8MCoEAgABMCQDBAGi9AYDBAGkmHwDBALHU/QDBALHwZwDBAHOvNgD BAHY9ZowDgQCAAIwCAMGACYCCAtgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDS 5zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAWSfSP4HXm2XD6vBK95vuwqV0U5yktGaAmuTc73wPKNJN8uceM JBHVWP+Gv4kcOkJBh23EhP5TOq45q8Gd2TRRctvUSqBzLUdExI4YiiAh2lbCgUoh Zg5gC2mZ5920HDWaMldleB/eqPOEm+zwmYKk5aL9LcrRrPTQeMc1uCBJ+vQrxyp1 Mq2Bg5NLTwsr/JnTwputDm2XqVS2gjNZ3OcTrDVMvFtBmp59ZkUrFmpRZ2j9beya 1HLbmaUGj8Ju9oZ5r0cj4+/RpgXYtgrop7YLRJDO1re7JM0RZzNfYXxjb/YWqFBi +3F7t4qgmdbfzzcD40MSrpzE2UUdvn5oKFhX -----END CERTIFICATE-----Generated at Thu Nov 21 21:45:21 2024 by rpki-client on console-ams.rpki-client.org